last executing test programs: 24.525610312s ago: executing program 3 (id=5088): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) fallocate(r2, 0x3, 0x3f00, 0x8000c62) 24.521935682s ago: executing program 3 (id=5089): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010", @ANYRES32=0x0], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in6}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000005880)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @broadcast}}}}) 23.644750275s ago: executing program 3 (id=5099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000018010000202070250000000000030000001af8ff000000009fa1f3000000000007546200f8ffffffb702000008000000b7030000000000008500000071000000958000cd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="250a020085c71cc9062a3b0f00000000610d0000000000000000000000000000bd39d70e21a386b2141024bca5840000"], &(0x7f0000000000)='GPL\x00'}, 0x80) pipe2$9p(0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000308000000", @ANYRES64], 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0xb, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x0, 0x61]}}, &(0x7f0000000340)=""/199, 0x29, 0xc7, 0x1}, 0x20) 22.511390887s ago: executing program 3 (id=5109): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4022) 21.257877661s ago: executing program 3 (id=5115): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205804040000000000000109022400010000300009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0x23, 0x14, {0x14, 0xd, "6ac02c4b08cfe18eb438c3c89d69f955a374"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "0bda4949"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x2, 0x1, {0x22, 0xd13}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000580)={0x40, 0xf, 0x85, "3f4c17aaafe0e6d0ca5a76d3d95490f8df2596986feb7df0f4f05662864ea4afd70b88ee17bf6f165eb37abc69e1d20482ef74615732b6da434f43b491c9c3f64d951262172614060ce910522f363d0843965f977dcd65d202321e6c300f1f5367b87ecd8d267024ed08b0a355041954a6f5e5e95f0976982a93826eb69247654c8575ba15"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000740)={0x20, 0x1, 0x47, "4327554cac1da81df003c9cd0a1b931a06329f19b57bfc7341be56b68187d5601c089130c58f548bab2d916054bc7868f63dd101f6e0c5eaa7d3f763ed447dbaff23aa63df92ad"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xf9}}) 20.239220725s ago: executing program 3 (id=5120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff0000000000000000000000958b08d6bd16afc935a32be664942f42b306f104e257890504c958dedc8f960e367c2fdb17d35728baea41e435f983f99fa243864f454b4895316a53d54966101b57dfa84691140075783cd93ab38fcc34a3bc914f563516af6216f920a36292ebea8a09426d7256eaa9c787c9a8ea7cf041ecc6dcaa223004492d294ab2c5935be98523a514876079aac7ce79c90d130ff0cc0cc51698accaca02c2de1a8b79c61342dcfa819c33add19b86368166f0e38f7407daadcfe87c0fc4a5e1ae346cd088dd040dfc1ef1fc28a0e25252e192fbccea0282b499c9e8b477e2dcf3286649"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000000580)={[{@discard}, {@utf8}, {@fmask={'fmask', 0x3d, 0xb9}}, {@namecase}, {@discard}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x6ff}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0xb2c}}, {@dmask={'dmask', 0x3d, 0x5}}, {@errors_continue}, {}], [{@euid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'iocharset'}}, {@dont_measure}, {@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xda\b\xd2\xb6l\x05>\xa3\xfeI\xe9L\xe4\xa9\x91\xb2?\xb0`\x82~\xfc\xf2\x8b\xd3\x92nF\xdc\xef2\xf0;z|i\x03P\xd9\xaeu-\xad\xd8\xc9\xf7\xeb\xc6\x04$b\xe4*C\xea\xb8E\xc2)\x8f\x1dH\v\xf7\xdbs`5\xf9\xb6\xd3\xb3O\x14T*\xab<\x11X\xaf\xbf\xbb\xf2\x82z\x9c\x90z\xaa\xa7R\xa5\xf8\xdet\xa5\xc8\xf2\x179\x9f/\xcd\x93\xc4\xf1[1\x06\xa8\xee\x8a\xaaL\xac\x99\x9d\xa5\xe1\xc0\xa7\"!i\xc3r\x013\xe6\xd3\xf9\xb6\xb5\x91Y\xda\xb0\xb0zPw\xe5\x94\xaa]\xfc\x1e\x18\f5fy\x88\xa1\x9c\xb0\x80[\x00\xdef\xf2\x06\ap\xcc\x80\x8d\x82\x97K\x98\xe9\"/>\xa3\x86#+\xe8G\xd9\xc4\xca\x81\xfe\x061\xdc\xfb`&6:\x00\xa6\xda\xda\xe8@\xab\x9c\x12\x91\\\x8c\x04\xcb\xad=\xc389m\xd6\xa0?\xb5?\xb1\x84\xd1\xc4\x03\xa6,\xf3\x9f\xfa\x1e\xbc\x14S\xe1\xab;\x1a-\x06.&\xf1\xc08\xcf\xb9E\x8e\xbd\x15\x85d\xe6O-\x98yR\xcf\x1f%\x18\xff\xc8\xab\x8d\x1e\xfb\x9a`\x17\xf7\\\x1b\xdf\x80\x04\xbe\xabv\x16\xf8\xd1!P\xfb\xb3\xf0\xc9\xa2\x83\x05'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio}, {@fowner_lt}]}, 0x21, 0x14fd, &(0x7f0000003f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xe20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet(0x2, 0x5, 0x7fffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) 10.601828747s ago: executing program 0 (id=5144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0)={[{@lazytime}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 10.600989827s ago: executing program 1 (id=5145): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_usb_ep_write(r0, 0x1, 0x3a, &(0x7f0000000080)="dd41cf2ebfe580f9808fc725935bd1f16ca352c31abebe0ad16df0318703d52dcd4c1614c9f56ea054a863b0a73c29d97b14fd6d003475489ce8") sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x32, 0x1, 0x200, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000008cac26095d259e05932000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000e98fe9a0927d1eecf085438217aefc8278b19cbb19b35232b5cfaf918fd96eb853c6ade1baa146871bb79ab3442406f5e9308ca0f3dc7e2d29e205ffd6bb2ae3a639a1893148a8c2e17d65ca97d7fbc0c23283dc982ea8fb4ee58083c363d5cbb39b9dc33de0863d47b743bda1db0b2e23f69c409ad0b441b7adface23f53a7c2ad02539807620aa150e8162bcfe6e52300059cf879e8e1711476a7b730c5a478ebc8d003eef99f86ee736b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x13}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x5b, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x4, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x10000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xa, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @random="3633c2a3bafb"}) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 64) 10.594309528s ago: executing program 4 (id=5146): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205804040000000000000109022400010000300009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0x23, 0x14, {0x14, 0xd, "6ac02c4b08cfe18eb438c3c89d69f955a374"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "0bda4949"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x2, 0x1, {0x22, 0xd13}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000580)={0x40, 0xf, 0x85, "3f4c17aaafe0e6d0ca5a76d3d95490f8df2596986feb7df0f4f05662864ea4afd70b88ee17bf6f165eb37abc69e1d20482ef74615732b6da434f43b491c9c3f64d951262172614060ce910522f363d0843965f977dcd65d202321e6c300f1f5367b87ecd8d267024ed08b0a355041954a6f5e5e95f0976982a93826eb69247654c8575ba15"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000740)={0x20, 0x1, 0x47, "4327554cac1da81df003c9cd0a1b931a06329f19b57bfc7341be56b68187d5601c089130c58f548bab2d916054bc7868f63dd101f6e0c5eaa7d3f763ed447dbaff23aa63df92ad"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xf9}}) 9.088365642s ago: executing program 0 (id=5148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x1f, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (fail_nth: 3) 9.088075442s ago: executing program 1 (id=5147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000009489f9f6d2db19d8a77fe2235100"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)={[{@nombcache}, {@grpquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noauto_da_alloc}, {@nolazytime}, {@max_dir_size_kb}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") (async) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000030057f1511fb650a343e10271e5161f8e0b17de63d5a1bf2d3abf8fde63dc183d40c0cd36a15ef74bcaaefed03281c99cb332ac3a19b9c16088e71e23f6da62b4050c46f8dc59b760aa53e56b4412f9387bf486b58a01fcb2c275b946d5cb453530442521fa839e0dcf650880a30016faa790cabd59a11d879ebc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000acb39500000000000000", @ANYBLOB="60ba1edb9dca13c2d63dbd5c32b9341ae566b5adf48bfc0eff5c6d5b1af4baf505d471cb906119f2c1b767085a9edb496fe82a6c8459a1d3230740873eca89d3b55b797f186fbac7de366c1d72bc927ede50eb546220e6cfee70070cbd69312252f1f76976228d50450cfdb5b0ac8b3a98a445726444d785a32149dc64a01d6730b26e0635cd54d54391329ef40d2079bf48dd87b57d8af89c51895fcb6f89799de585e3aa3d02f0b164abf690663eb9d0f5de9f0bb0701f6e2c683110acf5939f8401ea54c3ae06aa238eabe6a7f7652738c87dd9c443", @ANYRESDEC=r2, @ANYRES8=r2], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r5 = socket(0x3, 0x4, 0xb8af) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120b000000000095000000000000008405f71de023f91d6358071032a609c797ab117649d1da3a569acdeed7b54438c6e98fdba3635d12a474561118d63e000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) (async) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000b6895323009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x9}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1}, {}, {0x6}]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x7, 0x8, &(0x7f00000003c0)="0000ffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.087372182s ago: executing program 2 (id=5149): getresuid(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000251ad236e39ae73c8abfc3a67bbba07500000007010000f889d8e3aee1270663585e8c9c48354cffffffb702000000000000b700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xffffff36}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r7, 0x25, 0x0, @val=@perf_event}, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4002, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11, 0x22f, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.023392127s ago: executing program 1 (id=5150): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55710c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba8fd1c024815f140290fb3f659193ae297fdcd50b6dc8d41dff00000000000000e272e53a081168e74d7189f0e655f66e08f0e108968d80ea3cac636aa60bea16f1e27d5761f66d6e252599ca89adacf4e13a2013988c4222d7cf1ff84820012fd6f16b20de6f1ea6691dcee8e86fa2109aa7898fe15f2c970063c482db5da9926d158ee55592221796e273ccf22a8ce8dd367473b0247773b358f02338ba5950707984fb201d101bfd1f78b0ea4f397c22d94b5a34491cf3f671af9dacdf409cc1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x82, {0x82, 0x0, "62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede97965f3de2587774d8029fa9d10b47e356249835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26171c2585465e3c686fd889c2e4d36a95cd81e8b475156cc3a12565e97e3efb3b2cdf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.450909127s ago: executing program 0 (id=5151): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socket(0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 7.450625217s ago: executing program 2 (id=5152): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) (fail_nth: 5) 7.450018347s ago: executing program 4 (id=5153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6, 0x9}) (fail_nth: 4) 5.743345557s ago: executing program 0 (id=5154): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x1f, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x100, 0x1000, 0x1}, 0x1d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_control_io(r5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r5, &(0x7f0000000500)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="40004f0000004f0ed1abc63f6e866bbc4d"], 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 5.742324287s ago: executing program 1 (id=5155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203010200001800"/28], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x55, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000030303be8739e90000000000000000000c000200fffffffd00000000"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x20}, 0x1c) sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000480)="70bf491706d8e98bb8a2aa366d962f1fa13ad4734ba6c2b4af05433929", 0x1d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000009c0)="db0cdf675b9cef5c926259d707003218e5ad6f881577e262dfd0b79190885c23b4ab69a34823ea57d8501bc44062788c1c835da80f470e9d8292cc83c1bc89a51a67", 0x42}, {&(0x7f0000000a80)="794a216da0b33108de0cacf6ee7ad568972d4bda79f7039ddeab9ed5b4e71fb24b3bbd79f2644c16727c6f", 0x2b}, {&(0x7f0000000ac0)="9069e99f8a850d25ef50791da28d07985216d78f44a67450ef8017e948bda2a0804401030ab886ec3f1ed58b68a4e852d76bf5cd368bba14aa1e58539d5efff55ad31471e88ab428b1ce", 0x4a}, {&(0x7f0000000f40)="d937f4fd95f28e75b518a34a41b7ecbe6d9b096b47271625ef3333529304bc2690a989b33d4eac", 0x27}], 0x4, &(0x7f0000003640)=ANY=[], 0x12a8}}], 0x2, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xe00, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0xffffffff, 0x5, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3b, 0x4, 0x0, 0x0, 0xec, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x6}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa0100fe}, {@rand_addr=0x64010100, 0xffffffff}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @rr={0x7, 0x17, 0xaa, [@private=0xa010100, @empty, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010100, @remote]}]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b3d090987f70e03d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.742205777s ago: executing program 2 (id=5156): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 5.687418572s ago: executing program 4 (id=5157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r2, &(0x7f0000004340)=[{&(0x7f0000002080)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0d750dfd480537cf143fe51614e6ef378570b", 0x3b}], 0x1) 3.928168287s ago: executing program 1 (id=5158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x1f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzLTn1EkpvTXssvYReWgo9pW0O6aXQhh4aemgPW2Znt2yTDW2zyU7JfD4wO/P2vZnfDMz37V5mN4DCGo2IyYgoR8RYRFQjIuke8H62jLabK7X12Yhm85t7SWtc1s509huJiEZEfBZR6fQtrf2w9WDjq4/+Wax+eGrt+9qgrq/b9tbm1zsnp/8+O/Xp0pVrd6aTmIx6u6/7Og5T0uO9ShLxxlEUe0kklbzPgOcx8+eZ62nu34yID1r5r0apHdl/F165WI1PTuy37393r749yHMFDl+zWU0/AxtNoHBKEVGPpDQeEdl2qTQ+nn2Hv1EeLv02v/DH2K/zi3O/5D1TAYelHrH55fmhcyO78n+7nOUfOL7S/H87s3oz3d4p5302wEC8k63S/I/9tPxxyD8UjvxDcck/FJf8wzFwwOzKPxSX/ENxyT8cY9XORqNnt/xDcck/FJf8Q3F15x8AKJbmUN5PIAN5yXv+AQAAAAAAAAAAAAAAAAAA9lqprc92lkHVvPR/xPYXEVHpVb/c+j/iiFdbr8P3k3TYE0m2W19+fK/PA/TpdM5PX792K9/6l989muP+9XSztt+45bmIRjp4olLZe/8l7fvv4F5/Rn/15z4LvKBkV/vz7wZbf7dHq/nWn9qIuJDOPxO95p9SvNVa955/6t0/sXxAvz/s8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzOMAAAD//7MNbSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 3.927683947s ago: executing program 2 (id=5159): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) 3.927470907s ago: executing program 4 (id=5160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x1f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 2.011896084s ago: executing program 0 (id=5161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)={0xd0, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xd0}}, 0x2000c050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 2.011398774s ago: executing program 2 (id=5162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x1f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 2.007129715s ago: executing program 4 (id=5163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff0000000000000000000000958b08d6bd16afc935a32be664942f42b306f104e257890504c958dedc8f960e367c2fdb17d35728baea41e435f983f99fa243864f454b4895316a53d54966101b57dfa84691140075783cd93ab38fcc34a3bc914f563516af6216f920a36292ebea8a09426d7256eaa9c787c9a8ea7cf041ecc6dcaa223004492d294ab2c5935be98523a514876079aac7ce79c90d130ff0cc0cc51698accaca02c2de1a8b79c61342dcfa819c33add19b86368166f0e38f7407daadcfe87c0fc4a5e1ae346cd088dd040dfc1ef1fc28a0e25252e192fbccea0282b499c9e8b477e2dcf328664945f7cf022cdc41594e35032c1c36028b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000000580)={[{@discard}, {@utf8}, {@fmask={'fmask', 0x3d, 0xb9}}, {@namecase}, {@discard}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x6ff}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0xb2c}}, {@dmask={'dmask', 0x3d, 0x5}}, {@errors_continue}, {}], [{@euid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'iocharset'}}, {@dont_measure}, {@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xda\b\xd2\xb6l\x05>\xa3\xfeI\xe9L\xe4\xa9\x91\xb2?