last executing test programs: 7.422898621s ago: executing program 2 (id=2037): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r3, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x200006}}], 0x30}}], 0x1, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000300)={{r6}, 0x4, &(0x7f00000001c0)=[0x0, 0x8, 0x80000000, 0x5], 0x0, 0x7}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 6.958669168s ago: executing program 4 (id=2039): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x5}) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000100)={0x7, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000140)={0x10000, 0x1, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x6, r1}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0x0, 0x4, 0x8000, 0x0, 0x19, "ef1cd7421db22019"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000814) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xf) r5 = fsopen(&(0x7f0000000400)='jffs2\x00', 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000440)=0x2920, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2d0, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf4db, @private2, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x602b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff924}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f35}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb06}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc87}]}]}, 0x2d0}}, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r3) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) write$cgroup_int(r3, &(0x7f00000009c0), 0x12) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000a00)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x15, 0x7}}) timer_create(0x5, &(0x7f0000000bc0)={0x0, 0x33, 0x4, @thr={&(0x7f0000000a80)="1de15f22ca06e7ed63424de73cf75f4e859957cd04a98463ea47e0", &(0x7f0000000ac0)="1119fcaec1136cb4a47eb7fd0d0ea7d81900789604ef3e58b0aabcc4a7964339c03214245405f723547357c6e65469d59060cb51f6fb1f986ada4d94e1b998ea7bf3aba1338ce43271d75ae377be2e03fad5659dc4736b77adcafc111d597b9d3499977c8b82bd8c0d43ae87597ef0c7ac1a1004ebfd2f2bd0eab9bcb962789a026c152c4a9e9897bd9f20b2b69b1ee2df81669d67c3751c1eb12da01383d35c49776c1ac88739465ba400f490d0ae35b8323b2cb529afd5d7d336bec0bd25e667310fa25c505e651be62c3fc2d41a53a727c0c20c827cd806056616dfad802b1247bc8bc4f2afb316b3e4d72e042637b8aeffd1ac6c500a61108e79f044"}}, &(0x7f0000000c00)) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x80049367, &(0x7f0000000c80)) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x88, r6, 0xd19, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000004) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000e40)=0x7) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) ppoll(&(0x7f0000000e80)=[{r8, 0x4411}, {r10, 0x2400}, {r5}], 0x3, &(0x7f0000000f00)={r11, r12+60000000}, &(0x7f0000000f40)={[0x8]}, 0x8) 6.922019471s ago: executing program 4 (id=2040): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport', @ANYRESDEC=r3]) 6.908892132s ago: executing program 4 (id=2041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7f, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0xfffffffd}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6, 0x5, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x2e, 0x9, 0x0, 0x3, 0xfffffff9}], &(0x7f0000000400)='GPL\x00', 0x7, 0x48, &(0x7f00000004c0)=""/72, 0x0, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x1, 0x10}, {0x4, 0x7, 0xd, 0x7}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}}, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_settime\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0x1c, 0x0, @val=@tracing={r5}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000380)=0x3c, 0xfcb5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 6.354011377s ago: executing program 2 (id=2043): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 5.638045605s ago: executing program 2 (id=2045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x80, 0x4c, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x408ea}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x804) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xd, 0xd, 0xe6}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x4c, 0x3, 0x40}, 0x1c, &(0x7f0000000300)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x2, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0xcf, 0x1, 0x7, 0x0, 0x597, [0xffc0]}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc09}}, {0x63, &(0x7f0000000540)=@string={0x63, 0x3, "8eb637803015452ab21286047d6ccf0b613af3941279ead039ed24a271c14cee32ff744d29fb2b9b5c938a2099b1f3d735c7c9eb18ec8f80ff25282ee691c55fec14d86e582b3e090b006e1584913680e551aed8054ab7d29d29185e22ced15674"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x416}}, {0xf9, &(0x7f00000006c0)=@string={0xf9, 0x3, "709baa4fb175612dbd829b3e226f12b9fa14aa1f1d784739c5ee0008aa09dc4db4a6dd2c9d5ba8cb1456a869ce56620ce401f0f7be956bec14eedd4ab2275f9e149603c5f56c7eb57379805302295b38b1cf877007e4bf18812e930b9d304cb1198cc943ff66626963724ec55c5bc66bc6ebb1c2369d3be4a0170aef29797a471311e4e02922ba4ec0a721170fd483f48909b90df6d38bf5d071af253adeaa43c008040ee4aa868ebc2fcad9ea39c6315585def5621e8af7cb73b259f1bda68db55dfae132cabad4451a474505192bfcdefeb470db507b5b60fd2a57aeca34b8aa1a474018ff0394d50f1218d7069b39db287d3a0a479f"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40234500000045117f63"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.636443555s ago: executing program 0 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 5.537868143s ago: executing program 4 (id=2047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x80, 0x4c, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x408ea}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x804) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xd, 0xd, 0xe6}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x4c, 0x3, 0x40}, 0x1c, &(0x7f0000000300)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x2, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0xcf, 0x1, 0x7, 0x0, 0x597, [0xffc0]}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc09}}, {0x63, &(0x7f0000000540)=@string={0x63, 0x3, "8eb637803015452ab21286047d6ccf0b613af3941279ead039ed24a271c14cee32ff744d29fb2b9b5c938a2099b1f3d735c7c9eb18ec8f80ff25282ee691c55fec14d86e582b3e090b006e1584913680e551aed8054ab7d29d29185e22ced15674"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x416}}, {0xf9, &(0x7f00000006c0)=@string={0xf9, 0x3, "709baa4fb175612dbd829b3e226f12b9fa14aa1f1d784739c5ee0008aa09dc4db4a6dd2c9d5ba8cb1456a869ce56620ce401f0f7be956bec14eedd4ab2275f9e149603c5f56c7eb57379805302295b38b1cf877007e4bf18812e930b9d304cb1198cc943ff66626963724ec55c5bc66bc6ebb1c2369d3be4a0170aef29797a471311e4e02922ba4ec0a721170fd483f48909b90df6d38bf5d071af253adeaa43c008040ee4aa868ebc2fcad9ea39c6315585def5621e8af7cb73b259f1bda68db55dfae132cabad4451a474505192bfcdefeb470db507b5b60fd2a57aeca34b8aa1a474018ff0394d50f1218d7069b39db287d3a0a479f"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40234500000045117f63"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.511960675s ago: executing program 0 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7f, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0xfffffffd}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6, 0x5, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x2e, 0x9, 0x0, 0x3, 0xfffffff9}], &(0x7f0000000400)='GPL\x00', 0x7, 0x48, &(0x7f00000004c0)=""/72, 0x0, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x1, 0x10}, {0x4, 0x7, 0xd, 0x7}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, [@ringbuf_query]}, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_settime\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0x1c, 0x0, @val=@tracing={r4}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000380)=0x3c, 0xfcb5) 5.240621437s ago: executing program 3 (id=2052): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {0x0}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x200006}}], 0x30}}], 0x1, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000300)={{r6}, 0x4, &(0x7f00000001c0)=[0x0, 0x8, 0x80000000, 0x5], 0x0, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "380086ddffffffff"}}}}}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, 0x0) 4.728826219s ago: executing program 1 (id=2054): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@ldst={0x3, 0x0, 0x6, 0x5, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}], 0x0, 0x7, 0x48, &(0x7f00000004c0)=""/72, 0x0, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, [@ringbuf_query]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380)=0x3c, 0xfcb5) 4.34140051s ago: executing program 3 (id=2055): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000300fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c001980080001"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = gettid() r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=@gettaction={0x1c, 0x32, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4008084) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) 3.565888072s ago: executing program 1 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (fail_nth: 2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 3.430117773s ago: executing program 0 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 3.10048311s ago: executing program 1 (id=2058): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.0999519s ago: executing program 3 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7f, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0xfffffffd}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x2e, 0x9, 0x0, 0x3, 0xfffffff9}], &(0x7f0000000400)='GPL\x00', 0x7, 0x48, &(0x7f00000004c0)=""/72, 0x0, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x1, 0x10}, {0x4, 0x7, 0xd, 0x7}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, [@ringbuf_query]}, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_settime\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0x1c, 0x0, @val=@tracing={r5}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000380)=0x3c, 0xfcb5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2.914658595s ago: executing program 0 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1727410c0b6ea2627700000000a60d354dd073bf56a06aa183d354850000000000000000000000004b0becedb84eab03ec855c1ca7713bcbd6597e2e15434a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) open(0x0, 0x141bc2, 0x1c0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) write(r6, &(0x7f0000000100)="c1cf74504fbbf325", 0x8) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x488, 0x0, 0x7fffffff}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getgroups(0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 2.673960654s ago: executing program 2 (id=2061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r1, 0x0, 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000800000000000000000000000007b1af8ff00000000bfa100000000000007010000f800ffffb702000008000000b7030000000000b3850000007000000095c5a6614ccf4aaeabf9cff3ee4ebaf7fc418853c40a664d067f43b0e356968bffe7014fcddb22da11de978c85afcb85bd21c0c0ea12590b321108e21d56e9a62b538e638299c398917c0098d48438cb0078cd4fc322b1384eab2073307598e396d3e4e9cfb1e3eef9ed"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) 1.74576138s ago: executing program 1 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000006d968e800319c0c5941d6", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="00c80acaec8bb4916b27334754179e0956ff79b035f2c4f55ec4d99001c93f2b464dbbbd04c3b858ece55173232d38588762ed0963f5a9215c0500c5f05e0146d1f848dd854bb97f109b6a0e77af37f00cd0d95904fe33b711d13029db9b944d273e97590598a62e34b4e4839f2bc5a46bae16da1bbcb214acc8a6fbddbf78794f52716b405df0e78b20000000000000000000000200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") 1.74496136s ago: executing program 4 (id=2063): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = inotify_init() r4 = timerfd_create(0x8, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x4, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0x0, 0x2}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000180)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000020000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.697745823s ago: executing program 3 (id=2064): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) unshare(0x42000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 1.2439748s ago: executing program 1 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7f, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0xfffffffd}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6, 0x5, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x2e, 0x9, 0x0, 0x3, 0xfffffff9}], &(0x7f0000000400)='GPL\x00', 0x7, 0x48, &(0x7f00000004c0)=""/72, 0x0, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x1, 0x10}, {0x4, 0x7, 0xd, 0x7}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_settime\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0x1c, 0x0, @val=@tracing={r4}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380)=0x3c, 0xfcb5) 1.24226092s ago: executing program 2 (id=2066): r0 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 466.328433ms ago: executing program 4 (id=2067): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}], 0x1}}], 0x1, 0x4004040) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x7}) ioctl$KVM_RUN(r8, 0xae80, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000240)) 465.604493ms ago: executing program 0 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x10132) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0xa00080, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendfile(r2, r0, &(0x7f00000001c0)=0xbb, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000200)) fdatasync(r3) 238.390231ms ago: executing program 2 (id=2069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x80, 0x4c, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x408ea}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x804) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xd, 0xd, 0xe6}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x4c, 0x3, 0x40}, 0x1c, &(0x7f0000000300)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x2, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0xcf, 0x1, 0x7, 0x0, 0x597, [0xffc0]}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc09}}, {0x63, &(0x7f0000000540)=@string={0x63, 0x3, "8eb637803015452ab21286047d6ccf0b613af3941279ead039ed24a271c14cee32ff744d29fb2b9b5c938a2099b1f3d735c7c9eb18ec8f80ff25282ee691c55fec14d86e582b3e090b006e1584913680e551aed8054ab7d29d29185e22ced15674"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x416}}, {0xf9, &(0x7f00000006c0)=@string={0xf9, 0x3, "709baa4fb175612dbd829b3e226f12b9fa14aa1f1d784739c5ee0008aa09dc4db4a6dd2c9d5ba8cb1456a869ce56620ce401f0f7be956bec14eedd4ab2275f9e149603c5f56c7eb57379805302295b38b1cf877007e4bf18812e930b9d304cb1198cc943ff66626963724ec55c5bc66bc6ebb1c2369d3be4a0170aef29797a471311e4e02922ba4ec0a721170fd483f48909b90df6d38bf5d071af253adeaa43c008040ee4aa868ebc2fcad9ea39c6315585def5621e8af7cb73b259f1bda68db55dfae132cabad4451a474505192bfcdefeb470db507b5b60fd2a57aeca34b8aa1a474018ff0394d50f1218d7069b39db287d3a0a479f"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40234500000045117f63"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 