last executing test programs: 7.995005195s ago: executing program 4 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000001580)='./file0/file0\x00', 0x2000002, &(0x7f00000015c0)={[{@nodiscard}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$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") (async) syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000001580)='./file0/file0\x00', 0x2000002, &(0x7f00000015c0)={[{@nodiscard}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$eJzs3c9vI1cdAPDvTH52mzZb6AEqYBcoLGi19sbbrqpe2r2AUFUJUXFAHLYh8UZh7TjETmlCJNK/ASSQOMGfwAGJA1JPHLhx5IaQygFpgQi0QaLCaMaT1M3ajds4NsSfjzQ7P1483+9Ldvye3yTzAphYVyNiPyJmI+L1iFgsjifFEi93luzrHh7srRwe7K3Ef9rt1/6W5OXZseh6Tebx4pzzEfGNr0Z8J3k0bnNn9/5yrVbdKvbLrfpmubmze2O9vrxWXatuVCq3l27ffOHW85Wh1fVK/ZcPvrL+yjd/8+tPv/P7/S//IEtroSjrrscwdao+cxwnMx0Rr5xHsDGYKtazY86DjyaNiI9FxOfy638xpvL/nQDARdZuL0Z7sXsfALjo0nwMLElLxVjAQqRpqdQZw3s6LqW1RrN1/V5je2O1M1Z2OWbSuaKv8L3835nk3nqtupSX5eX5fuXE/q2IeCoifjz3WL5fWmnUVsfT5QGAiff4ifb/n3Od9n8APe7qAQD/N+bHnQAAMHLafwCYPNp/AJg8A7T/xc3+/XPPBQAYDZ//AWDyaP8BYPJo/wFgonz91VezpX1YPP969Y2d7fuNN26sVpv3S/XtldJKY2uztNZorOXP7Kmfdr5ao7G59Fxsv1luVZutcnNn9269sb3Rups/1/tudWYktQIAPshTV97+QxIR+y8+li9hLgeYGOm4EwDGZmrcCQBjY7YvmFyDj8f/7lzzAMan58O853tuvn/Q4KcfIojfM4L/Kdc+2X/8/2TfwH0BuFiM/8Pk+mjj/y8NPQ9g9HqN/+vnw2Rot5OTc/7PHhcBABfSGf4er/3DYXVCgLE6bTLvvrfuP8z9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhgFiLiu5GkpWIu8IVI01Ip4omIuBwzyb31WvVmRDwZVyJiZi7bXxp30gDAGaV/SYr5v64tPrtwsnQ2+ddcFHOCf/9nr/3kzeVWa2spO/734+NzR9OHVd573RnmFQQAhixvvyvFuuuD/MODvZWjZZT5PLgT7xZTEa8cHuzlS6dkOqbz9Xzel7j0j6TY78xF+kxETA0h/v5bEfGJ4/on77bbRfwkHxu5XMx82h0/ithPDD9+1/f/ZPz0ffHTvKyzzjpfHz9x3nQIucFF9/adiHi51/WXxtV83fv6n8/foc7uwZ3OyY7e+w674h+9/031iJ9d81cHjfHcb7/2yMH2YqfsrYhnpnvFT47jJ33iPztg/D9+6jM/eqlPWfvnEdeid/zuWOVWfbPc3Nm9sV5fXquuVTcqldtLt2++cOv5Sjkfoy4fjVQ/6q8vXn+yX25Z/S/1iT/fs/6zx6/9woD1/8W/X//2Zz8g/pc+3/vn/3TP+B1Zm/jFAeMvX/pV3+m7s/irfep/2s//+oDx3/nz7uqAXwoAjEBzZ/f+cq1W3TrTRvZpcxjnyTdmu45kKQ4lwwE3/hSji3Xqxswwv6sj3Zg+7isO98zfys444uqkQ6/FmTYejirWeN+XgPP33kU/7kwAAAAAAAAAAAAAAIB+RvGnS+OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXfwMAAP//ZbnKog==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x0, 0x0) userfaultfd(0x0) syz_open_dev$evdev(&(0x7f0000000280), 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0xfb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f00000005c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f00000005c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 7.225601436s ago: executing program 3 (id=1033): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x227, &(0x7f0000001980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000000000000100000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) inotify_add_watch(r4, &(0x7f0000000180)='./bus\x00', 0x40000200) pwritev2(r0, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x12) writev(r4, &(0x7f0000000800)=[{&(0x7f0000000340)=',0', 0x2}], 0x1) 7.215041387s ago: executing program 4 (id=1035): syz_open_dev$MSR(&(0x7f0000000000), 0x200, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @window, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) write$binfmt_elf64(r0, &(0x7f0000000fc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1802, 0xfffffffe, 0x0, 0x40}, [{}]}, 0x78) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x6, 0xfffffff8, 0x9, 0x7f, 0x1, 0x5}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x103, 0x805, 0x0, 0x0) 7.201837078s ago: executing program 0 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x1, 0x0, 0x3, 0x5, 0x1, 0x6, 0x7, 0x7, 0xe1, 0x4, 0x0, 0x800, 0x4, 0x0, 0xfc, 0x9, 0x6, '\x00', 0x5, 0x8}) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r9}, 0x10) 6.286579632s ago: executing program 4 (id=1038): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x0, 0x400000, 0xc}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x5802, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.638010172s ago: executing program 0 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x0, 0x0}) alarm(0x8000000000000001) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.579940607s ago: executing program 0 (id=1041): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000010008381010140000000000010902240001000f000000000000000300401d092100000001220700090581030000000000cb64dd6ca1219a8c23ea438c87074d7c7640f1319bd32831ad5560b8b4c0cfa0f667b3106c8b92fd9fb502c9d2a528238b3cb07cf69a5e97c422b488ab210e8b983e865662abd945f5c4807043379f9e93acc3d2a2808a942a7af7cb5126a3c7aa8d011d6bc7c97acb7b9e5489389e40e1104a1d84aebca36c7a802c8a90b5fc2417f095e41cf66c3090e8d0471677c0b7acbc45"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000eddcf3ca00040000000000634f223a79832caf40c39d4fdc2cc8a04446ff965f7455e05d92b78652490a16c1e829de307aa7a768036f70a2ba711b736621bd9bcb864e42ba82c711fe96f5f19eeb671cb074673229ad17d8bd3f48ebd4f489b1186069192563ae109b78a94dae9c805861c9d817c280e35cd02f8776ec96ada5e2204e34ed4f204681b92d3fb154d9f54dda448df72a850ebae611a68af86e070b6589610665ecf15a5519e11e1d83823b1162f079c84de06cd3e16c96bd7885506f5fccb8dbe81e2e02b2a53865376760f2be0276903fd4e5b2d1bdaa5e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) 5.515987653s ago: executing program 3 (id=1042): r0 = gettid() r1 = socket(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000005c0)={0x0, 0x0, 0xffffffffffffffff, 0x8001}) r5 = userfaultfd(0x80001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x4, 0x0, 0x4, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0x0, [{@multicast2}, {@dev, 0x5}, {@broadcast, 0x2}, {@empty}, {@private, 0x3}, {@private}]}, @noop, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x4, 0x40000, 0x0, 0x0]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0, 0xfffffffffffffd87}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x4000}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x7}, {0xffff, 0xa}}}, 0x24}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000002200000000002e8f7f5b39e43824ccc78df406a039e9ce4e4d7ceacb60fcc4c2656b7bdef91f9f44e70a0a5a0cc27cad0a93635087f0972ddceccf5b62395f316349d0880c549255f92cebca2b51f01579118864b65bf774f09d90b5c8850f16d59eab78fec7d74ed29bbc836bd71fd2f77e1c55e6c34bdcb953354aaccfdbfc29151cf87bce64560a69042a2c3ecfa414bd2fa53574eef34651944e7bb58bcd110eb79ac673c09eb584752227d766c5a8546cbbd4f1ae9780055f1de1b5e5ff0f0000f4c9b984de6aab278e8b35b8e34cb4b17ea1d2d2357b798859c1e1e628b62a0e89", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 5.173861605s ago: executing program 4 (id=1043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) io_setup(0xffff, &(0x7f0000000280)) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000500), 0x88081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000340)={0x4, 0x8, 0xfffffffb, 0xd, 0x0, "1bd7505c88d8a2eb9ba29f4fb4f31ba8e39c62"}) syz_usb_connect$uac1(0x3, 0x9f, &(0x7f0000000640)=ANY=[@ANYBLOB="015100000000106b1d010140000102030109028d00030100109e0904000000010100000a24010600020201020f24060106040200090006000500810924080601004086200d24060004030300020008003f0924030101030601c10904010000120102000009040101010102000009050109100ccc6f020725018000400009040200000102000009040201010102000009058209ff0301029a07250180ff0600f19ef00a754abeb3abf6661f508d6dda5f63640c8be2d51f46ae6c24d5c8591988feba44ebcb4f0a493751536397d931f66d2b304bbafc3f"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f00000500000000000000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r2], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_xfrm_decode_session\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x1, 0xb7a8062708b4eb16, 0x8001, 0x4, {{0x5, 0x4, 0x0, 0x35, 0x14, 0x68, 0x0, 0x40, 0x29, 0x0, @multicast1, @private=0xa010101}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYRES16=r4], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.631563884s ago: executing program 2 (id=1044): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@var={0xb, 0x0, 0x0, 0xe, 0x5}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x74}, @restrict={0x9, 0x0, 0x0, 0xb, 0x2}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000300)=""/168, 0x5f, 0xa8, 0x0, 0x5, 0x0, @void, @value}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8930, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = timerfd_create(0x9, 0x0) timerfd_gettime(r3, &(0x7f0000000140)) 4.56826363s ago: executing program 2 (id=1045): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xd2, [@loopback]}, @timestamp={0x7, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000006440)={0x2020}, 0x18fa) getdents64(r6, 0x0, 0x110) fcntl$setsig(r3, 0xa, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000000)={[{@errors_continue}, {@nojournal_checksum}, {@commit={'commit', 0x3d, 0xfffffffffffffffd}}]}, 0x1, 0x617, &(0x7f0000000100)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 4.201281144s ago: executing program 3 (id=1048): openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x711000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4880) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.951094137s ago: executing program 1 (id=1049): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000a37f9d33728f4cc9dc52ef8807f3d62973716d4f1f150fb1cd7f33706d26fbc1bc667ed1bcd98d0bd15bd577993e6600cfff4abbcd4455d86ca4042796aca957879861e0428f326deec48c9dd1149ab21464771f98780900000000000000a2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000001200)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) execve(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @short}, 0x80, 0x0}}], 0x1, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x6, 0x71d2, 0x5, 0x200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0xa, @void, @value, @void, @value}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7a7d396f004d642ecf6c510000000033bc0000000000000000000000000000002515321f4509d6"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd04, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f000000c380)='./file0\x00', 0x40, 0x62) openat(0xffffffffffffff9c, 0x0, 0x181001, 0x0) 3.766806624s ago: executing program 3 (id=1050): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000225000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) waitid(0x0, r1, &(0x7f0000003000), 0x1, 0x0) preadv2(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/207, 0xcf}], 0x1, 0x9, 0xa, 0x3) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x6, 0x3, 0x8}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendto$inet_nvme_icreq_pdu(r0, &(0x7f0000002f80)={{0x0, 0xf, 0x80, 0xfc}}, 0x80, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/49, 0x31}], 0xa, &(0x7f00000006c0)=""/99, 0x63}, 0x17700}, {{&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/245, 0xf5}, {&(0x7f00000008c0)=""/191, 0xbf}], 0x2, &(0x7f00000009c0)=""/74, 0x4a}, 0x8001}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/244, 0xf4}, {&(0x7f0000000c40)=""/122, 0x7a}], 0x2, &(0x7f0000000cc0)=""/13, 0xd}, 0x4}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f0000002340)=[{&(0x7f0000000d80)=""/218, 0xda}, {&(0x7f0000000e80)=""/6, 0x6}, {&(0x7f0000000ec0)=""/234, 0xea}, {&(0x7f0000000fc0)=""/228, 0xe4}, {&(0x7f00000010c0)=""/150, 0x96}, {&(0x7f00000021c0)=""/53, 0x35}, {&(0x7f0000002200)=""/79, 0x4f}, {&(0x7f0000002280)=""/152, 0x98}], 0x8, &(0x7f00000023c0)=""/15, 0xf}, 0x3}, {{&(0x7f0000002400)=@l2, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002480)=""/7, 0x7}], 0x1}, 0x9}, {{&(0x7f0000002500)=@alg, 0x80, &(0x7f0000002640)=[{&(0x7f0000002580)=""/13, 0xd}, {&(0x7f00000025c0)=""/126, 0x7e}], 0x2, &(0x7f0000002680)=""/102, 0x66}}, {{&(0x7f0000002700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/214, 0xd6}, {&(0x7f0000002880)=""/189, 0xbd}, {&(0x7f0000002940)=""/45, 0x2d}, {&(0x7f0000002980)=""/144, 0x90}, {&(0x7f0000002a40)=""/63, 0x3f}, {&(0x7f0000002a80)=""/139, 0x8b}], 0x6}, 0x100}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/182, 0xb6}, {&(0x7f0000002c80)=""/43, 0x2b}], 0x2, &(0x7f0000002d00)=""/92, 0x5c}, 0xffffff00}], 0x8, 0x122, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r7, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 3.59573451s ago: executing program 2 (id=1046): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x9eff, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.994931175s ago: executing program 1 (id=1051): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000801572a289718e0a1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.569852114s ago: executing program 2 (id=1052): epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) process_vm_readv(r2, &(0x7f0000002e40)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f0000000d40)=""/253, 0xfd}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x9, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f00000006c0)=""/98, 0x62}], 0x2, 0x0) 2.551535346s ago: executing program 0 (id=1053): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000080), &(0x7f0000000840)=""/151}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00228000000000000000fc"], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r7) 2.163813001s ago: executing program 4 (id=1054): syz_usb_connect$uac1(0x3, 0x99, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902870003010000000904000000010100000a24010000000201020c240800000000ff533ea72909040100000102000009040101010102000007240100040000090501090000000000072501000000000900000000010200000904020101010220000e240201740200002304473ed870072401000000000905820920"], 0x0) 2.163060291s ago: executing program 1 (id=1055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e56520207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 2.154459182s ago: executing program 1 (id=1056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xc, &(0x7f0000000180)={0x3, 0x7}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000500000000000055086930f7ec02d2106d395300837f16b998e2e15e61c77badc6af97476b5c0649d8d1766d5728d4eead1a5c51689daa945126c66a9e28dc6cf4e5a519307816d6494a961c912d171bf531a010359746146d28ff19c232fff17761fd1c35b0ebb6d280b5cc41eb187101145716032f30c4ff73e7dfffbfc219548e1123594b859e4f877514bdf33040f43213d88c4a440f912ce9e2ba4da8f7bf5b08f4a5d5dfd49ca23ba8b37aab7ba4f76da8a24c16f72396a1d77c3a6bca4fec9ac5be7fba77d84d59f599c2af"], &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000eeffffff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r6, 0x8982, 0x20000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[], [{@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, ']'}}, {@dont_hash}, {@smackfstransmute}, {@context={'context', 0x3d, 'user_u'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x4000, 0x5, 0x0, 0x100, 0x0, 0x0, 0x2000000000000101, 0x0, 0xffffff01}) 1.74230897s ago: executing program 2 (id=1057): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd94, 0x18, &(0x7f0000000240)={@fd, @flat=@weak_handle, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) lstat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='afs_edit_dir\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) 1.242126216s ago: executing program 1 (id=1058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) clock_settime(0x200000000000000, &(0x7f00000009c0)={r1, r2+60000000}) 1.241299386s ago: executing program 1 (id=1059): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008de28021100000000000109022400000000000009040000020300000009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$full(0xffffff9c, &(0x7f0000000200), 0xa0800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000540)=0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r4}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20) pidfd_getfd(0xffffffffffffffff, r6, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="003707000000036e3565c0b169"], 0x0}, 0x0) 868.65481ms ago: executing program 2 (id=1060): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000835101014000000000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x7a9, &(0x7f0000001a00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xb) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "6a63f31ddb0b698e5cec9a863745dc72b252aed52447328c7a8099efa8a3cb4b34eb2e13c72db91bc2f0c7af47616fad0b6a9a"}, 0x3e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000600)={[{@discard}, {@dmask={'dmask', 0x3d, 0x4}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@allow_utime={'allow_utime', 