\xb0`\x82~\xfc\xf2\x8b\xd3\x92nF\xdc\xef2\xf0;z|i\x03P\xd9\xaeu-\xad\xd8\xc9\xf7\xeb\xc6\x04$b\xe4*C\xea\xb8E\xc2)\x8f\x1dH\v\xf7\xdbs`5\xf9\xb6\xd3\xb3O\x14T*\xab<\x11X\xaf\xbf\xbb\xf2\x82z\x9c\x90z\xaa\xa7R\xa5\xf8\xdet\xa5\xc8\xf2\x179\x9f/\xcd\x93\xc4\xf1[1\x06\xa8\xee\x8a\xaaL\xac\x99\x9d\xa5\xe1\xc0\xa7\"!i\xc3r\x013\xe6\xd3\xf9\xb6\xb5\x91Y\xda\xb0\xb0zPw\xe5\x94\xaa]\xfc\x1e\x18\f5fy\x88\xa1\x9c\xb0\x80[\x00\xdef\xf2\x06\ap\xcc\x80\x8d\x82\x97K\x98\xe9\"/>\xa3\x86#+\xe8G\xd9\xc4\xca\x81\xfe\x061\xdc\xfb`&6:\x00\xa6\xda\xda\xe8@\xab\x9c\x12\x91\\\x8c\x04\xcb\xad=\xc389m\xd6\xa0?\xb5?\xb1\x84\xd1\xc4\x03\xa6,\xf3\x9f\xfa\x1e\xbc\x14S\xe1\xab;\x1a-\x06.&\xf1\xc08\xcf\xb9E\x8e\xbd\x15\x85d\xe6O-\x98yR\xcf\x1f%\x18\xff\xc8\xab\x8d\x1e\xfb\x9a`\x17\xf7\\\x1b\xdf\x80\x04\xbe\xabv\x16\xf8\xd1!P\xfb\xb3\xf0\xc9\xa2\x83\x05'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio}, {@fowner_lt}]}, 0x21, 0x14fd, &(0x7f0000003f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xe20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet(0x2, 0x5, 0x7fffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) 2.98692ms ago: executing program 0 (id=5164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000040000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000100000095000000427aa8c19155703a0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435005400bbfe8000000000000000000000000000aa00004e2200"/56, @ANYRES32=0x41424344], 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000617474722c616374697665c75a876348615f6c6f67873d342c6191138918655f2c6f67733d342c9b756f74082c66b2d1c46f4b2a3d159dce99edb2a4ea6173670000000000dbb374615f666c7573682c70726a6a71756f74613d2d7b2c6a7166748dba745fe3616368652c66617374626f6f742c00834aa38fc41d229b202ddadba6d8f9bfb74f705a8b2786d610d1f2335eb1dbbc87d1b7692ffe82e508d80bdcf88ebdd5523426b8a12703418316731cf8b17ccf2c330769e5a4a505efbc7f3c5c2d958ffa4d22b0e082b7d907739b8a94af832b46c4d5df1841440857364bd0ce880b4e382a53b6db010b536c4453c83641a4dbf3d147b6a4cced9525b95802fb963bbe29339389e0080a63899274b06ec30a4b9637f55c124fa8316c648710702597b1fe78094e80ef6cfe5fed332bccf3ed508a7ce4896190c3d30bb6d9cf60772580acc099a354eb945ed1b1389b6e41c8049beb0502fe36ae19cbe0e55e8f19988808a3985480e08369d04c8a2ffdd97dad05d38ddc9581179b74d9ef3f2ae5087750ae5b2dfc1dc080b627acb1a20e393875685f98759c6b7528693f270478dcc19640894fa2c3f4df26557e79c79e488bee952a50d0e0ffa94cdf736c06190beff240f4dc83dc7e5e6bdc5917ba0f104378c42985e2b1441e06", @ANYRES64, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000001f80)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000c00)={[{@shortname_mixed}, {@utf8}, {@fat=@showexec}, {@uni_xlate}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@uni_xlate}, {@utf8}, {@fat=@tz_utc}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlate}, {@numtail}, {}, {@fat=@showexec}]}, 0x6, 0x2b8, &(0x7f0000000640)="$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") 1.7201ms ago: executing program 1 (id=5165): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) 862.44µs ago: executing program 2 (id=5166): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socket(0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=5167): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x82, {0x82, 0x0, "62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede97965f3de2587774d8029fa9d10b47e356249835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26171c2585465e3c686fd889c2e4d36a95cd81e8b475156cc3a12565e97e3efb3b2cdf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): omiscuous mode [ 1029.825740][T18457] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.835208][T18457] usb 2-1: config 0 has no interface number 0 [ 1029.848135][T18457] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1029.859642][T18457] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1029.996268][T18457] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1030.024885][T18457] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1030.082721][T18457] usb 2-1: Product: syz [ 1030.094177][T18457] usb 2-1: SerialNumber: syz [ 1030.103139][T18457] usb 2-1: config 0 descriptor?? [ 1030.109515][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1030.118413][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1030.126222][T19494] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1030.134569][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1030.142827][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1030.151243][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1030.160222][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1030.168699][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.175571][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.182863][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1030.191050][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1030.199089][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.205946][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.213347][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1030.231414][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1030.244782][T19533] device veth0_vlan entered promiscuous mode [ 1030.251401][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1030.265305][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1030.273726][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1030.291014][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1030.299884][T19533] device veth1_macvtap entered promiscuous mode [ 1030.311785][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1030.320211][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1030.328340][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1030.347217][T16223] device bridge_slave_1 left promiscuous mode [ 1030.353502][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.361040][T16223] device bridge_slave_0 left promiscuous mode [ 1030.367909][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.376130][T16223] device veth1_macvtap left promiscuous mode [ 1030.376312][ T4480] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1030.407486][T18457] usb 2-1: invalid MIDI in EP 0 [ 1030.413348][T18457] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 1030.426609][T18457] usb 2-1: USB disconnect, device number 89 [ 1030.548174][T19545] loop3: detected capacity change from 0 to 40427 [ 1030.565718][ T326] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1030.574551][T19549] FAULT_INJECTION: forcing a failure. [ 1030.574551][T19549] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.587235][T19549] CPU: 1 PID: 19549 Comm: syz.0.4971 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1030.598424][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1030.602946][T19545] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1030.608407][T19549] Call Trace: [ 1030.608419][T19549] [ 1030.608428][T19549] dump_stack_lvl+0x151/0x1c0 [ 1030.624983][T19549] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1030.630712][T19549] dump_stack+0x15/0x20 [ 1030.634699][T19549] should_fail+0x3c6/0x510 [ 1030.638957][T19549] __should_failslab+0xa4/0xe0 [ 1030.642410][T19545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1030.643551][T19549] ? __build_skb+0x2a/0x300 [ 1030.643573][T19549] should_failslab+0x9/0x20 [ 1030.659526][T19549] slab_pre_alloc_hook+0x37/0xd0 [ 1030.664295][T19549] ? __build_skb+0x2a/0x300 [ 1030.668639][T19549] kmem_cache_alloc+0x44/0x200 [ 1030.673237][T19549] ? __put_user_ns+0x60/0x60 [ 1030.677756][T19549] __build_skb+0x2a/0x300 [ 1030.681914][T19549] build_skb+0x25/0x1f0 [ 1030.685906][T19549] bpf_prog_test_run_skb+0x38e/0x1420 [ 1030.691113][T19549] ? __kasan_check_write+0x14/0x20 [ 1030.696062][T19549] ? proc_fail_nth_write+0x20b/0x290 [ 1030.701183][T19549] ? selinux_file_permission+0x2c4/0x570 [ 1030.706652][T19549] ? fsnotify_perm+0x6a/0x5d0 [ 1030.711165][T19549] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1030.716897][T19549] ? __kasan_check_write+0x14/0x20 [ 1030.721840][T19549] ? fput_many+0x160/0x1b0 [ 1030.726090][T19549] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1030.731823][T19549] bpf_prog_test_run+0x3b0/0x630 [ 1030.736594][T19549] ? bpf_prog_query+0x220/0x220 [ 1030.741279][T19549] ? selinux_bpf+0xd2/0x100 [ 1030.745620][T19549] ? security_bpf+0x82/0xb0 [ 1030.749960][T19549] __sys_bpf+0x525/0x760 [ 1030.754038][T19549] ? fput_many+0x160/0x1b0 [ 1030.758293][T19549] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1030.763503][T19549] ? debug_smp_processor_id+0x17/0x20 [ 1030.768794][T19549] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1030.774793][T19549] __x64_sys_bpf+0x7c/0x90 [ 1030.779040][T19549] do_syscall_64+0x3d/0xb0 [ 1030.783290][T19549] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1030.789024][T19549] RIP: 0033:0x7fd734b17e79 [ 1030.793272][T19549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.812715][T19549] RSP: 002b:00007fd733795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1030.820960][T19549] RAX: ffffffffffffffda RBX: 00007fd734cb3f80 RCX: 00007fd734b17e79 [ 1030.828855][T19549] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 1030.836672][T19549] RBP: 00007fd733795090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.844479][T19549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.852295][T19549] R13: 0000000000000000 R14: 00007fd734cb3f80 R15: 00007ffef5ca5748 [ 1030.860108][T19549] [ 1031.025816][ T4480] usb 5-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 1031.035932][ T4480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.049661][ T4480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.059442][ T326] usb 3-1: Using ep0 maxpacket: 32 [ 1031.064469][ T4480] usb 5-1: too many endpoints for config 1 interface 1 altsetting 101: 208, using maximum allowed: 30 [ 1031.080331][ T4480] usb 5-1: config 1 interface 1 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 208 [ 1031.093881][ T4480] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1031.155240][T19568] FAULT_INJECTION: forcing a failure. [ 1031.155240][T19568] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.167940][T19568] CPU: 1 PID: 19568 Comm: syz.1.4974 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1031.179124][T19568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1031.189012][T19568] Call Trace: [ 1031.192137][T19568] [ 1031.195263][T19568] dump_stack_lvl+0x151/0x1c0 [ 1031.199781][T19568] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1031.205247][T19568] dump_stack+0x15/0x20 [ 1031.209237][T19568] should_fail+0x3c6/0x510 [ 1031.213487][T19568] __should_failslab+0xa4/0xe0 [ 1031.218089][T19568] should_failslab+0x9/0x20 [ 1031.222426][T19568] slab_pre_alloc_hook+0x37/0xd0 [ 1031.227209][T19568] kmem_cache_alloc_trace+0x48/0x210 [ 1031.232322][T19568] ? htab_map_alloc+0xa2/0x1650 [ 1031.237011][T19568] htab_map_alloc+0xa2/0x1650 [ 1031.241522][T19568] ? capable+0x88/0xe0 [ 1031.245432][T19568] ? htab_map_alloc_check+0x319/0x430 [ 1031.250642][T19568] map_create+0x411/0x2050 [ 1031.254892][T19568] __sys_bpf+0x296/0x760 [ 1031.258969][T19568] ? fput_many+0x160/0x1b0 [ 1031.263222][T19568] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1031.268436][T19568] ? debug_smp_processor_id+0x17/0x20 [ 1031.273637][T19568] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1031.279539][T19568] __x64_sys_bpf+0x7c/0x90 [ 1031.283795][T19568] do_syscall_64+0x3d/0xb0 [ 1031.288045][T19568] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1031.293862][T19568] RIP: 0033:0x7ff5daa9fe79 [ 1031.298116][T19568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.317563][T19568] RSP: 002b:00007ff5d971d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1031.325944][T19568] RAX: ffffffffffffffda RBX: 00007ff5dac3bf80 RCX: 00007ff5daa9fe79 [ 1031.333795][T19568] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 1031.341567][T19568] RBP: 00007ff5d971d090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.349379][T19568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.357306][T19568] R13: 0000000000000000 R14: 00007ff5dac3bf80 R15: 00007fff7c5b4a48 [ 1031.365213][T19568] [ 1031.445845][ T4480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.458909][ T4480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.471976][ T4480] usb 5-1: Product: syz [ 1031.479175][ T4480] usb 5-1: Manufacturer: syz [ 1031.486795][ T4480] usb 5-1: SerialNumber: syz [ 1031.487686][T19577] syz.3.4977[19577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.491268][T19577] syz.3.4977[19577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.525773][ T326] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1031.546473][ T4480] usb 5-1: selecting invalid altsetting 1 [ 1031.552119][ T4480] usb 5-1: selecting invalid altsetting 0 [ 1031.562780][ T4480] usb 5-1: selecting invalid altsetting 0 [ 1031.575726][ T4480] cdc_ncm 5-1:1.0: bind() failure [ 1031.582418][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.585040][T19581] loop3: detected capacity change from 0 to 512 [ 1031.594357][ T326] usb 3-1: Product: syz [ 1031.601045][ T326] usb 3-1: Manufacturer: syz [ 1031.609615][ T326] usb 3-1: SerialNumber: syz [ 1031.616416][ T326] usb 3-1: config 0 descriptor?? [ 1031.668069][T19581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1031.676038][T19581] System zones: 0-2, 18-18, 34-35 [ 1031.681943][T19581] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1031.695766][T19581] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 1032.150159][ T4480] usb 5-1: USB disconnect, device number 88 [ 1032.306502][T19591] loop0: detected capacity change from 0 to 40427 [ 1032.337691][ T326] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 1032.367681][T19591] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1032.373853][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1032.373868][ T30] audit: type=1400 audit(2000000022.930:1764): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1032.422946][ T30] audit: type=1400 audit(2000000022.930:1765): avc: denied { search } for pid=138 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.446188][ T30] audit: type=1400 audit(2000000022.930:1766): avc: denied { read } for pid=138 comm="dhcpcd" name="n16" dev="tmpfs" ino=48418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.475450][ T30] audit: type=1400 audit(2000000022.930:1767): avc: denied { open } for pid=138 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=48418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.504451][ T30] audit: type=1400 audit(2000000022.930:1768): avc: denied { getattr } for pid=138 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=48418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.540377][T19591] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1032.558557][T18457] usb 3-1: USB disconnect, device number 100 [ 1032.573890][ T30] audit: type=1400 audit(2000000023.010:1769): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1032.598172][ T30] audit: type=1400 audit(2000000023.010:1770): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.620491][ T30] audit: type=1400 audit(2000000023.010:1771): avc: denied { append } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.645105][ T30] audit: type=1400 