213.449543ms ago: executing program 0 (id=2070): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0xfff, r1, &(0x7f00000000c0)=' ', 0x1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 90.008743ms ago: executing program 3 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) r2 = getgid() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r6, @ANYRESOCT=r4, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r6, @ANYRESHEX=r5], 0x1, 0x14ee, &(0x7f0000002400)="$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") getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000280)=[r2, r5, 0x0, r7, r8]) 13.18831ms ago: executing program 1 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7f, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0xfffffffd}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6, 0x5, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x2e, 0x9, 0x0, 0x3, 0xfffffff9}], &(0x7f0000000400)='GPL\x00', 0x7, 0x48, &(0x7f00000004c0)=""/72, 0x0, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x1, 0x10}, {0x4, 0x7, 0xd, 0x7}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, [@ringbuf_query]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_settime\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0x1c, 0x0, @val=@tracing={r5}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000380)=0x3c, 0xfcb5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 3 (id=2073): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02a86d8ed42871a9d1000000040000000800000007007ef500100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES32=r1, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x20000008, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r10], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): axpacket: 32 [ 467.286961][ T5958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 467.296193][ T5958] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 467.413530][ T345] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 467.496766][ T345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 468.113571][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 468.154036][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.208462][ T345] usb 3-1: Product: syz [ 468.212733][ T345] usb 3-1: SerialNumber: syz [ 468.218344][ T5967] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 468.227420][ T5967] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.271448][ T5947] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 468.413876][ T5971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 468.658114][ T345] usb 3-1: USB disconnect, device number 23 [ 469.614391][ T5971] EXT4-fs (loop3): 1 truncate cleaned up [ 469.620112][ T5971] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 469.945812][ T5988] 9pnet: Insufficient options for proto=fd [ 470.444185][ T5998] exfat: Deprecated parameter 'utf8' [ 470.449647][ T5998] exfat: Deprecated parameter 'utf8' [ 470.465769][ T5998] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 470.479139][ T345] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 471.293270][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 471.613678][ T345] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 471.695699][ T345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 471.983515][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 471.992628][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.000854][ T345] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 472.016956][ T345] usb 3-1: Manufacturer: ఉ [ 472.022552][ T345] usb 3-1: SerialNumber: Ж [ 472.043333][ T5990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 472.428298][ T345] usb 3-1: USB disconnect, device number 24 [ 473.088127][ T6014] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 473.097330][ T6014] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.419106][ T6035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 474.428246][ T6035] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.513655][ T6023] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 474.522871][ T6023] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.860516][ T6045] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 475.869856][ T6045] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.268911][ T6050] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 477.297414][ T6067] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 477.306722][ T6067] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.509355][ T6050] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.097173][ T6082] EXT4-fs (loop1): Test dummy encryption mode enabled [ 479.206349][ T6082] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 479.224723][ T6086] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 479.227822][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 479.245734][ T6088] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.637383][ T6082] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 479.696214][ T6086] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 480.103833][ T6091] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 480.112810][ T6091] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.485709][ T6103] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 481.862043][ T6115] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 481.870829][ T6115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 481.956008][ T6112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 481.965002][ T6112] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.304379][ T6128] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 482.313850][ T6128] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.613511][ T6151] EXT4-fs (loop3): Test dummy encryption mode enabled [ 483.633018][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 483.645336][ T6151] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 484.309535][ T6158] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 484.318888][ T6158] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.597434][ T6173] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 487.606527][ T6173] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.832330][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 487.841394][ T6177] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.852115][ T6178] exfat: Deprecated parameter 'utf8' [ 487.857473][ T6178] exfat: Deprecated parameter 'utf8' [ 487.865744][ T6178] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 488.649273][ T6193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 488.658519][ T6193] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.118486][ T6199] EXT4-fs (loop3): Test dummy encryption mode enabled [ 489.207846][ T6199] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 489.220189][ T6199] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 492.998855][ T6228] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 493.008004][ T6228] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.599946][ T289] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 494.303295][ T289] usb 2-1: Using ep0 maxpacket: 32 [ 494.331740][ T6245] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 494.341013][ T6245] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 494.863557][ T289] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 494.897556][ T6248] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 494.906746][ T6248] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.055063][ T289] usb 2-1: config 1 interface 0 has no altsetting 0 [ 495.476798][ T289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 495.485932][ T289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.494073][ T289] usb 2-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 495.510317][ T289] usb 2-1: Manufacturer: ఉ [ 495.518198][ T289] usb 2-1: SerialNumber: Ж [ 495.599907][ T6263] 9pnet: Insufficient options for proto=fd [ 495.606351][ T6238] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 497.773069][ T289] usb 2-1: USB disconnect, device number 21 [ 498.275476][ T6269] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 498.284711][ T6269] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 498.536632][ T6276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 498.545986][ T6276] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.431271][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 499.440577][ T6291] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.605704][ T6293] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 499.615078][ T6293] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.923256][ T791] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 501.457040][ T6311] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 501.466301][ T6311] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.583468][ T6316] exfat: Deprecated parameter 'utf8' [ 501.588806][ T6316] exfat: Deprecated parameter 'utf8' [ 501.630981][ T6316] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 502.163677][ T6320] 9pnet: Insufficient options for proto=fd [ 502.413313][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 503.384760][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1491'. [ 503.398102][ T791] usb 5-1: device descriptor read/all, error -71 [ 504.163246][ T791] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 504.313893][ T6358] exfat: Deprecated parameter 'utf8' [ 504.319707][ T6358] exfat: Deprecated parameter 'utf8' [ 504.323156][ T6363] 9pnet: Insufficient options for proto=fd [ 504.424985][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 504.465754][ T6367] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 504.471545][ T6358] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 504.481846][ T6367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 505.113308][ T791] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 505.123148][ T791] usb 5-1: config 1 interface 0 has no altsetting 0 [ 505.303337][ T791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 505.312645][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.320759][ T791] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 505.649314][ T791] usb 5-1: Manufacturer: ఉ [ 505.662430][ T791] usb 5-1: SerialNumber: Ж [ 505.679685][ T6386] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 505.689516][ T6386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 505.696784][ T6389] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 505.719141][ T6342] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 505.726259][ T6389] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 505.784211][ T6389] serio: Serial port ptm0 [ 506.024668][ T791] usb 5-1: USB disconnect, device number 28 [ 506.085264][ T6400] 9pnet: Insufficient options for proto=fd [ 506.273556][ T6404] exfat: Deprecated parameter 'utf8' [ 506.278928][ T6404] exfat: Deprecated parameter 'utf8' [ 506.288578][ T6404] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 506.852506][ T6407] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 506.861796][ T6407] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.235398][ T6420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 509.244442][ T6420] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.255684][ T6423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 509.264927][ T6423] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.598542][ T6427] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 510.607908][ T6427] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 511.867423][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1523'. [ 511.920077][ T6461] exfat: Deprecated parameter 'utf8' [ 511.928643][ T6461] exfat: Deprecated parameter 'utf8' [ 513.616022][ T6461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 513.674190][ T1955] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 513.701924][ T6466] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 513.711088][ T6466] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.163339][ T2802] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 514.200017][ T6482] 9pnet: Insufficient options for proto=fd [ 514.246271][ T6478] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 514.255629][ T6478] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.503262][ T2802] usb 2-1: Using ep0 maxpacket: 32 [ 514.963541][ T2802] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 514.993272][ T2802] usb 2-1: config 1 interface 0 has no altsetting 0 [ 515.214435][ T6493] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 515.223452][ T6493] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 515.313337][ T2802] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 515.332436][ T2802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.406935][ T2802] usb 2-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 515.849138][ T2802] usb 2-1: Manufacturer: ఉ [ 515.853953][ T2802] usb 2-1: SerialNumber: Ж [ 515.873400][ T6476] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 516.401602][ T2802] usb 2-1: USB disconnect, device number 22 [ 516.437193][ T1955] usb 4-1: device not accepting address 23, error -71 [ 516.745508][ T6513] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 516.754482][ T6513] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.782730][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'. [ 516.933500][ T6524] exfat: Deprecated parameter 'utf8' [ 516.938855][ T6524] exfat: Deprecated parameter 'utf8' [ 516.967366][ T6524] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 518.452945][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1540'. [ 518.472649][ T6530] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 518.481858][ T6530] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 518.535617][ T968] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 519.149135][ T6541] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 519.158379][ T6541] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.840883][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 519.993264][ T445] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 520.123314][ T551] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 520.363305][ T1955] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 520.383267][ T551] usb 5-1: Using ep0 maxpacket: 32 [ 520.413290][ T445] usb 1-1: Using ep0 maxpacket: 32 [ 520.603300][ T551] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 520.613009][ T551] usb 5-1: config 1 interface 0 has no altsetting 0 [ 520.623276][ T1955] usb 4-1: Using ep0 maxpacket: 32 [ 520.628517][ T445] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 520.638251][ T445] usb 1-1: config 1 interface 0 has no altsetting 0 [ 520.793347][ T551] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.802793][ T551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.803320][ T445] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.811044][ T551] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 520.882097][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.890661][ T445] usb 