0x3d, 0xfe}}, {@errors_remount}, {@umask={'umask', 0x3d, 0x8001}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}]}, 0x29, 0x1501, &(0x7f0000002840)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006311300000000000851000000200000085000000089e021a07174180fd74dff29173f18e5ef50f6d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet(0x2, 0x80000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) 756.761361ms ago: executing program 3 (id=1061): openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x711000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4880) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 654.76696ms ago: executing program 3 (id=1062): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x5, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/181, 0x37, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x20) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x31) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000400)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 281.918674ms ago: executing program 0 (id=1063): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) open(0x0, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) (async) r4 = syz_open_dev$vcsn(0x0, 0x1e3, 0x200003) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000e27f", @ANYRES32=r4, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYBLOB="4325912c730ac75b384e393235deebde313cd71c6a2686b5bbacc6227b6e0e50bc5ecf0fad416feeaea2ffda50492c38bb51408f6d37f4f89bdb588a33a13626bd05d5650e0fe5266cab308be6ba4a49c3e4bd747367add9d4185d8559194a3c8fa227f5bdbcb811bb863ebb63e78fbeddb046b96e5180a2ba8f6e3c", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0xe, 0x0, 0x0, 0x12, 0x0, 0x3, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @mcast2}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x90}}, 0x0) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000009c0), 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) gettid() (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400, &(0x7f00000006c0)={[{@data_journal}, {@jqfmt_vfsv0}, {@sysvgroups}, {@lazytime}, {@nombcache}, {@data_err_abort}], [{@appraise_type}, {@context={'context', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_gt}, {@appraise}, {@uid_gt}]}, 0x1, 0x440, &(0x7f0000000280)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = gettid() sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 200.488031ms ago: executing program 0 (id=1064): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00ff205d4f70f45d249983220500000007efb9ce47"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000000000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="001112000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x0, 0x8, 0x7, 0x80000000, 0x6a, @private1, @mcast2, 0x8000, 0x700, 0x6, 0x8}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000002020702500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000b40)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 0s ago: executing program 4 (id=1065): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000)=0x2, 0xfffffffd) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x200c80, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1008010}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a90000000140aec0b00000000000000000300000a7c000800490ddcae032f34116899d6897a1107a57080cadb066bfc21a2833c49dc2650bf9c5c177afc9e7bb57adf6c183a49c5bd6fab98c322cec567287955883d3a38b15cb9de71ffd3540595a4ca605006f4e3b7ee75159bbab30a70db5af89005aa5527753a46a2c1a8244b75e77b008eb7ed562f5a42de21280a40000000090a01020000000000000000000000040900020073797a32000000000f000d40866ff529737410dc188e0000080006400000000008000f4000000002bc000000080a000200000000000940000000030c0003400000000000000003800004800c00018007000100637400001c0001800b00010072656a65637400000c000280050002000700000054000180080001007061796c6f616400440002800800054000000012080001400000000e080005400000001308000640000000010800074000000003080001400000000f0800064000000001080004400000003c08000940000000020c000640000000000000000320010000060a05000000000000000000050000021e000740186b620a50bc24a034432a5d781d62cd675dbc4d08e4ab023b2d0000140005800800024000000001080002400000000050000480200001800800010064757000140002800800024000000017080001400000000c2c0001800b0001006c6f6f6b757000001c0002800800034000000008080005400000000008000540000000017c00048010000180090001007866b3400000000010000180090001006d657461000000005800018008000100647570004c0002800800024000000010080002400000000d080002400000000e08000240000000110800014000000000080002400000000c0800014000000001080002400000000a08000240000000040c0006400000000000000001300000000b0a010300000000000000000300000508000840000000010c000b40000000000000080008000c4000000010140000001100010000000000000000000700000a000000000000000000"], 0x304}, 0x1, 0x0, 0x0, 0xc051}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x16}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_usb_connect$cdc_ncm(0x5, 0xac, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x1, 0x4, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d0d0fbc3aa"}, {0x5, 0x24, 0x0, 0xecf}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x5, 0x27c, 0xc}, {0x6, 0x24, 0x1a, 0x6, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x6, 0x6, 0x7, 0xc71d, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf9, 0x1, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x0, 0xf8, 0x7, 0x8, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0xb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x3, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x3, 0x1, 0x6, 0x20, 0x3}, 0xcc, &(0x7f0000000a00)={0x5, 0xf, 0xcc, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x0, 0x152}, @generic={0xa0, 0x10, 0x4, "5975226836114b5d6b51813dfdcbb4ba317d97ebdac255381ba7c1fd6b4137e6cd1e4b58ed028d61ff6254c136dfcc4e6b74844db3bae736ed5f96255804f665c082570d33d9d93fb47a36544a7bf8c4b952b2c1d94ce7cbca4bceb38b742119a6bacde26874f1f3ae1e4eeacd853dcd5ddfd2023ab0c23fb8a29391e54b23c83eedef3e8eccf6f36ad91ff878177d1d1c22db6db3e552638d1ee66c99"}, @ptm_cap={0x3}, @generic={0x1a, 0x10, 0x2, "41e8bf64b1c56b972fba343f6720af787e4919aa7f71d4"}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x403}}]}) openat$tun(0xffffff9c, &(0x7f00000008c0), 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00220f00000003881c7c750bc075063859"], 0x0}, 0x0) kernel console output (not intermixed with test programs): perly unmounted. Some data may be corrupt. Please run fsck. [ 186.540046][ T10] device veth1_macvtap left promiscuous mode [ 186.547775][ T10] device veth0_vlan left promiscuous mode [ 186.611164][ T312] usb usb5-port1: attempt power cycle [ 186.916446][ T3503] loop3: detected capacity change from 0 to 8192 [ 186.937308][ T3503] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.969322][ T3503] device pim6reg1 entered promiscuous mode [ 187.026305][ T312] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 187.216031][ T312] usb 5-1: device descriptor read/8, error -71 [ 187.349145][ T3091] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 187.357754][ T3091] FAT-fs (loop1): Filesystem has been set read-only [ 187.366106][ T1395] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 187.477272][ T3524] loop4: detected capacity change from 0 to 1024 [ 187.483729][ T3524] EXT4-fs: Ignoring removed orlov option [ 187.489814][ T3524] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.496147][ T312] usb 5-1: device descriptor read/8, error -71 [ 187.501160][ T3524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.509717][ T3530] loop1: detected capacity change from 0 to 128 [ 187.517890][ T3530] EXT4-fs (loop1): Test dummy encryption mode enabled [ 187.543000][ T3530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 187.553512][ T3530] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038 (0x7fffffff) [ 187.571396][ T2604] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.573573][ T2659] EXT4-fs (loop4): unmounting filesystem. [ 187.667088][ T1393] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 188.298294][ T3538] loop4: detected capacity change from 0 to 128 [ 188.388877][ T3091] EXT4-fs (loop1): unmounting filesystem. [ 188.405552][ T3541] loop1: detected capacity change from 0 to 256 [ 188.436035][ T1395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.446930][ T1395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.456499][ T1395] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 188.465432][ T1395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.476466][ T1395] usb 4-1: config 0 descriptor?? [ 188.502603][ T3544] loop4: detected capacity change from 0 to 512 [ 188.508805][ T1393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.515890][ T3544] EXT4-fs (loop4): 1 truncate cleaned up [ 188.520135][ T1393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.525016][ T3544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.534747][ T1393] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 188.553276][ T1393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.698036][ T1393] usb 1-1: config 0 descriptor?? [ 188.712147][ T2659] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 188.732887][ T2659] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 188.752508][ T2659] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 188.798002][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 188.798023][ T28] audit: type=1400 audit(1728226648.084:1172): avc: denied { rmdir } for pid=2659 comm="syz-executor" name=".index" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.840138][ T2659] EXT4-fs (loop4): unmounting filesystem. [ 189.024466][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.031378][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.038885][ T3549] device bridge_slave_0 entered promiscuous mode [ 189.045735][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.059788][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.074458][ T3549] device bridge_slave_1 entered promiscuous mode [ 189.147476][ T1395] logitech-hidpp-device 0003:046D:C086.0022: unknown main item tag 0x0 [ 189.155923][ T1395] logitech-hidpp-device 0003:046D:C086.0022: unknown main item tag 0x0 [ 189.171826][ T1395] logitech-hidpp-device 0003:046D:C086.0022: unknown main item tag 0x0 [ 189.187513][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.194377][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.201481][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.208254][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.215717][ T1395] logitech-hidpp-device 0003:046D:C086.0022: unknown main item tag 0x0 [ 189.224104][ T1395] logitech-hidpp-device 0003:046D:C086.0022: unknown main item tag 0x0 [ 189.233378][ T1395] logitech-hidpp-device 0003:046D:C086.0022: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 189.297660][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.308411][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.393699][ T3563] loop1: detected capacity change from 0 to 2048 [ 189.395753][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.413021][ T3563] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.788: casefold flag without casefold feature [ 189.413169][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.432614][ T3563] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 189.442844][ T3563] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 189.450332][ T3563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.476995][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.485104][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.493145][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.499989][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.507231][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.515751][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.523823][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.530656][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.541527][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.549467][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.557234][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.564976][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.577176][ T296] usb 4-1: USB disconnect, device number 26 [ 189.628896][ T3567] 9pnet_fd: Insufficient options for proto=fd [ 189.646034][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.685575][ T3549] device veth0_vlan entered promiscuous mode [ 189.728103][ T3549] device veth1_macvtap entered promiscuous mode [ 189.810537][ T3570] loop4: detected capacity change from 0 to 128 [ 189.820599][ T3570] FAT-fs (loop4): Unrecognized mount option "˙0x0000000000000000" or missing value [ 189.821791][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.842866][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.851726][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.859529][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.867391][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.875397][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.884845][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.894664][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.902739][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.906055][ T1393] usbhid 1-1:0.0: can't add hid device: -71 [ 189.916655][ T1393] usbhid: probe of 1-1:0.0 failed with error -71 [ 189.920089][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.928049][ T1393] usb 1-1: USB disconnect, device number 32 [ 189.935613][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.944934][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.239000][ T28] audit: type=1400 audit(1728226649.524:1173): avc: denied { write } for pid=3569 comm="syz.4.786" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.320435][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.344990][ T3578] loop3: detected capacity change from 0 to 512 [ 190.379875][ T3578] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.790: casefold flag without casefold feature [ 190.392981][ T28] audit: type=1400 audit(1728226649.664:1174): avc: denied { create } for pid=3569 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.395740][ T3578] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 190.422913][ T3091] EXT4-fs (loop1): unmounting filesystem. [ 190.423153][ T3578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.636033][ T6] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 190.758672][ T3586] overlayfs: unrecognized mount option "/" or missing value [ 190.777028][ T28] audit: type=1400 audit(1728226650.034:1175): avc: denied { mount } for pid=3583 comm="syz.1.792" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 190.923825][ T428] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 190.929989][ T3590] loop4: detected capacity change from 0 to 16 [ 190.931444][ T28] audit: type=1400 audit(1728226650.044:1176): avc: denied { mounton } for pid=3583 comm="syz.1.792" path="/37/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 190.959708][ T3590] erofs: (device loop4): mounted with root inode @ nid 36. [ 191.323386][ T28] audit: type=1400 audit(1728226650.604:1177): avc: denied { unmount } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 191.466019][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.476867][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.486619][ T6] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 191.495502][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.504550][ T6] usb 1-1: config 0 descriptor?? [ 191.516049][ T428] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 191.526661][ T428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.537390][ T428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.547404][ T428] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 191.560506][ T428] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 191.569366][ T428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.577758][ T428] usb 4-1: config 0 descriptor?? [ 191.596025][ T1393] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 191.673713][ T3599] loop2: detected capacity change from 0 to 512 [ 191.687551][ T3599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.696599][ T3599] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 191.747846][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.756149][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.871148][ T28] audit: type=1400 audit(1728226651.134:1178): avc: denied { write } for pid=3598 comm="syz.2.796" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 191.935808][ T3608] tipc: Failed to remove unknown binding: 66,1,1/0:3013179587/3013179589 [ 191.945732][ T3608] tipc: Failed to remove unknown binding: 66,1,1/0:3013179587/3013179589 [ 191.997410][ T28] audit: type=1400 audit(1728226651.174:1179): avc: denied { bind } for pid=3607 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.017424][ T28] audit: type=1400 audit(1728226651.214:1180): avc: denied { setopt } for pid=3607 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.037157][ T1393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.048003][ T1393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.057648][ T1393] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 192.066755][ T1393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.075481][ T1393] usb 2-1: config 0 descriptor?? [ 192.350917][ T3614] bridge0: port 3(dummy0) entered blocking state [ 192.357303][ T3614] bridge0: port 3(dummy0) entered disabled state [ 192.367248][ T3614] device dummy0 entered promiscuous mode [ 192.373229][ T3614] bridge0: port 3(dummy0) entered blocking state [ 192.379391][ T3614] bridge0: port 3(dummy0) entered forwarding state [ 192.616679][ T428] usbhid 4-1:0.0: can't add hid device: -71 [ 192.622479][ T428] usbhid: probe of 4-1:0.0 failed with error -71 [ 192.629528][ T428] usb 4-1: USB disconnect, device number 27 [ 193.016018][ T39] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 193.049998][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.065167][ T1393] usb 2-1: string descriptor 0 read error: -71 [ 193.065380][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.086103][ T1393] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71 [ 193.086685][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.094815][ T1393] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 193.110403][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 0 [ 193.118468][ T1393] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71 [ 193.133094][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.140528][ T1393] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 193.156122][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 1024 [ 193.163251][ T1393] uclogic: probe of 0003:256C:006D.0023 failed with error -71 [ 193.178175][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.187844][ T1393] usb 2-1: USB disconnect, device number 37 [ 193.206325][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 2048 [ 193.221279][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.236943][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 3072 [ 193.252047][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.267514][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 4096 [ 193.282481][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.297893][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 193.297905][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 5120 [ 193.317665][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.333057][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 6144 [ 193.348024][ T3272] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 193.363520][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 7168 [ 193.378639][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 8192 [ 193.395531][ T3272] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /18/file1/lost+found: directory fails checksum at offset 9216 [ 193.420784][ T3622] loop0: detected capacity change from 0 to 512 [ 193.437632][ T3622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.446969][ T3622] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 193.516015][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 193.522031][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 193.532552][ T6] usb 1-1: USB disconnect, device number 33 [ 193.596520][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 193.610947][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.685295][ T39] usb 5-1: Product: syz [ 193.706263][ T39] usb 5-1: Manufacturer: syz [ 193.759945][ T39] usb 5-1: SerialNumber: syz [ 193.813238][ T3272] EXT4-fs (loop3): unmounting filesystem. [ 193.822082][ T28] audit: type=1400 audit(1728226653.104:1181): avc: denied { relabelfrom } for pid=3635 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.842881][ T28] audit: type=1400 audit(1728226653.114:1182): avc: denied { relabelto } for pid=3635 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.961153][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.968401][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.975500][ T3638] device bridge_slave_0 entered promiscuous mode [ 193.983757][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.990717][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.997872][ T3638] device bridge_slave_1 entered promiscuous mode [ 194.064015][ T28] audit: type=1400 audit(1728226653.344:1183): avc: denied { read } for pid=3635 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.094322][ T39] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 194.258129][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.264998][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.272136][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.278900][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.287741][ T1219] EXT4-fs (loop0): unmounting filesystem. [ 194.302887][ T3617] loop4: detected capacity change from 0 to 1024 [ 194.313317][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.321000][ T28] audit: type=1400 audit(1728226653.604:1184): avc: denied { read write } for pid=3645 comm="syz.0.807" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.345409][ T28] audit: type=1400 audit(1728226653.604:1185): avc: denied { open } for pid=3645 comm="syz.0.807" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.370083][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.378124][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.389886][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.390327][ T60] usb 5-1: USB disconnect, device number 30 [ 194.399766][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.404817][ T60] usblp0: removed [ 194.419312][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.423946][ T3650] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 194.427809][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.441728][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.448877][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.457092][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.463926][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.479020][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.486742][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.499334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.511959][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.519957][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.527684][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.535631][ T3638] device veth0_vlan entered promiscuous mode [ 194.545239][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.554250][ T3638] device veth1_macvtap entered promiscuous mode [ 194.563854][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.574627][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.617972][ T1865] device dummy0 left promiscuous mode [ 194.623307][ T1865] bridge0: port 3(dummy0) entered disabled state [ 194.629930][ T1865] device bridge_slave_1 left promiscuous mode [ 194.635876][ T1865] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.643122][ T1865] device bridge_slave_0 left promiscuous mode [ 194.649097][ T1865] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.656722][ T1865] device veth1_macvtap left promiscuous mode [ 194.662548][ T1865] device veth0_vlan left promiscuous mode [ 194.686084][ T296] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 194.774976][ T3466] EXT4-fs (loop2): unmounting filesystem. [ 194.845021][ T28] audit: type=1400 audit(1728226654.124:1186): avc: denied { connect } for pid=3657 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.865588][ T3658] loop1: detected capacity change from 0 to 128 [ 194.873049][ T6] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 194.886835][ T691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.897427][ T3660] overlayfs: conflicting lowerdir path [ 194.987806][ T3666] loop1: detected capacity change from 0 to 1024 [ 195.001463][ T3666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.066036][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 195.078633][ T296] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 195.276055][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.289169][ T296] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 195.297987][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.305735][ T296] usb 1-1: Product: syz [ 195.309769][ T6] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 195.318602][ T296] usb 1-1: Manufacturer: syz [ 195.323006][ T296] usb 1-1: SerialNumber: syz [ 195.327732][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.336176][ T6] usb 4-1: config 0 descriptor?? [ 195.341383][ T296] usb 1-1: config 0 descriptor?? [ 195.376021][ T60] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 195.386482][ T6] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 195.598082][ T296] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 195.605435][ T296] usb 1-1: USB disconnect, device number 34 [ 195.611691][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 195.736063][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.746835][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.756315][ T60] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 195.765142][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.773749][ T60] usb 5-1: config 0 descriptor?? [ 195.996333][ T296] usb 4-1: USB disconnect, device number 28 [ 196.016535][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.024890][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.146015][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 196.152050][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 196.196298][ T60] usb 5-1: USB disconnect, device number 31 [ 196.375993][ T1054] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 196.559281][ T28] audit: type=1400 audit(1728226655.844:1187): avc: denied { read write } for pid=3690 comm="syz.4.821" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 196.582484][ T28] audit: type=1400 audit(1728226655.844:1188): avc: denied { open } for pid=3690 comm="syz.4.821" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 196.605582][ T28] audit: type=1400 audit(1728226655.844:1189): avc: denied { bpf } for pid=3690 comm="syz.4.821" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.626137][ T1054] usb 1-1: Using ep0 maxpacket: 8 [ 196.632097][ T28] audit: type=1400 audit(1728226655.844:1190): avc: denied { read write } for pid=3690 comm="syz.4.821" name="event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 196.746024][ T1054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.756779][ T1054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.766295][ T1054] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 196.775128][ T1054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.783809][ T1054] usb 1-1: config 0 descriptor?? [ 196.986019][ T410] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 197.078563][ T3700] syz.0.820[3700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.078631][ T3700] syz.0.820[3700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.376075][ T410] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 197.396020][ T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.404512][ T410] usb 5-1: config 0 descriptor?? [ 197.458295][ T410] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 197.470875][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.659390][ T3695] loop4: detected capacity change from 0 to 512 [ 197.666656][ T3695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.718051][ T428] usb 5-1: USB disconnect, device number 32 [ 197.825701][ T3707] loop2: detected capacity change from 0 to 512 [ 197.832030][ T3707] ext4: Unknown parameter '"' [ 197.845874][ T3707] loop2: detected capacity change from 0 to 512 [ 197.853478][ T3707] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.867397][ T3707] EXT4-fs error (device loop2): ext4_quota_enable:6955: inode #4: comm syz.2.826: casefold flag without casefold feature [ 197.880350][ T3707] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 197.887776][ T3707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.987508][ T3091] EXT4-fs (loop1): unmounting filesystem. [ 198.075692][ T3713] loop1: detected capacity change from 0 to 2048 [ 198.087623][ T3713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.641779][ T3724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.650180][ T3722] loop3: detected capacity change from 0 to 1024 [ 198.651249][ T3724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.667107][ T355] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.680255][ T3466] EXT4-fs (loop2): unmounting filesystem. [ 198.710739][ T3091] EXT4-fs (loop1): unmounting filesystem. [ 198.732600][ T3727] loop3: detected capacity change from 0 to 8192 [ 198.740005][ T3733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'. [ 198.750020][ T3727] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.778112][ T3727] 9pnet_fd: Insufficient options for proto=fd [ 198.778443][ T3733] loop1: detected capacity change from 0 to 256 [ 198.804058][ T3733] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 198.828741][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 198.828754][ T28] audit: type=1400 audit(1728226658.114:1249): avc: denied { read } for pid=3732 comm="syz.1.832" name="file2" dev="loop1" ino=1048762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.858382][ T28] audit: type=1400 audit(1728226658.144:1250): avc: denied { open } for pid=3732 comm="syz.1.832" path="/48/file2/file2" dev="loop1" ino=1048762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.927644][ T28] audit: type=1400 audit(1728226658.204:1251): avc: denied { unmount } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.013605][ T3739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.053788][ T28] audit: type=1400 audit(1728226658.334:1252): avc: denied { bind } for pid=3726 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.080216][ T28] audit: type=1400 audit(1728226658.364:1253): avc: denied { write } for pid=3726 comm="syz.3.831" name="netlink" dev="proc" ino=4026532962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 199.152506][ T3743] loop0: detected capacity change from 0 to 512 [ 199.170531][ T3745] loop4: detected capacity change from 0 to 2048 [ 199.176015][ T1054] usbhid 1-1:0.0: can't add hid device: -71 [ 199.180820][ T3747] loop1: detected capacity change from 0 to 128 [ 199.189229][ T3747] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.195696][ T1054] usbhid: probe of 1-1:0.0 failed with error -71 [ 199.206672][ T3747] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.229470][ T28] audit: type=1400 audit(1728226658.514:1254): avc: denied { unmount } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 199.255490][ T1054] usb 1-1: USB disconnect, device number 35 [ 199.272126][ T28] audit: type=1400 audit(1728226658.544:1255): avc: denied { create } for pid=3752 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.300536][ T28] audit: type=1400 audit(1728226658.544:1256): avc: denied { bind } for pid=3752 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.314120][ T3745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.320587][ T28] audit: type=1400 audit(1728226658.544:1257): avc: denied { setopt } for pid=3752 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.353295][ T28] audit: type=1400 audit(1728226658.544:1258): avc: denied { ioctl } for pid=3752 comm="syz.1.838" path="socket:[34076]" dev="sockfs" ino=34076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.818031][ T3770] IPv6: NLM_F_REPLACE set, but no existing node found! [ 200.435197][ T3779] loop0: detected capacity change from 0 to 256 [ 200.444214][ T3779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 200.444833][ T3549] EXT4-fs (loop4): unmounting filesystem. [ 200.509743][ T3784] loop4: detected capacity change from 0 to 128 [ 200.701761][ T3802] loop2: detected capacity change from 0 to 16 [ 200.708792][ T3802] erofs: (device loop2): mounted with root inode @ nid 36. [ 200.753269][ T3802] syz.2.851: attempt to access beyond end of device [ 200.753269][ T3802] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 200.766800][ T3802] syz.2.851: attempt to access beyond end of device [ 200.766800][ T3802] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 200.816023][ T296] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 200.832411][ T3805] syz.2.851: attempt to access beyond end of device [ 200.832411][ T3805] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 200.846553][ T3805] syz.2.851: attempt to access beyond end of device [ 200.846553][ T3805] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 200.860803][ T3805] syz.2.851: attempt to access beyond end of device [ 200.860803][ T3805] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 200.874426][ T3805] syz.2.851: attempt to access beyond end of device [ 200.874426][ T3805] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 201.135978][ T296] usb 5-1: device descriptor read/64, error -71 [ 201.176358][ T3810] overlayfs: failed to resolve './file1': -2 [ 201.256695][ T3817] loop2: detected capacity change from 0 to 512 [ 201.306809][ T3817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.328771][ T3817] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 201.556048][ T296] usb 5-1: device descriptor read/64, error -71 [ 201.690116][ T3848] loop3: detected capacity change from 0 to 512 [ 201.711098][ T3848] EXT4-fs (loop3): unsupported inode size: 2 [ 201.717322][ T3848] EXT4-fs (loop3): blocksize: 4096 [ 201.739358][ T3846] loop1: detected capacity change from 0 to 256 [ 201.745701][ T3846] exfat: Bad value for 'uid' [ 201.762809][ T3846] loop1: detected capacity change from 0 to 16 [ 201.770288][ T3846] erofs: (device loop1): mounted with root inode @ nid 36. [ 201.783682][ T3846] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 201.826049][ T296] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 202.071541][ T3466] EXT4-fs (loop2): unmounting filesystem. [ 202.116013][ T296] usb 5-1: device descriptor read/64, error -71 [ 202.344978][ T3864] loop0: detected capacity change from 0 to 512 [ 202.364342][ T3864] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 202.399216][ T3864] EXT4-fs (loop0): Remounting filesystem read-only [ 202.412792][ T3864] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.866: invalid indirect mapped block 1 (level 1) [ 202.435218][ T3864] EXT4-fs (loop0): 1 truncate cleaned up [ 202.441314][ T3864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.962415][ T3878] loop3: detected capacity change from 0 to 256 [ 202.966036][ T296] usb 5-1: device descriptor read/64, error -71 [ 202.968859][ T3878] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 203.168186][ T3883] device batadv_slave_0 entered promiscuous mode [ 203.190498][ T410] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 203.268144][ T296] usb usb5-port1: attempt power cycle [ 203.455993][ T410] usb 1-1: Using ep0 maxpacket: 32 [ 203.526136][ T3886] loop4: detected capacity change from 0 to 512 [ 203.537404][ T3886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.546361][ T3886] ext4 filesystem being mounted at /11/ supports timestamps until 2038 (0x7fffffff) [ 203.606112][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 203.617196][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 203.628323][ T410] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 203.637202][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.645507][ T410] usb 1-1: config 0 descriptor?? [ 203.676032][ T3872] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.696417][ T410] hub 1-1:0.0: USB hub found [ 203.896043][ T296] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 203.953031][ T3896] loop2: detected capacity change from 0 to 40427 [ 203.959738][ T3896] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 203.967319][ T3896] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.975808][ T3896] F2FS-fs (loop2): invalid crc value [ 203.982219][ T3896] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.005521][ T3896] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 204.012485][ T3896] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 204.026915][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 204.026929][ T28] audit: type=1400 audit(1728226663.314:1297): avc: denied { append } for pid=3894 comm="syz.2.873" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.057701][ T3466] syz-executor: attempt to access beyond end of device [ 204.057701][ T3466] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.126441][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.139132][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.149074][ T296] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 204.158070][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.166592][ T296] usb 5-1: config 0 descriptor?? [ 204.208293][ T3908] loop2: detected capacity change from 0 to 128 [ 204.214646][ T3908] FAT-fs (loop2): Unrecognized mount option "˙˙˙˙˙˙˙˙184467440737095516150x0000000000000008017777777777777777777770xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 204.411096][ T3549] EXT4-fs (loop4): unmounting filesystem. [ 204.425132][ T28] audit: type=1400 audit(1728226663.704:1298): avc: denied { setopt } for pid=3910 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.467029][ T28] audit: type=1400 audit(1728226663.754:1299): avc: denied { unlink } for pid=3912 comm="syz.4.877" name="#20" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.489277][ T3913] loop4: detected capacity change from 0 to 512 [ 204.495611][ T28] audit: type=1400 audit(1728226663.774:1300): avc: denied { remount } for pid=3912 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 204.506032][ T296] usbhid 5-1:0.0: can't add hid device: -71 [ 204.520609][ T296] usbhid: probe of 5-1:0.0 failed with error -71 [ 204.528417][ T296] usb 5-1: USB disconnect, device number 35 [ 204.556507][ T442] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.014163][ T28] audit: type=1400 audit(1728226664.294:1301): avc: denied { mounton } for pid=3921 comm="syz.2.879" path="/26/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 205.036926][ T28] audit: type=1400 audit(1728226664.304:1302): avc: denied { unmount } for pid=3638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 205.064401][ T3925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.072832][ T3925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.080825][ T28] audit: type=1400 audit(1728226664.364:1303): avc: denied { create } for pid=3923 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.082768][ T3925] loop3: detected capacity change from 0 to 256 [ 205.106284][ T28] audit: type=1400 audit(1728226664.364:1304): avc: denied { read } for pid=3923 comm="syz.3.880" dev="sockfs" ino=34284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.110190][ T3925] FAT-fs (loop3): Unrecognized mount option "shocharset=default" or missing value [ 205.352283][ T1219] EXT4-fs (loop0): unmounting filesystem. [ 205.359841][ T3936] loop4: detected capacity change from 0 to 256 [ 205.366639][ T3936] exfat: Deprecated parameter 'utf8' [ 205.376073][ T410] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 205.387287][ T28] audit: type=1400 audit(1728226664.674:1305): avc: denied { write } for pid=3931 comm="syz.2.882" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.411333][ T3936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 205.428331][ T28] audit: type=1400 audit(1728226664.694:1306): avc: denied { execute } for pid=3935 comm="syz.4.883" path="/14/bus" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.498870][ T410] usbhid 1-1:0.0: can't add hid device: -71 [ 205.504786][ T410] usbhid: probe of 1-1:0.0 failed with error -71 [ 205.536386][ T410] usb 1-1: USB disconnect, device number 36 [ 205.766000][ T296] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 205.936564][ T3955] device pim6reg1 entered promiscuous mode [ 205.975993][ T410] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 206.000546][ T3958] loop3: detected capacity change from 0 to 16 [ 206.006932][ T3958] erofs: Unknown parameter '&)ĂŹhŕ„íßĂ[ŐŃ` d#Ü' [ 206.018320][ T3955] kvm: emulating exchange as write [ 206.099455][ T3958] loop3: detected capacity change from 0 to 512 [ 206.107710][ T3958] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.890: invalid block [ 206.118732][ T3958] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.890: couldn't read orphan inode 11 (err -117) [ 206.126809][ T296] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.130800][ T3958] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.141047][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.160775][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.170531][ T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.183530][ T296] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 206.192526][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.204647][ T296] usb 5-1: config 0 descriptor?? [ 206.416049][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.426935][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.436671][ T410] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 206.445748][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.454284][ T410] usb 1-1: config 0 descriptor?? [ 206.606070][ T296] usbhid 5-1:0.0: can't add hid device: -71 [ 206.611852][ T296] usbhid: probe of 5-1:0.0 failed with error -71 [ 206.619681][ T296] usb 5-1: USB disconnect, device number 36 [ 206.742409][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 206.756487][ T3971] loop3: detected capacity change from 0 to 256 [ 207.137695][ T410] hid-multitouch 0003:0EEF:72D0.0024: item fetching failed at offset 4/5 [ 207.146258][ T410] hid-multitouch: probe of 0003:0EEF:72D0.0024 failed with error -22 [ 207.339294][ T6] usb 1-1: USB disconnect, device number 37 [ 207.376027][ T296] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 207.383690][ T3987] loop2: detected capacity change from 0 to 40427 [ 207.390709][ T3987] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 207.398637][ T3987] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 207.408618][ T3987] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.432555][ T3987] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 207.439601][ T3987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.771380][ T3998] loop3: detected capacity change from 0 to 128 [ 207.796036][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 207.916041][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.926861][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.936481][ T296] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 207.945309][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.954857][ T296] usb 5-1: config 0 descriptor?? [ 207.984177][ T4002] device pim6reg1 entered promiscuous mode [ 208.053717][ T4009] loop1: detected capacity change from 0 to 256 [ 208.068195][ T4009] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 208.149937][ T4012] overlayfs: missing 'lowerdir' [ 208.507027][ T296] greenasia 0003:0E8F:0012.0025: item fetching failed at offset 0/3 [ 208.515130][ T296] greenasia 0003:0E8F:0012.0025: parse failed [ 208.521227][ T296] greenasia: probe of 0003:0E8F:0012.0025 failed with error -22 [ 208.531097][ T4016] loop2: detected capacity change from 0 to 40427 [ 208.537832][ T4016] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 208.545425][ T4016] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 208.553950][ T4016] F2FS-fs (loop2): invalid crc value [ 208.560283][ T4016] F2FS-fs (loop2): Found nat_bits in checkpoint [ 208.584384][ T4016] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 208.591456][ T4016] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 208.630969][ T3638] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 208.638713][ T3638] FAT-fs (loop3): Filesystem has been set read-only [ 208.645290][ T3638] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 208.708231][ T6] usb 5-1: USB disconnect, device number 37 [ 208.748252][ T4019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 208.757169][ T4019] device veth1_macvtap left promiscuous mode [ 208.767892][ T4019] tmpfs: Unknown parameter 'nolazytime˙˙' [ 208.934118][ T4026] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 209.017509][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.024676][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.028711][ T4023] loop2: detected capacity change from 0 to 40427 [ 209.032098][ T4027] device bridge_slave_0 entered promiscuous mode [ 209.045033][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.052107][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.059625][ T4027] device bridge_slave_1 entered promiscuous mode [ 209.060715][ T4023] F2FS-fs (loop2): invalid crc value [ 209.134413][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 209.134451][ T28] audit: type=1400 audit(1728226668.404:1342): avc: denied { bpf } for pid=4028 comm="syz.0.911" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.245672][ T28] audit: type=1400 audit(1728226668.404:1343): avc: denied { map_create } for pid=4028 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.277119][ T4023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 209.279222][ T28] audit: type=1400 audit(1728226668.404:1344): avc: denied { map_read map_write } for pid=4028 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.307998][ T28] audit: type=1400 audit(1728226668.414:1345): avc: denied { prog_load } for pid=4028 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.327114][ T28] audit: type=1400 audit(1728226668.414:1346): avc: denied { perfmon } for pid=4028 comm="syz.0.911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.337759][ T4023] F2FS-fs (loop2): Start checkpoint disabled! [ 209.347934][ T28] audit: type=1400 audit(1728226668.594:1347): avc: denied { read write } for pid=4037 comm="syz.4.912" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.354636][ T4023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 209.380705][ T28] audit: type=1400 audit(1728226668.594:1348): avc: denied { open } for pid=4037 comm="syz.4.912" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.424163][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.431052][ T4027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.438144][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.444899][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.452271][ T28] audit: type=1400 audit(1728226668.594:1349): avc: denied { ioctl } for pid=4037 comm="syz.4.912" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.476921][ T28] audit: type=1400 audit(1728226668.704:1350): avc: denied { create } for pid=4027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.477062][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.497427][ T28] audit: type=1400 audit(1728226668.704:1351): avc: denied { write } for pid=4027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.524688][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.533529][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.541743][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.558245][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.567101][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.574035][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.581599][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.590062][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.597018][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.604307][ T39] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 209.619835][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.628600][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.645379][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.690269][ T4027] device veth0_vlan entered promiscuous mode [ 209.696698][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.704693][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.712249][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.725455][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.734823][ T4027] device veth1_macvtap entered promiscuous mode [ 209.748025][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.761724][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.016101][ T60] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 210.024245][ T4054] SELinux: failed to load policy [ 210.066082][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.077028][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.086586][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.096019][ T296] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 210.099204][ T39] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 210.115365][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.124091][ T39] usb 5-1: config 0 descriptor?? [ 210.146077][ T410] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 210.346006][ T296] usb 3-1: Using ep0 maxpacket: 16 [ 210.396088][ T410] usb 1-1: Using ep0 maxpacket: 32 [ 210.416046][ T60] usb 2-1: config 0 has no interfaces? [ 210.421497][ T60] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.430362][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.438777][ T60] usb 2-1: config 0 descriptor?? [ 210.466021][ T296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.476116][ T296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 210.484902][ T296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 210.494502][ T296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 210.504077][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.526357][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 210.537516][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.547299][ T410] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 210.556137][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.564712][ T410] usb 1-1: config 0 descriptor?? [ 210.666050][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 210.671850][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 210.676127][ T296] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.74 [ 210.679062][ T39] usb 5-1: USB disconnect, device number 38 [ 210.692041][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.715294][ T296] usb 3-1: Product: syz [ 210.719311][ T296] usb 3-1: Manufacturer: syz [ 210.723727][ T296] usb 3-1: SerialNumber: syz [ 210.729359][ T4057] loop3: detected capacity change from 0 to 512 [ 210.731501][ T296] usb 3-1: config 0 descriptor?? [ 210.735739][ T4057] EXT4-fs: Ignoring removed i_version option [ 210.746397][ T4057] EXT4-fs: Ignoring removed nobh option [ 210.752013][ T4057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.763224][ T4057] EXT4-fs (loop3): 1 truncate cleaned up [ 210.766182][ T4049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 210.769472][ T4057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 210.776546][ T4049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 211.012395][ T4049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.020721][ T4049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.030309][ T4049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 211.037500][ T4049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 211.047734][ T410] kye 0003:0458:501A.0026: item fetching failed at offset 4/5 [ 211.055236][ T605] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 211.062849][ T410] kye 0003:0458:501A.0026: parse failed [ 211.068308][ T410] kye: probe of 0003:0458:501A.0026 failed with error -22 [ 211.266167][ T296] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 211.276196][ T296] asix: probe of 3-1:0.0 failed with error -71 [ 211.287423][ T410] usb 1-1: USB disconnect, device number 38 [ 211.288192][ T296] usb 3-1: USB disconnect, device number 27 [ 211.316010][ T605] usb 4-1: Using ep0 maxpacket: 8 [ 211.446070][ T605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.456869][ T605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.466435][ T605] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 211.479082][ T605] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 211.488092][ T605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.497140][ T605] usb 4-1: config 0 descriptor?? [ 211.741646][ T4027] EXT4-fs (loop3): unmounting filesystem. [ 211.755401][ T4070] loop3: detected capacity change from 0 to 256 [ 211.772483][ T4072] loop2: detected capacity change from 0 to 512 [ 211.797523][ T4072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.806733][ T4072] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 211.841525][ T4079] loop0: detected capacity change from 0 to 512 [ 211.861471][ T4079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.872855][ T4079] EXT4-fs (loop0): 1 truncate cleaned up [ 211.878706][ T4079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.022941][ T4084] bridge0: port 3(syz_tun) entered blocking state [ 212.029272][ T4084] bridge0: port 3(syz_tun) entered disabled state [ 212.036332][ T4084] device syz_tun entered promiscuous mode [ 212.041967][ T4084] bridge0: port 3(syz_tun) entered blocking state [ 212.048130][ T4084] bridge0: port 3(syz_tun) entered forwarding state [ 212.065515][ T3466] EXT4-fs (loop2): unmounting filesystem. [ 212.098009][ T605] usbhid 4-1:0.0: can't add hid device: -71 [ 212.104376][ T605] usbhid: probe of 4-1:0.0 failed with error -71 [ 212.111338][ T605] usb 4-1: USB disconnect, device number 29 [ 212.127877][ T4086] loop2: detected capacity change from 0 to 512 [ 212.137893][ T4086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.146740][ T4086] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 212.335185][ T4090] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 212.343986][ T4090] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.642596][ T4094] device pim6reg1 entered promiscuous mode [ 212.691642][ T296] usb 2-1: USB disconnect, device number 38 [ 212.698874][ T1219] EXT4-fs (loop0): unmounting filesystem. [ 212.713127][ T4098] loop1: detected capacity change from 0 to 1024 [ 212.716341][ T4096] loop3: detected capacity change from 0 to 128 [ 212.729723][ T4098] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 212.740095][ T4098] EXT4-fs (loop1): barriers disabled [ 212.745260][ T4098] JBD2: no valid journal superblock found [ 212.751542][ T4098] EXT4-fs (loop1): error loading journal [ 212.751997][ T4096] FAT-fs (loop3): bread failed, FSINFO block (sector = 4095) [ 212.798397][ T4098] syz.1.926[4098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.798463][ T4098] syz.1.926[4098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.838167][ T4108] tipc: Started in network mode [ 212.854557][ T4108] tipc: Node identity ac14140f, cluster identity 4711 [ 212.861981][ T4108] tipc: New replicast peer: 255.255.255.255 [ 212.871805][ T4108] tipc: Enabled bearer , priority 10 [ 212.879435][ T4107] loop3: detected capacity change from 0 to 128 [ 212.880298][ T4109] loop1: detected capacity change from 0 to 2048 [ 212.899485][ T4109] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.929: bad orphan inode 8192 [ 212.909881][ T4109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 213.152961][ T3466] EXT4-fs (loop2): unmounting filesystem. [ 213.186664][ T4117] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 213.215495][ T4119] incfs_lookup_dentry err:-13 [ 213.368925][ T4124] loop3: detected capacity change from 0 to 40427 [ 213.375795][ T4124] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 213.383578][ T4124] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 213.393700][ T4124] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.418015][ T4124] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 213.424900][ T4124] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.644235][ T605] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 213.667122][ T4131] syz.3.933: attempt to access beyond end of device [ 213.667122][ T4131] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 213.681476][ T4131] syz.3.933: attempt to access beyond end of device [ 213.681476][ T4131] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.798297][ T4115] EXT4-fs (loop1): unmounting filesystem. [ 213.893179][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.900055][ T4136] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.907239][ T4136] device bridge_slave_0 entered promiscuous mode [ 213.913801][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.920658][ T4136] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.927792][ T4136] device bridge_slave_1 entered promiscuous mode [ 213.968645][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.975492][ T4136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.982604][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.985992][ T296] tipc: Node number set to 2886997007 [ 213.989386][ T4136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.013082][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.020383][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.027476][ T6] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 214.035092][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.043758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.052096][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.058941][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.066130][ T605] usb 3-1: device descriptor read/64, error -71 [ 214.074706][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.082731][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.089568][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.101066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.130647][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.149697][ T4136] device veth0_vlan entered promiscuous mode [ 214.160806][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.169135][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.177457][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.184660][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.198378][ T4136] device veth1_macvtap entered promiscuous mode [ 214.205121][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.222559][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.240260][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.268324][ T4141] loop1: detected capacity change from 0 to 1024 [ 214.278524][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 214.278537][ T28] audit: type=1400 audit(1728226673.564:1416): avc: denied { mounton } for pid=4142 comm="syz.3.938" path="/proc/34/task" dev="proc" ino=36066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 214.290070][ T4141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.308944][ T4143] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 214.316308][ T28] audit: type=1400 audit(1728226673.574:1417): avc: denied { unmount } for pid=3549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 214.385758][ T28] audit: type=1400 audit(1728226673.664:1418): avc: denied { write } for pid=4140 comm="syz.1.937" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 214.419478][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.447116][ T10] device bridge_slave_1 left promiscuous mode [ 214.455733][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.461737][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.472334][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.474025][ T4150] loop3: detected capacity change from 0 to 256 [ 214.485014][ T6] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 214.485040][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.486361][ T6] usb 1-1: config 0 descriptor?? [ 214.512742][ T10] device bridge_slave_0 left promiscuous mode [ 214.518698][ T605] usb 3-1: device descriptor read/64, error -71 [ 214.524431][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.537753][ T10] device veth1_macvtap left promiscuous mode [ 214.543713][ T10] device veth0_vlan left promiscuous mode [ 214.577388][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 214.614249][ T28] audit: type=1400 audit(1728226673.874:1419): avc: denied { create } for pid=4156 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.634410][ T28] audit: type=1400 audit(1728226673.874:1420): avc: denied { connect } for pid=4156 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.687800][ T4154] device pim6reg1 entered promiscuous mode [ 214.760907][ T28] audit: type=1326 audit(1728226674.044:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91c57dff9 code=0x7ffc0000 [ 214.784141][ T28] audit: type=1326 audit(1728226674.044:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff91c57dff9 code=0x7ffc0000 [ 214.808734][ T28] audit: type=1326 audit(1728226674.044:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91c57dff9 code=0x7ffc0000 [ 214.816369][ T605] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 214.832908][ T28] audit: type=1326 audit(1728226674.044:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91c57dff9 code=0x7ffc0000 [ 214.862951][ T28] audit: type=1326 audit(1728226674.044:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff91c57dff9 code=0x7ffc0000 [ 214.889196][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.944'. [ 215.006489][ T39] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 215.155985][ T605] usb 3-1: device descriptor read/64, error -71 [ 215.286042][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 215.291887][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.300469][ T6] usb 1-1: USB disconnect, device number 39 [ 215.416021][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.426080][ T39] usb 4-1: config 0 has no interfaces? [ 215.431357][ T39] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 215.440239][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.448789][ T39] usb 4-1: config 0 descriptor?? [ 215.585987][ T605] usb 3-1: device descriptor read/64, error -71 [ 215.670590][ T4189] loop4: detected capacity change from 0 to 1024 [ 215.687733][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.696110][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.706163][ T605] usb usb3-port1: attempt power cycle [ 215.779995][ T4193] loop1: detected capacity change from 0 to 512 [ 215.845095][ T410] usb 4-1: USB disconnect, device number 30 [ 215.939831][ T691] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.950675][ T4193] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.950: casefold flag without casefold feature [ 215.963628][ T4193] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.950: missing EA_INODE flag [ 215.975224][ T4193] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.950: error while reading EA inode 12 err=-117 [ 215.987742][ T4193] EXT4-fs (loop1): 1 orphan inode deleted [ 215.993285][ T4193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 216.022836][ T4202] tun0: tun_chr_ioctl cmd 1074025692 [ 216.176302][ T4209] loop3: detected capacity change from 0 to 512 [ 216.191772][ T4209] EXT4-fs (loop3): 1 truncate cleaned up [ 216.194448][ T4189] loop4: detected capacity change from 0 to 40427 [ 216.197369][ T605] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 216.206530][ T3568] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 216.211226][ T4209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.221282][ T4189] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 216.238085][ T4189] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 216.244051][ T4027] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 216.247290][ T4189] F2FS-fs (loop4): invalid crc value [ 216.266908][ T4027] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 216.272395][ T4189] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 216.289707][ T4027] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 216.301767][ T4189] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.324323][ T4189] F2FS-fs (loop4): f2fs_commit_super fails to record errors:4, err:-30 [ 216.338239][ T4027] bridge0: port 3(syz_tun) entered disabled state [ 216.345611][ T4027] device syz_tun left promiscuous mode [ 216.349160][ T4189] F2FS-fs (loop4): write access unavailable, skipping recovery [ 216.351100][ T4027] bridge0: port 3(syz_tun) entered disabled state [ 216.358615][ T4189] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 216.371846][ T4189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.398386][ T1865] tipc: Disabling bearer [ 216.403888][ T4027] EXT4-fs (loop3): unmounting filesystem. [ 216.410347][ T1865] tipc: Left network mode [ 216.436018][ T605] usb 3-1: device descriptor read/8, error -71 [ 216.465977][ T3568] usb 1-1: Using ep0 maxpacket: 16 [ 216.480799][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 216.586095][ T3568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.606548][ T3568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.617281][ T3568] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 216.654012][ T3568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.683045][ T3568] usb 1-1: config 0 descriptor?? [ 216.699155][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.706818][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.714223][ T4217] device bridge_slave_0 entered promiscuous mode [ 216.723360][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.730521][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.738136][ T4217] device bridge_slave_1 entered promiscuous mode [ 216.746003][ T605] usb 3-1: device descriptor read/8, error -71 [ 216.834660][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.841625][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.848719][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.855483][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.874036][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.891141][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.935386][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.942911][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.945974][ T410] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 216.986167][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.994352][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.008235][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.015087][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.030968][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.036069][ T605] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 217.044519][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.056244][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.063092][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.086129][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.099505][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.112810][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.126195][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.150748][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.160084][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.178365][ T4217] device veth0_vlan entered promiscuous mode [ 217.186260][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.200474][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.214257][ T1865] device bridge_slave_1 left promiscuous mode [ 217.221501][ T1865] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.231373][ T1865] device bridge_slave_0 left promiscuous mode [ 217.237425][ T605] usb 3-1: device descriptor read/8, error -71 [ 217.243565][ T1865] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.251792][ T1865] device veth1_macvtap left promiscuous mode [ 217.257728][ T1865] device veth0_vlan left promiscuous mode [ 217.353090][ T4217] device veth1_macvtap entered promiscuous mode [ 217.360649][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.368307][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.375553][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.376020][ T410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.383868][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.402003][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.410625][ T410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.420645][ T410] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.426988][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.433688][ T410] usb 5-1: New USB device found, idVendor=045e, idProduct=0048, bcdDevice= 0.00 [ 217.446636][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.450388][ T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.466318][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.469255][ T410] usb 5-1: config 0 descriptor?? [ 217.474404][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.502813][ T4243] loop3: detected capacity change from 0 to 128 [ 217.509408][ T4243] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.585996][ T605] usb 3-1: device descriptor read/8, error -71 [ 217.624663][ T4247] loop1: detected capacity change from 0 to 512 [ 217.716780][ T605] usb usb3-port1: unable to enumerate USB device [ 217.778213][ T4248] syz.3.959: attempt to access beyond end of device [ 217.778213][ T4248] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 217.791430][ T4248] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 217.872568][ T4247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.886999][ T4247] ext4 filesystem being mounted at /10/éq‰Y’3aK supports timestamps until 2038 (0x7fffffff) [ 217.932418][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 218.041524][ T4229] loop4: detected capacity change from 0 to 40427 [ 218.087123][ T355] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.225980][ T1393] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 218.366945][ T2604] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 218.396827][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.403868][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.422319][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.432394][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.446052][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.453179][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.475996][ T410] microsoft 0003:045E:0048.0027: unknown main item tag 0x0 [ 218.496309][ T410] microsoft 0003:045E:0048.0027: hidraw0: USB HID vff.fc Device [HID 045e:0048] on usb-dummy_hcd.4-1/input0 [ 218.507686][ T410] microsoft 0003:045E:0048.0027: no inputs found [ 218.513757][ T410] microsoft 0003:045E:0048.0027: could not initialize ff, continuing anyway [ 218.539067][ T4263] loop3: detected capacity change from 0 to 512 [ 218.545368][ T4263] EXT4-fs: dax option not supported [ 218.606122][ T1393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.638375][ T4229] netlink: 'syz.4.963': attribute type 27 has an invalid length. [ 218.645979][ T1393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.655487][ T1393] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 218.673338][ T1393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.688870][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.695910][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.696725][ T1393] usb 2-1: config 0 descriptor?? [ 218.756775][ T39] usb 5-1: USB disconnect, device number 39 [ 219.128100][ T4277] netlink: 'syz.0.973': attribute type 9 has an invalid length. [ 219.135539][ T4277] netlink: 'syz.0.973': attribute type 6 has an invalid length. [ 219.155992][ T3568] usbhid 1-1:0.0: can't add hid device: -71 [ 219.161753][ T3568] usbhid: probe of 1-1:0.0 failed with error -71 [ 219.177875][ T3568] usb 1-1: USB disconnect, device number 40 [ 219.197354][ T1393] hid-led 0003:1D34:000A.0028: unknown main item tag 0x0 [ 219.454929][ T1393] hid-led: probe of 0003:1D34:000A.0028 failed with error -71 [ 219.463468][ T1393] usb 2-1: USB disconnect, device number 39 [ 219.922262][ T4287] loop0: detected capacity change from 0 to 1024 [ 219.928911][ T4287] EXT4-fs: Mount option(s) incompatible with ext2 [ 219.972200][ T4287] loop0: detected capacity change from 0 to 512 [ 219.984592][ T4287] EXT4-fs (loop0): Test dummy encryption mode enabled [ 219.991467][ T4287] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 220.079417][ T4292] loop1: detected capacity change from 0 to 256 [ 220.175709][ T4294] loop4: detected capacity change from 0 to 128 [ 220.182137][ T4294] /dev/loop4: Can't open blockdev [ 220.204184][ T4287] loop0: detected capacity change from 0 to 40427 [ 220.226423][ T4287] F2FS-fs (loop0): Unrecognized mount option "nodiscaRd" or missing value [ 220.286697][ T355] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.388199][ T4296] overlayfs: failed to resolve './file0': -2 [ 220.530390][ T4300] loop0: detected capacity change from 0 to 1024 [ 220.537121][ T4300] EXT4-fs: Ignoring removed orlov option [ 220.542985][ T4300] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.551412][ T4300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.565223][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 220.565237][ T28] audit: type=1400 audit(1728226679.844:1484): avc: denied { mounton } for pid=4299 comm="syz.0.979" path="/134/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.593594][ T28] audit: type=1400 audit(1728226679.854:1485): avc: denied { write } for pid=4299 comm="syz.0.979" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.593621][ T28] audit: type=1400 audit(1728226679.854:1486): avc: denied { add_name } for pid=4299 comm="syz.0.979" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.661932][ T4305] loop3: detected capacity change from 0 to 256 [ 220.672704][ T4305] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.684844][ T4305] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.690371][ T4300] ipt_REJECT: TCP_RESET invalid for non-tcp [ 220.736413][ T1219] EXT4-fs (loop0): unmounting filesystem. [ 220.762785][ T4307] loop0: detected capacity change from 0 to 1024 [ 220.769539][ T4307] EXT4-fs: Ignoring removed orlov option [ 220.775320][ T4307] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.783456][ T4307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.864192][ T28] audit: type=1400 audit(1728226680.144:1487): avc: denied { write } for pid=4304 comm="syz.3.980" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 221.142610][ T4319] loop4: detected capacity change from 0 to 2048 [ 221.149061][ T4319] /dev/loop4: Can't open blockdev [ 221.159548][ T28] audit: type=1400 audit(1728226680.444:1488): avc: denied { create } for pid=4315 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.178976][ T28] audit: type=1400 audit(1728226680.444:1489): avc: denied { write } for pid=4315 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.206045][ T60] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 221.526162][ T60] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 221.569221][ T4321] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.587372][ T4324] xt_TCPMSS: Only works on TCP SYN packets [ 221.587374][ T4325] xt_TCPMSS: Only works on TCP SYN packets [ 221.600040][ T4324] loop3: detected capacity change from 0 to 128 [ 221.625410][ T1219] EXT4-fs (loop0): unmounting filesystem. [ 221.647887][ T4329] loop0: detected capacity change from 0 to 512 [ 221.697560][ T4329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.710716][ T4329] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038 (0x7fffffff) [ 221.732786][ T28] audit: type=1400 audit(1728226681.014:1490): avc: denied { map } for pid=4328 comm="syz.0.986" path="/136/file1/memory.events.local" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.757245][ T1219] EXT4-fs (loop0): unmounting filesystem. [ 222.011335][ T4336] loop4: detected capacity change from 0 to 128 [ 222.025435][ T4336] /dev/loop4: Can't open blockdev [ 222.046413][ T1054] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 222.049795][ T4336] loop4: detected capacity change from 0 to 512 [ 222.063988][ T4336] /dev/loop4: Can't open blockdev [ 222.316305][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 222.335707][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.703174][ T4313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.718056][ T4313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.763460][ T1054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.774518][ T1054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.784098][ T1054] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 222.792954][ T1054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.801406][ T1054] usb 1-1: config 0 descriptor?? [ 222.981932][ T60] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 222.988815][ T60] usb 2-1: No valid video chain found. [ 222.994879][ T60] usb 2-1: USB disconnect, device number 40 [ 223.105130][ T4357] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 223.455282][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.462437][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.470095][ T4363] device bridge_slave_0 entered promiscuous mode [ 223.478017][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.484882][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.492904][ T4363] device bridge_slave_1 entered promiscuous mode [ 223.558064][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.564932][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.572039][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.578804][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.599515][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.606849][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.613844][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.622404][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.630472][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.637324][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.647955][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.656428][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.664329][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.671090][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.685438][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.693784][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.701643][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.709898][ T4333] netlink: 'syz.0.987': attribute type 2 has an invalid length. [ 223.710043][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.731352][ T4363] device veth0_vlan entered promiscuous mode [ 223.736564][ T1054] hid-led 0003:27B8:01ED.0029: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 223.737414][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.751052][ T1054] hid-led 0003:27B8:01ED.0029: ThingM blink(1) initialized [ 223.756561][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.771311][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.797643][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.813369][ T4363] device veth1_macvtap entered promiscuous mode [ 223.817499][ T4368] loop1: detected capacity change from 0 to 2048 [ 223.828685][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.836159][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.837320][ T4368] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.843420][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.860198][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.868472][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.881961][ T28] audit: type=1400 audit(1728226683.164:1491): avc: denied { mounton } for pid=4367 comm="syz.1.994" path="/15/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.907005][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.915385][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.923752][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.932533][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.941002][ T3568] usb 1-1: USB disconnect, device number 41 [ 223.975315][ T4373] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 224.097088][ T28] audit: type=1400 audit(1728226683.384:1492): avc: denied { ioctl } for pid=4367 comm="syz.1.994" path="/15/file0/bus" dev="loop1" ino=18 