audit(2000000023.010:1772): avc: denied { open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.683400][ T30] audit: type=1400 audit(2000000023.010:1773): avc: denied { getattr } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.759263][T19605] loop1: detected capacity change from 0 to 40427 [ 1032.787139][T19619] loop4: detected capacity change from 0 to 512 [ 1033.016899][T19619] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1033.024792][T19619] System zones: 0-2, 18-18, 34-35 [ 1033.030545][T19619] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1033.044478][T19619] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 1033.105992][T19645] loop1: detected capacity change from 0 to 256 [ 1033.267514][T19325] attempt to access beyond end of device [ 1033.267514][T19325] loop0: rw=524288, want=45072, limit=40427 [ 1033.282129][T19325] attempt to access beyond end of device [ 1033.282129][T19325] loop0: rw=0, want=45072, limit=40427 [ 1033.345911][T19325] attempt to access beyond end of device [ 1033.345911][T19325] loop0: rw=2049, want=45104, limit=40427 [ 1033.395694][ T311] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1034.209450][T19661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.216421][T19661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.223632][T19661] device bridge_slave_0 entered promiscuous mode [ 1034.231066][T19661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.238164][T19661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.245547][T19661] device bridge_slave_1 entered promiscuous mode [ 1034.323697][T19661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.330604][T19661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.337711][T19661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.344545][T19661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.352173][T19665] loop1: detected capacity change from 0 to 40427 [ 1034.354329][T19670] loop4: detected capacity change from 0 to 128 [ 1034.375005][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1034.382417][T18457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.390142][T18457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.399598][T19670] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1034.410478][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.411479][T19670] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 1034.434284][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.444232][ T311] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1034.470142][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.496908][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.504807][ T311] usb 4-1: config 0 descriptor?? [ 1034.504936][T18457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.516362][T18457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.524314][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.532398][T18457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.539260][T18457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.546539][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.631172][T19673] loop1: detected capacity change from 0 to 256 [ 1034.655455][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1034.916639][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1034.925065][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1034.937471][T19661] device veth0_vlan entered promiscuous mode [ 1034.945771][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1034.953462][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1034.962532][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1034.970009][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1034.984517][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1034.992561][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1035.001824][T19661] device veth1_macvtap entered promiscuous mode [ 1035.012751][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1035.020566][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1035.057459][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1035.065924][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1035.074930][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1035.087115][ T311] sony 0003:054C:0268.00C5: unknown main item tag 0x0 [ 1035.109417][ T311] sony 0003:054C:0268.00C5: item fetching failed at offset 1/5 [ 1035.114882][T19683] loop0: detected capacity change from 0 to 512 [ 1035.123574][ T311] sony 0003:054C:0268.00C5: parse failed [ 1035.130652][ T311] sony: probe of 0003:054C:0268.00C5 failed with error -22 [ 1035.138387][T16223] device bridge_slave_1 left promiscuous mode [ 1035.145348][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.153347][T16223] device bridge_slave_0 left promiscuous mode [ 1035.159816][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.167272][T19683] EXT4-fs (loop0): error: could not find journal device path: error -2 [ 1035.177015][T16223] device veth1_macvtap left promiscuous mode [ 1035.183174][T16223] device veth0_vlan left promiscuous mode [ 1035.195700][T15386] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1035.229335][T19685] loop1: detected capacity change from 0 to 256 [ 1035.248506][T19683] loop0: detected capacity change from 0 to 2048 [ 1035.256489][T19685] exfat: Bad value for 'uid' [ 1035.269263][T19683] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.5002: casefold flag without casefold feature [ 1035.284712][T19683] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1035.298674][T19683] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1035.306272][T19683] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1035.445692][T15386] usb 3-1: Using ep0 maxpacket: 32 [ 1035.585859][T15386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.596634][T15386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.606158][T15386] usb 3-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 1035.615076][T15386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.622997][ T311] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1035.631676][T15386] usb 3-1: config 0 descriptor?? [ 1035.845841][T19695] loop4: detected capacity change from 0 to 16 [ 1035.896374][T19695] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1036.025758][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1036.075743][T19698] input: syz0 as /devices/virtual/input/input125 [ 1036.118563][T15386] hid-generic 0003:0458:0004.00C6: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.2-1/input0 [ 1036.136043][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 1036.156378][ T311] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1036.175288][ T311] usb 2-1: Manufacturer: syz [ 1036.226342][ T311] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1036.318499][ T311] usb 3-1: USB disconnect, device number 101 [ 1036.390923][T15386] usb 4-1: USB disconnect, device number 100 [ 1036.420518][T19701] loop0: detected capacity change from 0 to 40427 [ 1036.430247][ T2434] usb 2-1: USB disconnect, device number 90 [ 1036.518450][T19701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1036.544815][T19701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1037.059093][T19661] attempt to access beyond end of device [ 1037.059093][T19661] loop0: rw=524288, want=45072, limit=40427 [ 1037.070526][T19661] attempt to access beyond end of device [ 1037.070526][T19661] loop0: rw=0, want=45072, limit=40427 [ 1037.085028][T19661] attempt to access beyond end of device [ 1037.085028][T19661] loop0: rw=2049, want=45104, limit=40427 [ 1037.568436][T19726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.575319][T19726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.582903][T19726] device bridge_slave_0 entered promiscuous mode [ 1037.591686][T19726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.598568][T19726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.605930][T19726] device bridge_slave_1 entered promiscuous mode [ 1037.652766][T19726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.659651][T19726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.667057][T19726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.673912][T19726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.695467][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.702890][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.710486][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.721557][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1037.730034][ T2434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.736889][ T2434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.745610][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.753763][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.760620][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.775243][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1037.785042][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.799247][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1037.812939][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1037.820891][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1037.828717][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1037.863287][T19726] device veth0_vlan entered promiscuous mode [ 1037.863573][T19732] loop2: detected capacity change from 0 to 512 [ 1037.874984][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1037.885409][T19726] device veth1_macvtap entered promiscuous mode [ 1037.894478][ T1095] device bridge_slave_1 left promiscuous mode [ 1037.900578][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.901159][T19732] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 1037.915973][ T1095] device bridge_slave_0 left promiscuous mode [ 1037.922010][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.929851][ T1095] device veth1_macvtap left promiscuous mode [ 1037.935773][ T1095] device veth0_vlan left promiscuous mode [ 1038.000191][T19732] loop2: detected capacity change from 0 to 2048 [ 1038.024827][T19735] loop1: detected capacity change from 0 to 1024 [ 1038.056984][T19735] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1038.059413][T19732] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.5011: casefold flag without casefold feature [ 1038.066279][T19735] SELinux: security_context_str_to_sid(user) failed for (dev ?, type ?) errno=-22 [ 1038.078803][T19732] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1038.099150][T19735] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1038.106251][T19732] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1038.111315][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1038.113749][T19732] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1038.122235][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1038.132855][T19735] EXT4-fs (loop1): Ignoring removed orlov option [ 1038.152642][T19735] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 1038.186348][T19739] loop0: detected capacity change from 0 to 2048 [ 1038.207356][T19739] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1038.311237][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 1038.311253][ T30] audit: type=1400 audit(2000000028.870:1917): avc: denied { create } for pid=19734 comm="syz.1.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1038.518791][ T30] audit: type=1400 audit(2000000028.870:1918): avc: denied { bind } for pid=19734 comm="syz.1.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1038.549074][ T30] audit: type=1400 audit(2000000028.870:1919): avc: denied { connect } for pid=19734 comm="syz.1.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1038.549665][T19747] loop4: detected capacity change from 0 to 512 [ 1038.568768][ T30] audit: type=1400 audit(2000000028.870:1920): avc: denied { read } for pid=19734 comm="syz.1.5012" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1038.597762][ T30] audit: type=1400 audit(2000000028.870:1921): avc: denied { open } for pid=19734 comm="syz.1.5012" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1038.621088][ T30] audit: type=1400 audit(2000000028.870:1922): avc: denied { ioctl } for pid=19734 comm="syz.1.5012" path="/dev/ppp" dev="devtmpfs" ino=134 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1038.646374][ T30] audit: type=1400 audit(2000000028.960:1923): avc: denied { read write } for pid=19738 comm="syz.0.5009" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1038.669142][ T30] audit: type=1400 audit(2000000028.960:1924): avc: denied { open } for pid=19738 comm="syz.0.5009" path="/0/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1038.692339][ T30] audit: type=1400 audit(2000000028.970:1925): avc: denied { mounton } for pid=19738 comm="syz.0.5009" path="/0/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1038.736719][T19747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1038.744588][T19747] System zones: 0-2, 18-18, 34-35 [ 1038.750237][T19747] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1038.763933][T19747] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 1038.821572][ T4480] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1038.989645][T19755] fuse: Bad value for 'fd' [ 1039.186672][T19756] loop2: detected capacity change from 0 to 16 [ 1039.250081][T19758] loop0: detected capacity change from 0 to 256 [ 1039.276253][ T4480] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1039.287243][T19758] exfat: Deprecated parameter 'utf8' [ 1039.292560][T19758] exfat: Deprecated parameter 'namecase' [ 1039.298220][ T4480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.305734][T19758] exfat: Deprecated parameter 'utf8' [ 1039.309083][ T4480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.324235][ T4480] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1039.337509][ T4480] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1039.346442][ T4480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.355725][ T4480] usb 2-1: config 0 descriptor?? [ 1039.403723][T19756] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1039.407085][T19758] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1039.575815][ T30] audit: type=1400 audit(2000000030.140:1926): avc: denied { write } for pid=19757 comm="syz.0.5015" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.745703][T15386] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1039.837934][ T4480] kye 0003:0458:5015.00C7: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 1039.848690][ T4480] kye 0003:0458:5015.00C7: tablet-enabling feature report not found [ 1039.856451][ T4480] kye 0003:0458:5015.00C7: tablet enabling failed [ 1039.875725][ T325] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1040.038376][ T4480] usb 2-1: USB disconnect, device number 91 [ 1040.135725][ T325] usb 4-1: Using ep0 maxpacket: 32 [ 1040.145762][T15386] usb 5-1: Using ep0 maxpacket: 8 [ 1040.186433][T19772] FAULT_INJECTION: forcing a failure. [ 1040.186433][T19772] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.199122][T19772] CPU: 0 PID: 19772 Comm: syz.0.5019 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1040.210310][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1040.220291][T19772] Call Trace: [ 1040.223413][T19772] [ 1040.226191][T19772] dump_stack_lvl+0x151/0x1c0 [ 1040.230704][T19772] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1040.236176][T19772] dump_stack+0x15/0x20 [ 1040.240165][T19772] should_fail+0x3c6/0x510 [ 1040.244551][T19772] __should_failslab+0xa4/0xe0 [ 1040.249109][T19772] ? avc_alloc_node+0x8f/0x500 [ 1040.253705][T19772] should_failslab+0x9/0x20 [ 1040.255772][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.258046][T19772] slab_pre_alloc_hook+0x37/0xd0 [ 1040.269016][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.273669][T19772] ? avc_alloc_node+0x8f/0x500 [ 1040.273695][T19772] kmem_cache_alloc+0x44/0x200 [ 1040.283326][ T325] usb 4-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 1040.287817][T19772] avc_alloc_node+0x8f/0x500 [ 1040.287845][T19772] ? avc_alloc_node+0x8f/0x500 [ 1040.287860][T19772] ? avc_xperms_free+0x280/0x280 [ 1040.287876][T19772] ? __kasan_check_write+0x14/0x20 [ 1040.287897][T19772] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1040.287916][T19772] avc_update_node+0x31/0xd50 [ 1040.292468][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.301359][T19772] ? avc_xperms_populate+0x4c7/0x590 [ 1040.301389][T19772] avc_denied+0x13f/0x1b0 [ 1040.301404][T19772] avc_has_perm_noaudit+0x387/0x430 [ 1040.307001][ T325] usb 4-1: config 0 descriptor?? [ 1040.310819][T19772] ? avc_denied+0x1b0/0x1b0 [ 1040.310845][T19772] ? walk_component+0x359/0x610 [ 1040.366494][T19772] selinux_inode_permission+0x399/0x660 [ 1040.371871][T19772] ? selinux_inode_follow_link+0x3b0/0x3b0 [ 1040.377512][T19772] ? __kasan_check_write+0x14/0x20 [ 1040.382457][T19772] ? _raw_spin_lock+0xa4/0x1b0 [ 1040.387119][T19772] ? _raw_spin_trylock_bh+0x190/0x190 [ 1040.392265][T19772] security_inode_permission+0xa0/0xf0 [ 1040.397561][T19772] inode_permission+0xf8/0x460 [ 1040.402160][T19772] may_open+0x2d7/0x440 [ 1040.406152][T19772] path_openat+0x264e/0x2f40 [ 1040.410587][T19772] ? kmem_cache_free+0x116/0x2e0 [ 1040.415614][T19772] ? __kasan_slab_alloc+0xb1/0xe0 [ 1040.420474][T19772] ? kmem_cache_alloc+0xf5/0x200 [ 1040.425254][T19772] ? getname_flags+0xba/0x520 [ 1040.430241][T19772] ? __x64_sys_openat+0x243/0x290 [ 1040.435057][T19772] ? do_filp_open+0x460/0x460 [ 1040.439572][T19772] do_filp_open+0x21c/0x460 [ 1040.443909][T19772] ? vfs_tmpfile+0x2c0/0x2c0 [ 1040.448338][T19772] do_sys_openat2+0x13f/0x830 [ 1040.452850][T19772] ? __kasan_check_write+0x14/0x20 [ 1040.457795][T19772] ? do_sys_open+0x220/0x220 [ 1040.462219][T19772] ? debug_smp_processor_id+0x17/0x20 [ 1040.467430][T19772] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1040.473331][T19772] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1040.478801][T19772] ? irqentry_exit+0x12/0x40 [ 1040.483223][T19772] ? exc_page_fault+0x47a/0x830 [ 1040.487914][T19772] __x64_sys_openat+0x243/0x290 [ 1040.492600][T19772] ? __ia32_sys_open+0x270/0x270 [ 1040.497374][T19772] do_syscall_64+0x3d/0xb0 [ 1040.501629][T19772] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1040.507357][T19772] RIP: 0033:0x7fe31ec53810 [ 1040.511608][T19772] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1040.531049][T19772] RSP: 002b:00007fe31d8b0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1040.539292][T19772] RAX: ffffffffffffffda RBX: 000000000088a880 RCX: 00007fe31ec53810 [ 1040.547193][T19772] RDX: 000000000088a880 RSI: 00007fe31d8b0c10 RDI: 00000000ffffff9c [ 1040.555002][T19772] RBP: 00007fe31d8b0c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 1040.562818][T19772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1040.570628][T19772] R13: 0000000000000000 R14: 00007fe31edf1058 R15: 00007fffcdd450f8 [ 1040.578444][T19772] [ 1040.685771][T15386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1040.696573][T15386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.707273][T15386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.717014][T15386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1040.840498][ T325] hid-generic 0003:0458:0004.00C8: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.3-1/input0 [ 1040.923532][T15386] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1040.932689][T15386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.955955][T15386] usb 5-1: config 0 descriptor?? [ 1041.007467][T19780] loop0: detected capacity change from 0 to 512 [ 1041.020773][ T2434] usb 4-1: USB disconnect, device number 101 [ 1041.076974][T19780] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1041.085059][T19780] System zones: 0-2, 18-18, 34-35 [ 1041.094320][T19780] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1041.108081][T19780] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 1041.451316][T15386] hid-thrustmaster 0003:044F:B65D.00C9: item fetching failed at offset 3/7 [ 1041.460758][T15386] hid-thrustmaster 0003:044F:B65D.00C9: parse failed with error -22 [ 1041.470982][T15386] hid-thrustmaster: probe of 0003:044F:B65D.00C9 failed with error -22 [ 1041.618137][T19792] loop3: detected capacity change from 0 to 512 [ 1041.647212][T18457] usb 5-1: USB disconnect, device number 89 [ 1041.676158][T19792] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 1041.745323][T19792] loop3: detected capacity change from 0 to 2048 [ 1041.765779][ T325] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1041.799108][T19794] loop1: detected capacity change from 0 to 256 [ 1041.827095][T19792] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.5024: casefold flag without casefold feature [ 1041.840006][T19794] exfat: Deprecated parameter 'utf8' [ 1041.845159][T19794] exfat: Deprecated parameter 'namecase' [ 1041.853605][T19794] exfat: Deprecated parameter 'utf8' [ 1041.859632][T19792] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1041.872894][T19792] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1041.880586][T19792] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1041.905325][T19794] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1042.003938][T19797] loop0: detected capacity change from 0 to 512 [ 1042.015731][ T325] usb 3-1: Using ep0 maxpacket: 16 [ 1042.049639][T19797] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1042.058106][T19797] System zones: 0-2, 18-18, 34-35 [ 1042.201847][T19797] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1042.215876][T19797] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 1042.270791][ T325] usb 3-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1042.281609][ T325] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1042.294868][ T325] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1042.303948][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.313051][ T325] usb 3-1: config 0 descriptor?? [ 1042.484733][T19809] fuse: Bad value for 'fd' [ 1042.576541][ T325] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1043.070655][T19790] UDC core: couldn't find an available UDC or it's busy: -16 [ 1043.080704][T19790] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1043.089419][T19810] loop4: detected capacity change from 0 to 16 [ 1043.133689][T19818] loop0: detected capacity change from 0 to 256 [ 1043.296183][T19810] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1043.317255][T19818] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1043.340235][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1043.340250][ T30] audit: type=1400 audit(2000000033.900:1980): avc: denied { mount } for pid=19817 comm="syz.0.5031" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1043.419172][ T30] audit: type=1400 audit(2000000033.980:1981): avc: denied { create } for pid=19806 comm="syz.4.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1043.438954][ T30] audit: type=1400 audit(2000000033.980:1982): avc: denied { ioctl } for pid=19806 comm="syz.4.5028" path="socket:[110484]" dev="sockfs" ino=110484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1043.710705][ T30] audit: type=1400 audit(2000000034.080:1983): avc: denied { write } for pid=19817 comm="syz.0.5031" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1043.751859][ T30] audit: type=1400 audit(2000000034.080:1984): avc: denied { add_name } for pid=19817 comm="syz.0.5031" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1043.772869][ T30] audit: type=1400 audit(2000000034.080:1985): avc: denied { create } for pid=19817 comm="syz.0.5031" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1043.794803][ T30] audit: type=1400 audit(2000000034.090:1986): avc: denied { associate } for pid=19817 comm="syz.0.5031" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1043.824332][ T30] audit: type=1400 audit(2000000034.090:1987): avc: denied { read write open } for pid=19817 comm="syz.0.5031" path="/5/file1/bus" dev="loop0" ino=1049415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1043.830135][T19829] loop3: detected capacity change from 0 to 512 [ 1043.855972][ T30] audit: type=1400 audit(2000000034.300:1988): avc: denied { create } for pid=19826 comm="syz.3.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1043.876966][ T30] audit: type=1400 audit(2000000034.300:1989): avc: denied { ioctl } for pid=19826 comm="syz.3.5032" path="socket:[110493]" dev="sockfs" ino=110493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1044.031057][T19829] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1044.044229][T19829] System zones: 0-2, 18-18, 34-35 [ 1044.058269][T19829] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1044.078690][T19829] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 1044.418722][T19834] loop1: detected capacity change from 0 to 40427 [ 1044.507709][T19840] loop0: detected capacity change from 0 to 40427 [ 1044.515209][ T325] usb 3-1: USB disconnect, device number 102 [ 1044.515595][T19834] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1044.551906][T19848] loop2: detected capacity change from 0 to 128 [ 1044.556217][T19834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1044.690730][T19848] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1045.106022][T19848] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1045.197014][T19854] loop0: detected capacity change from 0 to 256 [ 1045.371957][T19268] attempt to access beyond end of device [ 1045.371957][T19268] loop1: rw=524288, want=45072, limit=40427 [ 1045.403937][T19268] attempt to access beyond end of device [ 1045.403937][T19268] loop1: rw=0, want=45072, limit=40427 [ 1045.454871][T19268] attempt to access beyond end of device [ 1045.454871][T19268] loop1: rw=2049, want=45104, limit=40427 [ 1045.575297][T19860] loop0: detected capacity change from 0 to 512 [ 1045.606693][T19860] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1045.614620][T19860] System zones: 0-2, 18-18, 34-35 [ 1045.620380][T19860] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1045.634075][T19860] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 1045.665720][T15386] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1045.715685][T18457] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1045.739879][T19865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.746778][T19865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.798622][T19865] device bridge_slave_0 entered promiscuous mode [ 1045.833145][T19865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.842336][T19865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.852689][T19865] device bridge_slave_1 entered promiscuous mode [ 1045.955778][T18457] usb 3-1: Using ep0 maxpacket: 16 [ 1045.957199][T19865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.967603][T19865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.974693][T19865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.981516][T19865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.991259][T19873] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1046.006121][ T311] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1046.026606][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1046.039884][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.047475][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.056339][T15386] usb 5-1: Using ep0 maxpacket: 8 [ 1046.064275][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1046.072427][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.079271][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.086443][T18457] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1046.094222][T18457] usb 3-1: config 0 has no interface number 0 [ 1046.100542][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1046.108360][T18457] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1046.119475][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.126307][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.133444][T18457] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1046.149759][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1046.158963][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1046.172778][ T2438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1046.180800][T15386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1046.191825][T15386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.195986][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1046.203042][T15386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.210953][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1046.220296][T15386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1046.227275][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1046.245892][T15386] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1046.248018][T19865] device veth0_vlan entered promiscuous mode [ 1046.261457][T15386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.269329][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 1046.275756][T18457] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1046.279636][T15386] usb 5-1: config 0 descriptor?? [ 1046.284754][T18457] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1046.301704][T19865] device veth1_macvtap entered promiscuous mode [ 1046.308016][T18457] usb 3-1: Product: syz [ 1046.311994][T18457] usb 3-1: SerialNumber: syz [ 1046.315781][ T2434] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1046.318346][T18457] usb 3-1: config 0 descriptor?? [ 1046.331825][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1046.340018][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1046.347975][T19848] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1046.355040][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1046.385743][ T311] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1046.393997][ T311] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.404416][ T311] usb 4-1: config 135 has no interface number 0 [ 1046.411693][ T311] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.425874][ T336] device bridge_slave_1 left promiscuous mode [ 1046.432023][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.439776][ T336] device bridge_slave_0 left promiscuous mode [ 1046.445985][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.454930][ T336] device veth1_macvtap left promiscuous mode [ 1046.461040][ T336] device veth0_vlan left promiscuous mode [ 1046.648981][T18457] usb 3-1: invalid MIDI in EP 0 [ 1046.655196][T18457] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 1046.668690][T18457] usb 3-1: USB disconnect, device number 103 [ 1046.725790][ T2434] usb 1-1: Using ep0 maxpacket: 16 [ 1046.735764][ T311] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1046.744662][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.752551][ T311] usb 4-1: Product: syz [ 1046.757508][T15386] hid-thrustmaster 0003:044F:B65D.00CA: item fetching failed at offset 3/7 [ 1046.766259][ T311] usb 4-1: Manufacturer: syz [ 1046.770959][T15386] hid-thrustmaster 0003:044F:B65D.00CA: parse failed with error -22 [ 1046.778780][ T311] usb 4-1: SerialNumber: syz [ 1046.783453][T15386] hid-thrustmaster: probe of 0003:044F:B65D.00CA failed with error -22 [ 1046.826241][ T311] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 1046.832416][ T311] usb 4-1: No valid video chain found. [ 1046.845754][ T2434] usb 1-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1046.855889][ T2434] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1046.868527][ T2434] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1046.877348][ T2434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.886086][ T2434] usb 1-1: config 0 descriptor?? [ 1046.926401][ T2434] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1046.961782][ T2434] usb 5-1: USB disconnect, device number 90 [ 1047.160790][T19886] FAULT_INJECTION: forcing a failure. [ 1047.160790][T19886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.173960][T19886] CPU: 1 PID: 19886 Comm: syz.3.5040 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1047.185147][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1047.195035][T19886] Call Trace: [ 1047.198162][T19886] [ 1047.200940][T19886] dump_stack_lvl+0x151/0x1c0 [ 1047.205450][T19886] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1047.210917][T19886] ? __schedule+0xcd4/0x1590 [ 1047.215347][T19886] dump_stack+0x15/0x20 [ 1047.219340][T19886] should_fail+0x3c6/0x510 [ 1047.223590][T19886] should_fail_usercopy+0x1a/0x20 [ 1047.228452][T19886] _copy_from_user+0x20/0xd0 [ 1047.232878][T19886] __sys_bpf+0x1e9/0x760 [ 1047.236326][T19876] UDC core: couldn't find an available UDC or it's busy: -16 [ 1047.236958][T19886] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1047.244164][T19876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1047.249461][T19886] __x64_sys_bpf+0x7c/0x90 [ 1047.261002][T19886] do_syscall_64+0x3d/0xb0 [ 1047.265252][T19886] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1047.270977][T19886] RIP: 0033:0x7fafec25ae79 [ 1047.275230][T19886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.294760][T19886] RSP: 002b:00007fafeae96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1047.303005][T19886] RAX: ffffffffffffffda RBX: 00007fafec3f7130 RCX: 00007fafec25ae79 [ 1047.310815][T19886] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 1047.318632][T19886] RBP: 00007fafeae96090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.326442][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.334251][T19886] R13: 0000000000000000 R14: 00007fafec3f7130 R15: 00007fff5b04a928 [ 1047.342066][T19886] [ 1047.740910][T19899] loop4: detected capacity change from 0 to 256 [ 1047.795169][T19899] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1048.290819][T19903] FAULT_INJECTION: forcing a failure. [ 1048.290819][T19903] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.331955][T19903] CPU: 0 PID: 19903 Comm: syz.1.5050 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1048.343150][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1048.353041][T19903] Call Trace: [ 1048.356162][T19903] [ 1048.358942][T19903] dump_stack_lvl+0x151/0x1c0 [ 1048.363454][T19903] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1048.368926][T19903] dump_stack+0x15/0x20 [ 1048.372914][T19903] should_fail+0x3c6/0x510 [ 1048.377168][T19903] __should_failslab+0xa4/0xe0 [ 1048.381857][T19903] ? __nf_conntrack_alloc+0xf1/0x3d0 [ 1048.386976][T19903] should_failslab+0x9/0x20 [ 1048.391316][T19903] slab_pre_alloc_hook+0x37/0xd0 [ 1048.396114][T19903] ? __nf_conntrack_alloc+0xf1/0x3d0 [ 1048.401207][T19903] kmem_cache_alloc+0x44/0x200 [ 1048.405808][T19903] __nf_conntrack_alloc+0xf1/0x3d0 [ 1048.410756][T19903] nf_conntrack_alloc+0x30/0x40 [ 1048.415440][T19903] ctnetlink_create_conntrack+0xcd/0xf50 [ 1048.420908][T19903] ? nf_conntrack_find_get+0x330/0x330 [ 1048.426205][T19903] ? __siphash_unaligned+0x27b/0x3c0 [ 1048.431324][T19903] ? ctnetlink_get_ct_unconfirmed+0x1c0/0x1c0 [ 1048.437227][T19903] ? nf_conntrack_find_get+0x1ad/0x330 [ 1048.442521][T19903] ? nf_ct_delete_from_lists+0x4d0/0x4d0 [ 1048.447990][T19903] ? __nla_validate_parse+0x1e6b/0x27f0 [ 1048.453370][T19903] ctnetlink_new_conntrack+0x5f9/0x13a0 [ 1048.458751][T19903] ? ctnetlink_exp_stat_cpu_dump+0xa70/0xa70 [ 1048.464567][T19903] ? __nla_validate+0x50/0x50 [ 1048.469087][T19903] ? __kasan_check_write+0x14/0x20 [ 1048.474028][T19903] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1048.480452][T19903] nfnetlink_rcv_msg+0x7bb/0x9c0 [ 1048.485231][T19903] ? nfnetlink_bind+0x100/0x100 [ 1048.489915][T19903] ? selinux_capable+0x2f1/0x430 [ 1048.494686][T19903] netlink_rcv_skb+0x1cf/0x410 [ 1048.499285][T19903] ? nfnetlink_bind+0x100/0x100 [ 1048.503973][T19903] ? netlink_ack+0xb10/0xb10 [ 1048.508400][T19903] ? ns_capable+0x89/0xe0 [ 1048.512566][T19903] ? netlink_net_capable+0x125/0x160 [ 1048.517686][T19903] nfnetlink_rcv+0x287/0x24d0 [ 1048.522200][T19903] ? is_bpf_text_address+0x172/0x190 [ 1048.527320][T19903] ? __kernel_text_address+0x9b/0x110 [ 1048.532527][T19903] ? unwind_get_return_address+0x4d/0x90 [ 1048.537993][T19903] ? arch_stack_walk+0xf3/0x140 [ 1048.542684][T19903] ? stack_trace_save+0x113/0x1c0 [ 1048.547542][T19903] ? nfnetlink_net_exit_batch+0xf0/0xf0 [ 1048.552928][T19903] ? __stack_depot_save+0x34/0x470 [ 1048.557873][T19903] ? ____kasan_kmalloc+0xed/0x110 [ 1048.562730][T19903] ? ____kasan_kmalloc+0xdb/0x110 [ 1048.567592][T19903] ? __kasan_kmalloc+0x9/0x10 [ 1048.572105][T19903] ? __kmalloc_track_caller+0x139/0x260 [ 1048.577487][T19903] ? __alloc_skb+0x10c/0x550 [ 1048.581911][T19903] ? netlink_sendmsg+0x797/0xd20 [ 1048.586685][T19903] ? ____sys_sendmsg+0x59e/0x8f0 [ 1048.591459][T19903] ? ___sys_sendmsg+0x252/0x2e0 [ 1048.596148][T19903] ? __se_sys_sendmsg+0x19a/0x260 [ 1048.601014][T19903] ? __x64_sys_sendmsg+0x7b/0x90 [ 1048.605781][T19903] ? do_syscall_64+0x3d/0xb0 [ 1048.610208][T19903] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1048.616110][T19903] ? selinux_nlmsg_lookup+0x1ec/0x570 [ 1048.621318][T19903] ? selinux_netlink_send+0x793/0x870 [ 1048.626614][T19903] ? __netlink_lookup+0x37b/0x3a0 [ 1048.631472][T19903] netlink_unicast+0x8df/0xac0 [ 1048.636076][T19903] ? netlink_detachskb+0x90/0x90 [ 1048.640845][T19903] ? security_netlink_send+0x7b/0xa0 [ 1048.645968][T19903] netlink_sendmsg+0xa0a/0xd20 [ 1048.650656][T19903] ? netlink_getsockopt+0x560/0x560 [ 1048.655685][T19903] ? kasan_set_track+0x5d/0x70 [ 1048.660288][T19903] ? security_socket_sendmsg+0x82/0xb0 [ 1048.665582][T19903] ? netlink_getsockopt+0x560/0x560 [ 1048.670618][T19903] ____sys_sendmsg+0x59e/0x8f0 [ 1048.675219][T19903] ? __sys_sendmsg_sock+0x40/0x40 [ 1048.680079][T19903] ? import_iovec+0xe5/0x120 [ 1048.684504][T19903] ___sys_sendmsg+0x252/0x2e0 [ 1048.689023][T19903] ? __sys_sendmsg+0x260/0x260 [ 1048.693626][T19903] ? __fdget+0x1bc/0x240 [ 1048.697697][T19903] __se_sys_sendmsg+0x19a/0x260 [ 1048.702386][T19903] ? __x64_sys_sendmsg+0x90/0x90 [ 1048.707175][T19903] ? ksys_write+0x260/0x2c0 [ 1048.711501][T19903] ? debug_smp_processor_id+0x17/0x20 [ 1048.716704][T19903] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1048.722608][T19903] __x64_sys_sendmsg+0x7b/0x90 [ 1048.727208][T19903] do_syscall_64+0x3d/0xb0 [ 1048.731469][T19903] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1048.737191][T19903] RIP: 0033:0x7f18bf3c6e79 [ 1048.741442][T19903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.760883][T19903] RSP: 002b:00007f18be044038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.769216][T19903] RAX: ffffffffffffffda RBX: 00007f18bf562f80 RCX: 00007f18bf3c6e79 [ 1048.777028][T19903] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1048.784837][T19903] RBP: 00007f18be044090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.792648][T19903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.800460][T19903] R13: 0000000000000000 R14: 00007f18bf562f80 R15: 00007fffa59ee938 [ 1048.808275][T19903] [ 1048.919026][T18457] usb 4-1: USB disconnect, device number 102 [ 1048.933806][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1048.933821][ T30] audit: type=1326 audit(2000000039.490:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1048.967270][ T30] audit: type=1326 audit(2000000039.530:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.006328][T19916] loop1: detected capacity change from 0 to 128 [ 1049.051209][ T311] usb 1-1: USB disconnect, device number 109 [ 1049.068250][T19916] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1049.068917][T19910] loop3: detected capacity change from 0 to 512 [ 1049.083709][T19916] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1049.191921][ T30] audit: type=1326 audit(2000000039.530:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.372469][ T30] audit: type=1326 audit(2000000039.530:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.408469][T19910] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1049.423218][T19910] System zones: 0-2, 18-18, 34-35 [ 1049.425713][ T30] audit: type=1326 audit(2000000039.530:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.443449][T19910] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1049.451709][ T30] audit: type=1326 audit(2000000039.530:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.471355][T19910] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 1049.491544][ T30] audit: type=1326 audit(2000000039.530:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.524877][ T30] audit: type=1326 audit(2000000039.530:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.548613][ T30] audit: type=1326 audit(2000000039.550:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.581084][ T30] audit: type=1326 audit(2000000039.550:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19911 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18bf3c6e79 code=0x7ffc0000 [ 1049.923511][T19931] fuse: Bad value for 'fd' [ 1049.964090][T18457] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1050.525690][T18457] usb 2-1: Using ep0 maxpacket: 16 [ 1050.685729][T18457] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1050.701205][T18457] usb 2-1: config 0 has no interface number 0 [ 1050.732569][T18457] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1050.755208][ T2434] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1050.764287][T18457] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1050.777908][T19945] loop2: detected capacity change from 0 to 40427 [ 1050.858679][T19945] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1050.882858][T19945] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1050.930699][T18457] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1050.945819][T18457] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1050.953664][T18457] usb 2-1: Product: syz [ 1050.957908][T18457] usb 2-1: SerialNumber: syz [ 1050.966489][T18457] usb 2-1: config 0 descriptor?? [ 1050.981593][T19953] loop4: detected capacity change from 0 to 128 [ 1050.987828][T19916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1051.207004][ T2434] usb 1-1: Using ep0 maxpacket: 8 [ 1051.216254][T19953] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1051.230406][T19953] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1051.296180][T18457] usb 2-1: invalid MIDI in EP 0 [ 1051.329808][T18457] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 1051.330186][T19202] attempt to access beyond end of device [ 1051.330186][T19202] loop2: rw=524288, want=45072, limit=40427 [ 1051.337327][T18457] usb 2-1: USB disconnect, device number 92 [ 1051.348604][ T2434] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1051.364928][T19202] attempt to access beyond end of device [ 1051.364928][T19202] loop2: rw=0, want=45072, limit=40427 [ 1051.369857][ T2434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.386422][ T2434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.396145][ T2434] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1051.400587][T19202] attempt to access beyond end of device [ 1051.400587][T19202] loop2: rw=2049, want=45104, limit=40427 [ 1051.409452][ T2434] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1051.429180][ T2434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.438588][ T2434] usb 1-1: config 0 descriptor?? [ 1051.535694][ T26] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1051.585705][T15386] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1051.618227][T19962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.625076][T19962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.632710][T19962] device bridge_slave_0 entered promiscuous mode [ 1051.641930][T19962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.648933][T19962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.656193][T19962] device bridge_slave_1 entered promiscuous mode [ 1051.697914][T19962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.704783][T19962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.711914][T19962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.718769][T19962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.740133][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.747592][T18457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.754644][T18457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.763638][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.771824][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.778676][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.787546][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.795885][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 1051.800982][T18457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.807838][T18457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.826212][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.834007][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.845766][T15386] usb 4-1: Using ep0 maxpacket: 8 [ 1051.848632][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.871378][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.880039][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.887825][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.896458][T19962] device veth0_vlan entered promiscuous mode [ 1051.906776][ T2434] hid-thrustmaster 0003:044F:B65D.00CB: item fetching failed at offset 3/7 [ 1051.921414][T18457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.921597][ T2434] hid-thrustmaster 0003:044F:B65D.00CB: parse failed with error -22 [ 1051.931634][T19962] device veth1_macvtap entered promiscuous mode [ 1051.937988][ T2434] hid-thrustmaster: probe of 0003:044F:B65D.00CB failed with error -22 [ 1051.975724][T15386] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1051.983559][ T26] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1051.991966][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.992102][ T26] usb 5-1: config 0 has no interface number 0 [ 1052.002613][T15386] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.015890][ T26] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1052.015923][ T26] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1052.038931][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1052.048307][T15386] usb 4-1: config 135 has no interface number 0 [ 1052.054387][T15386] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.112698][ T20] usb 1-1: USB disconnect, device number 110 [ 1052.228135][T16223] device bridge_slave_1 left promiscuous mode [ 1052.240833][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.252908][T16223] device bridge_slave_0 left promiscuous mode [ 1052.259813][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.267481][ T26] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1052.282956][T16223] device veth1_macvtap left promiscuous mode [ 1052.289500][ T26] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1052.295174][T16223] device veth0_vlan left promiscuous mode [ 1052.297619][ T26] usb 5-1: Product: syz [ 1052.306926][ T26] usb 5-1: SerialNumber: syz [ 1052.314997][ T26] usb 