1-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 520.906916][ T1955] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 520.919555][ T445] usb 1-1: Manufacturer: ఉ [ 520.922416][ T551] usb 5-1: Manufacturer: ఉ [ 520.924313][ T1955] usb 4-1: config 1 interface 0 has no altsetting 0 [ 520.929205][ T551] usb 5-1: SerialNumber: Ж [ 520.936248][ T445] usb 1-1: SerialNumber: Ж [ 520.953433][ T6546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 520.963282][ T6538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 521.103422][ T1955] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 521.112976][ T1955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.121817][ T1955] usb 4-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 521.138685][ T1955] usb 4-1: Manufacturer: ఉ [ 521.143567][ T1955] usb 4-1: SerialNumber: Ж [ 521.163417][ T6537] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 521.259115][ T445] usb 1-1: USB disconnect, device number 30 [ 521.265385][ T551] usb 5-1: USB disconnect, device number 29 [ 521.469171][ T1955] usb 4-1: USB disconnect, device number 24 [ 521.895162][ T6567] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 522.283551][ T6567] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 523.724098][ T6567] serio: Serial port ptm0 [ 523.766478][ T6579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 523.776048][ T6579] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.199940][ T6582] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 524.208960][ T6582] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.004249][ T6608] exfat: Deprecated parameter 'utf8' [ 526.009884][ T6608] exfat: Deprecated parameter 'utf8' [ 526.021403][ T6605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 526.026503][ T6608] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 526.030441][ T6605] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.434069][ T6607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 526.443222][ T6607] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.521027][ T6624] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 527.530213][ T6624] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.116353][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1565'. [ 528.127344][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1562'. [ 530.086117][ T6644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 530.095127][ T6644] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 530.115002][ T6652] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 530.132022][ T6652] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 530.153277][ T6418] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 530.180226][ T968] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 530.223881][ T6652] serio: Serial port ptm0 [ 531.835267][ T6661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 531.844518][ T6661] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.129385][ T6664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 532.138557][ T6664] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.542950][ T6418] usb 4-1: device not accepting address 25, error -71 [ 535.759311][ T968] usb 2-1: device not accepting address 24, error -71 [ 537.614700][ T6705] incfs: Backing dir is not set, filesystem can't be mounted. [ 538.356144][ T6705] incfs: mount failed -2 [ 538.673872][ T6708] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 538.683272][ T6708] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 538.809849][ T6712] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 538.819240][ T6712] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 539.211715][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1584'. [ 539.676556][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1586'. [ 541.203566][ T51] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 541.504413][ T968] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 541.607722][ T6735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 541.616788][ T6735] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 541.678915][ T6734] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 541.688116][ T6734] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 541.723262][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 542.153274][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 542.257100][ T6752] 9pnet: Insufficient options for proto=fd [ 542.283487][ T51] usb 5-1: unable to read config index 0 descriptor/all [ 542.292023][ T51] usb 5-1: can't read configurations, error -71 [ 542.388331][ T968] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 542.398100][ T968] usb 2-1: config 1 interface 0 has no altsetting 0 [ 544.218205][ T6769] incfs: Backing dir is not set, filesystem can't be mounted. [ 544.223276][ T968] usb 2-1: string descriptor 0 read error: -71 [ 544.226316][ T6769] incfs: mount failed -2 [ 544.231900][ T968] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 544.491158][ T6761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 544.500413][ T6761] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 544.858378][ T6763] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 544.867603][ T6763] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 545.029200][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.073302][ T968] usb 2-1: can't set config #1, error -71 [ 545.103952][ T968] usb 2-1: USB disconnect, device number 25 [ 545.225315][ T6782] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 545.233977][ T6782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 545.882007][ T6791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 545.891371][ T6791] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.146058][ T6792] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 546.155391][ T6792] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.323285][ T296] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 546.628581][ T6788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 546.648421][ T6788] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.837319][ T6814] 9pnet: Insufficient options for proto=fd [ 546.864260][ T296] usb 1-1: Using ep0 maxpacket: 32 [ 548.241527][ T296] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 548.263228][ T296] usb 1-1: config 1 interface 0 has no altsetting 0 [ 548.333789][ T6831] incfs_lookup_dentry err:-5 [ 548.338412][ T6831] incfs: Can't find or create .index dir in ./file0 [ 548.353291][ T6831] incfs: mount failed -5 [ 548.428776][ T6835] 9p: Unknown uid 18446744073709551615 [ 548.443343][ T296] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 548.453024][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.533233][ T296] usb 1-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 548.589005][ T296] usb 1-1: Manufacturer: ఉ [ 548.645355][ T296] usb 1-1: SerialNumber: Ж [ 548.753501][ T6799] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 549.069970][ T6837] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 549.082506][ T296] usb 1-1: USB disconnect, device number 31 [ 549.101896][ T6837] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 551.675746][ T6869] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 551.684981][ T6869] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.804015][ T6871] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 552.813145][ T6871] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.933265][ T51] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 553.734114][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 555.380885][ T6905] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 555.390137][ T6905] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 555.627522][ T6917] incfs_lookup_dentry err:-5 [ 555.632206][ T6917] incfs: Can't find or create .index dir in ./file0 [ 555.639285][ T6914] 9p: Unknown uid 18446744073709551615 [ 555.654310][ T6917] incfs: mount failed -5 [ 555.663387][ T51] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.858399][ T6924] 9pnet: Insufficient options for proto=fd [ 555.876291][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1644'. [ 555.893251][ T51] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 555.926084][ T6919] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 555.935107][ T6919] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 555.940737][ T51] usb 1-1: can't read configurations, error -71 [ 556.474645][ T968] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 556.677871][ T6940] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 556.723768][ T6940] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 557.305486][ T6947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 557.314530][ T6947] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 557.333628][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 557.983304][ T968] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 558.038330][ T968] usb 2-1: config 1 interface 0 has no altsetting 0 [ 558.435011][ T6966] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 558.449818][ T6966] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 558.473370][ T968] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 558.482659][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.490731][ T968] usb 2-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 558.506972][ T968] usb 2-1: Manufacturer: ఉ [ 558.511666][ T968] usb 2-1: SerialNumber: Ж [ 558.533262][ T6926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 558.534317][ T6966] serio: Serial port ptm0 [ 558.988614][ T968] usb 2-1: USB disconnect, device number 26 [ 559.010415][ T6979] 9pnet: Insufficient options for proto=fd [ 559.064807][ T6983] 9pnet: Could not find request transport: fd0x0000000000000003 [ 560.347168][ T6987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 560.356481][ T6987] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.187845][ T6997] EXT4-fs (loop0): Test dummy encryption mode enabled [ 561.202976][ T6997] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 561.216415][ T6997] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 561.462499][ T7003] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 561.471759][ T7003] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.552080][ T7010] 9p: Unknown uid 18446744073709551615 [ 562.433821][ T7024] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 562.443318][ T7024] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.932260][ T7027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 562.941266][ T7027] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.293457][ T7044] exfat: Deprecated parameter 'utf8' [ 563.298794][ T7044] exfat: Deprecated parameter 'utf8' [ 563.582026][ T7044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 565.440326][ T7057] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 565.448883][ T7057] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 565.459903][ T7053] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 565.475425][ T7053] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.823227][ T968] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 567.124791][ T7074] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 567.134221][ T7074] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.350962][ T7077] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 567.360515][ T7077] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.141654][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 571.621746][ T7092] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 571.783381][ T7097] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 571.792628][ T7097] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.129932][ T7098] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 572.139098][ T7098] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.513317][ T968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 572.573280][ T968] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 572.580892][ T968] usb 1-1: can't read configurations, error -71 [ 574.349821][ T7116] EXT4-fs (loop3): Test dummy encryption mode enabled [ 574.401982][ T7116] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 574.415913][ T7116] ext4 filesystem being mounted at /347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 574.589260][ T7124] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 574.598597][ T7124] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 574.813055][ T7125] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 574.822390][ T7125] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 574.856321][ T7118] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 574.967634][ T7118] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 576.296810][ T7154] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 576.359525][ T7154] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 576.844564][ T7164] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 576.853826][ T7164] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 577.020776][ T7154] serio: Serial port ptm0 [ 578.376791][ T7179] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 578.386229][ T7179] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.950611][ T7194] serio: Serial port ptm0 [ 579.670508][ T7206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 579.680002][ T7206] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 581.983649][ T7222] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 581.992865][ T7222] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 582.005922][ T7213] EXT4-fs (loop4): Test dummy encryption mode enabled [ 582.218654][ T7213] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 582.357538][ T7213] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 582.615098][ T7225] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 582.624107][ T7225] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 583.942618][ T7239] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 583.951656][ T7239] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.138278][ T7248] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 584.227010][ T7240] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 584.236015][ T7240] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.241466][ T7248] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 584.394309][ T7248] serio: Serial port ptm0 [ 584.748289][ T7253] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 585.035957][ T7265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 585.045294][ T7265] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.226735][ T7253] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.953071][ T7277] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 585.962982][ T7280] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 585.971495][ T7280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 586.638752][ T7277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 587.031806][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1725'. [ 587.082420][ T7288] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 587.091730][ T7288] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.613264][ T822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 