last executing test programs: 11.727166161s ago: executing program 1 (id=1398): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600070000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.609303878s ago: executing program 3 (id=1402): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000645dc720030450f85d05000000010902120001000010020904"], 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000680), &(0x7f0000000840)=r6}, 0x20) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 10.539952809s ago: executing program 4 (id=1403): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f9ffffffffffffff0000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000efffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb00"/400], 0x190) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRESDEC=r2, @ANYBLOB="1315989efeda8e77d758e4f2bdaefa01c1612b6e34bd7fcfc9769816342d7837aac0eef7034bd7a45edb276cdb9359e03370ece5be82161def25163fb10a4620c86a8e03fdfc38727f495c4c4e611a240c4503391737dd53d233913cbb13516bed7205831a5e5a102375dcd15f4a13cb2e806d35926be9208ae46145835277dfdbdb071604842670e87aedfa6b6927c18d6ac018b3abe3e272b672e96b3b348a3bceea5e11df6821d0b425890a660a6eb72a9966e2781bcea6994fb8b783074f3c378a0d840b4fde7f259bd8ae855523d47890094142038bcd9cd09e1cfb40b9b487da05f77c2c77950d5c8204b562e02f55e3649b6c4374e6166cdc2936", @ANYBLOB="15f7f399bacf5964b4393ccac77f4ecd336568f2b46c7e41a1cf0cceb088b28f7bff815b6b071623b1501870e468b227a288bbd4ddd23597588440bce5cc07d7e57a11e06b6f7f607d5c87549a3a23b68dd30e0378767058018286e347d5115312cca7fa80a7f9849adbbdbfc77f66cf2da3443f9647e7146a7b9e1d5ef65085a4432f0e87b590c725e0be5bfd2c3583e53337dd0bf82f3a9701f6b7c0c37642d0042888b0d25cedaad60f9a29a19a1e45a0726d9e44926fb7b02aad55db91f76da3be8345776bab44834faaae877143f14e32e75f066aba84fbc124b952d5798980172a899f375a4f56dbeda8f4a7d7a3780786", @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='leases_conflict\x00'}, 0x18) r7 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x6040, 0x10) fcntl$setlease(r7, 0x400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0114c300000000000109022400010400a000090480000103010100093799a7d5312201000905815f"], 0x0) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x60, 0x2, 0x7, "0e022558", "cc63de9d"}}, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="20000400f10000020180db6cb449afbab13fe164f81480ce8d49a829e2e84ce92baf2743ca3e70a9035d4904720833be7fa52ae8d8aeafbf9eab4fd1fc8a07ff77ac01b15f6ecf3693311621a0678b984e394f2cd1e992f04dc93cf43f34de4996727e8001657950706f1cb10fea37fe2927be24a790163aa6c23cd75731773e2ac1728902b225a5a5b6dd6591c9a11ef59f11e93033167e787897e45058d2e4d0bc46091b606503a58f7ee69122ec958e0d23c9bbd0c8ae68074c881074c020091164a335296d6501500c8a06a1218e624d4a0752b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x30}, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 9.650650422s ago: executing program 2 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff1285000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00'}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 9.289516528s ago: executing program 2 (id=1406): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000400)={0xdf, 0x0, 0x1000}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000880)={0x101ff, 0x100, 0x3c0, 0x0}) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0)=0xfffff001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) openat$cgroup_int(r4, &(0x7f00000001c0)='io.latency\x00', 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xffffefff}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@nobh}, {@usrjquota, 0x22}, {@errors_continue}, {@dioread_nolock}, {@noblock_validity}]}, 0x1, 0x463, &(0x7f00000005c0)="$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") r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f00000000c0)='rw\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) 8.016204907s ago: executing program 1 (id=1407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYBLOB="37fe581723cda2ab7d1de6ad979423365a977e3d205bfb980c9dbc41d429bcb2932eb6370e7c4b3dbdface9a280f6c4cf99b6de1d03599af94157cae7edf432823e60f30a6a5e45587d7dc1fed7454219644fb", @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x1f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='btrfs_transaction_commit\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) clock_gettime(0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@private=0xa010100, @local, @empty}, 0xc) 7.766963821s ago: executing program 4 (id=1409): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x7ffffffe, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000023896) 7.717502432s ago: executing program 0 (id=1410): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0080000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000440)=""/147, 0x0, 0x93, 0x1, 0x4, 0x10000, @value}, 0x28) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(0x0, 0x143c62, 0x0) unshare(0x40000000) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0xfffa, 0x6}, 0x20) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) 7.472959906s ago: executing program 3 (id=1411): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000645dc720030450f85d05000000010902120001000010020904"], 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000680), &(0x7f0000000840)=r6}, 0x20) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 6.592256439s ago: executing program 1 (id=1412): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f00000003c0)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x547, &(0x7f0000001500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async, rerun: 32) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) (rerun: 32) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) (async) close(r4) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x1) 6.214405125s ago: executing program 0 (id=1413): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000001c0)="227953b08d1ca3f4231aae08ec8fcabe1290efa8334208d0816e21ea9b7ef5d42df09cb0626ffcf3850ed57e6193f1032c", 0x31) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xb0b, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000180)=0x7) ptrace$pokeuser(0x6, r9, 0x2, 0x5a1) r10 = accept(r3, &(0x7f0000000780)=@ieee802154, &(0x7f0000000400)=0x80) tee(r10, r6, 0x95, 0x3) ptrace$getregset(0x4204, r9, 0x3, &(0x7f0000000040)={&(0x7f0000000340)=""/150, 0x96}) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xff000000, 'netdevsim0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x10}, 0x0, 0x98, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0x11, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x2, 0x1}, 0x6, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x1, 0x713b9a2171fe84dd}, {0x3, 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 6.108088416s ago: executing program 2 (id=1414): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0080000000000020", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0xa}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}]}, {0x0, [0x0, 0x61, 0x0, 0x0]}}, &(0x7f0000000440)=""/147, 0x42, 0x93, 0x1, 0x4, 0x10000, @value}, 0x28) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(0x0, 0x143c62, 0x0) unshare(0x40000000) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0xfffa, 0x6}, 0x20) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) 5.945228729s ago: executing program 1 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 5.078876812s ago: executing program 1 (id=1416): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff1285000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00'}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 5.078264582s ago: executing program 4 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x8}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) 5.053041803s ago: executing program 1 (id=1418): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000700)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000480)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, '-]\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x50, 0x50, 0x43, 0x59]}, 0x30) syz_clone3(&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1}, 0x58) 4.887279005s ago: executing program 4 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) userfaultfd(0x801) r4 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x1, 0x1000, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x66, 0x0, 0x1f, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @rr={0x7, 0xb, 0x4, [@empty, @remote]}]}}}}}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)={0xb, 0x20000006, 0x4000008, 0x0, 0x1e, "04000000000000000000004000"}) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) getresuid(&(0x7f00000002c0), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setresuid(0xffffffffffffffff, r10, 0x0) r11 = getgid() getresgid(&(0x7f0000000600)=0x0, &(0x7f00000006c0), &(0x7f0000000780)) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0\x00', &(0x7f00000009c0), 0x6000) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES8=r5, @ANYBLOB="040009000000000008000200", @ANYRES32, @ANYRES64=r7, @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRESDEC=r11, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="000000f466ef7178ce153c0851dd9744d2dec3086e428aa28c3cf626037e7c5907798319e91961da0f464e4c6d829e6aad2e160d56eb07b82c422dd5c84ad0859fae2b95acdf65c95cbcad6b4317f87e5bbba5b00e33f7d779a3c2357478a9d5e22e65f6b08a0e2d1e2fa09a1af45fbc362371c5aa1ca750d39ba5bbe573dbaba7d0bc0d"], 0x54, 0x3) 4.090035777s ago: executing program 0 (id=1420): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 4.060253568s ago: executing program 2 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x10, 0x6, @broadcast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000ac0)={0x1cc, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x5, 0x1}]}, @fwd={0x1}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() mmap(&(0x7f0000239000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x1b1cc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) setresuid(0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r7, 0x8020100001, 0x0) 3.440756377s ago: executing program 3 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x40002042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000700)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000480)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, '-]\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x50, 0x50, 0x43, 0x59]}, 0x30) syz_clone3(&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1}, 0x58) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000340)={0x4, 0xfffffffffffffff7, 0x0, 0x14b1, 0x3, 0x0, [{0x79, 0xfffffffffffffff9, 0x3, '\x00', 0x400}, {0x8, 0x1, 0x6, '\x00', 0x1000}, {0x1000, 0x3, 0x0, '\x00', 0x101}]}) 3.440050757s ago: executing program 0 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) statx(0xffffffffffffffff, 0x0, 0x800, 0x10, 0x0) getrusage(0x1, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r1, 0x0, 0x95, 0x0, &(0x7f00000002c0)="29a3855f3c542c2d3b261b8a1e836263d2bb23347d63409aa8383fa420840e2a05acee75a5fbf6c81c07295f5ef04c816ab3b8ad8d316b2063e8af388e793a925e1667e5012013f8e706b17267d86b5632a48476d46aabfe52c1d0f1db116e375bdc3daecffd30c92fd8382e8736cb757526eec7ef5a4887d1ccc8e608cf6e1ab795426bd68095e1bd121a2f2f774d2b98e000d729", 0x0, 0x6, 0x0, 0x24, 0x0, &(0x7f0000000180)="66aedbd6a27c7d19da67a46234d6ffc7dedb82124a4b2b3f0daa2e80cca6d8077e2c1097", 0x0, 0x2, 0x0, 0x4}, 0x50) 2.925706605s ago: executing program 4 (id=1424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000100000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x800000018}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.854033506s ago: executing program 4 (id=1425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = eventfd2(0x1, 0x80801) writev(r0, &(0x7f0000000400)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) utimes(0x0, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, {0xe81, 0xf80}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc00, 0x8d) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x9, 0x8, 0x3, 0x3, 0x1, 0xeb16}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffff85, 0x3, 0xffffffffffffffff, 0x8000000000000000, 0xe, 0x1, 0x200, 0xa, 0x41, 0x7fffffff, 0x4, 0x6, 0x7, 0xd215, 0x3]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2.322604175s