5-1: config 0 descriptor?? [ 1052.345805][T19953] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1052.365804][T15386] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1052.374974][T15386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.382993][T15386] usb 4-1: Product: syz [ 1052.387126][T15386] usb 4-1: Manufacturer: syz [ 1052.391558][T15386] usb 4-1: SerialNumber: syz [ 1052.436047][ T2434] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1052.606406][ T26] usb 5-1: invalid MIDI in EP 0 [ 1052.611280][ T26] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 1052.619799][ T26] usb 5-1: USB disconnect, device number 91 [ 1052.675715][ T2434] usb 3-1: Using ep0 maxpacket: 8 [ 1052.808142][ T2434] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1052.998882][T19979] loop0: detected capacity change from 0 to 16 [ 1053.004788][ T2434] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.029702][T19979] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1053.031487][ T2434] usb 3-1: config 135 has no interface number 0 [ 1053.043961][ T2434] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.215869][ T2434] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1053.229052][ T2434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.244459][ T2434] usb 3-1: Product: syz [ 1053.256750][ T2434] usb 3-1: Manufacturer: syz [ 1053.265675][ T26] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1053.274134][ T2434] usb 3-1: SerialNumber: syz [ 1053.292083][T19987] loop4: detected capacity change from 0 to 512 [ 1053.326152][T19987] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1053.326286][ T2434] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 1053.334228][T19987] System zones: 0-2, 18-18, 34-35 [ 1053.346911][ T2434] usb 3-1: No valid video chain found. [ 1053.352320][T19987] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1053.365956][T19987] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 1053.564803][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 1053.644880][T18457] usb 3-1: USB disconnect, device number 104 [ 1053.765743][ T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1053.777070][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.790021][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.800925][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1053.815354][ T26] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1053.854365][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.886534][ T26] usb 2-1: config 0 descriptor?? [ 1054.165724][T10090] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1054.218686][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 1054.218702][ T30] audit: type=1326 audit(2000000044.780:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.248231][ T30] audit: type=1326 audit(2000000044.780:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.272458][ T30] audit: type=1326 audit(2000000044.780:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.296933][ T30] audit: type=1326 audit(2000000044.780:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.355572][ T30] audit: type=1326 audit(2000000044.780:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.366394][T15386] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 1054.381525][ T26] hid-thrustmaster 0003:044F:B65D.00CC: item fetching failed at offset 3/7 [ 1054.396911][ T26] hid-thrustmaster 0003:044F:B65D.00CC: parse failed with error -22 [ 1054.403807][T15386] usb 4-1: No valid video chain found. [ 1054.404734][ T26] hid-thrustmaster: probe of 0003:044F:B65D.00CC failed with error -22 [ 1054.418513][ T30] audit: type=1326 audit(2000000044.780:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.424775][T15386] usb 4-1: USB disconnect, device number 103 [ 1054.507560][ T30] audit: type=1326 audit(2000000044.780:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.513632][T20003] loop2: detected capacity change from 0 to 40427 [ 1054.531375][ T30] audit: type=1326 audit(2000000044.780:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.595305][ T30] audit: type=1326 audit(2000000044.780:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.655199][T20008] loop3: detected capacity change from 0 to 512 [ 1054.676655][ T30] audit: type=1326 audit(2000000044.780:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.2.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e7796e79 code=0x7ffc0000 [ 1054.706371][T20008] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1054.712992][T20008] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1054.720324][T20008] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1054.732990][ T311] usb 2-1: USB disconnect, device number 93 [ 1054.748850][T20008] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.5079: invalid block [ 1054.760153][T20008] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5079: couldn't read orphan inode 11 (err -117) [ 1054.772153][T20008] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1054.823814][T20003] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1054.831609][T20003] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1054.841141][T20003] F2FS-fs (loop2): invalid crc value [ 1054.848379][T20003] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1054.860072][T20010] loop0: detected capacity change from 0 to 40427 [ 1054.876142][T20003] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1054.883048][T20003] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1054.915717][T10090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.925616][T10090] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1055.004841][T10090] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1055.023795][T10090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.032435][T10090] usb 5-1: config 0 descriptor?? [ 1055.127931][T20018] loop0: detected capacity change from 0 to 256 [ 1055.412583][T20025] loop3: detected capacity change from 0 to 512 [ 1055.703337][T20025] EXT4-fs (loop3): Unrecognized mount option "obj_type=]-)-" or missing value [ 1056.155952][T20038] loop0: detected capacity change from 0 to 16 [ 1056.188254][T20038] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1056.348466][T20041] loop1: detected capacity change from 0 to 256 [ 1056.365218][T20041] exfat: Deprecated parameter 'utf8' [ 1056.375813][T20041] exfat: Deprecated parameter 'namecase' [ 1056.387693][T20041] exfat: Deprecated parameter 'utf8' [ 1056.413623][T20041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1056.797763][T10090] usb 5-1: USB disconnect, device number 92 [ 1057.912507][T20090] FAULT_INJECTION: forcing a failure. [ 1057.912507][T20090] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.925010][T20090] CPU: 1 PID: 20090 Comm: syz.2.5101 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1057.936120][T20090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1057.946018][T20090] Call Trace: [ 1057.949139][T20090] [ 1057.951916][T20090] dump_stack_lvl+0x151/0x1c0 [ 1057.956433][T20090] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1057.961895][T20090] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 1057.967629][T20090] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 1057.974137][T20090] dump_stack+0x15/0x20 [ 1057.978128][T20090] should_fail+0x3c6/0x510 [ 1057.982384][T20090] __should_failslab+0xa4/0xe0 [ 1057.986982][T20090] should_failslab+0x9/0x20 [ 1057.991328][T20090] slab_pre_alloc_hook+0x37/0xd0 [ 1057.996092][T20090] kmem_cache_alloc_trace+0x48/0x210 [ 1058.001213][T20090] ? percpu_ref_init+0xc8/0x340 [ 1058.005900][T20090] ? free_ioctx_users+0x2b0/0x2b0 [ 1058.010846][T20090] percpu_ref_init+0xc8/0x340 [ 1058.015359][T20090] ? free_ioctx_users+0x2b0/0x2b0 [ 1058.020220][T20090] ioctx_alloc+0x271/0x710 [ 1058.024474][T20090] __se_sys_io_setup+0x72/0x230 [ 1058.029165][T20090] __x64_sys_io_setup+0x5b/0x70 [ 1058.033851][T20090] do_syscall_64+0x3d/0xb0 [ 1058.038101][T20090] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1058.043830][T20090] RIP: 0033:0x7f43e7796e79 [ 1058.048084][T20090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.067617][T20090] RSP: 002b:00007f43e63d2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1058.075854][T20090] RAX: ffffffffffffffda RBX: 00007f43e7933130 RCX: 00007f43e7796e79 [ 1058.083669][T20090] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 1058.091565][T20090] RBP: 00007f43e63d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.099376][T20090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.107189][T20090] R13: 0000000000000000 R14: 00007f43e7933130 R15: 00007fff59d9ac08 [ 1058.115002][T20090] [ 1058.238530][T20101] loop4: detected capacity change from 0 to 256 [ 1058.299347][T20101] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1058.345604][T20103] loop1: detected capacity change from 0 to 16 [ 1058.381363][T20107] loop0: detected capacity change from 0 to 512 [ 1058.399313][T20103] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1058.422468][T20109] loop3: detected capacity change from 0 to 1024 [ 1058.443779][T20107] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1058.456501][T20107] System zones: 0-2, 18-18, 34-35 [ 1058.618149][T20109] EXT4-fs (loop3): Mount option "nojournal_checksum" incompatible with ext2 [ 1058.653372][T20107] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1058.670301][T20107] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 1058.780607][T20121] loop4: detected capacity change from 0 to 256 [ 1059.253819][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1059.253836][ T30] audit: type=1400 audit(2000000049.470:2321): avc: denied { read write } for pid=20106 comm="syz.0.5108" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1059.288016][T20121] exfat: Deprecated parameter 'utf8' [ 1059.343815][T20121] exfat: Deprecated parameter 'namecase' [ 1059.355744][T20121] exfat: Deprecated parameter 'utf8' [ 1059.360971][ T30] audit: type=1400 audit(2000000049.470:2322): avc: denied { open } for pid=20106 comm="syz.0.5108" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1059.385157][ T30] audit: type=1400 audit(2000000049.590:2323): avc: denied { mounton } for pid=20106 comm="syz.0.5108" path="/25/file0/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1059.408536][ T30] audit: type=1400 audit(2000000049.620:2324): avc: denied { mount } for pid=20106 comm="syz.0.5108" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1059.430815][ T30] audit: type=1400 audit(2000000049.900:2325): avc: denied { unmount } for pid=19726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1059.536204][ T30] audit: type=1400 audit(2000000049.940:2326): avc: denied { read write } for pid=20125 comm="syz.1.5113" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1059.569114][ T30] audit: type=1400 audit(2000000049.940:2327): avc: denied { open } for pid=20125 comm="syz.1.5113" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1059.569852][T20121] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1059.595758][ T30] audit: type=1400 audit(2000000049.950:2328): avc: denied { ioctl } for pid=20125 comm="syz.1.5113" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1059.717504][ T30] audit: type=1400 audit(2000000050.020:2329): avc: denied { mounton } for pid=20108 comm="syz.3.5109" path="/proc/72/task" dev="proc" ino=112189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1060.613223][T15386] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1060.624710][ T30] audit: type=1400 audit(2000000050.020:2330): avc: denied { mount } for pid=20108 comm="syz.3.5109" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1061.035708][T15386] usb 2-1: Using ep0 maxpacket: 8 [ 1061.067571][T20146] loop0: detected capacity change from 0 to 40427 [ 1061.116174][T20146] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1061.123940][T20146] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1061.133517][T20146] F2FS-fs (loop0): invalid crc value [ 1061.149309][T20146] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1061.155806][T15386] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1061.175856][T15386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.183945][T20146] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1061.193732][T20146] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1061.201354][T15386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.211642][T16223] device bridge_slave_1 left promiscuous mode [ 1061.219746][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.234556][T15386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1061.247659][T16223] device bridge_slave_0 left promiscuous mode [ 1061.260378][T15386] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1061.261059][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.275713][T15386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.293024][T15386] usb 2-1: config 0 descriptor?? [ 1061.298155][T16223] device veth1_macvtap left promiscuous mode [ 1061.303988][T16223] device veth0_vlan left promiscuous mode [ 1061.392866][T20167] loop4: detected capacity change from 0 to 256 [ 1061.436103][T20167] exfat: Deprecated parameter 'utf8' [ 1061.441330][T20167] exfat: Deprecated parameter 'namecase' [ 1061.446843][T20167] exfat: Deprecated parameter 'utf8' [ 1061.468631][T20167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1061.786910][T15386] hid-thrustmaster 0003:044F:B65D.00CD: item fetching failed at offset 3/7 [ 1061.795507][T15386] hid-thrustmaster 0003:044F:B65D.00CD: parse failed with error -22 [ 1061.803911][T15386] hid-thrustmaster: probe of 0003:044F:B65D.00CD failed with error -22 [ 1061.987522][ T2434] usb 2-1: USB disconnect, device number 94 [ 1062.135224][T20175] loop2: detected capacity change from 0 to 40427 [ 1062.210670][T20175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1062.250655][T20175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1062.564743][T15386] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1062.777157][T19962] attempt to access beyond end of device [ 1062.777157][T19962] loop2: rw=524288, want=45072, limit=40427 [ 1062.788548][T19962] attempt to access beyond end of device [ 1062.788548][T19962] loop2: rw=0, want=45072, limit=40427 [ 1062.802917][T19962] attempt to access beyond end of device [ 1062.802917][T19962] loop2: rw=2049, want=45104, limit=40427 [ 1062.815884][T15386] usb 1-1: Using ep0 maxpacket: 8 [ 1062.935790][T15386] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 1062.944035][T15386] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.954421][T15386] usb 1-1: config 135 has no interface number 0 [ 1062.973511][T15386] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.046838][T20195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.053738][T20195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.061194][T20195] device bridge_slave_0 entered promiscuous mode [ 1063.070019][T20195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.076945][T20195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.084845][T20195] device bridge_slave_1 entered promiscuous mode [ 1063.341377][T20195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.348241][T20195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.355579][T20195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.362388][T20195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.369559][T15386] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1063.378823][T15386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.386686][T15386] usb 1-1: Product: syz [ 1063.390635][T15386] usb 1-1: Manufacturer: syz [ 1063.395060][T15386] usb 1-1: SerialNumber: syz [ 