589.623257][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 589.772610][ T7311] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 589.781977][ T7311] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.821815][ T7309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 589.831151][ T7309] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.191932][ T7312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 590.200942][ T7312] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.260340][ T822] usb 5-1: unable to read config index 0 descriptor/all [ 590.267415][ T822] usb 5-1: can't read configurations, error -71 [ 590.957178][ T7340] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 590.966251][ T7340] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 593.204798][ T7350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 593.214122][ T7350] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 593.234976][ T7351] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 593.243975][ T7351] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 593.848037][ T7334] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 594.418143][ T7366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 594.427424][ T7366] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.070323][ T7380] exfat: Deprecated parameter 'utf8' [ 595.114433][ T7380] exfat: Deprecated parameter 'utf8' [ 595.135882][ T7387] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 595.144397][ T7387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 595.497811][ T7380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 595.535419][ T7389] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 595.544568][ T7389] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.610703][ T7397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 596.619904][ T7397] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.939423][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1746'. [ 597.303512][ T7412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 597.312504][ T7412] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 597.903240][ T1955] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 598.031876][ T7423] 9pnet: Insufficient options for proto=fd [ 598.195427][ T1955] usb 4-1: Using ep0 maxpacket: 32 [ 598.329963][ T7427] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 598.949984][ T7434] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 598.959311][ T7434] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 598.972516][ T7427] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 599.335039][ T7437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 599.344335][ T7437] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 600.033845][ T7444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 600.041666][ T1955] usb 4-1: unable to read config index 0 descriptor/all [ 600.054908][ T1955] usb 4-1: can't read configurations, error -71 [ 600.065503][ T7444] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 600.081249][ T7444] ext4 filesystem being mounted at /350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 600.184427][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1759'. [ 600.343302][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1760'. [ 600.356484][ T7448] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 600.365492][ T7448] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 600.746347][ T7463] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 600.755469][ T7463] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 600.773224][ T791] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 601.345799][ T822] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 601.472142][ T791] usb 2-1: Using ep0 maxpacket: 32 [ 601.653602][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 602.083488][ T822] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 602.108379][ T822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 602.280524][ T791] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 602.290289][ T791] usb 2-1: config 1 interface 0 has no altsetting 0 [ 602.393458][ T822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 602.406806][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.421377][ T822] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 602.440290][ T822] usb 5-1: Manufacturer: ఉ [ 602.445157][ T822] usb 5-1: SerialNumber: Ж [ 602.463291][ T7459] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 602.493534][ T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 602.505753][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.514594][ T791] usb 2-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 602.531156][ T791] usb 2-1: Manufacturer: ఉ [ 602.536212][ T791] usb 2-1: SerialNumber: Ж [ 602.563385][ T7454] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 602.675085][ T7494] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 602.684244][ T7494] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.872019][ T791] usb 2-1: USB disconnect, device number 27 [ 602.891917][ T822] usb 5-1: USB disconnect, device number 34 [ 603.752125][ T7505] usb usb7: usbfs: process 7505 (syz.3.1772) did not claim interface 0 before use [ 604.866226][ T7525] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 604.875482][ T7525] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 605.054698][ T7527] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 605.063881][ T7527] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 606.179351][ T7541] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 606.188704][ T7541] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.204475][ T7551] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 607.213493][ T7551] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.244447][ T7543] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 607.338109][ T7543] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.689598][ T7567] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 607.698877][ T7567] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 608.411971][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1787'. [ 608.716136][ T551] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 609.363352][ T551] usb 3-1: Using ep0 maxpacket: 32 [ 610.850964][ T7585] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 610.860241][ T7585] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.304215][ T551] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 611.393799][ T551] usb 3-1: config 1 interface 0 has no altsetting 0 [ 612.113299][ T551] usb 3-1: string descriptor 0 read error: -71 [ 612.130248][ T551] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 612.152252][ T7597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 612.161403][ T7597] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 612.214185][ T7591] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 612.223274][ T7591] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 612.233722][ T551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.545822][ T551] usb 3-1: can't set config #1, error -71 [ 612.553376][ T551] usb 3-1: USB disconnect, device number 25 [ 614.224628][ T7606] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 614.233585][ T7606] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.244835][ T7611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 614.253996][ T7611] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.663674][ T7619] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 615.712886][ T7619] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 615.842508][ T7626] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 615.852007][ T7626] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.915595][ T7627] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 615.924872][ T7627] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.324380][ T7638] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 616.333401][ T7638] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.684924][ T7653] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 616.693929][ T7653] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.740348][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1805'. [ 617.103322][ T1955] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 617.550834][ T1955] usb 5-1: Using ep0 maxpacket: 32 [ 618.077568][ T7663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 618.083297][ T1955] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 618.086552][ T7663] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.097636][ T1955] usb 5-1: config 1 interface 0 has no altsetting 0 [ 619.828836][ T7678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 619.838148][ T7678] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 620.195023][ T7681] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 620.203997][ T7681] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.620959][ T1955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 621.632871][ T1955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.637159][ T7688] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 621.645721][ T1955] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 621.666431][ T7688] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.703447][ T1955] usb 5-1: can't set config #1, error -71 [ 621.711560][ T1955] usb 5-1: USB disconnect, device number 35 [ 623.532913][ T7705] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 623.542106][ T7705] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.091268][ T7707] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 624.100460][ T7707] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.594364][ T7722] 9pnet: Insufficient options for proto=fd [ 625.594614][ T7726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 625.603632][ T7726] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.708447][ T7735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 625.717499][ T7735] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.982514][ T7741] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 625.991550][ T7741] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.093412][ T7747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 626.109945][ T7747] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.956923][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1827'. [ 626.974387][ T7759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 626.983390][ T7759] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 627.730348][ T345] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 627.914546][ T7778] exfat: Deprecated parameter 'utf8' [ 627.920002][ T7778] exfat: Deprecated parameter 'utf8' [ 628.029133][ T7778] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 628.043231][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 628.853282][ T345] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 628.878606][ T345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 629.318511][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 629.328123][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.336952][ T345] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 629.353332][ T345] usb 3-1: Manufacturer: ఉ [ 629.357959][ T345] usb 3-1: SerialNumber: Ж [ 629.864175][ T7783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 629.873541][ T7783] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.885946][ T7765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 630.213312][ T345] usb 3-1: can't set config #1, error -71 [ 630.226445][ T345] usb 3-1: USB disconnect, device number 26 [ 630.276979][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'. [ 630.792354][ T7790] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 630.801540][ T7790] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 630.868899][ T7795] EXT4-fs (loop2): Test dummy encryption mode enabled [ 630.943287][ T433] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 631.048497][ T7795] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,test_dummy_encryption,,errors=continue [ 631.061129][ T7795] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 631.924711][ T433] usb 2-1: Using ep0 maxpacket: 32 [ 632.057087][ T7813] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 632.076035][ T7804] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.089344][ T7804] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 632.236804][ T7816] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 632.246061][ T7816] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.273256][ T433] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 632.316511][ T433] usb 2-1: config 1 interface 0 has no altsetting 0 [ 632.325632][ T7820] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 632.335307][ T7820] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.553309][ T433] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 632.562505][ T433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.571260][ T433] usb 2-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 632.587434][ T433] usb 2-1: Manufacturer: ఉ [ 632.592150][ T433] usb 2-1: SerialNumber: Ж [ 632.613292][ T7796] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 632.694757][ T7804] serio: Serial port ptm0 [ 632.755519][ T7830] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 632.763958][ T7830] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 632.905277][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1841'. [ 632.937702][ T433] usb 2-1: USB disconnect, device number 28 [ 633.263753][ T7834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 633.273125][ T7834] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.869561][ T433] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 634.206107][ T433] usb 5-1: Using ep0 maxpacket: 32 [ 635.053284][ T433] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 635.071944][ T433] usb 5-1: config 1 interface 0 has no altsetting 0 [ 635.313436][ T433] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 635.331658][ T433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.391399][ T433] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 635.532597][ T433] usb 5-1: Manufacturer: ఉ [ 635.571979][ T433] usb 5-1: SerialNumber: Ж [ 635.683529][ T7833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 635.782356][ T7872] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 635.858964][ T7866] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 635.868544][ T7866] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 636.275308][ T7869] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 636.303501][ T7872] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 636.317566][ T433] usb 5-1: USB disconnect, device number 36 [ 636.330920][ T7869] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 638.495260][ T7895] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 638.504605][ T7895] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 638.517131][ T7891] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 638.526697][ T7891] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.708071][ T7917] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 