ago: executing program 3 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.322276464s ago: executing program 3 (id=1427): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e9000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.321569275s ago: executing program 0 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0xc0000, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80802000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) readlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)=""/69, 0x45) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) (async) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'fuse\x00'}, {0x20, 'fuse\x00'}, {0x20, '\x00'}, {0x20, 'fuse\x00'}], 0xa, "8e6513ec752c0872af0008f15df0cf3f867b630634f5b7ce484a07669a069c78a95724ef91a63ea4c011d9d62cbd7d7c3c76ce49b1792e894a4273efa8cfad921c6170c7ba23394382158249abc9261a2bcf996e25a340a8d2809f3f6097bd4ffeee8d80d3655c7431020e564d797b3870ab169604673850b140fec9b6af67c16666d4815c37456402a22fe678c1d8d830ea18c2d8be5cf308ecaf1e926d2a3e66e60e8dfec2d47ef55eb4a3bab4c28aee128d3898a58894e44ffcdd6c4951be"}, 0xdf) 2.224251916s ago: executing program 0 (id=1429): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e9000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 2.223606266s ago: executing program 2 (id=1430): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x9e, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 2.139707267s ago: executing program 3 (id=1431): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0080000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0xa}]}, {0x0, [0x0, 0x61, 0x0, 0x0]}}, &(0x7f0000000440)=""/147, 0x2e, 0x93, 0x1, 0x4, 0x10000, @value}, 0x28) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(0x0, 0x143c62, 0x0) unshare(0x40000000) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0xfffa, 0x6}, 0x20) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) 0s ago: executing program 2 (id=1432): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f9ffffffffffffff0000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x190) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="15f7f399bacf5964b4393ccac77f4ecd336568f2b46c7e41a1cf0cceb088b28f7bff815b6b071623b1501870e468b227a288bbd4ddd23597588440bce5cc07d7e57a11e06b6f7f607d5c87549a3a23b68dd30e0378767058018286e347d5115312cca7fa80a7f9849adbbdbfc77f66cf2da3443f9647e7146a7b9e1d5ef65085a4432f0e87b590c725e0be5bfd2c3583e53337dd0bf82f3a9701f6b7c0c37642d0042888b0d25cedaad60f9a29a19a1e45a0726d9e44926fb7b02aad55db91f76da3be8345776bab44834faaae877143f14e32e75f066aba84fbc124b952d5798980172a899f375a4f56dbeda8f4a7d7a3780786", @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='leases_conflict\x00'}, 0x18) r7 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x6040, 0x10) fcntl$setlease(r7, 0x400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0114c300000000000109022400010400a000090480000103010100093799a7d5312201000905815f"], 0x0) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x60, 0x2, 0x7, "0e022558", "cc63de9d"}}, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="20000400f10000020180db6cb449afbab13fe164f81480ce8d49a829e2e84ce92baf2743ca3e70a9035d4904720833be7fa52ae8d8aeafbf9eab4fd1fc8a07ff77ac01b15f6ecf3693311621a0678b984e394f2cd1e992f04dc93cf43f34de4996727e8001657950706f1cb10fea37fe2927be24a790163aa6c23cd75731773e2ac1728902b225a5a5b6dd6591c9a11ef59f11e93033167e787897e45058d2e4d0bc46091b606503a58f7ee69122ec958e0d23c9bbd0c8ae68074c881074c020091164a335296d6501500c8a06a1218e624d4a0752b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x30}, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) kernel console output (not intermixed with test programs): 0 using dummy_hcd [ 294.962237][ T3578] netlink: 'syz.1.846': attribute type 4 has an invalid length. [ 294.974650][ T3578] netlink: 'syz.1.846': attribute type 4 has an invalid length. [ 295.097872][ T372] usb 3-1: Using ep0 maxpacket: 8 [ 295.134024][ T372] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 295.143409][ T372] usb 3-1: config 179 has no interface number 0 [ 295.150430][ T372] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 295.198873][ T372] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 295.219647][ T372] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 295.232785][ T372] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 295.247463][ T372] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.261185][ T372] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 295.270406][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.279923][ T3561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.382298][ T3585] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 295.414814][ T3585] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 295.495050][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.505372][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.317139][ T2832] usb 3-1: USB disconnect, device number 40 [ 296.317163][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 296.331493][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 296.369910][ T3591] loop3: detected capacity change from 0 to 512 [ 296.378117][ T3591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 296.447097][ T3591] EXT4-fs (loop3): 1 truncate cleaned up [ 296.452852][ T3591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 297.392953][ T283] EXT4-fs (loop3): unmounting filesystem. [ 297.417458][ T3608] FAULT_INJECTION: forcing a failure. [ 297.417458][ T3608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.431076][ T3608] CPU: 0 PID: 3608 Comm: syz.2.857 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 297.440835][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.450908][ T3608] Call Trace: [ 297.454219][ T3608] [ 297.457167][ T3608] __dump_stack+0x21/0x24 [ 297.461532][ T3608] dump_stack_lvl+0xee/0x150 [ 297.466155][ T3608] ? __cfi_dump_stack_lvl+0x8/0x8 [ 297.471216][ T3608] ? __kasan_check_write+0x14/0x20 [ 297.473786][ T3610] loop3: detected capacity change from 0 to 8192 [ 297.476357][ T3608] dump_stack+0x15/0x24 [ 297.486860][ T3608] should_fail_ex+0x3d4/0x520 [ 297.491668][ T3608] should_fail+0xb/0x10 [ 297.491697][ T3608] should_fail_usercopy+0x1a/0x20 [ 297.491724][ T3608] strncpy_from_user+0x24/0x2d0 [ 297.505767][ T3608] ? getname_flags+0xb9/0x500 [ 297.510491][ T3608] getname_flags+0xf4/0x500 [ 297.510527][ T3608] __x64_sys_renameat2+0xc3/0xf0 [ 297.510554][ T3608] x64_sys_call+0x6b8/0x9a0 [ 297.510578][ T3608] do_syscall_64+0x4c/0xa0 [ 297.528934][ T3608] ? clear_bhb_loop+0x15/0x70 [ 297.528971][ T3608] ? clear_bhb_loop+0x15/0x70 [ 297.538333][ T3608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.538376][ T3608] RIP: 0033:0x7fc824b8e929 [ 297.538394][ T3608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.538414][ T3608] RSP: 002b:00007fc8249ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 297.538438][ T3608] RAX: ffffffffffffffda RBX: 00007fc824db5fa0 RCX: 00007fc824b8e929 [ 297.538454][ T3608] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 297.538470][ T3608] RBP: 00007fc8249ff090 R08: 0000000000000002 R09: 0000000000000000 [ 297.538484][ T3608] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 297.538498][ T3608] R13: 0000000000000000 R14: 00007fc824db5fa0 R15: 00007fffabb36658 [ 297.538516][ T3608] [ 297.624646][ T3611] loop4: detected capacity change from 0 to 512 [ 297.627898][ T3611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 297.641346][ T3610] loop3: p4 < > [ 297.665025][ T3611] EXT4-fs (loop4): 1 truncate cleaned up [ 297.671997][ T3611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.895703][ T286] EXT4-fs (loop4): unmounting filesystem. [ 298.351975][ T3634] loop3: detected capacity change from 0 to 2048 [ 298.399124][ T3634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.452897][ T3640] netlink: 'syz.1.865': attribute type 6 has an invalid length. [ 298.480652][ T283] EXT4-fs (loop3): unmounting filesystem. [ 299.594380][ T3653] loop1: detected capacity change from 0 to 512 [ 302.793654][ T3654] loop2: detected capacity change from 0 to 512 [ 302.804800][ T3653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.816505][ T3654] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 303.037880][ T3653] EXT4-fs (loop1): 1 truncate cleaned up [ 303.043670][ T3653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 303.100214][ T3654] EXT4-fs (loop2): 1 truncate cleaned up [ 303.106026][ T3654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 303.698094][ T287] EXT4-fs (loop2): unmounting filesystem. [ 303.727817][ T3664] loop0: detected capacity change from 0 to 128 [ 303.877305][ T284] EXT4-fs (loop1): unmounting filesystem. [ 303.913567][ T3670] loop2: detected capacity change from 0 to 256 [ 303.988416][ T328] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.080619][ T3670] syz.2.870[3670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.080729][ T3670] syz.2.870[3670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.391610][ T3698] loop0: detected capacity change from 0 to 512 [ 306.528768][ T3698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.748519][ T3698] EXT4-fs (loop0): 1 truncate cleaned up [ 306.754284][ T3698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.133451][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 307.162267][ T3706] loop2: detected capacity change from 0 to 1024 [ 307.389859][ T3706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.518009][ T3706] EXT4-fs: Invalid want_extra_isize 8388736 [ 307.561349][ T285] EXT4-fs (loop0): unmounting filesystem. [ 308.122109][ T3721] loop3: detected capacity change from 0 to 512 [ 308.140436][ T3721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 308.286198][ T3721] EXT4-fs (loop3): 1 truncate cleaned up [ 308.292026][ T3721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 308.397690][ T28] audit: type=1400 audit(2000000115.110:497): avc: denied { mount } for pid=3718 comm="syz.0.885" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 308.530449][ T3727] loop1: detected capacity change from 0 to 128 [ 308.671890][ T3732] loop0: detected capacity change from 0 to 256 [ 308.938337][ T3407] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.953638][ T283] EXT4-fs (loop3): unmounting filesystem. [ 309.555615][ T3743] loop2: detected capacity change from 0 to 512 [ 309.648567][ T3743] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 310.361181][ T3750] loop4: detected capacity change from 0 to 512 [ 310.373480][ T3750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.422437][ T3754] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 310.453149][ T3743] EXT4-fs (loop2): 1 truncate cleaned up [ 310.458938][ T3743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.789105][ T3754] audit: out of memory in audit_log_start [ 310.799538][ T3747] syz.0.890[3747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.800035][ T3747] syz.0.890[3747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.840667][ T3750] EXT4-fs (loop4): 1 truncate cleaned up [ 310.857806][ T3750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.360162][ T287] EXT4-fs (loop2): unmounting filesystem. [ 311.366467][ T286] EXT4-fs (loop4): unmounting filesystem. [ 311.664452][ T3767] binder: BINDER_SET_CONTEXT_MGR already set [ 311.670553][ T3767] binder: 3758:3767 ioctl 4018620d 200000000040 returned -16 [ 311.908289][ T3768] loop4: detected capacity change from 0 to 512 [ 311.919054][ T3768] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.038706][ T3768] EXT4-fs (loop4): 1 truncate cleaned up [ 312.044501][ T3768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 312.412405][ T3774] loop2: detected capacity change from 0 to 1024 [ 312.749911][ T3774] EXT4-fs: Ignoring removed orlov option [ 312.801388][ T3781] loop3: detected capacity change from 0 to 1024 [ 312.816621][ T3781] EXT4-fs: Ignoring removed nobh option [ 312.824084][ T3781] EXT4-fs: Ignoring removed bh option [ 312.830840][ T3781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.859675][ T3781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.888506][ T3781] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.902: Allocating blocks 385-513 which overlap fs metadata [ 312.903106][ T3781] FAULT_INJECTION: forcing a failure. [ 