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 224.129450][ T28] audit: type=1400 audit(1728226683.414:1493): avc: denied { unlink } for pid=4136 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 224.130325][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 224.192682][ T4381] loop3: detected capacity change from 0 to 512 [ 224.207311][ T1865] device bridge_slave_1 left promiscuous mode [ 224.217218][ T1865] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.225546][ T4381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.236139][ T1865] device bridge_slave_0 left promiscuous mode [ 224.242255][ T1865] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.250802][ T1865] device veth0_vlan left promiscuous mode [ 224.257570][ T4381] EXT4-fs (loop3): 1 truncate cleaned up [ 224.267418][ T4381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.516032][ T4391] fuse: Unknown parameter 'grkup_id' [ 224.526285][ T4391] fuse: Unknown parameter 'fd0x0000000000000006' [ 224.536666][ T4392] block device autoloading is deprecated and will be removed. [ 224.544039][ T4392] I/O error, dev loop128, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 224.554906][ T4381] hub 6-0:1.0: USB hub found [ 224.586285][ T4381] hub 6-0:1.0: 1 port detected [ 224.659727][ T4401] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 224.667156][ T4401] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 224.789125][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 224.798967][ T4411] device veth2 entered promiscuous mode [ 224.858676][ T4414] loop1: detected capacity change from 0 to 512 [ 224.887519][ T4414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.896897][ T4414] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 224.919855][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 224.966128][ T3568] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 225.036423][ T4217] EXT4-fs (loop3): unmounting filesystem. [ 225.103754][ T4426] loop3: detected capacity change from 0 to 512 [ 225.110162][ T4426] EXT4-fs: Ignoring removed orlov option [ 225.115618][ T4426] EXT4-fs: Ignoring removed i_version option [ 225.121462][ T4426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.151305][ T4428] loop1: detected capacity change from 0 to 128 [ 225.157871][ T4426] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 225.165615][ T4426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 225.174397][ T4426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 225.180611][ T4426] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.194933][ T4426] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 225.202482][ T4426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1010: bg 0: block 40: padding at end of block bitmap is not set [ 225.216730][ T4426] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 225.225399][ T4426] EXT4-fs (loop3): 1 truncate cleaned up [ 225.230893][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.240576][ T4426] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1010: bad symlink. [ 225.252620][ T3568] usb 1-1: Using ep0 maxpacket: 8 [ 225.277715][ T4428] EXT4-fs: Ignoring removed bh option [ 225.284715][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.293532][ T4428] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 225.333848][ T4217] EXT4-fs (loop3): unmounting filesystem. [ 225.350915][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 225.367968][ T4433] irq bypass consumer (token ffff88812de91780) registration fails: -16 [ 225.376246][ T3568] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 225.384747][ T3568] usb 1-1: config 179 has no interface number 0 [ 225.390886][ T3568] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 225.401683][ T3568] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 225.412715][ T3568] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.423660][ T3568] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 225.434829][ T3568] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 225.447878][ T3568] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 225.456699][ T3568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.476037][ T4405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.625979][ T1054] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 225.660833][ T4441] loop3: detected capacity change from 0 to 40427 [ 225.667841][ T4441] F2FS-fs (loop3): fault_injection options not supported [ 225.675416][ T4441] F2FS-fs (loop3): invalid crc value [ 225.681650][ T4441] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.698907][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 225.698921][ T28] audit: type=1400 audit(1728226685.034:1503): avc: denied { create } for pid=4404 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.738437][ T28] audit: type=1400 audit(1728226685.034:1504): avc: denied { setopt } for pid=4404 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.758546][ T4441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.778225][ T28] audit: type=1400 audit(1728226685.034:1505): avc: denied { ioctl } for pid=4404 comm="syz.0.1003" path="socket:[37653]" dev="sockfs" ino=37653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.812970][ T28] audit: type=1400 audit(1728226685.034:1506): avc: denied { ioctl } for pid=4404 comm="syz.0.1003" path="socket:[37649]" dev="sockfs" ino=37649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.828532][ T4447] loop2: detected capacity change from 0 to 512 [ 225.845236][ T28] audit: type=1400 audit(1728226685.184:1507): avc: denied { shutdown } for pid=4440 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.866428][ T4447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.869273][ T28] audit: type=1400 audit(1728226685.204:1508): avc: denied { create } for pid=4440 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.896670][ T4447] EXT4-fs (loop2): 1 truncate cleaned up [ 225.902131][ T4447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.927192][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.935595][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.965286][ T296] usb 1-1: USB disconnect, device number 42 [ 225.975972][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 225.993337][ T4451] loop4: detected capacity change from 0 to 256 [ 226.016974][ T691] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.036075][ T1054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.055963][ T1054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.065651][ T1054] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 226.074825][ T1054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.083712][ T1054] usb 2-1: config 0 descriptor?? [ 226.141360][ T28] audit: type=1400 audit(1728226685.474:1509): avc: denied { read } for pid=4446 comm="syz.2.1015" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.165282][ T28] audit: type=1400 audit(1728226685.494:1510): avc: denied { open } for pid=4446 comm="syz.2.1015" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.239416][ T4451] loop4: detected capacity change from 0 to 512 [ 226.245679][ T4451] /dev/loop4: Can't open blockdev [ 226.401391][ T4217] syz-executor: attempt to access beyond end of device [ 226.401391][ T4217] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 226.687613][ T4461] loop3: detected capacity change from 0 to 40427 [ 226.700072][ T4461] F2FS-fs (loop3): invalid crc value [ 226.799691][ T4461] F2FS-fs (loop3): Found nat_bits in checkpoint [ 226.859207][ T4461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.907755][ T4217] syz-executor: attempt to access beyond end of device [ 226.907755][ T4217] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.990227][ T1054] logitech-djreceiver 0003:046D:C70E.002A: unexpected long global item [ 226.998557][ T1054] logitech-djreceiver 0003:046D:C70E.002A: logi_dj_probe: parse failed [ 227.006648][ T1054] logitech-djreceiver: probe of 0003:046D:C70E.002A failed with error -22 [ 227.015819][ T1054] usb 2-1: USB disconnect, device number 41 [ 227.031903][ T4363] EXT4-fs (loop2): unmounting filesystem. [ 227.066038][ T6] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 227.077324][ T4470] loop2: detected capacity change from 0 to 2048 [ 227.096906][ T4470] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 227.105787][ T4470] System zones: 0-7 [ 227.110171][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.133095][ T4470] fuse: Bad value for 'fd' [ 227.230813][ T4477] loop3: detected capacity change from 0 to 1024 [ 227.243992][ T4477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.251526][ T4477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.264944][ T4477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 227.273746][ T4477] System zones: 0-1, 3-36 [ 227.280290][ T4477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.289242][ T296] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 227.311534][ T28] audit: type=1400 audit(1728226686.644:1511): avc: denied { setattr } for pid=4476 comm="syz.3.1023" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.339400][ T4482] loop1: detected capacity change from 0 to 256 [ 227.359792][ T4482] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 227.388239][ T28] audit: type=1400 audit(1728226686.724:1512): avc: denied { execute } for pid=4481 comm="syz.1.1024" name="file1" dev="loop1" ino=1048798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.446041][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.462958][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.472667][ T6] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 227.481584][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.490773][ T6] usb 5-1: config 0 descriptor?? [ 227.575969][ T296] usb 1-1: device descriptor read/64, error -71 [ 227.586098][ T1393] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 227.846002][ T1393] usb 4-1: Using ep0 maxpacket: 16 [ 227.912132][ T4363] EXT4-fs (loop2): unmounting filesystem. [ 227.943194][ T4489] loop2: detected capacity change from 0 to 256 [ 227.951882][ T4489] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 227.966090][ T296] usb 1-1: device descriptor read/64, error -71 [ 227.966751][ T4489] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 11, eidx : 128) [ 227.981436][ T4489] exFAT-fs (loop2): Filesystem has been set read-only [ 227.988028][ T1393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.998763][ T1393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.008278][ T1393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.020861][ T1393] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.029695][ T1393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.040968][ T1393] usb 4-1: config 0 descriptor?? [ 228.235975][ T296] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 228.306046][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 228.311876][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 228.332658][ T6] usb 5-1: USB disconnect, device number 40 [ 228.507148][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.515987][ T296] usb 1-1: device descriptor read/64, error -71 [ 228.518329][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.531031][ T4502] loop1: detected capacity change from 0 to 40427 [ 228.550920][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.558091][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.561875][ T4502] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 228.565213][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.579990][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.580013][ T4502] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.587190][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.602861][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.608338][ T4502] F2FS-fs (loop1): invalid crc value [ 228.612468][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.616103][ T4502] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.622152][ T1393] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 228.640379][ T1393] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002B/input/input22 [ 228.655892][ T4502] F2FS-fs (loop1): Start checkpoint disabled! [ 228.656872][ T1393] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 228.662724][ T4502] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 228.681971][ T4502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 228.717274][ T6] usb 4-1: USB disconnect, device number 31 [ 228.798339][ T4507] loop4: detected capacity change from 0 to 512 [ 228.812154][ T4507] ext3: Unknown parameter 'smackfsfloor' [ 228.868337][ T4509] syz.1.1029: attempt to access beyond end of device [ 228.868337][ T4509] loop1: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 228.868893][ T4511] loop4: detected capacity change from 0 to 512 [ 228.906014][ T296] usb 1-1: device descriptor read/64, error -71 [ 228.995994][ T355] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.026542][ T296] usb usb1-port1: attempt power cycle [ 229.202536][ T4515] loop2: detected capacity change from 0 to 40427 [ 229.212090][ T4515] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.219701][ T4515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.227757][ T4515] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff˙˙" or missing value [ 229.421299][ T4217] EXT4-fs (loop3): unmounting filesystem. [ 229.462805][ T8] kworker/u4:0: attempt to access beyond end of device [ 229.462805][ T8] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 229.579233][ T296] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 229.945968][ T1054] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 230.065958][ T296] usb 1-1: device not accepting address 45, error -71 [ 230.172086][ T4537] loop2: detected capacity change from 0 to 1024 [ 230.179318][ T4537] EXT4-fs: quotafile must be on filesystem root [ 230.213706][ T4522] loop3: detected capacity change from 0 to 40427 [ 230.286350][ T4522] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 230.292684][ T4522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 230.322126][ T4522] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 230.367150][ T4522] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 230.374143][ T4522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.426101][ T1054] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 230.442964][ T1054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.466008][ T1054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.489452][ T1054] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 230.519663][ T1054] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 230.531806][ T1054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.544632][ T1054] usb 2-1: config 0 descriptor?? [ 231.168068][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 231.168082][ T28] audit: type=1400 audit(1728226690.504:1525): avc: denied { read } for pid=4548 comm="syz.0.1039" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.198616][ T28] audit: type=1400 audit(1728226690.534:1526): avc: denied { open } for pid=4548 comm="syz.0.1039" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.198680][ T28] audit: type=1400 audit(1728226690.534:1527): avc: denied { ioctl } for pid=4548 comm="syz.0.1039" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.198702][ T28] audit: type=1400 audit(1728226690.534:1528): avc: denied { set_context_mgr } for pid=4548 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 231.198719][ T28] audit: type=1400 audit(1728226690.534:1529): avc: denied { map } for pid=4548 comm="syz.0.1039" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.219465][ T4552] loop2: detected capacity change from 0 to 2048 [ 231.300269][ T4555] fuse: Bad value for 'group_id' [ 231.324790][ T4552] EXT4-fs: Ignoring removed nobh option [ 231.334348][ T4217] syz-executor: attempt to access beyond end of device [ 231.334348][ T4217] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.364579][ T4552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.373881][ T4552] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 231.457389][ T4552] syz.2.1040: attempt to access beyond end of device [ 231.457389][ T4552] loop2: rw=2051, sector=2470606032, nr_sectors = 512 limit=2048 [ 231.667348][ T1054] thrustmaster 0003:044F:B653.002C: unbalanced delimiter at end of report description [ 231.676821][ T296] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 231.685075][ T1054] thrustmaster 0003:044F:B653.002C: parse failed [ 231.691484][ T1054] thrustmaster: probe of 0003:044F:B653.002C failed with error -22 [ 231.700041][ T28] audit: type=1400 audit(1728226691.044:1530): avc: denied { ioctl } for pid=4561 comm="syz.3.1042" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=39026 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.766132][ T296] usb 1-1: Using ep0 maxpacket: 8 [ 231.868485][ T1054] usb 2-1: USB disconnect, device number 42 [ 231.886042][ T296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.895995][ T296] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.904727][ T296] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 231.913910][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.922345][ T296] usb 1-1: config 0 descriptor?? [ 231.936183][ T60] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 232.181036][ T4363] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 232.196200][ T4363] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 232.214026][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 232.227940][ T4363] EXT4-fs (loop2): unmounting filesystem. [ 232.236001][ T60] usb 5-1: device descriptor read/64, error -71 [ 232.659627][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.666754][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.675994][ T4576] device bridge_slave_0 entered promiscuous mode [ 232.685563][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.692643][ T60] usb 5-1: device descriptor read/64, error -71 [ 232.698964][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.708172][ T4576] device bridge_slave_1 entered promiscuous mode [ 232.910668][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.917633][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.924797][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.931607][ T4576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.956861][ T4586] loop1: detected capacity change from 0 to 512 [ 232.962406][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.966798][ T4586] EXT4-fs (loop1): Test dummy encryption mode enabled [ 232.976738][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.977056][ T4586] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.1049: casefold flag without casefold feature [ 232.996297][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.996344][ T4586] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 233.013116][ T4586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.015820][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.029615][ T60] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 233.037309][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.044145][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.057473][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.065489][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.072342][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.088902][ T28] audit: type=1400 audit(1728226692.424:1531): avc: denied { create } for pid=4585 comm="syz.1.1049" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 233.110285][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.119867][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.134733][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.143449][ T28] audit: type=1400 audit(1728226692.484:1532): avc: denied { write } for pid=4588 comm="syz.3.1050" name="fib_trie" dev="proc" ino=4026532318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.147678][ T4576] device veth0_vlan entered promiscuous mode [ 233.173060][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.180791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.188077][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.202205][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.211223][ T4576] device veth1_macvtap entered promiscuous mode [ 233.221010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.232160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.267241][ T8] device bridge_slave_1 left promiscuous mode [ 233.273305][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.280880][ T8] device bridge_slave_0 left promiscuous mode [ 233.287097][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.295219][ T8] device veth1_macvtap left promiscuous mode [ 233.301438][ T8] device veth0_vlan left promiscuous mode [ 233.364370][ T4594] syz.2.1046[4594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.364453][ T4594] syz.2.1046[4594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.375974][ T60] usb 5-1: device descriptor read/64, error -71 [ 233.785984][ T60] usb 5-1: device descriptor read/64, error -71 [ 233.792957][ T4136] EXT4-fs (loop1): unmounting filesystem. [ 233.807440][ T4597] loop1: detected capacity change from 0 to 128 [ 233.934696][ T60] usb usb5-port1: attempt power cycle [ 234.306029][ T296] usb 1-1: string descriptor 0 read error: -71 [ 234.312659][ T296] usb 1-1: USB disconnect, device number 46 [ 234.666006][ T296] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 234.676066][ T60] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 234.842584][ T4614] loop1: detected capacity change from 0 to 1024 [ 234.849157][ T4614] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.928582][ T691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.078586][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.095475][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.111237][ T296] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 235.121158][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.156014][ T60] usb 5-1: device not accepting address 43, error -71 [ 235.291565][ T296] usb 1-1: config 0 descriptor?? [ 235.415849][ T28] audit: type=1400 audit(1728226694.744:1533): avc: denied { call } for pid=4615 comm="syz.2.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 235.556007][ T60] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 235.665997][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 235.786738][ T296] zydacron 0003:13EC:0006.002D: unknown main item tag 0x0 [ 235.793801][ T296] zydacron 0003:13EC:0006.002D: unknown main item tag 0x0 [ 235.796026][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.800754][ T296] zydacron 0003:13EC:0006.002D: unknown main item tag 0x0 [ 235.811044][ T60] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.817626][ T296] zydacron 0003:13EC:0006.002D: unknown main item tag 0x0 [ 235.826640][ T60] usb 5-1: config 1 has no interface number 1 [ 235.833316][ T296] zydacron 0003:13EC:0006.002D: item fetching failed at offset 4/5 [ 235.839472][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.847127][ T296] zydacron 0003:13EC:0006.002D: parse failed [ 235.859807][ T60] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.865326][ T296] zydacron: probe of 0003:13EC:0006.002D failed with error -22 [ 235.876264][ T60] usb 5-1: config 1 interface 2 has no altsetting 0 [ 235.883372][ T428] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 236.017657][ T39] usb 1-1: USB disconnect, device number 47 [ 236.046042][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.054918][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.062865][ T60] usb 5-1: Product: syz [ 236.066938][ T60] usb 5-1: Manufacturer: syz [ 236.071247][ T60] usb 5-1: SerialNumber: syz [ 236.165972][ T428] usb 2-1: Using ep0 maxpacket: 8 [ 236.256015][ T296] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 236.286089][ T428] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 236.293990][ T428] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 236.302825][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.313634][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.324132][ T428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.336757][ T428] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 236.345564][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.353911][ T428] usb 2-1: config 0 descriptor?? [ 236.396230][ T60] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 236.402279][ T60] usb 5-1: selecting invalid altsetting 0 [ 236.413976][ T60] usb 5-1: USB disconnect, device number 44 [ 236.466035][ T410] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 236.515989][ T296] usb 3-1: Using ep0 maxpacket: 8 [ 236.656155][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.667111][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.676849][ T296] usb 3-1: New USB device found, idVendor=1035, idProduct=1410, bcdDevice= 0.00 [ 236.685686][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.694279][ T296] usb 3-1: config 0 descriptor?? [ 236.826047][ T410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.837041][ T410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.846870][ T410] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 236.855849][ T410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.864289][ T410] usb 4-1: config 0 descriptor?? [ 236.906029][ T428] usbhid 2-1:0.0: can't add hid device: -71 [ 236.911842][ T428] usbhid: probe of 2-1:0.0 failed with error -71 [ 236.917992][ T6] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 236.926491][ T428] usb 2-1: USB disconnect, device number 43 [ 236.951659][ T4625] loop2: detected capacity change from 0 to 2048 [ 236.967444][ T4625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 236.986392][ T4644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 237.106019][ T3568] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 237.246232][ T10] ------------[ cut here ]------------ [ 237.251509][ T10] kernel BUG at fs/ext4/inode.c:2749! [ 237.261231][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 237.267120][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 237.276665][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.286560][ T10] Workqueue: writeback wb_workfn (flush-7:2) [ 237.292378][ T10] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 237.297930][ T10] Code: 7e 80 ff 31 ff 89 de e8 33 7e 80 ff 45 84 f6 75 2a e8 99 7b 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 85 7b 80 ff <0f> 0b e8 7e 7b 80 ff e8 e5 5f 0b ff e9 46 c3 ff ff e8 6f 7b 80 ff [ 237.317371][ T10] RSP: 0018:ffffc900000a6f60 EFLAGS: 00010293 [ 237.323274][ T10] RAX: ffffffff81f527cb RBX: 0000008000000000 RCX: ffff888100398000 [ 237.331088][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 237.338899][ T10] RBP: ffffc900000a7370 R08: ffffffff81f4ef2b R09: ffffed10217b6a0d [ 237.346709][ T10] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812e28a000 [ 237.354523][ T10] R13: ffff88810bdb51a0 R14: 000000c410000000 R15: ffffc900000a7240 [ 237.362331][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 237.371103][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.377522][ T10] CR2: 0000000020de9000 CR3: 000000013c566000 CR4: 00000000003506b0 [ 237.385418][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.393226][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.401040][ T10] Call Trace: [ 237.404165][ T10] [ 237.406945][ T10] ? __die_body+0x62/0xb0 [ 237.411106][ T10] ? die+0x88/0xb0 [ 237.414666][ T10] ? do_trap+0x103/0x330 [ 237.418750][ T10] ? ext4_writepages+0x3fab/0x3fd0 [ 237.423692][ T10] ? handle_invalid_op+0x95/0xc0 [ 237.428464][ T10] ? ext4_writepages+0x3fab/0x3fd0 [ 237.433415][ T10] ? exc_invalid_op+0x32/0x50 [ 237.437926][ T10] ? asm_exc_invalid_op+0x1b/0x20 [ 237.442785][ T10] ? ext4_writepages+0x70b/0x3fd0 [ 237.447649][ T10] ? ext4_writepages+0x3fab/0x3fd0 [ 237.452596][ T10] ? ext4_writepages+0x3fab/0x3fd0 [ 237.457544][ T10] ? mlock_page_drain_local+0x108/0x180 [ 237.462938][ T10] ? pagevec_lookup_range_tag+0x3c/0x80 [ 237.468311][ T10] ? generic_writepages+0x160/0x160 [ 237.473341][ T10] ? tag_pages_for_writeback+0x580/0x580 [ 237.478808][ T10] ? ext4_read_folio+0x240/0x240 [ 237.483582][ T10] ? blk_finish_plug+0x4c/0x80 [ 237.488182][ T10] ? __kasan_check_write+0x14/0x20 [ 237.493127][ T10] ? ext4_read_folio+0x240/0x240 [ 237.497903][ T10] do_writepages+0x385/0x620 [ 237.502327][ T10] ? __writepage+0x130/0x130 [ 237.506754][ T10] ? __kasan_check_write+0x14/0x20 [ 237.511701][ T10] ? __wake_up+0x1c0/0x1c0 [ 237.515952][ T10] ? __inode_add_lru+0x10e/0x380 [ 237.520723][ T10] ? __kasan_check_write+0x14/0x20 [ 237.525684][ T10] ? __kasan_check_write+0x14/0x20 [ 237.530617][ T10] __writeback_single_inode+0xdc/0xb80 [ 237.535914][ T10] writeback_sb_inodes+0xb32/0x1910 [ 237.540951][ T10] ? queue_io+0x520/0x520 [ 237.545112][ T10] ? down_read_trylock+0x319/0x7d0 [ 237.550063][ T10] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 237.555357][ T10] __writeback_inodes_wb+0x118/0x3f0 [ 237.561443][ T10] ? queue_io+0x3d0/0x520 [ 237.565615][ T10] wb_writeback+0x3cd/0x9f0 [ 237.569941][ T10] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 237.575751][ T10] ? __kasan_check_write+0x14/0x20 [ 237.580697][ T10] wb_workfn+0xbba/0x1030 [ 237.584865][ T10] ? inode_wait_for_writeback+0x280/0x280 [ 237.590419][ T10] ? finish_task_switch+0x167/0x7b0 [ 237.595456][ T10] ? __kasan_check_read+0x11/0x20 [ 237.600315][ T10] ? read_word_at_a_time+0x12/0x20 [ 237.605259][ T10] ? strscpy+0x9c/0x260 [ 237.609252][ T10] process_one_work+0x73d/0xcb0 [ 237.613940][ T10] worker_thread+0xa60/0x1260 [ 237.618457][ T10] kthread+0x26d/0x300 [ 237.622354][ T10] ? worker_clr_flags+0x1a0/0x1a0 [ 237.627216][ T10] ? kthread_blkcg+0xd0/0xd0 [ 237.631644][ T10] ret_from_fork+0x1f/0x30 [ 237.635900][ T10] [ 237.638761][ T10] Modules linked in: [ 237.645992][ T28] audit: type=1400 audit(1728226697.039:1534): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.669344][ T28] audit: type=1400 audit(1728226697.039:1535): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.672846][ T10] ---[ end trace 0000000000000000 ]--- [ 237.693818][ T28] audit: type=1400 audit(1728226697.039:1536): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.697221][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.719172][ T28] audit: type=1400 audit(1728226697.039:1537): avc: denied { add_name } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.729948][ T3568] usb 5-1: device descriptor read/64, error -71 [ 237.752197][ T10] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 237.758215][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.763595][ T10] Code: 7e 80 ff 31 ff 89 de e8 33 7e 80 ff 45 84 f6 75 2a e8 99 7b 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 85 7b 80 ff <0f> 0b e8 7e 7b 80 ff e8 e5 5f 0b ff e9 46 c3 ff ff e8 6f 7b 80 ff [ 237.773038][ T6] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 237.792701][ T28] audit: type=1400 audit(1728226697.039:1538): avc: denied { unlink } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.823289][ T296] usbhid 3-1:0.0: can't add hid device: -71 [ 237.823515][ T10] RSP: 0018:ffffc900000a6f60 EFLAGS: 00010293 [ 237.829091][ T296] usbhid: probe of 3-1:0.0 failed with error -71 [ 237.834956][ T10] RAX: ffffffff81f527cb RBX: 0000008000000000 RCX: ffff888100398000 [ 237.849024][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.849839][ T6] usb 1-1: config 0 descriptor?? [ 237.861788][ T28] audit: type=1400 audit(1728226697.069:1539): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.862873][ T296] usb 3-1: USB disconnect, device number 32 [ 237.884280][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 237.896236][ T10] RBP: ffffc900000a7370 R08: ffffffff81f4ef2b R09: ffffed10217b6a0d [ 237.904970][ T10] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812e28a000 [ 237.912982][ T10] R13: ffff88810bdb51a0 R14: 000000c410000000 R15: ffffc900000a7240 [ 237.920928][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 237.930711][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.937269][ T10] CR2: fffffffffffffffa CR3: 0000000124aad000 CR4: 00000000003506b0 [ 237.945144][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.953159][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.961305][ T10] Kernel panic - not syncing: Fatal exception [ 237.967408][ T10] Kernel Offset: disabled [ 237.971556][ T10] Rebooting in 86400 seconds..