640.717256][ T7917] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.789833][ T7915] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 640.799260][ T7915] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 641.165086][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1862'. [ 641.226897][ T7924] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.341433][ T7924] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 641.483236][ T1955] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 641.566654][ T7935] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.596642][ T7935] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 641.624822][ T7942] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 641.633324][ T7942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 641.723212][ T1955] usb 1-1: Using ep0 maxpacket: 32 [ 642.973863][ T1955] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 643.122669][ T1955] usb 1-1: config 1 interface 0 has no altsetting 0 [ 643.302762][ T7965] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.315754][ T7965] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 643.850566][ T7970] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 643.859824][ T7970] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.221529][ T7974] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 644.230659][ T7974] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.243990][ T7965] serio: Serial port ptm0 [ 644.833296][ T1955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 644.940352][ T1955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.954654][ T1955] usb 1-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 644.973499][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1880'. [ 645.220820][ T7996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 645.230154][ T7996] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.653451][ T644] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 646.143224][ T644] usb 3-1: Using ep0 maxpacket: 32 [ 646.209989][ T8003] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 646.219063][ T8003] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 646.233278][ T1955] usb 1-1: can't set config #1, error -71 [ 646.242519][ T1955] usb 1-1: USB disconnect, device number 36 [ 646.493449][ T644] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 646.866528][ T644] usb 3-1: config 1 interface 0 has no altsetting 0 [ 646.970660][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1885'. [ 647.273358][ T644] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 647.320668][ T644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.443426][ T8021] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 647.452896][ T8021] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.565544][ T644] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 647.693753][ T644] usb 3-1: Manufacturer: ఉ [ 647.698500][ T644] usb 3-1: SerialNumber: Ж [ 648.729791][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1888'. [ 648.749278][ T7992] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 648.863240][ T644] usb 3-1: can't set config #1, error -71 [ 648.918182][ T644] usb 3-1: USB disconnect, device number 27 [ 649.003191][ T968] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 649.073224][ T307] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 649.105042][ T8042] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 649.208026][ T8042] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 649.240363][ T8045] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 649.243174][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 649.249572][ T8045] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 649.313234][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 649.374854][ T8042] serio: Serial port ptm0 [ 649.463235][ T968] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 649.472879][ T968] usb 4-1: config 1 interface 0 has no altsetting 0 [ 649.543236][ T307] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 649.554137][ T307] usb 5-1: config 1 interface 0 has no altsetting 0 [ 649.653240][ T968] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 649.662302][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.683215][ T968] usb 4-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 649.703201][ T968] usb 4-1: Manufacturer: ఉ [ 649.707820][ T968] usb 4-1: SerialNumber: Ж [ 649.743466][ T8015] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 649.753246][ T307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 649.778365][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.787255][ T307] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 649.803849][ T307] usb 5-1: Manufacturer: ఉ [ 649.808548][ T307] usb 5-1: SerialNumber: Ж [ 649.843237][ T8031] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 650.055432][ T968] usb 4-1: USB disconnect, device number 29 [ 650.207428][ T307] usb 5-1: USB disconnect, device number 37 [ 650.241932][ T8063] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 650.251329][ T8063] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.613371][ T8068] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 650.622706][ T8068] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 652.855369][ T8087] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 652.864711][ T8087] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 654.937663][ T8091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 654.946916][ T8091] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.022558][ T8098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 655.031827][ T8098] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.057021][ T8103] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 655.066279][ T8103] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.657532][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1907'. [ 655.973213][ T1955] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 656.034324][ T8122] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 656.043347][ T8122] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.223475][ T1955] usb 3-1: Using ep0 maxpacket: 32 [ 656.314058][ T8127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 656.365999][ T8127] overlayfs: missing 'lowerdir' [ 656.373840][ T24] audit: type=1400 audit(1755026802.100:167): avc: denied { mounton } for pid=8126 comm="syz.4.1910" path="/380/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 656.483298][ T1955] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 656.489241][ T24] audit: type=1400 audit(1755026802.220:168): avc: denied { write } for pid=8126 comm="syz.4.1910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 656.493307][ T1955] usb 3-1: config 1 interface 0 has no altsetting 0 [ 656.560612][ T8135] 9pnet: Insufficient options for proto=fd [ 656.693325][ T1955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 657.342515][ T1955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.360853][ T1955] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 657.391653][ T1955] usb 3-1: Manufacturer: ఉ [ 657.396563][ T1955] usb 3-1: SerialNumber: Ж [ 657.493300][ T8117] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 657.505051][ T8142] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 657.514232][ T8142] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.272194][ T1955] usb 3-1: USB disconnect, device number 28 [ 658.304654][ T8149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 658.314315][ T8149] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.397610][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'. [ 658.725761][ T822] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 658.773249][ T24] audit: type=1400 audit(1755026804.510:169): avc: denied { create } for pid=8175 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 658.793718][ T24] audit: type=1400 audit(1755026804.520:170): avc: denied { connect } for pid=8175 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 658.964726][ T24] audit: type=1400 audit(1755026804.550:171): avc: denied { write } for pid=8175 comm="syz.1.1924" path="socket:[36732]" dev="sockfs" ino=36732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 659.033240][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 659.064976][ T8178] exfat: Deprecated parameter 'utf8' [ 659.070446][ T8178] exfat: Deprecated parameter 'utf8' [ 659.088626][ T8178] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 659.263518][ T822] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 659.293549][ T8176] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 659.349935][ T822] usb 1-1: config 1 interface 0 has no altsetting 0 [ 659.379063][ T8176] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 659.465599][ T8176] EXT4-fs (loop1): can't mount with commit=3, fs mounted w/o journal [ 659.913388][ T822] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 659.922610][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.931073][ T822] usb 1-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 659.947031][ T822] usb 1-1: Manufacturer: ఉ [ 659.951657][ T822] usb 1-1: SerialNumber: Ж [ 659.973578][ T8161] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 660.303758][ T8197] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 660.321903][ T822] usb 1-1: USB disconnect, device number 37 [ 660.357923][ T8197] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 660.573947][ T8201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 660.583314][ T8201] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.439852][ T24] audit: type=1400 audit(1755026807.170:172): avc: denied { connect } for pid=8208 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 661.466868][ T8218] FAULT_INJECTION: forcing a failure. [ 661.466868][ T8218] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 661.641228][ T8211] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 661.650495][ T8211] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 662.220769][ T8218] CPU: 0 PID: 8218 Comm: syz.4.1932 Not tainted 5.10.240-syzkaller #0 [ 662.221747][ T8197] serio: Serial port ptm0 [ 662.228953][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 662.228958][ T8218] Call Trace: [ 662.228980][ T8218] __dump_stack+0x21/0x24 [ 662.228991][ T8218] dump_stack_lvl+0x169/0x1d8 [ 662.229003][ T8218] ? show_regs_print_info+0x18/0x18 [ 662.229014][ T8218] ? compat_start_thread+0x80/0x80 [ 662.229025][ T8218] dump_stack+0x15/0x1c [ 662.229036][ T8218] should_fail+0x3c1/0x510 [ 662.229058][ T8218] should_fail_usercopy+0x1a/0x20 [ 662.279648][ T8218] _copy_from_user+0x20/0xd0 [ 662.284244][ T8218] __copy_msghdr_from_user+0xaf/0x5e0 [ 662.289621][ T8218] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 662.294919][ T8218] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 662.300738][ T8218] ___sys_sendmsg+0x156/0x260 [ 662.305509][ T8218] ? __sys_sendmsg+0x250/0x250 [ 662.310275][ T8218] ? rcu_read_unlock_special+0x170/0x420 [ 662.315917][ T8218] ? __fget_files+0x2bf/0x320 [ 662.320601][ T8218] ? __fdget+0x1a1/0x230 [ 662.324847][ T8218] __x64_sys_sendmsg+0x1e2/0x2a0 [ 662.329875][ T8218] ? ___sys_sendmsg+0x260/0x260 [ 662.334732][ T8218] ? switch_fpu_return+0x197/0x340 [ 662.339938][ T8218] do_syscall_64+0x31/0x40 [ 662.344361][ T8218] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 662.350255][ T8218] RIP: 0033:0x7fc6a17c9be9 [ 662.354679][ T8218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.374291][ T8218] RSP: 002b:00007fc6a01f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.382828][ T8218] RAX: ffffffffffffffda RBX: 00007fc6a19f1180 RCX: 00007fc6a17c9be9 [ 662.390825][ T8218] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 662.398820][ T8218] RBP: 00007fc6a01f0090 R08: 0000000000000000 R09: 0000000000000000 [ 662.406806][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.414877][ T8218] R13: 00007fc6a19f1218 R14: 00007fc6a19f1180 R15: 00007ffd727c65d8 [ 662.438217][ T8222] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 662.460428][ T8222] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 662.492022][ T8222] serio: Serial port ptm0 [ 662.618391][ T8235] 9p: Unknown uid 18446744073709551615 [ 662.696834][ T24] audit: type=1400 audit(1755026808.430:173): avc: denied { write } for pid=8241 comm="syz.2.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 662.718326][ T24] audit: type=1400 audit(1755026808.430:174): avc: denied { nlmsg_write } for pid=8241 comm="syz.2.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 662.769192][ T8243] FAULT_INJECTION: forcing a failure. [ 662.769192][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.782355][ T8243] CPU: 0 PID: 8243 Comm: syz.4.1939 Not tainted 5.10.240-syzkaller #0 [ 662.790523][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 662.800593][ T8243] Call Trace: [ 662.803909][ T8243] __dump_stack+0x21/0x24 [ 662.808259][ T8243] dump_stack_lvl+0x169/0x1d8 [ 662.812957][ T8243] ? show_regs_print_info+0x18/0x18 [ 662.818166][ T8243] ? proc_fail_nth_read+0x210/0x210 [ 662.823385][ T8243] dump_stack+0x15/0x1c [ 662.825095][ T24] audit: type=1400 audit(1755026808.500:175): avc: denied { read write } for pid=8238 comm="syz.4.1939" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 662.827572][ T8243] should_fail+0x3c1/0x510 [ 662.855503][ T8243] should_fail_usercopy+0x1a/0x20 [ 662.857085][ T24] audit: type=1400 audit(1755026808.500:176): avc: denied { open } for pid=8238 comm="syz.4.1939" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 662.860535][ T8243] _copy_from_user+0x20/0xd0 [ 662.860547][ T8243] __sys_sendto+0x298/0x580 [ 662.860569][ T8243] ? __ia32_sys_getpeername+0x90/0x90 [ 662.884226][ T24] audit: type=1400 audit(1755026808.500:177): avc: denied { ioctl } for pid=8238 comm="syz.4.1939" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 662.888653][ T8243] ? mutex_lock+0x8c/0xe0 [ 662.888672][ T8243] ? __kasan_check_write+0x14/0x20 [ 662.933069][ T8243] ? fput_many+0x15a/0x1a0 [ 662.937480][ T8243] ? __ia32_sys_read+0x90/0x90 [ 662.942244][ T8243] ? fpu__clear_all+0x20/0x20 [ 662.946927][ T8243] __x64_sys_sendto+0xe5/0x100 [ 662.951703][ T8243] do_syscall_64+0x31/0x40 [ 662.956180][ T8243] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 662.962430][ T8243] RIP: 0033:0x7fc6a17c9be9 [ 662.966835][ T8243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.986440][ T8243] RSP: 002b:00007fc6a0211038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 662.994857][ T8243] RAX: ffffffffffffffda RBX: 00007fc6a19f1090 RCX: 00007fc6a17c9be9 [ 663.002817][ T8243] RDX: fffffffffffffea7 RSI: 0000200000f6f000 RDI: 0000000000000003 [ 663.010859][ T8243] RBP: 00007fc6a0211090 R08: 0000200000b63fe4 R09: 000000000000001c [ 663.018815][ T8243] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001 [ 663.026775][ T8243] R13: 00007fc6a19f1128 R14: 00007fc6a19f1090 R15: 00007ffd727c65d8 [ 663.509305][ T8252] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 663.518563][ T8252] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.835708][ T8264] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 664.867806][ T8264] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 665.712494][ T8264] serio: Serial port ptm1 [ 665.909372][ T8289] FAULT_INJECTION: forcing a failure. [ 665.909372][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.922475][ T8289] CPU: 1 PID: 8289 Comm: syz.2.1950 Not tainted 5.10.240-syzkaller #0 [ 665.930632][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.940690][ T8289] Call Trace: [ 665.943996][ T8289] __dump_stack+0x21/0x24 [ 665.948326][ T8289] dump_stack_lvl+0x169/0x1d8 [ 665.953006][ T8289] ? thaw_kernel_threads+0x220/0x220 [ 665.958290][ T8289] ? vsnprintf+0x1871/0x1960 [ 665.962888][ T8289] ? show_regs_print_info+0x18/0x18 [ 665.968085][ T8289] dump_stack+0x15/0x1c [ 665.972241][ T8289] should_fail+0x3c1/0x510 [ 665.976664][ T8289] should_fail_usercopy+0x1a/0x20 [ 665.981701][ T8289] _copy_to_user+0x20/0x90 [ 665.986133][ T8289] simple_read_from_buffer+0xe9/0x160 [ 665.991515][ T8289] proc_fail_nth_read+0x19a/0x210 [ 665.996541][ T8289] ? proc_fault_inject_write+0x2f0/0x2f0 [ 666.002182][ T8289] ? rw_verify_area+0x1c0/0x360 [ 666.007032][ T8289] ? proc_fault_inject_write+0x2f0/0x2f0 [ 666.012677][ T8289] vfs_read+0x1fe/0xa10 [ 666.016839][ T8289] ? kernel_read+0x70/0x70 [ 666.021243][ T8289] ? __kasan_check_write+0x14/0x20 [ 666.026341][ T8289] ? mutex_lock+0x8c/0xe0 [ 666.030654][ T8289] ? mutex_trylock+0xa0/0xa0 [ 666.035222][ T8289] ? __fget_files+0x2c4/0x320 [ 666.039891][ T8289] ? __fdget_pos+0x2d2/0x380 [ 666.044489][ T8289] ? ksys_read+0x71/0x240 [ 666.048798][ T8289] ksys_read+0x140/0x240 [ 666.053026][ T8289] ? vfs_write+0xd60/0xd60 [ 666.057426][ T8289] ? fpu__clear_all+0x20/0x20 [ 666.062099][ T8289] __x64_sys_read+0x7b/0x90 [ 666.066621][ T8289] do_syscall_64+0x31/0x40 [ 666.070271][ T8280] SELinux: (dev overlay, type overlay) getxattr errno 4 [ 666.071046][ T8289] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 666.071065][ T8289] RIP: 0033:0x7f6a6f9265fc [ 666.078051][ T8285] overlayfs: statfs failed on './file0' [ 666.083868][ T8289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 666.083876][ T8289] RSP: 002b:00007f6a6e34e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.083892][ T8289] RAX: ffffffffffffffda RBX: 00007f6a6fb4f180 RCX: 00007f6a6f9265fc [ 666.083899][ T8289] RDX: 000000000000000f RSI: 00007f6a6e34e0a0 RDI: 0000000000000009 [ 666.083914][ T8289] RBP: 00007f6a6e34e090 R08: 0000000000000000 R09: 0000000000000000 [ 666.145746][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.153700][ T8289] R13: 00007f6a6fb4f218 R14: 00007f6a6fb4f180 R15: 00007fff84bb3bc8 [ 666.209477][ T24] audit: type=1400 audit(1755026811.940:178): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 666.416534][ T8287] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 666.425595][ T8287] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 666.444992][ T8297] 9p: Unknown uid 18446744073709551615 [ 666.559255][ T8305] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 666.617833][ T8305] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 666.744869][ T8305] serio: Serial port ptm0 [ 666.866533][ T8299] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 666.875589][ T8299] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 667.322376][ T8323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 667.331672][ T8323] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 668.044909][ T8328] x_tables: duplicate underflow at hook 1 [ 668.065953][ T24] audit: type=1400 audit(1755026813.800:179): avc: denied { bind } for pid=8327 comm="syz.2.1960" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.087530][ T24] audit: type=1400 audit(1755026813.810:180): avc: denied { name_bind } for pid=8327 comm="syz.2.1960" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 668.108620][ T24] audit: type=1400 audit(1755026813.810:181): avc: denied { node_bind } for pid=8327 comm="syz.2.1960" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 668.755421][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'. [ 669.053251][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 669.287952][ T8345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 669.297240][ T8345] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.923178][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 670.103235][ T8359] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 670.143248][ T25] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 670.153024][ T8359] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 670.171655][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 670.189471][ T8362] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 670.208176][ T8362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 670.344569][ T8359] serio: Serial port ptm0 [ 670.363392][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 670.372538][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.403180][ T25] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 670.445927][ T25] usb 3-1: Manufacturer: ఉ [ 670.463486][ T25] usb 3-1: SerialNumber: Ж [ 670.493268][ T8343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 670.665005][ T8371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 670.674186][ T8371] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.804380][ T25] usb 3-1: USB disconnect, device number 29 [ 670.912518][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1973'. [ 670.932749][ T24] audit: type=1400 audit(1755026816.660:182): avc: denied { mount } for pid=8383 comm="syz.3.1972" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 670.989997][ T24] audit: type=1400 audit(1755026816.710:183): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 671.191958][ T643] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 671.716839][ T8397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 671.726107][ T8397] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 672.103453][ T8404] FAULT_INJECTION: forcing a failure. [ 672.103453][ T8404] name failslab, interval 1, probability 0, space 0, times 1 [ 672.116179][ T8404] CPU: 1 PID: 8404 Comm: syz.2.1979 Not tainted 5.10.240-syzkaller #0 [ 672.124333][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 672.134407][ T8404] Call Trace: [ 672.137708][ T8404] __dump_stack+0x21/0x24 [ 672.142039][ T8404] dump_stack_lvl+0x169/0x1d8 [ 672.146717][ T8404] ? thaw_kernel_threads+0x220/0x220 [ 672.152009][ T8404] ? show_regs_print_info+0x18/0x18 [ 672.157210][ T8404] dump_stack+0x15/0x1c [ 672.161371][ T8404] should_fail+0x3c1/0x510 [ 672.165792][ T8404] ? getname_flags+0xb9/0x500 [ 672.170473][ T8404] __should_failslab+0xa4/0xe0 [ 672.175248][ T8404] should_failslab+0x9/0x20 [ 672.179762][ T8404] kmem_cache_alloc+0x3d/0x2e0 [ 672.184613][ T8404] getname_flags+0xb9/0x500 [ 672.189120][ T8404] getname+0x19/0x20 [ 672.193020][ T8404] do_sys_openat2+0xd9/0x6d0 [ 672.197609][ T8404] ? __kasan_check_write+0x14/0x20 [ 672.202721][ T8404] ? fput_many+0x15a/0x1a0 [ 672.207140][ T8404] ? do_sys_open+0xe0/0xe0 [ 672.211562][ T8404] ? switch_fpu_return+0x197/0x340 [ 672.216675][ T8404] ? __ia32_sys_read+0x90/0x90 [ 672.221442][ T8404] ? fpu__clear_all+0x20/0x20 [ 672.226123][ T8404] ? __kasan_check_read+0x11/0x20 [ 672.231157][ T8404] __x64_sys_openat+0x136/0x160 [ 672.236016][ T8404] do_syscall_64+0x31/0x40 [ 672.240437][ T8404] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 672.246325][ T8404] RIP: 0033:0x7f6a6f927be9 [ 672.250731][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.270327][ T8404] RSP: 002b:00007f6a6e34e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 672.278819][ T8404] RAX: ffffffffffffffda RBX: 00007f6a6fb4f180 RCX: 00007f6a6f927be9 [ 672.286781][ T8404] RDX: 0000000000000601 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 672.294740][ T8404] RBP: 00007f6a6e34e090 R08: 0000000000000000 R09: 0000000000000000 [ 672.302701][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.310665][ T8404] R13: 00007f6a6fb4f218 R14: 00007f6a6fb4f180 R15: 00007fff84bb3bc8 [ 672.684266][ T643] usb 5-1: Using ep0 maxpacket: 32 [ 672.770968][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1980'. [ 672.897706][ T8419] FAULT_INJECTION: forcing a failure. [ 672.897706][ T8419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.910819][ T8419] CPU: 1 PID: 8419 Comm: syz.1.1983 Not tainted 5.10.240-syzkaller #0 [ 672.918972][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 672.929212][ T8419] Call Trace: [ 672.932501][ T8419] __dump_stack+0x21/0x24 [ 672.936820][ T8419] dump_stack_lvl+0x169/0x1d8 [ 672.941528][ T8419] ? show_regs_print_info+0x18/0x18 [ 672.946716][ T8419] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 672.953556][ T8419] dump_stack+0x15/0x1c [ 672.957701][ T8419] should_fail+0x3c1/0x510 [ 672.962108][ T8419] should_fail_usercopy+0x1a/0x20 [ 672.967126][ T8419] strncpy_from_user+0x24/0x2e0 [ 672.971966][ T8419] setxattr+0xcf/0x370 [ 672.976055][ T8419] ? path_setxattr+0x210/0x210 [ 672.980829][ T8419] ? __kasan_check_read+0x11/0x20 [ 672.985847][ T8419] ? preempt_schedule_irq+0xbb/0x110 [ 672.991136][ T8419] ? mnt_want_write_file+0x257/0x450 [ 672.996414][ T8419] ? mnt_want_write_file+0x324/0x450 [ 673.001691][ T8419] __se_sys_fsetxattr+0x126/0x1a0 [ 673.006711][ T8419] __x64_sys_fsetxattr+0xbf/0xd0 [ 673.011639][ T8419] do_syscall_64+0x31/0x40 [ 673.016049][ T8419] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 673.021933][ T8419] RIP: 0033:0x7fce14bffbe9 [ 673.026341][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.045941][ T8419] RSP: 002b:00007fce13626038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 673.054358][ T8419] RAX: ffffffffffffffda RBX: 00007fce14e27180 RCX: 00007fce14bffbe9 [ 673.062340][ T8419] RDX: 0000200000000540 RSI: 00002000000001c0 RDI: 0000000000000009 [ 673.070306][ T8419] RBP: 00007fce13626090 R08: 0000000000000000 R09: 0000000000000000 [ 673.078400][ T8419] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 673.086360][ T8419] R13: 00007fce14e27218 R14: 00007fce14e27180 R15: 00007ffe5d883b18 [ 673.142700][ T8415] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 673.248244][ T8415] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 673.413420][ T8415] serio: Serial port ptm0 [ 673.433282][ T643] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 673.443051][ T643] usb 5-1: config 1 interface 0 has no altsetting 0 [ 673.463267][ T15] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 673.603349][ T643] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 673.612546][ T643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.626606][ T643] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 673.642800][ T643] usb 5-1: Manufacturer: ఉ [ 673.647689][ T643] usb 5-1: SerialNumber: Ж [ 673.663268][ T8382] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 673.675643][ T24] audit: type=1400 audit(1755026819.410:184): avc: denied { mounton } for pid=8424 comm="syz.0.1985" path="/377/file0" dev="tmpfs" ino=2180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 673.675671][ T8425] fuse: Bad value for 'user_id' [ 673.703563][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 673.766506][ T8428] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 673.822291][ T24] audit: type=1400 audit(1755026819.510:185): avc: denied { relabelto } for pid=8422 comm="syz.1.1984" name=E91F7189591E9233614B dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 673.883605][ T24] audit: type=1400 audit(1755026819.510:186): avc: denied { associate } for pid=8422 comm="syz.1.1984" name=E91F7189591E9233614B dev="tmpfs" ino=2316 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:restorecond_var_run_t:s0" [ 674.011870][ T24] audit: type=1400 audit(1755026819.530:187): avc: denied { map } for pid=8424 comm="syz.0.1985" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 674.035560][ T24] audit: type=1400 audit(1755026819.530:188): avc: denied { execute } for pid=8424 comm="syz.0.1985" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 674.083669][ T15] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 674.093559][ T15] usb 4-1: config 1 interface 0 has no altsetting 0 [ 674.117155][ T643] usb 5-1: USB disconnect, device number 38 [ 674.386969][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 674.405304][ T8437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 674.414567][ T8437] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 674.652005][ T24] audit: type=1400 audit(1755026820.380:189): avc: denied { unlink } for pid=278 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 675.229885][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.342026][ T15] usb 4-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 675.358565][ T15] usb 4-1: Manufacturer: ఉ [ 675.363531][ T15] usb 4-1: SerialNumber: Ж [ 675.383248][ T8409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 675.454445][ T8448] EXT4-fs (loop4): bad geometry: block count 144115188075856384 exceeds size of device (512 blocks) [ 675.467014][ T8451] FAULT_INJECTION: forcing a failure. [ 675.467014][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 675.479688][ T8451] CPU: 0 PID: 8451 Comm: syz.1.1990 Not tainted 5.10.240-syzkaller #0 [ 675.487843][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.497897][ T8451] Call Trace: [ 675.501195][ T8451] __dump_stack+0x21/0x24 [ 675.505528][ T8451] dump_stack_lvl+0x169/0x1d8 [ 675.510204][ T8451] ? thaw_kernel_threads+0x220/0x220 [ 675.515499][ T8451] ? show_regs_print_info+0x18/0x18 [ 675.520799][ T8451] ? proc_fail_nth_read+0x210/0x210 [ 675.526000][ T8451] dump_stack+0x15/0x1c [ 675.530159][ T8451] should_fail+0x3c1/0x510 [ 675.534569][ T8451] ? getname_flags+0xb9/0x500 [ 675.539238][ T8451] __should_failslab+0xa4/0xe0 [ 675.543998][ T8451] should_failslab+0x9/0x20 [ 675.548511][ T8451] kmem_cache_alloc+0x3d/0x2e0 [ 675.553273][ T8451] getname_flags+0xb9/0x500 [ 675.557795][ T8451] getname+0x19/0x20 [ 675.561687][ T8451] do_sys_openat2+0xd9/0x6d0 [ 675.566272][ T8451] ? __kasan_check_write+0x14/0x20 [ 675.571371][ T8451] ? fput_many+0x15a/0x1a0 [ 675.575785][ T8451] ? do_sys_open+0xe0/0xe0 [ 675.580190][ T8451] ? fput+0x1a/0x20 [ 675.583996][ T8451] ? ksys_write+0x1eb/0x240 [ 675.588599][ T8451] ? __ia32_sys_read+0x90/0x90 [ 675.593363][ T8451] ? fpu__clear_all+0x20/0x20 [ 675.598114][ T8451] ? fd_install+0x50/0x60 [ 675.602437][ T8451] __x64_sys_openat+0x136/0x160 [ 675.607281][ T8451] do_syscall_64+0x31/0x40 [ 675.611713][ T8451] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 675.617616][ T8451] RIP: 0033:0x7fce14bffbe9 [ 675.622025][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.641620][ T8451] RSP: 002b:00007fce13626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.650031][ T8451] RAX: ffffffffffffffda RBX: 00007fce14e27180 RCX: 00007fce14bffbe9 [ 675.657996][ T8451] RDX: 0000000000000601 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 675.665966][ T8451] RBP: 00007fce13626090 R08: 0000000000000000 R09: 0000000000000000 [ 675.673929][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.681910][ T8451] R13: 00007fce14e27218 R14: 00007fce14e27180 R15: 00007ffe5d883b18 [ 675.738993][ T8446] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 675.741687][ T24] audit: type=1400 audit(1755026821.470:190): avc: denied { write } for pid=8452 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.748046][ T8446] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.795107][ T15] usb 4-1: USB disconnect, device number 30 [ 675.819449][ T24] audit: type=1400 audit(1755026821.500:191): avc: denied { read } for pid=8452 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.840445][ T8448] overlayfs: workdir and upperdir must be separate subtrees [ 675.848037][ T24] audit: type=1400 audit(1755026821.500:192): avc: denied { ioctl } for pid=8452 comm="syz.2.1992" path="socket:[38302]" dev="sockfs" ino=38302 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.889260][ T24] audit: type=1400 audit(1755026821.620:193): avc: denied { remount } for pid=8447 comm="syz.4.1991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 676.083219][ T8465] device syzkaller0 entered promiscuous mode [ 676.109208][ T8464] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 678.050155][ T8479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 678.059398][ T8479] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.342589][ T8486] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 678.351830][ T8486] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.716472][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 679.716487][ T24] audit: type=1400 audit(1755026825.446:195): avc: denied { ioctl } for pid=8499 comm="syz.1.2002" path="socket:[37835]" dev="sockfs" ino=37835 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 679.788913][ T24] audit: type=1400 audit(1755026825.516:196): avc: denied { read write } for pid=8499 comm="syz.1.2002" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 679.849357][ T24] audit: type=1400 audit(1755026825.516:197): avc: denied { open } for pid=8499 comm="syz.1.2002" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 679.873599][ T24] audit: type=1400 audit(1755026825.516:198): avc: denied { create } for pid=8499 comm="syz.1.