312.903106][ T3781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.916716][ T3781] CPU: 0 PID: 3781 Comm: syz.3.902 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 312.926465][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.936539][ T3781] Call Trace: [ 312.939828][ T3781] [ 312.942770][ T3781] __dump_stack+0x21/0x24 [ 312.947122][ T3781] dump_stack_lvl+0xee/0x150 [ 312.951733][ T3781] ? __cfi_dump_stack_lvl+0x8/0x8 [ 312.956784][ T3781] dump_stack+0x15/0x24 [ 312.960954][ T3781] should_fail_ex+0x3d4/0x520 [ 312.965660][ T3781] should_fail+0xb/0x10 [ 312.969846][ T3781] should_fail_usercopy+0x1a/0x20 [ 312.974896][ T3781] _copy_from_user+0x1e/0xc0 [ 312.979595][ T3781] iovec_from_user+0x1aa/0x2e0 [ 312.984450][ T3781] __import_iovec+0x71/0x470 [ 312.989078][ T3781] import_iovec+0x7c/0xb0 [ 312.993433][ T3781] vfs_writev+0x113/0x590 [ 312.997792][ T3781] ? do_writev+0x2b0/0x2b0 [ 313.002278][ T3781] ? __fdget+0x19c/0x220 [ 313.006632][ T3781] ? __se_sys_pwritev2+0xad/0x2b0 [ 313.011858][ T3781] __se_sys_pwritev2+0x1a9/0x2b0 [ 313.016836][ T3781] ? __x64_sys_pwritev2+0xd0/0xd0 [ 313.021883][ T3781] ? __cfi_ksys_write+0x10/0x10 [ 313.026763][ T3781] __x64_sys_pwritev2+0xbf/0xd0 [ 313.031651][ T3781] x64_sys_call+0x2d6/0x9a0 [ 313.036258][ T3781] do_syscall_64+0x4c/0xa0 [ 313.040694][ T3781] ? clear_bhb_loop+0x15/0x70 [ 313.045385][ T3781] ? clear_bhb_loop+0x15/0x70 [ 313.050075][ T3781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.055987][ T3781] RIP: 0033:0x7fec8138e929 [ 313.060418][ T3781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.080123][ T3781] RSP: 002b:00007fec82131038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 313.088565][ T3781] RAX: ffffffffffffffda RBX: 00007fec815b5fa0 RCX: 00007fec8138e929 [ 313.096547][ T3781] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 313.104546][ T3781] RBP: 00007fec82131090 R08: 0000000000000000 R09: 0000000000000002 [ 313.112530][ T3781] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 313.120612][ T3781] R13: 0000000000000000 R14: 00007fec815b5fa0 R15: 00007ffc7591ec78 [ 313.128613][ T3781] [ 313.145700][ T286] EXT4-fs (loop4): unmounting filesystem. [ 313.155943][ T3780] EXT4-fs (loop3): pa ffff88811357bc78: logic 16, phys. 129, len 24 [ 313.164222][ T3780] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 313.192951][ T3407] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.248953][ T3785] loop4: detected capacity change from 0 to 1024 [ 313.257706][ T283] EXT4-fs (loop3): unmounting filesystem. [ 313.283264][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 313.346006][ T3795] loop2: detected capacity change from 0 to 256 [ 313.353571][ T3795] exfat: Deprecated parameter 'utf8' [ 313.359094][ T3795] exfat: Deprecated parameter 'namecase' [ 313.369164][ T3795] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 313.369488][ T3785] EXT4-fs: Ignoring removed nobh option [ 313.388032][ T3785] EXT4-fs: Ignoring removed bh option [ 313.398847][ T3785] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.274083][ T3801] loop1: detected capacity change from 0 to 512 [ 318.805065][ T3799] loop0: detected capacity change from 0 to 512 [ 320.679940][ T3801] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.690000][ T3799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.700371][ T3801] EXT4-fs: failed to create workqueue [ 320.705792][ T3801] EXT4-fs (loop1): mount failed [ 320.711012][ T3799] EXT4-fs: failed to create workqueue [ 320.716420][ T3799] EXT4-fs (loop0): mount failed [ 320.760478][ T3785] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 321.827822][ T2634] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 322.271474][ T3829] loop4: detected capacity change from 0 to 512 [ 322.306185][ T3829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 322.378399][ T3829] EXT4-fs (loop4): 1 truncate cleaned up [ 322.384330][ T3829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 322.402843][ T2634] usb 3-1: Using ep0 maxpacket: 32 [ 322.429552][ T2634] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 322.598695][ T2634] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.825775][ T2634] usb 3-1: config 1 interface 0 has no altsetting 0 [ 323.342837][ T2634] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.354130][ T2634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.362673][ T2634] usb 3-1: Manufacturer: ഽ離炻໢ඡ貯ᓓ댔蓺쵾탎⛾ [ 323.370655][ T2634] usb 3-1: SerialNumber: ц [ 323.380785][ T3810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 323.847062][ T2634] usb 3-1: USB disconnect, device number 41 [ 323.896004][ T286] EXT4-fs (loop4): unmounting filesystem. [ 324.137152][ T3854] binder: BINDER_SET_CONTEXT_MGR already set [ 324.143244][ T3854] binder: 3846:3854 ioctl 4018620d 200000000040 returned -16 [ 324.181988][ T3855] syz.4.920[3855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.182864][ T3855] syz.4.920[3855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.227984][ T305] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 324.280914][ T3856] loop4: detected capacity change from 0 to 128 [ 324.331667][ T3856] ext4: Unknown parameter 'nouser_xattr' [ 324.438243][ T2832] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 324.457777][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 324.464195][ T305] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 324.473194][ T305] usb 2-1: config 0 has no interface number 0 [ 324.479464][ T305] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 324.489744][ T305] usb 2-1: config 0 interface 196 has no altsetting 0 [ 324.498276][ T305] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 324.507622][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.515877][ T305] usb 2-1: Product: syz [ 324.526956][ T305] usb 2-1: Manufacturer: syz [ 324.543085][ T305] usb 2-1: SerialNumber: syz [ 324.553855][ T305] usb 2-1: config 0 descriptor?? [ 324.567904][ T3844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.617814][ T2832] usb 4-1: Using ep0 maxpacket: 32 [ 324.625241][ T2832] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 324.641550][ T2832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.657082][ T2832] usb 4-1: config 0 descriptor?? [ 324.668759][ T2832] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 324.676971][ T2832] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 326.560164][ T3866] loop0: detected capacity change from 0 to 512 [ 326.773956][ T305] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 326.902692][ T3866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.911226][ T3866] EXT4-fs: failed to create workqueue [ 328.916690][ T3866] EXT4-fs (loop0): mount failed [ 328.928903][ T305] ipheth: probe of 2-1:0.196 failed with error -110 [ 329.095837][ T305] usb 2-1: USB disconnect, device number 38 [ 330.159135][ T473] usb 4-1: USB disconnect, device number 32 [ 330.166182][ T473] ftdi_sio 4-1:0.0: device disconnected [ 330.478609][ T3886] loop2: detected capacity change from 0 to 256 [ 330.493292][ T3886] exfat: Unknown parameter 'iochar' [ 330.902697][ T28] audit: type=1400 audit(2000000137.550:498): avc: denied { create } for pid=3878 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 331.010947][ T28] audit: type=1400 audit(2000000137.610:499): avc: denied { append } for pid=3878 comm="syz.2.927" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 331.905921][ T3898] loop0: detected capacity change from 0 to 512 [ 331.956605][ T3898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 332.167702][ T3898] EXT4-fs (loop0): 1 truncate cleaned up [ 332.173519][ T3898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 334.314589][ T285] EXT4-fs (loop0): unmounting filesystem. [ 335.847086][ T303] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 336.047794][ T303] usb 5-1: Using ep0 maxpacket: 8 [ 336.053949][ T303] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.062323][ T303] usb 5-1: config 179 has no interface number 0 [ 336.068659][ T303] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.647535][ T303] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 336.678087][ T303] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 336.689495][ T303] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 336.700850][ T303] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 336.714107][ T303] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 336.723175][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.732815][ T3921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 339.035313][ T3966] loop2: detected capacity change from 0 to 512 [ 339.081422][ T3969] loop3: detected capacity change from 0 to 512 [ 339.089901][ T3969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.100360][ T3966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.151140][ T60] usb 5-1: USB disconnect, device number 24 [ 339.151204][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 339.165458][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 339.231898][ T3966] EXT4-fs (loop2): 1 truncate cleaned up [ 339.237699][ T3966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 339.293455][ T3969] EXT4-fs (loop3): 1 truncate cleaned up [ 339.299272][ T3969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 339.749356][ T287] EXT4-fs (loop2): unmounting filesystem. [ 339.902693][ T283] EXT4-fs (loop3): unmounting filesystem. [ 340.709308][ T3979] binder_alloc: 3977: binder_alloc_buf, no vma [ 342.277848][ T318] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 342.285627][ T40] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 342.527823][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 342.533066][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 342.540382][ T318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.550992][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 342.634483][ T40] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.664161][ T318] usb 3-1: config 0 has no interfaces? [ 342.709497][ T318] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 342.756765][ T40] usb 5-1: config 1 interface 0 has no altsetting 0 [ 342.797013][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.828980][ T40] usb 5-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 342.853863][ T318] usb 3-1: config 0 descriptor?? [ 342.870048][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.878491][ T40] usb 5-1: Product: syz [ 342.882820][ T40] usb 5-1: Manufacturer: syz [ 342.894407][ T40] usb 5-1: SerialNumber: syz [ 343.111757][ T40] usbhid 5-1:1.0: can't add hid device: -22 [ 343.117830][ T40] usbhid: probe of 5-1:1.0 failed with error -22 [ 343.129709][ T40] usb 5-1: USB disconnect, device number 25 [ 343.717980][ T2832] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 344.017797][ T2832] usb 2-1: Using ep0 maxpacket: 32 [ 344.027502][ T2832] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 345.920262][ T4024] loop4: detected capacity change from 0 to 512 [ 349.063516][ T4024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.073939][ T4024] EXT4-fs: failed to create workqueue [ 349.080101][ T4024] EXT4-fs (loop4): mount failed [ 349.182253][ T2832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.191625][ T303] usb 3-1: USB disconnect, device number 42 [ 349.340890][ T4034] loop0: detected capacity change from 0 to 512 [ 349.724691][ T4034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 349.959577][ T4034] EXT4-fs (loop0): 1 truncate cleaned up [ 349.965372][ T4034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 350.798681][ T2832] usb 2-1: config 0 descriptor?? [ 351.873773][ T2832] usb 2-1: can't set config #0, error -71 [ 351.878680][ T285] EXT4-fs (loop0): unmounting filesystem. [ 351.880771][ T2832] usb 2-1: USB disconnect, device number 39 [ 352.700685][ T4068] loop4: detected capacity change from 0 to 512 [ 352.729038][ T4068] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 352.867866][ T4068] EXT4-fs (loop4): 1 truncate cleaned up [ 352.873649][ T4068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 353.344335][ T286] EXT4-fs (loop4): unmounting filesystem. [ 353.353947][ T373] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 353.361643][ T2832] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 353.557809][ T2832] usb 2-1: Using ep0 maxpacket: 32 [ 353.563180][ T373] usb 1-1: Using ep0 maxpacket: 32 [ 353.578353][ T373] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 353.587509][ T2832] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 353.596840][ T2832] usb 2-1: config 4 has no interface number 0 [ 353.603062][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.611101][ T2832] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.623119][ T373] usb 1-1: config 0 descriptor?? [ 353.629483][ T2832] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.639504][ T2832] usb 2-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 353.647854][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 353.649404][ T373] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 353.663936][ T2832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.679518][ T373] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 353.686785][ T2832] hub 2-1:4.128: USB hub found [ 353.803872][ T2832] hub 2-1:4.128: config failed, can't read hub descriptor (err -22) [ 354.414002][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 354.422466][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 354.433818][ T2832] usb 2-1: USB disconnect, device number 40 [ 354.433913][ T4080] binder: BINDER_SET_CONTEXT_MGR already set [ 354.433924][ T4080] binder: 4078:4080 ioctl 4018620d 200000000040 returned -16 [ 354.459066][ T24] usb 4-1: config 179 has no interface number 0 [ 354.465983][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 354.479107][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 354.492212][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 354.505201][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 354.763046][ T4084] binder: BINDER_SET_CONTEXT_MGR already set [ 354.769117][ T4084] binder: 4081:4084 ioctl 4018620d 200000000040 returned -16 [ 354.780847][ T373] usb 1-1: USB disconnect, device number 37 [ 354.788209][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 354.799923][ T373] ftdi_sio 1-1:0.0: device disconnected [ 354.809396][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 354.818689][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.835591][ T4074] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 355.441382][ T4074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.450069][ T4074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.132326][ T373] usb 4-1: USB disconnect, device number 33 [ 359.132342][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 359.132376][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 359.633459][ T4120] kvm: pic: non byte write [ 360.751117][ T4130] binder_alloc: 4125: binder_alloc_buf, no vma [ 360.850071][ T4137] binder: BINDER_SET_CONTEXT_MGR already set [ 360.856189][ T4137] binder: 4131:4137 ioctl 4018620d 200000000040 returned -16 [ 361.286516][ T4134] loop1: detected capacity change from 0 to 40427 [ 361.305904][ T4134] F2FS-fs (loop1): invalid crc value [ 361.366019][ T4134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 361.447870][ T4134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 361.595546][ T372] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 361.904572][ T4161] loop3: detected capacity change from 0 to 512 [ 361.918907][ T4161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.057811][ T372] usb 5-1: Using ep0 maxpacket: 32 [ 362.065127][ T372] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 362.078319][ T4161] EXT4-fs (loop3): 1 truncate cleaned up [ 362.084148][ T4161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 362.315468][ T372] usb 5-1: config 4 has no interface number 0 [ 362.337844][ T372] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.379448][ T372] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.424501][ T372] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 362.446613][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.495632][ T372] hub 5-1:4.128: USB hub found [ 362.519945][ T283] EXT4-fs (loop3): unmounting filesystem. [ 362.693211][ T372] hub 5-1:4.128: 10 ports detected [ 362.698517][ T372] hub 5-1:4.128: Using single TT (err -22) [ 362.718740][ T372] hub 5-1:4.128: insufficient power available to use all downstream ports [ 362.802419][ T28] audit: type=1400 audit(2000000169.520:500): avc: denied { create } for pid=4168 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.809506][ T4169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4169 comm=syz.0.1004 [ 362.887850][ T4169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1004'. [ 363.987769][ T4185] loop1: detected capacity change from 0 to 512 [ 365.963194][ T4187] loop0: detected capacity change from 0 to 512 [ 366.486629][ T4185] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 366.498635][ T4187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 366.649243][ T473] hub 5-1:4.128: hub_ext_port_status failed (err = -32) [ 366.740416][ T4185] EXT4-fs (loop1): 1 truncate cleaned up [ 366.746186][ T4185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 366.790230][ T4187] EXT4-fs (loop0): 1 truncate cleaned up [ 366.795961][ T4187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 367.289125][ T19] usb 5-1: USB disconnect, device number 26 [ 367.357532][ T284] EXT4-fs (loop1): unmounting filesystem. [ 367.385297][ T4199] FAULT_INJECTION: forcing a failure. [ 367.385297][ T4199] name failslab, interval 1, probability 0, space 0, times 0 [ 367.399466][ T4199] CPU: 0 PID: 4199 Comm: syz.1.1013 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 367.409322][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.419408][ T4199] Call Trace: [ 367.422722][ T4199] [ 367.425661][ T4199] __dump_stack+0x21/0x24 [ 367.430007][ T4199] dump_stack_lvl+0xee/0x150 [ 367.434614][ T4199] ? __cfi_dump_stack_lvl+0x8/0x8 [ 367.439747][ T4199] ? do_syscall_64+0x4c/0xa0 [ 367.444355][ T4199] dump_stack+0x15/0x24 [ 367.448520][ T4199] should_fail_ex+0x3d4/0x520 [ 367.453208][ T4199] __should_failslab+0xac/0xf0 [ 367.457982][ T4199] ? sk_prot_alloc+0xed/0x320 [ 367.462673][ T4199] should_failslab+0x9/0x20 [ 367.467193][ T4199] __kmem_cache_alloc_node+0x3d/0x2c0 [ 367.472574][ T4199] ? sk_prot_alloc+0xed/0x320 [ 367.477274][ T4199] __kmalloc+0xa1/0x1e0 [ 367.481446][ T4199] sk_prot_alloc+0xed/0x320 [ 367.485968][ T4199] sk_alloc+0x3b/0x460 [ 367.490055][ T4199] ? __kasan_check_write+0x14/0x20 [ 367.495184][ T4199] bpf_prog_test_run_skb+0x37e/0x1290 [ 367.500572][ T4199] ? __fget_files+0x2d5/0x330 [ 367.505273][ T4199] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 367.511083][ T4199] bpf_prog_test_run+0x3e3/0x630 [ 367.516130][ T4199] ? slab_free_freelist_hook+0xc2/0x190 [ 367.521680][ T4199] ? bpf_prog_query+0x270/0x270 [ 367.526528][ T4199] ? selinux_bpf+0xce/0xf0 [ 367.531131][ T4199] ? security_bpf+0x93/0xb0 [ 367.535633][ T4199] __sys_bpf+0x56d/0x780 [ 367.539890][ T4199] ? bpf_link_show_fdinfo+0x320/0x320 [ 367.545275][ T4199] ? __cfi_ksys_write+0x10/0x10 [ 367.550132][ T4199] ? debug_smp_processor_id+0x17/0x20 [ 367.555511][ T4199] __x64_sys_bpf+0x7c/0x90 [ 367.559933][ T4199] x64_sys_call+0x488/0x9a0 [ 367.564440][ T4199] do_syscall_64+0x4c/0xa0 [ 367.568870][ T4199] ? clear_bhb_loop+0x15/0x70 [ 367.573550][ T4199] ? clear_bhb_loop+0x15/0x70 [ 367.578248][ T4199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.584149][ T4199] RIP: 0033:0x7fac5bb8e929 [ 367.588569][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.608177][ T4199] RSP: 002b:00007fac5c912038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.616594][ T4199] RAX: ffffffffffffffda RBX: 00007fac5bdb5fa0 RCX: 00007fac5bb8e929 [ 367.624570][ T4199] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 367.632629][ T4199] RBP: 00007fac5c912090 R08: 0000000000000000 R09: 0000000000000000 [ 367.640601][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.648592][ T4199] R13: 0000000000000000 R14: 00007fac5bdb5fa0 R15: 00007ffc77df78c8 [ 367.656568][ T4199] [ 367.711620][ T285] EXT4-fs (loop0): unmounting filesystem. [ 368.057796][ T373] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 368.237788][ T373] usb 2-1: Using ep0 maxpacket: 16 [ 368.244548][ T373] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.328160][ T373] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.343924][ T373] usb 2-1: config 1 interface 0 has no altsetting 0 [ 368.359054][ T373] usb 2-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 368.371743][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.380020][ T373] usb 2-1: Product: syz [ 368.384258][ T373] usb 2-1: Manufacturer: syz [ 368.388925][ T373] usb 2-1: SerialNumber: syz [ 368.447593][ T4230] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1021'. [ 368.589875][ T4230] 9pnet: Could not find request transport: xd [ 368.601824][ T373] usbhid 2-1:1.0: can't add hid device: -22 [ 368.608030][ T373] usbhid: probe of 2-1:1.0 failed with error -22 [ 368.623337][ T373] usb 2-1: USB disconnect, device number 41 [ 368.647833][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 368.677855][ T19] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 368.837791][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 368.844350][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.854499][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.857796][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 368.863852][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 368.869962][ T19] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 368.877628][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.886294][ T19] usb 5-1: config 179 has no interface number 0 [ 368.899289][ T24] usb 4-1: config 0 descriptor?? [ 368.900561][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 368.916275][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 368.927596][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 368.939008][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 368.947850][ T372] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 368.950371][ T19] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 368.971231][ T19] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 368.980310][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.989379][ T4228] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 369.140641][ T372] usb 1-1: Using ep0 maxpacket: 32 [ 369.147546][ T372] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 369.156035][ T372] usb 1-1: config 4 has no interface number 0 [ 369.162650][ T372] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.115071][ T4228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.161174][ T4228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.328002][ T19] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 370.421545][ T372] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.451700][ T372] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 370.695866][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.027969][ T373] usb 4-1: USB disconnect, device number 34 [ 376.057480][ T372] usb 1-1: can't set config #4, error -71 [ 376.058914][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 376.073405][ T19] usb 2-1: device descriptor read/all, error -71 [ 376.143075][ T372] usb 1-1: USB disconnect, device number 38 [ 376.199648][ T4262] SELinux: policydb magic number 0x63726570 does not match expected magic number 0xf97cff8c [ 376.217289][ T305] usb 5-1: USB disconnect, device number 27 [ 376.217306][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 376.231809][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 376.267908][ T4262] SELinux: failed to load policy [ 376.509503][ T28] audit: type=1400 audit(2000000183.230:501): avc: denied { setopt } for pid=4282 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.561069][ T4285] loop4: detected capacity change from 0 to 2048 [ 376.578532][ T4285] loop4: p1 < > p3 [ 376.583069][ T4285] loop4: p3 size 134217728 extends beyond EOD, truncated [ 376.667841][ T473] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 376.747781][ T19] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 376.857996][ T473] usb 4-1: Using ep0 maxpacket: 16 [ 376.864552][ T473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.872991][ T473] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.885912][ T473] usb 4-1: config 1 interface 0 has no altsetting 0 [ 376.893991][ T473] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 