1063.400145][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.407803][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.414938][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.425952][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1063.434099][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.440966][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.448605][T15386] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 1063.454772][T15386] usb 1-1: No valid video chain found. [ 1063.465676][ T2434] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1063.473929][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1063.482007][T15386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.488943][T15386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.499534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1063.516109][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1063.524351][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1063.532419][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1063.539811][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1063.547440][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1063.556289][ T336] device bridge_slave_1 left promiscuous mode [ 1063.562307][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.569717][ T336] device bridge_slave_0 left promiscuous mode [ 1063.575913][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.583688][ T336] device veth1_macvtap left promiscuous mode [ 1063.589756][ T336] device veth0_vlan left promiscuous mode [ 1063.649446][T10090] usb 1-1: USB disconnect, device number 111 [ 1063.660362][T20195] device veth0_vlan entered promiscuous mode [ 1063.671485][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1063.680937][T20195] device veth1_macvtap entered promiscuous mode [ 1063.690436][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1063.701464][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1063.715673][ T2434] usb 2-1: Using ep0 maxpacket: 32 [ 1063.771169][T20203] fuse: Unknown parameter '' [ 1063.777744][T20203] loop2: detected capacity change from 0 to 256 [ 1063.825320][T20203] exfat: Deprecated parameter 'namecase' [ 1063.831088][T20203] exfat: Deprecated parameter 'namecase' [ 1063.836668][ T2434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.847591][ T2434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.857169][ T2434] usb 2-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 1063.865988][ T2434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.874409][ T2434] usb 2-1: config 0 descriptor?? [ 1063.888818][T20203] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 1063.976490][T20203] loop2: detected capacity change from 0 to 512 [ 1063.986312][T20203] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5136: invalid indirect mapped block 256 (level 2) [ 1063.999856][T20203] EXT4-fs (loop2): 2 truncates cleaned up [ 1064.005395][T20203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1064.357006][ T2434] hid-generic 0003:0458:0004.00CE: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.1-1/input0 [ 1064.557320][ T2434] usb 2-1: USB disconnect, device number 95 [ 1064.680565][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1064.680581][ T30] audit: type=1326 audit(2000000055.240:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.719715][ T30] audit: type=1326 audit(2000000055.240:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.748754][ T30] audit: type=1326 audit(2000000055.240:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.774254][ T30] audit: type=1326 audit(2000000055.240:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.797758][ T30] audit: type=1326 audit(2000000055.240:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.821409][ T30] audit: type=1326 audit(2000000055.240:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.844981][ T30] audit: type=1326 audit(2000000055.240:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.868705][ T30] audit: type=1326 audit(2000000055.240:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.892179][ T30] audit: type=1326 audit(2000000055.240:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1064.916534][ T30] audit: type=1326 audit(2000000055.240:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ec54e79 code=0x7ffc0000 [ 1065.699562][T20223] loop0: detected capacity change from 0 to 256 [ 1065.778374][T20223] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1066.045730][ T26] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1066.315676][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 1066.435758][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1066.446847][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1066.458071][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1066.466994][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.479275][ T26] usb 3-1: config 0 descriptor?? [ 1066.495791][T20218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1066.517933][ T26] hub 3-1:0.0: USB hub found [ 1066.835305][ T26] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1067.065703][ T1020] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1067.215708][ T2434] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1067.296832][T20218] UDC core: couldn't find an available UDC or it's busy: -16 [ 1067.304114][T20218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1067.311423][ T1020] usb 5-1: Using ep0 maxpacket: 8 [ 1067.375890][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 1067.381634][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 1067.415973][ T26] usb 3-1: USB disconnect, device number 105 [ 1067.435769][ T1020] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1067.446416][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.457120][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.466687][ T1020] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1067.479471][ T1020] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1067.488786][ T1020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.496185][ T2434] usb 1-1: Using ep0 maxpacket: 8 [ 1067.497608][ T1020] usb 5-1: config 0 descriptor?? [ 1067.665813][ T2434] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1067.676693][ T2434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.687390][ T2434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.697075][ T2434] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1067.709845][ T2434] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1067.718701][ T2434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.727326][ T2434] usb 1-1: config 0 descriptor?? [ 1067.986500][ T1020] hid-thrustmaster 0003:044F:B65D.00CF: item fetching failed at offset 3/7 [ 1067.995150][ T1020] hid-thrustmaster 0003:044F:B65D.00CF: parse failed with error -22 [ 1068.003647][ T1020] hid-thrustmaster: probe of 0003:044F:B65D.00CF failed with error -22 [ 1068.187941][T10090] usb 5-1: USB disconnect, device number 93 [ 1068.206542][ T2434] hid-thrustmaster 0003:044F:B65D.00D0: item fetching failed at offset 3/7 [ 1068.215147][ T2434] hid-thrustmaster 0003:044F:B65D.00D0: parse failed with error -22 [ 1068.223011][ T2434] hid-thrustmaster: probe of 0003:044F:B65D.00D0 failed with error -22 [ 1068.409025][ T2434] usb 1-1: USB disconnect, device number 112 [ 1069.315338][T20249] loop0: detected capacity change from 0 to 16 [ 1069.326943][T20249] erofs: (device loop0): mounted with root inode @ nid 36. [ 1069.437907][T20248] loop1: detected capacity change from 0 to 40427 [ 1069.465125][T20254] fuse: Bad value for 'rootmode' [ 1069.490521][T20248] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1069.515293][T20248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1069.605712][ T6] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1069.782073][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1069.782108][ T30] audit: type=1400 audit(2000000060.240:2445): avc: denied { write } for pid=20247 comm="syz.1.5141" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1069.815235][ T30] audit: type=1400 audit(2000000060.240:2446): avc: denied { add_name } for pid=20247 comm="syz.1.5141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1069.836143][ T30] audit: type=1400 audit(2000000060.240:2447): avc: denied { create } for pid=20247 comm="syz.1.5141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1069.856549][ T30] audit: type=1400 audit(2000000060.260:2448): avc: denied { create } for pid=20247 comm="syz.1.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1069.877042][ T30] audit: type=1400 audit(2000000060.270:2449): avc: denied { ioctl } for pid=20247 comm="syz.1.5141" path="socket:[112594]" dev="sockfs" ino=112594 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1069.903051][ T30] audit: type=1400 audit(2000000060.270:2450): avc: denied { mounton } for pid=20247 comm="syz.1.5141" path="/20/file2/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1069.925733][ T30] audit: type=1400 audit(2000000060.270:2451): avc: denied { mount } for pid=20247 comm="syz.1.5141" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1069.947721][ T30] audit: type=1400 audit(2000000060.290:2452): avc: denied { mounton } for pid=20247 comm="syz.1.5141" path="/20/file2/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1069.970341][ T30] audit: type=1400 audit(2000000060.300:2453): avc: denied { mount } for pid=20247 comm="syz.1.5141" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1070.015688][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 1070.155783][ T6] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1070.162913][ T30] audit: type=1400 audit(2000000060.720:2454): avc: denied { unmount } for pid=19726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1070.164392][ T6] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.193907][ T6] usb 3-1: config 135 has no interface number 0 [ 1070.200137][ T6] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.215254][T19865] attempt to access beyond end of device [ 1070.215254][T19865] loop1: rw=524288, want=45072, limit=40427 [ 1070.226945][T19865] attempt to access beyond end of device [ 1070.226945][T19865] loop1: rw=0, want=45072, limit=40427 [ 1070.241210][T19865] attempt to access beyond end of device [ 1070.241210][T19865] loop1: rw=2049, want=45104, limit=40427 [ 1070.380351][T20265] loop0: detected capacity change from 0 to 512 [ 1070.395894][ T6] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1070.404905][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.413469][ T6] usb 3-1: Product: syz [ 1070.417794][ T6] usb 3-1: Manufacturer: syz [ 1070.422223][ T6] usb 3-1: SerialNumber: syz [ 1070.444389][T20268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.451338][T20268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.452473][T20265] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 1070.458575][T20268] device bridge_slave_0 entered promiscuous mode [ 1070.466476][T20265] System zones: 0-2, 18-18, 34-35 [ 1070.472834][ T6] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 1070.478515][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.483793][ T6] usb 3-1: No valid video chain found. [ 1070.490846][T20265] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 1070.503643][T20268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.509046][T20265] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 1070.516184][T20268] device bridge_slave_1 entered promiscuous mode [ 1070.597034][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.603901][T20268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.611043][T20268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.617799][T20268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.638791][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1070.645997][ T6] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1070.653701][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.661144][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.682128][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1070.691602][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.698473][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.706385][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1070.715000][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.721882][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.800021][T20276] fuse: Bad value for 'fd' [ 1070.852693][ T311] usb 3-1: USB disconnect, device number 106 [ 1070.862746][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1070.872135][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1070.888397][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1070.900259][T20268] device veth0_vlan entered promiscuous mode [ 1070.906594][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1070.914361][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1070.921833][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1070.933499][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1070.945063][T20268] device veth1_macvtap entered promiscuous mode [ 1070.954545][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1070.965288][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1071.016455][T16223] device bridge_slave_1 left promiscuous mode [ 1071.022395][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.029758][T16223] device bridge_slave_0 left promiscuous mode [ 1071.035871][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 1071.036940][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.048434][T16223] device veth1_macvtap left promiscuous mode [ 1071.054266][T16223] device veth0_vlan left promiscuous mode [ 1071.155759][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.166565][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.176074][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 1071.184849][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.193574][ T6] usb 5-1: config 0 descriptor?? [ 1071.677522][ T6] hid-generic 0003:0458:0004.00D1: hidraw0: USB HID v0.00 Device [HID 0458:0004] on usb-dummy_hcd.4-1/input0 [ 1071.882836][ T1020] usb 5-1: USB disconnect, device number 94 [ 1071.892034][T20281] FAULT_INJECTION: forcing a failure. [ 1071.892034][T20281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.912530][T20281] CPU: 1 PID: 20281 Comm: syz.0.5148 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1071.923732][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1071.933630][T20281] Call Trace: [ 1071.936749][T20281] [ 1071.939564][T20281] dump_stack_lvl+0x151/0x1c0 [ 1071.944044][T20281] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1071.949506][T20281] ? __stack_depot_save+0x34/0x470 [ 1071.954457][T20281] ? kmem_cache_free+0x116/0x2e0 [ 1071.959329][T20281] dump_stack+0x15/0x20 [ 1071.963314][T20281] should_fail+0x3c6/0x510 [ 1071.965584][T20290] loop2: detected capacity change from 0 to 256 [ 1071.967568][T20281] should_fail_usercopy+0x1a/0x20 [ 1071.967593][T20281] _copy_from_user+0x20/0xd0 [ 1071.967608][T20281] iovec_from_user+0xc7/0x330 [ 1071.967625][T20281] __import_iovec+0x6d/0x420 [ 1071.967640][T20281] ? __ia32_sys_shutdown+0x70/0x70 [ 1071.967659][T20281] import_iovec+0xe5/0x120 [ 1071.967674][T20281] ___sys_sendmsg+0x215/0x2e0 [ 1071.967690][T20281] ? __sys_sendmsg+0x260/0x260 [ 1071.967710][T20281] ? __fdget+0x1bc/0x240 [ 1071.967726][T20281] __se_sys_sendmsg+0x19a/0x260 [ 1071.967743][T20281] ? __x64_sys_sendmsg+0x90/0x90 [ 1071.967759][T20281] ? ksys_write+0x260/0x2c0 [ 1071.967775][T20281] ? debug_smp_processor_id+0x17/0x20 [ 1071.967789][T20281] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1071.967805][T20281] __x64_sys_sendmsg+0x7b/0x90 [ 1071.967817][T20281] do_syscall_64+0x3d/0xb0 [ 1071.967831][T20281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1071.967850][T20281] RIP: 0033:0x7fe31ec54e79 [ 1071.967865][T20281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.077793][T20281] RSP: 002b:00007fe31d8d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.086118][T20281] RAX: ffffffffffffffda RBX: 00007fe31edf0f80 RCX: 00007fe31ec54e79 [ 1072.093959][T20281] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000005 [ 1072.101741][T20281] RBP: 00007fe31d8d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.109562][T20281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.117364][T20281] R13: 0000000000000000 R14: 00007fe31edf0f80 R15: 00007fffcdd450f8 [ 1072.125190][T20281] [ 1072.215700][ T6] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1072.455782][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 1072.575969][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1072.586810][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.597504][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.607324][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1072.620092][ T6] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1072.628890][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.637802][ T6] usb 2-1: config 0 descriptor?? [ 1073.117308][ T6] hid-thrustmaster 0003:044F:B65D.00D2: item fetching failed at offset 3/7 [ 1073.126035][ T6] hid-thrustmaster 0003:044F:B65D.00D2: parse failed with error -22 [ 1073.133825][ T6] hid-thrustmaster: probe of 0003:044F:B65D.00D2 failed with error -22 [ 1073.317033][ T6] usb 2-1: USB disconnect, device number 96 [ 1073.522143][T20298] FAULT_INJECTION: forcing a failure. [ 1073.522143][T20298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.535123][T20298] CPU: 0 PID: 20298 Comm: syz.4.5153 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1073.546304][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1073.556198][T20298] Call Trace: [ 1073.559322][T20298] [ 1073.562101][T20298] dump_stack_lvl+0x151/0x1c0 [ 1073.566613][T20298] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1073.572079][T20298] ? kasan_set_track+0x5d/0x70 [ 1073.576683][T20298] ? __kasan_slab_free+0x11/0x20 [ 1073.581457][T20298] dump_stack+0x15/0x20 [ 1073.585445][T20298] should_fail+0x3c6/0x510 [ 1073.589701][T20298] should_fail_usercopy+0x1a/0x20 [ 1073.594560][T20298] _copy_to_user+0x20/0x90 [ 1073.599248][T20298] simple_read_from_buffer+0xc7/0x150 [ 1073.604552][T20298] proc_fail_nth_read+0x1a3/0x210 [ 1073.609403][T20298] ? proc_fault_inject_write+0x390/0x390 [ 1073.614868][T20298] ? fsnotify_perm+0x470/0x5d0 [ 1073.619487][T20298] ? security_file_permission+0x86/0xb0 [ 1073.624851][T20298] ? proc_fault_inject_write+0x390/0x390 [ 1073.630319][T20298] vfs_read+0x27d/0xd40 [ 1073.634399][T20298] ? kernel_read+0x1f0/0x1f0 [ 1073.638826][T20298] ? __kasan_check_write+0x14/0x20 [ 1073.643780][T20298] ? mutex_lock+0xb6/0x1e0 [ 1073.648033][T20298] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1073.654448][T20298] ? __fdget_pos+0x2e7/0x3a0 [ 1073.659061][T20298] ? ksys_read+0x77/0x2c0 [ 1073.663228][T20298] ksys_read+0x199/0x2c0 [ 1073.667306][T20298] ? __x64_sys_utime+0x70/0x70 [ 1073.671907][T20298] ? vfs_write+0x1110/0x1110 [ 1073.676334][T20298] ? debug_smp_processor_id+0x17/0x20 [ 1073.681543][T20298] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1073.687460][T20298] __x64_sys_read+0x7b/0x90 [ 1073.691783][T20298] do_syscall_64+0x3d/0xb0 [ 1073.696040][T20298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1073.701763][T20298] RIP: 0033:0x7fc2660d28bc [ 1073.706019][T20298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1073.725462][T20298] RSP: 002b:00007fc264d51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1073.733703][T20298] RAX: ffffffffffffffda RBX: 00007fc26626ff80 RCX: 00007fc2660d28bc [ 1073.741516][T20298] RDX: 000000000000000f RSI: 00007fc264d510a0 RDI: 0000000000000004 [ 1073.749500][T20298] RBP: 00007fc264d51090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.757314][T20298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.765123][T20298] R13: 0000000000000000 R14: 00007fc26626ff80 R15: 00007ffd0a6ae748 [ 1073.773025][T20298] [ 1073.776797][T20300] FAULT_INJECTION: forcing a failure. [ 1073.776797][T20300] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.789544][T20300] CPU: 1 PID: 20300 Comm: syz.2.5152 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 1073.800738][T20300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1073.810632][T20300] Call Trace: [ 1073.813754][T20300] [ 1073.816531][T20300] dump_stack_lvl+0x151/0x1c0 [ 1073.821044][T20300] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1073.826515][T20300] dump_stack+0x15/0x20 [ 1073.830502][T20300] should_fail+0x3c6/0x510 [ 1073.834759][T20300] __should_failslab+0xa4/0xe0 [ 1073.839357][T20300] ? getname_flags+0xba/0x520 [ 1073.843966][T20300] should_failslab+0x9/0x20 [ 1073.848298][T20300] slab_pre_alloc_hook+0x37/0xd0 [ 1073.853072][T20300] ? getname_flags+0xba/0x520 [ 1073.857587][T20300] kmem_cache_alloc+0x44/0x200 [ 1073.862186][T20300] getname_flags+0xba/0x520 [ 1073.866524][T20300] user_path_at_empty+0x2d/0x1a0 [ 1073.871299][T20300] __se_sys_mount+0x285/0x3b0 [ 1073.875810][T20300] ? fput+0x1a/0x20 [ 1073.879461][T20300] ? __x64_sys_mount+0xd0/0xd0 [ 1073.884059][T20300] ? debug_smp_processor_id+0x17/0x20 [ 1073.889270][T20300] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1073.895167][T20300] __x64_sys_mount+0xbf/0xd0 [ 1073.899602][T20300] do_syscall_64+0x3d/0xb0 [ 1073.903850][T20300] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1073.909660][T20300] RIP: 0033:0x7f0fef000e79 [ 1073.913917][T20300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.933359][T20300] RSP: 002b:00007f0fedc5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1073.941602][T20300] RAX: ffffffffffffffda RBX: 00007f0fef19d058 RCX: 00007f0fef000e79 [ 1073.949500][T20300] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 1073.957310][T20300] RBP: 00007f0fedc5d090 R08: 0000000020000580 R09: 0000000000000000 [ 1073.965121][T20300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.972934][T20300] R13: 0000000000000000 R14: 00007f0fef19d058 R15: 00007fff6208df58 [ 1073.980750][T20300] [ 1075.231854][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1075.231871][ T30] audit: type=1400 audit(2000000065.790:2478): avc: denied { create } for pid=20307 comm="syz.1.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1075.260054][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1075.273656][ T30] audit: type=1400 audit(2000000065.820:2479): avc: denied { write } for pid=20307 comm="syz.1.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1075.284748][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1075.294578][ T30] audit: type=1326 audit(2000000065.830:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.336895][ T30] audit: type=1400 audit(2000000065.830:2481): avc: denied { validate_trans } for pid=20312 comm="syz.4.5157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1075.387563][ T30] audit: type=1326 audit(2000000065.830:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.424294][ T30] audit: type=1326 audit(2000000065.830:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.448298][ T30] audit: type=1326 audit(2000000065.830:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.472236][ T30] audit: type=1326 audit(2000000065.830:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.496821][ T30] audit: type=1326 audit(2000000065.830:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.520503][ T30] audit: type=1326 audit(2000000065.830:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef000e79 code=0x7ffc0000 [ 1075.815690][ T26] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1076.176069][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.187015][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.275930][ T26] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1076.284799][ T26] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 1076.292857][ T26] usb 1-1: Product: syz [ 1076.298344][ T26] usb 1-1: config 0 descriptor?? [ 1076.776734][ T26] konepure 0003:1E7D:2DB4.00D3: item fetching failed at offset 10/11 [ 1076.784784][ T26] konepure 0003:1E7D:2DB4.00D3: parse failed [ 1076.790617][ T26] konepure: probe of 0003:1E7D:2DB4.00D3 failed with error -22 [ 1076.982232][ T311] usb 1-1: USB disconnect, device number 113 [ 1077.049665][T20324] loop1: detected capacity change from 0 to 128 [ 1077.060014][T20322] loop4: detected capacity change from 0 to 128 [ 1077.119349][T20324] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1077.119584][T20322] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1077.136086][T20324] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1077.515701][ T4480] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1077.695679][ T311] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1077.765685][ T4480] usb 5-1: Using ep0 maxpacket: 16 [ 1077.905760][ T4480] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1077.913584][ T4480] usb 5-1: config 0 has no interface number 0 [ 1077.919700][ T4480] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1077.930693][ T4480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1077.935934][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 1078.055731][ T311] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1078.063981][ T311] usb 2-1: config 0 has no interface number 0 [ 1078.070057][ T311] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1078.075745][ T4480] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1078.080851][ T311] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1078.090025][ T4480] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1078.107266][ T4480] usb 5-1: Product: syz [ 1078.111187][ T4480] usb 5-1: SerialNumber: syz [ 1078.116272][ T4480] usb 5-1: config 0 descriptor?? [ 1078.135741][T20322] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1078.215760][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1078.224671][ T311] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1078.232455][ T311] usb 2-1: Product: syz [ 1078.236459][ T311] usb 2-1: SerialNumber: syz [ 1078.241849][ T311] usb 2-1: config 0 descriptor?? [ 1078.265807][T20324] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1078.396610][ T4480] usb 5-1: invalid MIDI in EP 0 [ 1078.401434][ T4480] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 1078.410093][ T4480] usb 5-1: USB disconnect, device number 95 [ 1078.526870][ T311] usb 2-1: invalid MIDI in EP 0 [ 1078.531675][ T311] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 1078.540368][ T311] usb 2-1: USB disconnect, device number 97 [ 1078.959725][T20336] loop2: detected capacity change from 0 to 128 [ 1078.980438][T20338] loop4: detected capacity change from 0 to 256 [ 1079.026866][T20338] exfat: Deprecated parameter 'utf8' [ 1079.032104][T20338] exfat: Deprecated parameter 'namecase' [ 1079.040246][T20336] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1079.045754][T20338] exfat: Deprecated parameter 'utf8' [ 1079.059016][T20336] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1079.096332][T20338] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1079.375661][ T4480] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1079.615665][ T4480] usb 3-1: Using ep0 maxpacket: 16 [ 1079.735775][ T4480] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1079.743646][ T4480] usb 3-1: config 0 has no interface number 0 [ 1079.749543][ T4480] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 1079.760367][ T4480] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1079.886030][ T4480] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1079.894989][ T4480] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1079.902968][ T4480] usb 3-1: Product: syz [ 1079.906904][ T4480] usb 3-1: SerialNumber: syz [ 1079.912120][ T4480] usb 3-1: config 0 descriptor?? [ 1079.935855][T20336] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1080.196629][ T4480] usb 3-1: invalid MIDI in EP 0 [ 1080.201424][ T4480] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 1080.208839][ T4480] usb 3-1: USB disconnect, device number 107 SYZFAIL: mmap of output file failed want 0x1b2f520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2fa20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32b20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30d20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=3 req=5120 state=1 status=67 (errno 9: Bad file descriptor) [ 1081.020628][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1081.020645][ T30] audit: type=1400 audit(2000000071.580:2539): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[14428]" dev="pipefs" ino=14428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1081.985380][ T30] audit: type=1400 audit(2000000071.870:2540): avc: denied { module_request } for pid=20347 comm="syz.1.5165" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1082.050881][ T30] audit: type=1400 audit(2000000072.240:2541): avc: denied { create } for pid=20351 comm="syz.2.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1082.135680][T15386] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1083.246233][ T10] device bridge_slave_1 left promiscuous mode [ 1083.252164][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.259578][ T10] device bridge_slave_0 left promiscuous mode [ 1083.265490][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.273233][ T10] device veth1_macvtap left promiscuous mode [ 1083.279055][ T10] device veth0_vlan left promiscuous mode [ 1084.567268][ T10] device bridge_slave_1 left promiscuous mode [ 1084.573195][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.580463][ T30] audit: type=1400 audit(2000000075.150:2542): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.581633][ T10] device bridge_slave_0 left promiscuous mode [ 1084.602735][ T30] audit: type=1400 audit(2000000075.150:2543): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.607621][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.630560][ T30] audit: type=1400 audit(2000000075.150:2544): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1084.658733][ T30] audit: type=1400 audit(2000000075.150:2545): avc: denied { add_name } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=22 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.681578][ T30] audit: type=1400 audit(2000000075.150:2546): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=22 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1084.682015][ T10] device bridge_slave_1 left promiscuous mode [ 1084.703934][ T30] audit: type=1400 audit(2000000075.150:2547): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1084.710144][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.737602][ T10] device bridge_slave_0 left promiscuous mode [ 1084.743509][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.751180][ T10] device bridge_slave_1 left promiscuous mode [ 1084.757146][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.764342][ T10] device bridge_slave_0 left promiscuous mode [ 1084.770580][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.778505][ T10] device veth1_macvtap left promiscuous mode [ 1084.784318][ T10] device veth0_vlan left promiscuous mode [ 1084.790158][ T10] device veth1_macvtap left promiscuous mode [ 1084.795977][ T10] device veth0_vlan left promiscuous mode [ 1084.801612][ T10] device veth1_macvtap left promiscuous mode [ 1084.807506][ T10] device veth0_vlan left promiscuous mode