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 680.450983][ T8506] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 680.460374][ T8506] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.217766][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 681.818120][ T791] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 682.508552][ T8524] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 682.517832][ T8524] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.116710][ T24] audit: type=1400 audit(1755026829.586:199): avc: denied { ioctl } for pid=8541 comm="syz.2.2012" path="socket:[38423]" dev="sockfs" ino=38423 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 684.276459][ T24] audit: type=1400 audit(1755026830.006:200): avc: denied { create } for pid=8545 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 684.348508][ T8555] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute=/dev/net/tun" or missing value [ 684.372393][ T8559] FAULT_INJECTION: forcing a failure. [ 684.372393][ T8559] name failslab, interval 1, probability 0, space 0, times 0 [ 684.373410][ T24] audit: type=1400 audit(1755026830.096:201): avc: denied { create } for pid=8557 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 684.385185][ T8559] CPU: 1 PID: 8559 Comm: syz.0.2019 Not tainted 5.10.240-syzkaller #0 [ 684.385192][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.385196][ T8559] Call Trace: [ 684.385213][ T8559] __dump_stack+0x21/0x24 [ 684.385232][ T8559] dump_stack_lvl+0x169/0x1d8 [ 684.406039][ T24] audit: type=1400 audit(1755026830.116:202): avc: denied { setopt } for pid=8557 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 684.412631][ T8559] ? show_regs_print_info+0x18/0x18 [ 684.412649][ T8559] dump_stack+0x15/0x1c [ 684.463774][ T8559] should_fail+0x3c1/0x510 [ 684.468293][ T8559] ? btf_new_fd+0x113/0xa00 [ 684.472822][ T8559] __should_failslab+0xa4/0xe0 [ 684.477621][ T8559] should_failslab+0x9/0x20 [ 684.482151][ T8559] kmem_cache_alloc_trace+0x3a/0x2e0 [ 684.487454][ T8559] btf_new_fd+0x113/0xa00 [ 684.491805][ T8559] bpf_btf_load+0x5e/0x70 [ 684.496160][ T8559] __se_sys_bpf+0x48a/0x680 [ 684.500690][ T8559] ? __x64_sys_bpf+0x90/0x90 [ 684.505285][ T8559] __x64_sys_bpf+0x7b/0x90 [ 684.509713][ T8559] do_syscall_64+0x31/0x40 [ 684.514156][ T8559] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 684.520047][ T8559] RIP: 0033:0x7f6f7ff81be9 [ 684.524467][ T8559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.544082][ T8559] RSP: 002b:00007f6f7e9ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.552513][ T8559] RAX: ffffffffffffffda RBX: 00007f6f801a8fa0 RCX: 00007f6f7ff81be9 [ 684.560490][ T8559] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 684.568466][ T8559] RBP: 00007f6f7e9ea090 R08: 0000000000000000 R09: 0000000000000000 [ 684.577915][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.585892][ T8559] R13: 00007f6f801a9038 R14: 00007f6f801a8fa0 R15: 00007ffd8af29898 [ 685.036304][ T24] audit: type=1400 audit(1755026830.526:203): avc: denied { mount } for pid=8557 comm="syz.1.2018" name="/" dev="overlay" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 685.046098][ T8562] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 685.073806][ T8562] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.405258][ T791] usb 1-1: device not accepting address 38, error -71 [ 686.484007][ T24] audit: type=1400 audit(1755026831.026:204): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 687.563678][ T8574] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 687.621754][ T8574] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 687.674927][ T8583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 687.684250][ T8583] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 688.227172][ T8595] cgroup: syz.3.2026 (8595) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 688.759528][ T8595] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 688.796220][ T8574] serio: Serial port ptm0 [ 688.807834][ T8585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 688.817187][ T8585] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 689.010412][ T8597] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 689.019713][ T8597] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 689.361987][ T8609] FAULT_INJECTION: forcing a failure. [ 689.361987][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.380781][ T8609] CPU: 1 PID: 8609 Comm: syz.2.2027 Not tainted 5.10.240-syzkaller #0 [ 689.388966][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.399034][ T8609] Call Trace: [ 689.402333][ T8609] __dump_stack+0x21/0x24 [ 689.406674][ T8609] dump_stack_lvl+0x169/0x1d8 [ 689.411352][ T8609] ? show_regs_print_info+0x18/0x18 [ 689.416581][ T8609] dump_stack+0x15/0x1c [ 689.420822][ T8609] should_fail+0x3c1/0x510 [ 689.425261][ T8609] should_fail_usercopy+0x1a/0x20 [ 689.430270][ T8609] _copy_from_user+0x20/0xd0 [ 689.434880][ T8609] __se_sys_memfd_create+0x131/0x3a0 [ 689.440251][ T8609] __x64_sys_memfd_create+0x5b/0x70 [ 689.445424][ T8609] do_syscall_64+0x31/0x40 [ 689.449817][ T8609] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 689.455689][ T8609] RIP: 0033:0x7f6a6f927be9 [ 689.460081][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.479678][ T8609] RSP: 002b:00007f6a6e38fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 689.488080][ T8609] RAX: ffffffffffffffda RBX: 00000000000004b1 RCX: 00007f6a6f927be9 [ 689.496055][ T8609] RDX: 00007f6a6e38fef0 RSI: 0000000000000000 RDI: 00007f6a6f9ab7e8 [ 689.504012][ T8609] RBP: 0000200000000580 R08: 00007f6a6e38fbb7 R09: 00007f6a6e38fe40 [ 689.511963][ T8609] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 689.519918][ T8609] R13: 00007f6a6e38fef0 R14: 00007f6a6e38feb0 R15: 0000200000000540 [ 689.528103][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 689.576860][ T8612] 9pnet: Could not find request transport: d [ 689.839187][ T25] usb 4-1: too many configurations: 23, using maximum allowed: 8 [ 690.103647][ T8623] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 690.112861][ T8623] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 691.083380][ T25] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 691.160955][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 691.219022][ T25] usb 4-1: SerialNumber: syz [ 691.258405][ T25] usb 4-1: config 0 descriptor?? [ 691.283242][ T25] usb 4-1: can't set config #0, error -71 [ 691.293342][ T25] usb 4-1: USB disconnect, device number 31 [ 691.413583][ T24] audit: type=1400 audit(1755026837.136:205): avc: denied { create } for pid=8645 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 691.861081][ T8652] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 691.870346][ T8652] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.703223][ T8658] capability: warning: `syz.1.2042' uses 32-bit capabilities (legacy support in use) [ 692.764544][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2045'. [ 692.883982][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2047'. [ 692.902419][ T8670] FAULT_INJECTION: forcing a failure. [ 692.902419][ T8670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.915933][ T8670] CPU: 0 PID: 8670 Comm: syz.3.2049 Not tainted 5.10.240-syzkaller #0 [ 692.924094][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.934141][ T8670] Call Trace: [ 692.937426][ T8670] __dump_stack+0x21/0x24 [ 692.941753][ T8670] dump_stack_lvl+0x169/0x1d8 [ 692.946419][ T8670] ? show_regs_print_info+0x18/0x18 [ 692.951609][ T8670] dump_stack+0x15/0x1c [ 692.955757][ T8670] should_fail+0x3c1/0x510 [ 692.960159][ T8670] should_fail_usercopy+0x1a/0x20 [ 692.965171][ T8670] _copy_from_user+0x20/0xd0 [ 692.969751][ T8670] __sys_sendto+0x298/0x580 [ 692.974245][ T8670] ? __ia32_sys_getpeername+0x90/0x90 [ 692.979602][ T8670] ? down_read_trylock+0x100/0x150 [ 692.984710][ T8670] ? up_read+0x12/0x50 [ 692.988773][ T8670] ? do_user_addr_fault+0x791/0xc80 [ 692.993963][ T8670] ? debug_smp_processor_id+0x17/0x20 [ 692.999324][ T8670] __x64_sys_sendto+0xe5/0x100 [ 693.004073][ T8670] do_syscall_64+0x31/0x40 [ 693.008588][ T8670] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 693.014470][ T8670] RIP: 0033:0x7f11232a1a7c [ 693.018878][ T8670] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 693.038474][ T8670] RSP: 002b:00007f1121d06ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 693.046877][ T8670] RAX: ffffffffffffffda RBX: 00007f1121d06fc0 RCX: 00007f11232a1a7c [ 693.054935][ T8670] RDX: 0000000000000020 RSI: 00007f1121d07010 RDI: 0000000000000003 [ 693.062898][ T8670] RBP: 0000000000000000 R08: 00007f1121d06f14 R09: 000000000000000c [ 693.070944][ T8670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 693.078907][ T8670] R13: 00007f1121d06f68 R14: 00007f1121d07010 R15: 0000000000000000 [ 693.168496][ T24] audit: type=1400 audit(1755026838.896:206): avc: denied { connect } for pid=8680 comm="syz.1.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 693.188713][ T2802] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 693.198273][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'. [ 693.215650][ T8681] syz.1.2053[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.215720][ T8681] syz.1.2053[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.229118][ T8681] syz.1.2053[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.240865][ T791] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 693.243356][ T8681] syz.1.2053[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.443262][ T2802] usb 3-1: Using ep0 maxpacket: 32 [ 693.743337][ T2802] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 693.753009][ T2802] usb 3-1: config 1 interface 0 has no altsetting 0 [ 693.770158][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 693.913492][ T2802] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 693.922593][ T2802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.952104][ T2802] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 694.090560][ T8690] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 694.100146][ T8690] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 694.306051][ T2802] usb 3-1: Manufacturer: ఉ [ 694.352689][ T2802] usb 3-1: SerialNumber: Ж [ 694.443425][ T8663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 694.613595][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 694.632789][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2055'. [ 694.748110][ T2802] usb 3-1: USB disconnect, device number 30 [ 694.839879][ T8698] FAULT_INJECTION: forcing a failure. [ 694.839879][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 694.852591][ T8698] CPU: 1 PID: 8698 Comm: syz.1.2056 Not tainted 5.10.240-syzkaller #0 [ 694.860751][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.870826][ T8698] Call Trace: [ 694.874128][ T8698] __dump_stack+0x21/0x24 [ 694.878470][ T8698] dump_stack_lvl+0x169/0x1d8 [ 694.883154][ T8698] ? thaw_kernel_threads+0x220/0x220 [ 694.885840][ T8700] FAULT_INJECTION: forcing a failure. [ 694.885840][ T8700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.888447][ T8698] ? selinux_capable+0x29c/0x380 [ 694.888459][ T8698] ? show_regs_print_info+0x18/0x18 [ 694.888477][ T8698] ? selinux_capset+0xf0/0xf0 [ 694.916350][ T8698] ? memcpy+0x56/0x70 [ 694.920325][ T8698] dump_stack+0x15/0x1c [ 694.924474][ T8698] should_fail+0x3c1/0x510 [ 694.928890][ T8698] ? dev_map_alloc+0x68/0x6b0 [ 694.933565][ T8698] __should_failslab+0xa4/0xe0 [ 694.938411][ T8698] should_failslab+0x9/0x20 [ 694.942913][ T8698] kmem_cache_alloc_trace+0x3a/0x2e0 [ 694.948209][ T8698] dev_map_alloc+0x68/0x6b0 [ 694.952715][ T8698] map_create+0x44e/0x2090 [ 694.957139][ T8698] __se_sys_bpf+0x203/0x680 [ 694.961641][ T8698] ? __x64_sys_bpf+0x90/0x90 [ 694.966317][ T8698] __x64_sys_bpf+0x7b/0x90 [ 694.970726][ T8698] do_syscall_64+0x31/0x40 [ 694.975140][ T8698] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 694.981034][ T8698] RIP: 0033:0x7fce14bffbe9 [ 694.985445][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.003243][ T791] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 695.005041][ T8698] RSP: 002b:00007fce13668038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 695.005066][ T8698] RAX: ffffffffffffffda RBX: 00007fce14e26fa0 RCX: 00007fce14bffbe9 [ 695.031067][ T8698] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 695.038264][ T791] usb 5-1: config 1 interface 0 has no altsetting 0 [ 695.039058][ T8698] RBP: 00007fce13668090 R08: 0000000000000000 R09: 0000000000000000 [ 695.053606][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.061585][ T8698] R13: 00007fce14e27038 R14: 00007fce14e26fa0 R15: 00007ffe5d883b18 [ 695.074176][ T8700] CPU: 0 PID: 8700 Comm: syz.0.2057 Not tainted 5.10.240-syzkaller #0 [ 695.082367][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 695.092431][ T8700] Call Trace: [ 695.095730][ T8700] __dump_stack+0x21/0x24 [ 695.100076][ T8700] dump_stack_lvl+0x169/0x1d8 [ 695.104779][ T8700] ? show_regs_print_info+0x18/0x18 [ 695.109998][ T8700] dump_stack+0x15/0x1c [ 695.114212][ T8700] should_fail+0x3c1/0x510 [ 695.118640][ T8700] should_fail_usercopy+0x1a/0x20 [ 695.123678][ T8700] strncpy_from_user+0x24/0x2e0 [ 695.128539][ T8700] bpf_prog_load+0x15d/0x1420 [ 695.133224][ T8700] ? avc_has_perm+0x234/0x360 [ 695.137924][ T8700] ? avc_has_perm_noaudit+0x240/0x240 [ 695.143302][ T8700] ? map_freeze+0x320/0x320 [ 695.147839][ T8700] ? selinux_bpf+0xc7/0xf0 [ 695.152264][ T8700] ? security_bpf+0x82/0xa0 [ 695.156779][ T8700] __se_sys_bpf+0x442/0x680 [ 695.161296][ T8700] ? __x64_sys_bpf+0x90/0x90 [ 695.165903][ T8700] ? fpu__clear_all+0x20/0x20 [ 695.170565][ T8700] __x64_sys_bpf+0x7b/0x90 [ 695.174963][ T8700] do_syscall_64+0x31/0x40 [ 695.179362][ T8700] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 695.185242][ T8700] RIP: 0033:0x7f6f7ff81be9 [ 695.189656][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.209261][ T8700] RSP: 002b:00007f6f7e9ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 695.217671][ T8700] RAX: ffffffffffffffda RBX: 00007f6f801a8fa0 RCX: 00007f6f7ff81be9 [ 695.225653][ T8700] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 695.233934][ T8700] RBP: 00007f6f7e9ea090 R08: 0000000000000000 R09: 0000000000000000 [ 695.241919][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.249906][ T8700] R13: 00007f6f801a9038 R14: 00007f6f801a8fa0 R15: 00007ffd8af29898 [ 695.300716][ T8708] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 695.380891][ T24] audit: type=1400 audit(1755026841.026:207): avc: denied { mounton } for pid=8703 comm="syz.1.2058" path="/417/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 695.451311][ T24] audit: type=1400 audit(1755026841.036:208): avc: denied { read } for pid=8703 comm="syz.1.2058" name="cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.496565][ T24] audit: type=1400 audit(1755026841.036:209): avc: denied { append } for pid=8703 comm="syz.1.2058" name="cpu.stat" dev="overlay" ino=9223372036854775817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.521916][ T24] audit: type=1400 audit(1755026841.036:210): avc: denied { open } for pid=8703 comm="syz.1.2058" path="/417/bus/cpu.stat" dev="overlay" ino=9223372036854775817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.584611][ T24] audit: type=1400 audit(1755026841.036:211): avc: denied { setattr } for pid=8703 comm="syz.1.2058" name="#2436" dev="tmpfs" ino=2436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.653011][ T24] audit: type=1400 audit(1755026841.036:212): avc: denied { write } for pid=8703 comm="syz.1.2058" name="#2436" dev="tmpfs" ino=2436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.887593][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 695.896958][ T8713] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 696.662777][ T24] audit: type=1400 audit(1755026841.036:213): avc: denied { link } for pid=8703 comm="syz.1.2058" name="#2436" dev="tmpfs" ino=2436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 696.685172][ T24] audit: type=1326 audit(1755026841.176:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.709664][ T24] audit: type=1326 audit(1755026841.176:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.734098][ T24] audit: type=1326 audit(1755026841.176:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.809565][ T24] audit: type=1326 audit(1755026841.176:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.833725][ T24] audit: type=1400 audit(1755026841.176:218): avc: denied { write } for pid=8710 comm="syz.0.2060" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 696.858251][ T24] audit: type=1326 audit(1755026841.176:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.882700][ T24] audit: type=1326 audit(1755026841.176:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.916026][ T24] audit: type=1326 audit(1755026841.226:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.940573][ T8730] process 'syz.2.2061' launched './file0' with NULL argv: empty string added [ 696.953261][ T791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 696.963549][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.967910][ T8723] EXT4-fs (loop1): Ignoring removed oldalloc option [ 696.972889][ T791] usb 5-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 696.996344][ T24] audit: type=1326 audit(1755026841.226:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ff81be9 code=0x7ffc0000 [ 696.997965][ T8723] EXT4-fs (loop1): 1 truncate cleaned up [ 697.036688][ T8723] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000004, [ 697.053377][ T791] usb 5-1: can't set config #1, error -71 [ 697.056405][ T8717] Alternate GPT is invalid, using primary GPT. [ 697.065571][ T8717] loop2: p2 p3 p7 [ 697.075698][ T791] usb 5-1: USB disconnect, device number 39 [ 697.086501][ T95] Alternate GPT is invalid, using primary GPT. [ 697.092832][ T95] loop2: p2 p3 p7 [ 697.271433][ T1038] udevd[1038]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 697.275040][ T1030] udevd[1030]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 697.282794][ T1039] udevd[1039]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 697.316944][ T1038] udevd[1038]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 697.936368][ T1039] udevd[1039]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 697.947076][ T1030] udevd[1030]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 697.975541][ T8742] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 697.984759][ T8742] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 698.016586][ T8750] 9pnet: Insufficient options for proto=fd [ 698.027281][ T8746] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 698.045936][ T8746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 698.131398][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 698.287437][ T8758] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 698.420282][ T8763] ================================================================== [ 698.428405][ T8763] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 698.436569][ T8763] Read of size 8 at addr ffff88811117c2c0 by task syz.3.2073/8763 [ 698.444393][ T8763] [ 698.446748][ T8763] CPU: 1 PID: 8763 Comm: syz.3.2073 Not tainted 5.10.240-syzkaller #0 [ 698.454988][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.465151][ T8763] Call Trace: [ 698.468450][ T8763] __dump_stack+0x21/0x24 [ 698.472785][ T8763] dump_stack_lvl+0x169/0x1d8 [ 698.477460][ T8763] ? show_regs_print_info+0x18/0x18 [ 698.482657][ T8763] ? thaw_kernel_threads+0x220/0x220 [ 698.487953][ T8763] print_address_description+0x7f/0x2c0 [ 698.493509][ T8763] ? tc_setup_flow_action+0x842/0x3280 [ 698.498979][ T8763] kasan_report+0xe2/0x130 [ 698.503495][ T8763] ? flow_action_cookie_create+0x28/0x90 [ 698.509139][ T8763] ? tc_setup_flow_action+0x842/0x3280 [ 698.514612][ T8763] __asan_report_load8_noabort+0x14/0x20 [ 698.520263][ T8763] tc_setup_flow_action+0x842/0x3280 [ 698.525563][ T8763] ? __kmalloc+0x1a7/0x330 [ 698.529990][ T8763] ? flow_rule_alloc+0x32/0x2c0 [ 698.534854][ T8763] mall_replace_hw_filter+0x293/0x810 [ 698.540235][ T8763] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 698.546316][ T8763] ? mall_set_parms+0x410/0x410 [ 698.551185][ T8763] ? tcf_exts_destroy+0xb0/0xb0 [ 698.556053][ T8763] ? pcpu_alloc+0xf8a/0x16b0 [ 698.560716][ T8763] ? mall_set_parms+0x19d/0x410 [ 698.565583][ T8763] mall_change+0x528/0x750 [ 698.570013][ T8763] ? __kasan_check_write+0x14/0x20 [ 698.575152][ T8763] ? mall_get+0xa0/0xa0 [ 698.579322][ T8763] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 698.585226][ T8763] ? nla_strcmp+0xf4/0x140 [ 698.589649][ T8763] tc_new_tfilter+0x13f6/0x1a10 [ 698.594507][ T8763] ? mall_get+0xa0/0xa0 [ 698.598667][ T8763] ? tcf_gate_entry_destructor+0x20/0x20 [ 698.604303][ T8763] ? security_capable+0x87/0xb0 [ 698.609182][ T8763] ? ns_capable+0x8c/0xf0 [ 698.613521][ T8763] ? netlink_net_capable+0x125/0x160 [ 698.618803][ T8763] ? tcf_gate_entry_destructor+0x20/0x20 [ 698.624429][ T8763] rtnetlink_rcv_msg+0x800/0xb90 [ 698.629366][ T8763] ? rtnetlink_bind+0x80/0x80 [ 698.634033][ T8763] ? arch_stack_walk+0xee/0x140 [ 698.638886][ T8763] ? stack_trace_save+0x98/0xe0 [ 698.643770][ T8763] ? stack_trace_snprint+0xf0/0xf0 [ 698.648892][ T8763] ? memcpy+0x56/0x70 [ 698.652904][ T8763] ? avc_has_perm+0x234/0x360 [ 698.657597][ T8763] ? __kasan_slab_alloc+0xbd/0xf0 [ 698.662648][ T8763] ? slab_post_alloc_hook+0x5d/0x2f0 [ 698.668030][ T8763] ? ___sys_sendmsg+0x1f0/0x260 [ 698.672902][ T8763] ? avc_has_perm_noaudit+0x240/0x240 [ 698.678280][ T8763] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 698.683668][ T8763] netlink_rcv_skb+0x1e0/0x430 [ 698.688439][ T8763] ? rtnetlink_bind+0x80/0x80 [ 698.693117][ T8763] ? netlink_ack+0xb80/0xb80 [ 698.697714][ T8763] ? __netlink_lookup+0x387/0x3b0 [ 698.702742][ T8763] rtnetlink_rcv+0x1c/0x20 [ 698.707251][ T8763] netlink_unicast+0x876/0xa40 [ 698.712019][ T8763] netlink_sendmsg+0x88d/0xb30 [ 698.716803][ T8763] ? schedule_preempt_disabled+0x20/0x20 [ 698.722461][ T8763] ? netlink_getsockopt+0x530/0x530 [ 698.727680][ T8763] ? security_socket_sendmsg+0x82/0xa0 [ 698.733145][ T8763] ? netlink_getsockopt+0x530/0x530 [ 698.738362][ T8763] ____sys_sendmsg+0x5a2/0x8c0 [ 698.743156][ T8763] ? __sys_sendmsg_sock+0x40/0x40 [ 698.748200][ T8763] ? import_iovec+0x7c/0xb0 [ 698.752715][ T8763] ___sys_sendmsg+0x1f0/0x260 [ 698.757405][ T8763] ? __sys_sendmsg+0x250/0x250 [ 698.762179][ T8763] ? __fdget+0x1a1/0x230 [ 698.766434][ T8763] __x64_sys_sendmsg+0x1e2/0x2a0 [ 698.771374][ T8763] ? ___sys_sendmsg+0x260/0x260 [ 698.776239][ T8763] ? switch_fpu_return+0x197/0x340 [ 698.781355][ T8763] do_syscall_64+0x31/0x40 [ 698.785783][ T8763] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 698.791675][ T8763] RIP: 0033:0x7f112329fbe9 [ 698.796094][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.815712][ T8763] RSP: 002b:00007f1121d08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.824129][ T8763] RAX: ffffffffffffffda RBX: 00007f11234c6fa0 RCX: 00007f112329fbe9 [ 698.832107][ T8763] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 698.840174][ T8763] RBP: 00007f1123322e19 R08: 0000000000000000 R09: 0000000000000000 [ 698.848148][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.856125][ T8763] R13: 00007f11234c7038 R14: 00007f11234c6fa0 R15: 00007ffd68e3cba8 [ 698.864098][ T8763] [ 698.866430][ T8763] Allocated by task 8763: [ 698.870769][ T8763] __kasan_kmalloc+0xda/0x110 [ 698.875450][ T8763] __kmalloc+0x1a7/0x330 [ 698.879702][ T8763] tcf_idr_create+0x5f/0x790 [ 698.884294][ T8763] tcf_idr_create_from_flags+0x61/0x70 [ 698.889772][ T8763] tcf_gact_init+0x2b4/0x520 [ 698.894365][ T8763] tcf_action_init_1+0x3e1/0x670 [ 698.899302][ T8763] tcf_action_init+0x1e6/0x700 [ 698.904068][ T8763] tcf_exts_validate+0x215/0x510 [ 698.909006][ T8763] mall_set_parms+0x4b/0x410 [ 698.913595][ T8763] mall_change+0x45c/0x750 [ 698.918023][ T8763] tc_new_tfilter+0x13f6/0x1a10 [ 698.922879][ T8763] rtnetlink_rcv_msg+0x800/0xb90 [ 698.927823][ T8763] netlink_rcv_skb+0x1e0/0x430 [ 698.932589][ T8763] rtnetlink_rcv+0x1c/0x20 [ 698.937012][ T8763] netlink_unicast+0x876/0xa40 [ 698.941777][ T8763] netlink_sendmsg+0x88d/0xb30 [ 698.946546][ T8763] ____sys_sendmsg+0x5a2/0x8c0 [ 698.951314][ T8763] ___sys_sendmsg+0x1f0/0x260 [ 698.955997][ T8763] __x64_sys_sendmsg+0x1e2/0x2a0 [ 698.960953][ T8763] do_syscall_64+0x31/0x40 [ 698.965384][ T8763] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 698.971269][ T8763] [ 698.973614][ T8763] The buggy address belongs to the object at ffff88811117c200 [ 698.973614][ T8763] which belongs to the cache kmalloc-192 of size 192 [ 698.987676][ T8763] The buggy address is located 0 bytes to the right of [ 698.987676][ T8763] 192-byte region [ffff88811117c200, ffff88811117c2c0) [ 699.001297][ T8763] The buggy address belongs to the page: [ 699.006939][ T8763] page:ffffea0004445f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11117c [ 699.017175][ T8763] flags: 0x4000000000000200(slab) [ 699.022212][ T8763] raw: 4000000000000200 ffffea0004740480 0000000700000007 ffff888100043380 [ 699.030808][ T8763] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 699.039390][ T8763] page dumped because: kasan: bad access detected [ 699.045804][ T8763] page_owner tracks the page as allocated [ 699.051534][ T8763] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1038, ts 646206799401, free_ts 646206164854 [ 699.067683][ T8763] prep_new_page+0x179/0x180 [ 699.072280][ T8763] get_page_from_freelist+0x2235/0x23d0 [ 699.077833][ T8763] __alloc_pages_nodemask+0x268/0x5f0 [ 699.083206][ T8763] new_slab+0x84/0x3f0 [ 699.087287][ T8763] ___slab_alloc+0x2a6/0x450 [ 699.091882][ T8763] __slab_alloc+0x63/0xa0 [ 699.096214][ T8763] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 699.101591][ T8763] kernfs_fop_open+0x343/0xb30 [ 699.106365][ T8763] do_dentry_open+0x793/0x1090 [ 699.111128][ T8763] vfs_open+0x73/0x80 [ 699.115112][ T8763] path_openat+0x27ad/0x3160 [ 699.119710][ T8763] do_filp_open+0x1b3/0x3e0 [ 699.124215][ T8763] do_sys_openat2+0x14c/0x6d0 [ 699.128897][ T8763] __x64_sys_openat+0x136/0x160 [ 699.133750][ T8763] do_syscall_64+0x31/0x40 [ 699.138171][ T8763] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 699.144062][ T8763] page last free stack trace: [ 699.148744][ T8763] free_unref_page_prepare+0x2b7/0x2d0 [ 699.154205][ T8763] free_unref_page_list+0x12e/0x9b0 [ 699.159407][ T8763] release_pages+0xe38/0xe80 [ 699.164005][ T8763] __pagevec_release+0x71/0xe0 [ 699.168762][ T8763] __invalidate_mapping_pages+0x887/0x920 [ 699.174473][ T8763] invalidate_mapping_pages+0x27/0x30 [ 699.179833][ T8763] invalidate_bdev+0xa3/0x140 [ 699.184498][ T8763] ext4_put_super+0x669/0x9c0 [ 699.189164][ T8763] generic_shutdown_super+0x149/0x320 [ 699.194525][ T8763] kill_block_super+0x7f/0xf0 [ 699.199193][ T8763] deactivate_locked_super+0xa0/0x100 [ 699.204554][ T8763] deactivate_super+0xaf/0xe0 [ 699.209223][ T8763] cleanup_mnt+0x446/0x500 [ 699.213628][ T8763] __cleanup_mnt+0x19/0x20 [ 699.218034][ T8763] task_work_run+0x127/0x190 [ 699.222641][ T8763] exit_to_user_mode_loop+0xcb/0xe0 [ 699.227833][ T8763] [ 699.230163][ T8763] Memory state around the buggy address: [ 699.235813][ T8763] ffff88811117c180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 699.243871][ T8763] ffff88811117c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.251928][ T8763] >ffff88811117c280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 699.259976][ T8763] ^ [ 699.266116][ T8763] ffff88811117c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.274166][ T8763] ffff88811117c380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 699.282212][ T8763] ================================================================== [ 699.290258][ T8763] Disabling lock debugging due to kernel taint [ 699.346320][ T433] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 699.593223][ T433] usb 3-1: Using ep0 maxpacket: 32 [ 699.793253][ T433] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 699.802990][ T433] usb 3-1: config 1 interface 0 has no altsetting 0 [ 699.963267][ T433] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 699.972333][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.980365][ T433] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱R䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ा ᕮ醄耶凥䨅튷⦝帘츢囑 [ 699.996276][ T433] usb 3-1: Manufacturer: ఉ [ 700.000944][ T433] usb 3-1: SerialNumber: Ж [ 700.023227][ T8752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 700.326105][ T433] usb 3-1: USB disconnect, device number 31