376.903237][ T473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.911245][ T473] usb 4-1: Product: syz [ 376.915411][ T473] usb 4-1: Manufacturer: syz [ 376.920042][ T473] usb 4-1: SerialNumber: syz [ 376.927766][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 376.934454][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 376.942927][ T19] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.955747][ T19] usb 2-1: config 1 interface 0 has no altsetting 0 [ 376.963821][ T19] usb 2-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 376.972937][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.980987][ T19] usb 2-1: Product: syz [ 376.985160][ T19] usb 2-1: Manufacturer: syz [ 376.989792][ T19] usb 2-1: SerialNumber: syz [ 377.037849][ T305] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 377.131367][ T473] usbhid 4-1:1.0: can't add hid device: -22 [ 377.137323][ T473] usbhid: probe of 4-1:1.0 failed with error -22 [ 377.147786][ T373] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 377.151372][ T473] usb 4-1: USB disconnect, device number 35 [ 377.200477][ T19] usbhid 2-1:1.0: can't add hid device: -22 [ 377.206521][ T19] usbhid: probe of 2-1:1.0 failed with error -22 [ 377.217795][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 377.219376][ T19] usb 2-1: USB disconnect, device number 43 [ 377.230621][ T305] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 377.238927][ T305] usb 5-1: config 4 has no interface number 0 [ 377.245022][ T305] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.256422][ T305] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.266411][ T305] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 377.275522][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.285192][ T305] hub 5-1:4.128: USB hub found [ 377.327814][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 377.337777][ T373] usb 3-1: Using ep0 maxpacket: 32 [ 377.344306][ T373] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.353439][ T373] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 377.362529][ T373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.371518][ T373] usb 3-1: config 0 descriptor?? [ 377.485246][ T305] hub 5-1:4.128: 10 ports detected [ 377.490496][ T305] hub 5-1:4.128: Using single TT (err -22) [ 377.496509][ T305] hub 5-1:4.128: insufficient power available to use all downstream ports [ 377.508514][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 377.514542][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 377.522874][ T24] usb 1-1: config 179 has no interface number 0 [ 377.529151][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 377.540330][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 377.551564][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 377.562804][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 377.574146][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 377.587549][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 377.596773][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.606112][ T4296] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 378.036703][ T4296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.104695][ T4296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.934090][ T19] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 380.303166][ T305] usb 5-1: USB disconnect, device number 28 [ 380.777819][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 380.822554][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.833834][ T19] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.843944][ T19] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 380.853090][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.864398][ T19] usb 4-1: config 0 descriptor?? [ 380.955097][ T4321] loop1: detected capacity change from 0 to 2048 [ 381.001977][ T19] usb 3-1: USB disconnect, device number 43 [ 381.018416][ T4321] loop1: p1 < > p3 [ 381.023473][ T4321] loop1: p3 size 134217728 extends beyond EOD, truncated [ 381.319781][ T4327] loop2: detected capacity change from 0 to 512 [ 383.191831][ T4327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 383.275243][ T305] usb 1-1: USB disconnect, device number 39 [ 383.281232][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 383.281277][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 383.361279][ T4327] EXT4-fs (loop2): 1 truncate cleaned up [ 383.367007][ T4327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 383.587955][ T287] EXT4-fs (loop2): unmounting filesystem. [ 383.647840][ T4314] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 383.842878][ T305] usb 4-1: USB disconnect, device number 36 [ 383.851685][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 383.981395][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.991975][ T4314] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.005013][ T4314] usb 5-1: config 1 interface 0 has no altsetting 0 [ 384.017368][ T4314] usb 5-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 384.026634][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.004957][ T4356] loop1: detected capacity change from 0 to 512 [ 387.115442][ T4359] loop3: detected capacity change from 0 to 512 [ 387.136372][ T4356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.154388][ T4359] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.244548][ T4314] usb 5-1: Product: syz [ 387.318862][ T4356] EXT4-fs (loop1): 1 truncate cleaned up [ 387.324622][ T4356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 387.409448][ T4359] EXT4-fs (loop3): 1 truncate cleaned up [ 387.415270][ T4359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 387.499329][ T4314] usb 5-1: Manufacturer: syz [ 388.225260][ T284] EXT4-fs (loop1): unmounting filesystem. [ 388.269670][ T4314] usb 5-1: SerialNumber: syz [ 388.277816][ T329] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 388.287154][ T283] EXT4-fs (loop3): unmounting filesystem. [ 388.298525][ T4314] usb 5-1: can't set config #1, error -71 [ 388.311725][ T4314] usb 5-1: USB disconnect, device number 29 [ 388.388488][ T28] audit: type=1400 audit(2000000195.110:502): avc: denied { setattr } for pid=4370 comm="syz.4.1064" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.507095][ T4386] loop3: detected capacity change from 0 to 256 [ 388.617871][ T2323] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 388.887842][ T2323] usb 2-1: Using ep0 maxpacket: 8 [ 388.895101][ T2323] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 389.021951][ T2323] usb 2-1: config 179 has no interface number 0 [ 389.088477][ T2323] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 391.302935][ T4394] loop4: detected capacity change from 0 to 512 [ 393.717225][ T4394] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 393.766542][ T2323] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 393.777884][ T2323] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 393.789146][ T2323] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 393.800592][ T2323] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 393.839679][ T2323] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 393.852709][ T4394] EXT4-fs (loop4): 1 truncate cleaned up [ 393.858419][ T4394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 393.918320][ T2323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.952263][ T2323] usb 2-1: can't set config #179, error -71 [ 393.961220][ T2323] usb 2-1: USB disconnect, device number 44 [ 394.449637][ T286] EXT4-fs (loop4): unmounting filesystem. [ 395.187105][ T4418] binder: BINDER_SET_CONTEXT_MGR already set [ 395.193200][ T4418] binder: 4411:4418 ioctl 4018620d 200000000040 returned -16 [ 396.272367][ T4423] loop1: detected capacity change from 0 to 512 [ 396.297908][ T4314] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 396.305740][ T305] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 396.328417][ T4423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 396.458624][ T4423] EXT4-fs (loop1): 1 truncate cleaned up [ 396.464402][ T4423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.518307][ T305] usb 3-1: Using ep0 maxpacket: 16 [ 396.523554][ T4314] usb 5-1: Using ep0 maxpacket: 8 [ 396.534481][ T305] usb 3-1: unable to get BOS descriptor or descriptor too short [ 396.557240][ T4314] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.627177][ T305] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.649288][ T4314] usb 5-1: config 179 has no interface number 0 [ 396.711717][ T4314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 396.807844][ T305] usb 3-1: config 1 interface 0 has no altsetting 0 [ 396.863588][ T4314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 396.894178][ T305] usb 3-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 397.047443][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.056604][ T4314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 397.078098][ T305] usb 3-1: Product: syz [ 397.097654][ T4314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 397.111136][ T305] usb 3-1: Manufacturer: syz [ 397.115747][ T305] usb 3-1: SerialNumber: syz [ 397.221687][ T284] EXT4-fs (loop1): unmounting filesystem. [ 397.282236][ T4314] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.297301][ T4314] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 397.306443][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.402738][ T4414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.430745][ T305] usbhid 3-1:1.0: can't add hid device: -22 [ 398.435895][ T2323] usb 5-1: USB disconnect, device number 30 [ 398.436720][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 398.451191][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.462024][ T305] usbhid: probe of 3-1:1.0 failed with error -22 [ 398.472299][ T305] usb 3-1: USB disconnect, device number 45 [ 399.017775][ T4449] loop1: detected capacity change from 0 to 512 [ 399.097824][ T4449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 399.722339][ T4449] EXT4-fs (loop1): 1 truncate cleaned up [ 399.728563][ T4449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 399.864811][ T4458] netlink: 'syz.4.1085': attribute type 4 has an invalid length. [ 399.929393][ T4458] netlink: 'syz.4.1085': attribute type 4 has an invalid length. [ 399.999511][ T284] EXT4-fs (loop1): unmounting filesystem. [ 400.011379][ T4463] netlink: 'syz.3.1086': attribute type 4 has an invalid length. [ 400.023633][ T4463] netlink: 'syz.3.1086': attribute type 4 has an invalid length. [ 400.535205][ T305] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 400.895383][ T4485] loop4: detected capacity change from 0 to 512 [ 401.372131][ T4485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 401.806502][ T4485] EXT4-fs (loop4): 1 truncate cleaned up [ 401.812926][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 401.907770][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 401.914463][ T305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.916846][ T4491] netlink: 'syz.1.1097': attribute type 4 has an invalid length. [ 401.925194][ T305] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.237415][ T4493] loop3: detected capacity change from 0 to 512 [ 402.246115][ T4493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 402.258156][ T305] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.268566][ T305] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 402.281949][ T305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 402.414006][ T286] EXT4-fs (loop4): unmounting filesystem. [ 402.447882][ T4495] netlink: 'syz.1.1097': attribute type 4 has an invalid length. [ 402.468734][ T305] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00 [ 402.493004][ T4493] EXT4-fs (loop3): 1 truncate cleaned up [ 402.498809][ T4493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.671846][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.918088][ T305] usb 1-1: config 0 descriptor?? [ 403.073061][ T283] EXT4-fs (loop3): unmounting filesystem. [ 403.555647][ T4511] loop1: detected capacity change from 0 to 512 [ 403.605044][ T4511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 403.623543][ T305] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 403.742511][ T4511] EXT4-fs (loop1): 1 truncate cleaned up [ 403.748378][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 403.797066][ T305] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 403.935034][ T305] hid-thrustmaster 0003:044F:B65D.000E: item fetching failed at offset 2/5 [ 404.043206][ T305] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 404.075501][ T305] hid-thrustmaster: probe of 0003:044F:B65D.000E failed with error -22 [ 404.103329][ T305] usb 1-1: USB disconnect, device number 40 [ 404.240318][ T284] EXT4-fs (loop1): unmounting filesystem. [ 404.307807][ T19] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 404.377826][ T2323] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 404.457816][ T19] usb 5-1: device descriptor read/64, error -71 [ 404.567747][ T590] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 404.567747][ T2323] usb 4-1: Using ep0 maxpacket: 8 [ 404.588836][ T2323] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 404.602920][ T2323] usb 4-1: config 179 has no interface number 0 [ 404.609487][ T2323] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 404.620791][ T2323] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 404.632559][ T2323] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 404.644108][ T2323] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 404.655784][ T2323] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 404.669434][ T2323] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 404.678705][ T2323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.696601][ T4507] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 404.737788][ T19] usb 5-1: device descriptor read/64, error -71 [ 404.747743][ T590] usb 2-1: Using ep0 maxpacket: 32 [ 404.754682][ T590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.781504][ T590] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.795169][ T590] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.805371][ T590] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 404.818712][ T590] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.825526][ T590] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00 [ 404.837817][ T590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.850609][ T590] usb 2-1: config 0 descriptor?? [ 404.908683][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.917312][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.007863][ T19] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 405.157881][ T19] usb 5-1: device descriptor read/64, error -71 [ 405.260014][ T590] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 405.274583][ T590] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 405.282636][ T590] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 2/5 [ 405.291712][ T590] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 405.299816][ T590] hid-thrustmaster: probe of 0003:044F:B65D.000F failed with error -22 [ 405.427780][ T19] usb 5-1: device descriptor read/64, error -71 [ 405.472187][ T2323] usb 2-1: USB disconnect, device number 45 [ 405.547848][ T19] usb usb5-port1: attempt power cycle [ 406.142913][ T2323] usb 4-1: USB disconnect, device number 37 [ 406.142959][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 406.157211][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 406.304281][ T4549] loop1: detected capacity change from 0 to 512 [ 406.327723][ T4549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 406.493351][ T4549] EXT4-fs (loop1): 1 truncate cleaned up [ 406.499136][ T4549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 407.495772][ T4560] loop2: detected capacity change from 0 to 512 [ 407.549177][ T4560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 407.678219][ T284] EXT4-fs (loop1): unmounting filesystem. [ 407.831480][ T4560] EXT4-fs (loop2): 1 truncate cleaned up [ 407.837210][ T4560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 409.201581][ T287] EXT4-fs (loop2): unmounting filesystem. [ 409.326896][ T4576] loop0: detected capacity change from 0 to 512 [ 409.373471][ T4576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 409.506294][ T4576] EXT4-fs (loop0): 1 truncate cleaned up [ 409.512170][ T4576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 410.118391][ T4586] loop2: detected capacity change from 0 to 512 [ 410.128601][ T4586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 410.180980][ T285] EXT4-fs (loop0): unmounting filesystem. [ 410.278366][ T4586] EXT4-fs (loop2): 1 truncate cleaned up [ 410.284325][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 410.385725][ T4589] FAULT_INJECTION: forcing a failure. [ 410.385725][ T4589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.399219][ T4589] CPU: 0 PID: 4589 Comm: syz.0.1125 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 410.409058][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.419143][ T4589] Call Trace: [ 410.422415][ T4589] [ 410.425343][ T4589] __dump_stack+0x21/0x24 [ 410.429689][ T4589] dump_stack_lvl+0xee/0x150 [ 410.434279][ T4589] ? __cfi_dump_stack_lvl+0x8/0x8 [ 410.439310][ T4589] ? __kasan_kmalloc+0x95/0xb0 [ 410.444084][ T4589] ? kvmalloc_node+0x294/0x480 [ 410.448855][ T4589] ? __kmalloc_node+0xb2/0x1e0 [ 410.453636][ T4589] dump_stack+0x15/0x24 [ 410.457801][ T4589] should_fail_ex+0x3d4/0x520 [ 410.462484][ T4589] should_fail+0xb/0x10 [ 410.466636][ T4589] should_fail_usercopy+0x1a/0x20 [ 410.471678][ T4589] _copy_from_user+0x1e/0xc0 [ 410.476276][ T4589] copy_from_sockptr_offset+0x77/0x90 [ 410.481658][ T4589] do_ip6t_set_ctl+0x897/0xcc0 [ 410.486424][ T4589] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 410.492145][ T4589] ? __cfi_do_ip6t_set_ctl+0x10/0x10 [ 410.497435][ T4589] ? kstrtouint_from_user+0xf7/0x150 [ 410.502732][ T4589] ? __cfi_avc_has_perm+0x10/0x10 [ 410.507800][ T4589] ? __kasan_check_write+0x14/0x20 [ 410.512926][ T4589] ? mutex_unlock+0x89/0x220 [ 410.517510][ T4589] ? __cfi_mutex_unlock+0x10/0x10 [ 410.522529][ T4589] ? selinux_socket_setsockopt+0x21c/0x300 [ 410.528346][ T4589] nf_setsockopt+0x284/0x2b0 [ 410.532936][ T4589] ipv6_setsockopt+0x170/0x1a0 [ 410.537706][ T4589] udpv6_setsockopt+0x92/0xb0 [ 410.542395][ T4589] sock_common_setsockopt+0xb1/0xc0 [ 410.547593][ T4589] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 410.553484][ T4589] __sys_setsockopt+0x306/0x4e0 [ 410.558344][ T4589] ? __cfi___sys_setsockopt+0x10/0x10 [ 410.563727][ T4589] ? ksys_write+0x1eb/0x240 [ 410.568259][ T4589] ? __cfi_ksys_write+0x10/0x10 [ 410.573115][ T4589] __x64_sys_setsockopt+0xbf/0xd0 [ 410.578146][ T4589] x64_sys_call+0x124/0x9a0 [ 410.582659][ T4589] do_syscall_64+0x4c/0xa0 [ 410.587085][ T4589] ? clear_bhb_loop+0x15/0x70 [ 410.591757][ T4589] ? clear_bhb_loop+0x15/0x70 [ 410.596437][ T4589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.602343][ T4589] RIP: 0033:0x7facac98e929 [ 410.606757][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.626371][ T4589] RSP: 002b:00007facad7fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.634816][ T4589] RAX: ffffffffffffffda RBX: 00007facacbb5fa0 RCX: 00007facac98e929 [ 410.642823][ T4589] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 410.650824][ T4589] RBP: 00007facad7fe090 R08: 0000000000000650 R09: 0000000000000000 [ 410.658814][ T4589] R10: 0000200000002500 R11: 0000000000000246 R12: 0000000000000001 [ 410.666802][ T4589] R13: 0000000000000000 R14: 00007facacbb5fa0 R15: 00007ffc4c3b4f68 [ 410.674793][ T4589] [ 411.220437][ T19] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 411.381496][ T287] EXT4-fs (loop2): unmounting filesystem. [ 411.677852][ T2323] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 412.348301][ T4612] loop0: detected capacity change from 0 to 512 [ 412.418678][ T4612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 412.484591][ T4612] EXT4-fs (loop0): 1 truncate cleaned up [ 412.490421][ T4612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 412.943227][ T19] usb 5-1: device not accepting address 33, error -71 [ 413.006384][ T285] EXT4-fs (loop0): unmounting filesystem. [ 413.921408][ T2323] usb 4-1: device not accepting address 38, error -71 [ 414.059889][ T474] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 415.122446][ T474] usb 1-1: Using ep0 maxpacket: 32 [ 415.137877][ T474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.159739][ T474] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.174525][ T474] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.184877][ T474] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 415.198042][ T2323] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 415.205802][ T474] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.213263][ T474] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00 [ 415.222749][ T474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.247006][ T474] usb 1-1: config 0 descriptor?? [ 415.387781][ T2323] usb 4-1: Using ep0 maxpacket: 16 [ 415.394358][ T2323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 415.407852][ T2323] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.420766][ T2323] usb 4-1: config 1 interface 0 has no altsetting 0 [ 415.427751][ T372] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 415.440523][ T2323] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 415.449686][ T2323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.457971][ T2323] usb 4-1: Product: syz [ 415.462823][ T2323] usb 4-1: Manufacturer: syz [ 415.473402][ T2323] usb 4-1: SerialNumber: syz [ 415.607734][ T372] usb 2-1: Using ep0 maxpacket: 32 [ 415.614163][ T372] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 415.623613][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.627763][ T19] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 415.640218][ T372] usb 2-1: config 0 descriptor?? [ 415.647927][ T372] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 415.657093][ T372] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 415.679483][ T474] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 415.687440][ T474] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 415.696338][ T474] hid-thrustmaster 0003:044F:B65D.0010: item fetching failed at offset 2/5 [ 415.707912][ T474] hid-thrustmaster 0003:044F:B65D.0010: parse failed with error -22 [ 415.716005][ T474] hid-thrustmaster: probe of 0003:044F:B65D.0010 failed with error -22 [ 415.724566][ T2323] usbhid 4-1:1.0: can't add hid device: -22 [ 415.732779][ T2323] usbhid: probe of 4-1:1.0 failed with error -22 [ 415.745748][ T2323] usb 4-1: USB disconnect, device number 39 [ 415.827782][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 415.834111][ T19] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 415.843238][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.852395][ T19] usb 5-1: config 0 descriptor?? [ 415.858460][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 415.866260][ T19] ftdi_sio ttyUSB1: unknown device type: 0x55d [ 415.881088][ T372] usb 1-1: USB disconnect, device number 41 [ 416.089081][ T19] usb 5-1: USB disconnect, device number 35 [ 416.153029][ T19] ftdi_sio 5-1:0.0: device disconnected [ 419.517998][ T4663] binder: BINDER_SET_CONTEXT_MGR already set [ 419.524121][ T4663] binder: 4661:4663 ioctl 4018620d 200000000040 returned -16 [ 419.542780][ T60] usb 2-1: USB disconnect, device number 46 [ 419.566027][ T60] ftdi_sio 2-1:0.0: device disconnected [ 419.813139][ T4676] loop1: detected capacity change from 0 to 256 [ 424.173315][ T4688] netlink: 'syz.1.1154': attribute type 4 has an invalid length. [ 424.189304][ T4688] netlink: 'syz.1.1154': attribute type 4 has an invalid length. [ 424.527772][ T2323] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 424.597805][ T60] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 425.228448][ T4700] loop3: detected capacity change from 0 to 512 [ 425.241623][ T4700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 425.270093][ T60] usb 1-1: not running at top speed; connect to a high speed hub [ 425.333763][ T60] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 425.363681][ T4700] EXT4-fs (loop3): 1 truncate cleaned up [ 425.369574][ T4700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 425.491989][ T60] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.827756][ T60] usb 1-1: config 1 interface 0 has no altsetting 0 [ 425.837655][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 425.846803][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.853511][ T2323] usb 3-1: Using ep0 maxpacket: 16 [ 425.862049][ T283] EXT4-fs (loop3): unmounting filesystem. [ 425.868006][ T329] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 425.875390][ T60] usb 1-1: Product: syz [ 425.876782][ T2323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 425.880100][ T60] usb 1-1: Manufacturer: syz [ 425.892431][ T2323] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.897766][ T60] usb 1-1: SerialNumber: syz [ 425.905626][ T2323] usb 3-1: config 1 interface 0 has no altsetting 0 [ 425.919615][ T4692] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 425.926802][ T2323] usb 3-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 425.936238][ T2323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.944702][ T2323] usb 3-1: Product: syz [ 425.958915][ T2323] usb 3-1: Manufacturer: syz [ 425.964284][ T2323] usb 3-1: SerialNumber: syz [ 426.047733][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 426.054230][ T329] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 426.063686][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.080052][ T329] usb 5-1: config 0 descriptor?? [ 426.086575][ T329] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 426.104499][ T329] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 426.152367][ T60] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 426.168960][ T60] usb 1-1: USB disconnect, device number 42 [ 426.178021][ T60] usblp0: removed [ 426.192046][ T2323] usbhid 3-1:1.0: can't add hid device: -22 [ 426.199598][ T2323] usbhid: probe of 3-1:1.0 failed with error -22 [ 426.216654][ T2323] usb 3-1: USB disconnect, device number 46 [ 426.227960][ T372] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 426.295258][ T329] usb 5-1: USB disconnect, device number 36 [ 426.304287][ T329] ftdi_sio 5-1:0.0: device disconnected [ 426.417762][ T372] usb 4-1: Using ep0 maxpacket: 32 [ 426.424094][ T372] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 426.433262][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.445234][ T372] usb 4-1: config 0 descriptor?? [ 426.452326][ T372] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 426.461326][ T372] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 426.816769][ T4723] binder: BINDER_SET_CONTEXT_MGR already set [ 426.822922][ T4723] binder: 4716:4723 ioctl 4018620d 200000000040 returned -16 [ 430.353935][ T4733] loop4: detected capacity change from 0 to 512 [ 434.280016][ T4733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 434.330045][ T4733] EXT4-fs: failed to create workqueue [ 434.335469][ T4733] EXT4-fs (loop4): mount failed [ 434.363341][ T6] usb 4-1: USB disconnect, device number 40 [ 434.402074][ T6] ftdi_sio 4-1:0.0: device disconnected [ 437.349310][ T4770] loop4: detected capacity change from 0 to 512 [ 437.357757][ T4770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 437.571924][ T4770] EXT4-fs (loop4): 1 truncate cleaned up [ 437.577853][ T4770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 438.347651][ T286] EXT4-fs (loop4): unmounting filesystem. [ 438.407768][ T1042] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 438.517253][ T28] audit: type=1400 audit(2000000245.230:503): avc: denied { connect } for pid=4791 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.077626][ T4805] binder: BINDER_SET_CONTEXT_MGR already set [ 439.083802][ T4805] binder: 4800:4805 ioctl 4018620d 200000000040 returned -16 [ 440.307784][ T6] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 442.635326][ T4833] netlink: 'syz.0.1195': attribute type 12 has an invalid length. [ 442.643494][ T4833] FAULT_INJECTION: forcing a failure. [ 442.643494][ T4833] name failslab, interval 1, probability 0, space 0, times 0 [ 442.657270][ T4833] CPU: 0 PID: 4833 Comm: syz.0.1195 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 442.667119][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.677211][ T4833] Call Trace: [ 442.680509][ T4833] [ 442.683455][ T4833] __dump_stack+0x21/0x24 [ 442.687831][ T4833] dump_stack_lvl+0xee/0x150 [ 442.692452][ T4833] ? __cfi_dump_stack_lvl+0x8/0x8 [ 442.697484][ T4833] dump_stack+0x15/0x24 [ 442.701640][ T4833] should_fail_ex+0x3d4/0x520 [ 442.706316][ T4833] __should_failslab+0xac/0xf0 [ 442.711077][ T4833] ? ___neigh_create+0x6f6/0x1e20 [ 442.716103][ T4833] should_failslab+0x9/0x20 [ 442.720608][ T4833] __kmem_cache_alloc_node+0x3d/0x2c0 [ 442.725979][ T4833] ? ___neigh_create+0x6f6/0x1e20 [ 442.731000][ T4833] __kmalloc+0xa1/0x1e0 [ 442.735151][ T4833] ___neigh_create+0x6f6/0x1e20 [ 442.740002][ T4833] ? neigh_lookup+0x34e/0x410 [ 442.744687][ T4833] ? __cfi_arp_key_eq+0x10/0x10 [ 442.749561][ T4833] ? __cfi_neigh_lookup+0x10/0x10 [ 442.754602][ T4833] neigh_add+0xa96/0xd30 [ 442.758872][ T4833] ? __cfi_selinux_capable+0x10/0x10 [ 442.764187][ T4833] ? __cfi_neigh_add+0x10/0x10 [ 442.769058][ T4833] ? mutex_lock+0x8d/0x1a0 [ 442.773492][ T4833] ? __cfi_mutex_lock+0x10/0x10 [ 442.778360][ T4833] ? ns_capable+0x8c/0xf0 [ 442.782799][ T4833] ? netlink_net_capable+0x125/0x160 [ 442.788109][ T4833] ? __cfi_neigh_add+0x10/0x10 [ 442.792899][ T4833] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 442.797873][ T4833] ? 0xffffffffa0000658 [ 442.802042][ T4833] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 442.807606][ T4833] ? __kernel_text_address+0xd/0x30 [ 442.812831][ T4833] ? unwind_get_return_address+0x4d/0x90 [ 442.818498][ T4833] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 442.824689][ T4833] ? memcpy+0x56/0x70 [ 442.828701][ T4833] ? avc_has_perm_noaudit+0x2f4/0x460 [ 442.834100][ T4833] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 442.839853][ T4833] ? slab_post_alloc_hook+0x4f/0x2d0 [ 442.845178][ T4833] ? avc_has_perm+0x158/0x240 [ 442.849972][ T4833] ? sock_write_iter+0x2ca/0x3b0 [ 442.854938][ T4833] ? vfs_write+0x5db/0xca0 [ 442.859385][ T4833] ? __cfi_avc_has_perm+0x10/0x10 [ 442.864437][ T4833] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 442.869841][ T4833] netlink_rcv_skb+0x1f2/0x440 [ 442.874623][ T4833] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 442.880089][ T4833] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 442.885554][ T4833] ? __netlink_lookup+0x387/0x3b0 [ 442.890587][ T4833] rtnetlink_rcv+0x1c/0x20 [ 442.895001][ T4833] netlink_unicast+0x8b1/0xa30 [ 442.899768][ T4833] netlink_sendmsg+0x8aa/0xbc0 [ 442.904537][ T4833] ? __cfi_netlink_sendmsg+0x10/0x10 [ 442.909830][ T4833] ? security_socket_sendmsg+0x93/0xb0 [ 442.915298][ T4833] sock_write_iter+0x2ca/0x3b0 [ 442.920061][ T4833] ? __cfi_sock_write_iter+0x10/0x10 [ 442.925350][ T4833] ? fsnotify_perm+0x67/0x5b0 [ 442.930028][ T4833] ? security_file_permission+0x8a/0xb0 [ 442.935579][ T4833] vfs_write+0x5db/0xca0 [ 442.939829][ T4833] ? slab_free_freelist_hook+0xc2/0x190 [ 442.945385][ T4833] ? __cfi_vfs_write+0x10/0x10 [ 442.950163][ T4833] ? __fget_files+0x2d5/0x330 [ 442.954850][ T4833] ? __fdget_pos+0x1f2/0x380 [ 442.959447][ T4833] ? ksys_write+0x71/0x240 [ 442.963874][ T4833] ksys_write+0x140/0x240 [ 442.968210][ T4833] ? __cfi_ksys_write+0x10/0x10 [ 442.973082][ T4833] ? debug_smp_processor_id+0x17/0x20 [ 442.978460][ T4833] __x64_sys_write+0x7b/0x90 [ 442.983054][ T4833] x64_sys_call+0x27b/0x9a0 [ 442.987560][ T4833] do_syscall_64+0x4c/0xa0 [ 442.991983][ T4833] ? clear_bhb_loop+0x15/0x70 [ 442.996662][ T4833] ? clear_bhb_loop+0x15/0x70 [ 443.001342][ T4833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.007248][ T4833] RIP: 0033:0x7facac98e929 [ 443.011671][ T4833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.031283][ T4833] RSP: 002b:00007facad7dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.039697][ T4833] RAX: ffffffffffffffda RBX: 00007facacbb6080 RCX: 00007facac98e929 [ 443.047676][ T4833] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000007 [ 443.055658][ T4833] RBP: 00007facad7dd090 R08: 0000000000000000 R09: 0000000000000000 [ 443.063720][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.071692][ T4833] R13: 0000000000000000 R14: 00007facacbb6080 R15: 00007ffc4c3b4f68 [ 443.079669][ T4833] [ 443.707705][ T4837] loop1: detected capacity change from 0 to 512 [ 443.723018][ T4837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 443.888747][ T4837] EXT4-fs (loop1): 1 truncate cleaned up [ 443.894606][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 444.289996][ T4736] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 444.297902][ T6] usb 4-1: device not accepting address 41, error -71 [ 444.366706][ T284] EXT4-fs (loop1): unmounting filesystem. [ 444.517636][ T4736] usb 3-1: Using ep0 maxpacket: 32 [ 444.533101][ T4847] loop1: detected capacity change from 0 to 256 [ 446.752691][ T4848] loop0: detected capacity change from 0 to 512 [ 450.391297][ T4848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 450.442580][ T4848] EXT4-fs: failed to create workqueue [ 450.448106][ T4848] EXT4-fs (loop0): mount failed [ 450.453094][ T6] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 450.486745][ T4736] usb 3-1: device descriptor read/all, error -71 [ 451.872269][ T28] audit: type=1400 audit(2000000258.590:504): avc: denied { setcurrent } for pid=4865 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 452.473718][ T4875] loop1: detected capacity change from 0 to 512 [ 452.499025][ T4875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 452.652754][ T4875] EXT4-fs (loop1): 1 truncate cleaned up [ 452.658762][ T4875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 453.092586][ T28] audit: type=1401 audit(2000000258.610:505): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 453.133688][ T28] audit: type=1400 audit(2000000259.470:506): avc: denied { connect } for pid=4865 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 453.160230][ T284] EXT4-fs (loop1): unmounting filesystem. [ 454.763546][ T4907] loop0: detected capacity change from 0 to 512 [ 455.914662][ T4736] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 455.931745][ T4907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 455.948718][ T4907] EXT4-fs (loop0): 1 truncate cleaned up [ 455.954565][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 456.107784][ T4736] usb 3-1: Using ep0 maxpacket: 32 [ 457.719583][ T285] EXT4-fs (loop0): unmounting filesystem. [ 457.752445][ T4736] usb 3-1: device descriptor read/all, error -71 [ 457.863410][ T4937] netlink: 'syz.4.1219': attribute type 4 has an invalid length. [ 457.876500][ T4937] netlink: 'syz.4.1219': attribute type 4 has an invalid length. [ 458.561477][ T4941] loop3: detected capacity change from 0 to 512 [ 458.575037][ T4941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 458.941102][ T4941] EXT4-fs (loop3): 1 truncate cleaned up [ 458.946926][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 459.214136][ T283] EXT4-fs (loop3): unmounting filesystem. [ 459.397762][ T4948] loop1: detected capacity change from 0 to 512 [ 459.404738][ T4948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 459.816521][ T4948] EXT4-fs (loop1): 1 truncate cleaned up [ 459.822374][ T4948] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 460.394706][ T305] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 460.395172][ T4953] loop3: detected capacity change from 0 to 512 [ 460.484852][ T4953] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 460.512573][ T284] EXT4-fs (loop1): unmounting filesystem. [ 460.561072][ T4953] EXT4-fs (loop3): 1 truncate cleaned up [ 460.566843][ T4953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 461.178303][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.307315][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.327838][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 461.334075][ T305] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 461.358846][ T303] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 461.383262][ T305] usb 5-1: config 4 has no interface number 0 [ 462.165593][ T305] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.180420][ T305] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.191725][ T4958] binder: BINDER_SET_CONTEXT_MGR already set [ 462.192950][ T283] EXT4-fs (loop3): unmounting filesystem. [ 462.197796][ T4958] binder: 4956:4958 ioctl 4018620d 200000000040 returned -16 [ 462.214152][ T305] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 462.223514][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.317372][ T4967] binder: BINDER_SET_CONTEXT_MGR already set [ 462.323447][ T4967] binder: 4961:4967 ioctl 4018620d 200000000040 returned -16 [ 462.564135][ T305] usb 5-1: can't set config #4, error -71 [ 462.578966][ T305] usb 5-1: USB disconnect, device number 37 [ 462.617794][ T303] usb 1-1: device descriptor read/64, error -71 [ 463.312793][ T4978] binder: BINDER_SET_CONTEXT_MGR already set [ 463.318937][ T4978] binder: 4973:4978 ioctl 4018620d 200000000040 returned -16 [ 463.712766][ T4988] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 463.724739][ T4988] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 463.807786][ T303] usb 1-1: Using ep0 maxpacket: 32 [ 463.815441][ T303] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 463.841282][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.885934][ T303] usb 1-1: config 0 descriptor?? [ 463.896613][ T303] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 463.908012][ T303] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 464.369728][ T4996] loop4: detected capacity change from 0 to 512 [ 464.380434][ T40] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 464.439858][ T4996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.597809][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 464.604826][ T40] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 464.622229][ T4996] EXT4-fs (loop4): 1 truncate cleaned up [ 464.627979][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 465.108443][ T40] usb 2-1: config 4 has no interface number 0 [ 465.114643][ T40] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.125944][ T40] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.136030][ T40] usb 2-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 465.145172][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.156440][ T372] usb 1-1: USB disconnect, device number 43 [ 465.159039][ T286] EXT4-fs (loop4): unmounting filesystem. [ 465.163313][ T40] hub 2-1:4.128: USB hub found [ 465.174718][ T372] ftdi_sio 1-1:0.0: device disconnected [ 465.190113][ T5002] loop2: detected capacity change from 0 to 256 [ 465.349282][ T40] hub 2-1:4.128: 10 ports detected [ 465.354499][ T40] hub 2-1:4.128: Using single TT (err -22) [ 465.368203][ T40] hub 2-1:4.128: insufficient power available to use all downstream ports [ 465.689154][ T5009] loop0: detected capacity change from 0 to 512 [ 465.703265][ T303] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 465.713610][ T5009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 465.729687][ T5009] EXT4-fs (loop0): 1 truncate cleaned up [ 465.735782][ T5009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 466.198987][ T40] usb 2-1: USB disconnect, device number 48 [ 466.225625][ T303] usb 5-1: Using ep0 maxpacket: 32 [ 466.236467][ T303] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 466.246871][ T303] usb 5-1: config 4 has no interface number 0 [ 466.257107][ T303] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.280639][ T303] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.291894][ T303] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 466.301838][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.311659][ T285] EXT4-fs (loop0): unmounting filesystem. [ 466.327191][ T303] hub 5-1:4.128: USB hub found [ 467.130963][ T5025] loop2: detected capacity change from 0 to 512 [ 467.429764][ T5025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 467.618081][ T5025] EXT4-fs (loop2): 1 truncate cleaned up [ 467.623866][ T5025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 467.746531][ T5031] loop3: detected capacity change from 0 to 128 [ 468.313738][ T5031] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 468.337835][ T5031] FAT-fs (loop3): FAT read failed (blocknr 234) [ 468.421649][ T5039] binder: BINDER_SET_CONTEXT_MGR already set [ 468.427731][ T5039] binder: 5033:5039 ioctl 4018620d 200000000040 returned -16 [ 468.454810][ T287] EXT4-fs (loop2): unmounting filesystem. [ 468.477475][ T5038] netlink: 'syz.1.1248': attribute type 4 has an invalid length. [ 468.502901][ T5031] FAT-fs (loop3): FAT read failed (blocknr 234) [ 468.603718][ T303] hub 5-1:4.128: 10 ports detected [ 468.609404][ T303] hub 5-1:4.128: Using single TT (err -22) [ 468.615669][ T303] hub 5-1:4.128: insufficient power available to use all downstream ports [ 468.627894][ T5041] netlink: 'syz.1.1248': attribute type 4 has an invalid length. [ 468.960360][ T5046] loop2: detected capacity change from 0 to 512 [ 469.050334][ T5046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.247477][ T5046] EXT4-fs (loop2): 1 truncate cleaned up [ 469.253250][ T5046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 469.581923][ T5056] loop1: detected capacity change from 0 to 256 [ 469.636357][ T5056] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 469.781401][ T287] EXT4-fs (loop2): unmounting filesystem. [ 469.789636][ T303] usb 5-1: USB disconnect, device number 38 [ 470.345380][ T5073] loop2: detected capacity change from 0 to 512 [ 470.356407][ T5073] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 470.551121][ T5073] EXT4-fs (loop2): 1 truncate cleaned up [ 470.556926][ T5073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 471.132837][ T5085] binder: BINDER_SET_CONTEXT_MGR already set [ 471.138929][ T5085] binder: 5081:5085 ioctl 4018620d 200000000040 returned -16 [ 471.348897][ T287] EXT4-fs (loop2): unmounting filesystem. [ 471.409603][ T5097] netlink: 'syz.3.1262': attribute type 4 has an invalid length. [ 471.412144][ T5098] loop2: detected capacity change from 0 to 512 [ 471.424998][ T5097] netlink: 'syz.3.1262': attribute type 4 has an invalid length. [ 471.437719][ T5098] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 471.446150][ T5098] EXT4-fs (loop2): orphan cleanup on readonly fs [ 471.452815][ T5098] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 471.463826][ T5098] EXT4-fs warning (device loop2): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 471.478527][ T5098] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 471.485511][ T303] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 471.486175][ T5098] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1266: bg 0: block 40: padding at end of block bitmap is not set [ 471.507703][ T5098] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 471.516773][ T5098] EXT4-fs (loop2): 1 truncate cleaned up [ 471.522450][ T5098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 471.548069][ T287] EXT4-fs (loop2): unmounting filesystem. [ 471.631116][ T2832] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 471.659053][ T303] usb 2-1: Using ep0 maxpacket: 32 [ 471.665444][ T303] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 471.674932][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.690253][ T303] usb 2-1: config 0 descriptor?? [ 471.697512][ T303] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 471.705308][ T303] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 471.799064][ T2832] usb 1-1: Using ep0 maxpacket: 32 [ 471.805482][ T2832] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 471.813690][ T2832] usb 1-1: config 4 has no interface number 0 [ 471.819800][ T2832] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.830866][ T6] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 471.838442][ T2832] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.848431][ T2832] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 471.857555][ T2832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.867580][ T2832] hub 1-1:4.128: USB hub found [ 471.939127][ T4736] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 472.050503][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 472.063392][ T2832] hub 1-1:4.128: 10 ports detected [ 472.069386][ T2832] hub 1-1:4.128: Using single TT (err -22) [ 472.076147][ T6] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 472.086296][ T2832] hub 1-1:4.128: insufficient power available to use all downstream ports [ 472.095364][ T6] usb 3-1: config 179 has no interface number 0 [ 472.102671][ T6] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 472.114913][ T6] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 472.126660][ T4736] usb 5-1: Using ep0 maxpacket: 32 [ 472.154407][ T4736] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 472.166404][ T6] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 472.214454][ T4736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.276999][ T6] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 472.338416][ T4736] usb 5-1: config 0 descriptor?? [ 472.423586][ T6] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 472.461247][ T2832] usb 1-1: USB disconnect, device number 44 [ 472.559652][ T5110] binder: BINDER_SET_CONTEXT_MGR already set [ 472.565761][ T5110] binder: 5107:5110 ioctl 4018620d 200000000040 returned -16 [ 473.267101][ T4736] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 473.458554][ T4736] ftdi_sio ttyUSB1: unknown device type: 0x55d [ 473.476016][ T6] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 474.313830][ T5114] loop3: detected capacity change from 0 to 512 [ 477.917441][ T4736] usb 5-1: USB disconnect, device number 39 [ 477.927240][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.942005][ T5114] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 477.962949][ T5114] EXT4-fs (loop3): 1 truncate cleaned up [ 477.968769][ T5114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 478.019964][ T283] EXT4-fs (loop3): unmounting filesystem. [ 478.029926][ T4736] ftdi_sio 5-1:0.0: device disconnected [ 478.036678][ T19] usb 2-1: USB disconnect, device number 49 [ 478.051029][ T19] ftdi_sio 2-1:0.0: device disconnected [ 478.060529][ T6] usb 3-1: can't set config #179, error -71 [ 478.070874][ T6] usb 3-1: USB disconnect, device number 51 [ 479.585401][ T5141] binder: BINDER_SET_CONTEXT_MGR already set [ 479.591527][ T5141] binder: 5134:5141 ioctl 4018620d 200000000040 returned -16 [ 480.456596][ T5148] loop3: detected capacity change from 0 to 512 [ 480.467286][ T5148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 480.631688][ T5148] EXT4-fs (loop3): 1 truncate cleaned up [ 480.637476][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 481.067461][ T283] EXT4-fs (loop3): unmounting filesystem. [ 483.953011][ T5170] loop0: detected capacity change from 0 to 512 [ 484.657160][ T5173] loop2: detected capacity change from 0 to 512 [ 484.681492][ T5170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 484.692522][ T5173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 484.735856][ T40] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 484.864435][ T5170] EXT4-fs (loop0): 1 truncate cleaned up [ 484.870334][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 484.965717][ T5173] EXT4-fs (loop2): 1 truncate cleaned up [ 484.971563][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 485.656465][ T285] EXT4-fs (loop0): unmounting filesystem. [ 485.705526][ T4736] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 485.716000][ T287] EXT4-fs (loop2): unmounting filesystem. [ 485.869487][ T5192] loop0: detected capacity change from 0 to 256 [ 487.141115][ T19] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 487.676780][ T5201] loop1: detected capacity change from 0 to 512 [ 488.581686][ T5201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 488.647044][ T5201] EXT4-fs (loop1): 1 truncate cleaned up [ 488.653552][ T5201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 488.718861][ T40] usb 4-1: device descriptor read/64, error -71 [ 488.890890][ T284] EXT4-fs (loop1): unmounting filesystem. [ 489.225015][ T5219] loop0: detected capacity change from 0 to 512 [ 489.259463][ T5219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 489.279560][ T19] usb 3-1: device not accepting address 52, error -71 [ 489.358860][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 489.366287][ T40] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.402109][ T5219] EXT4-fs (loop0): 1 truncate cleaned up [ 489.407948][ T5219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 489.430052][ T40] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.444150][ T40] usb 4-1: config 1 interface 0 has no altsetting 0 [ 489.454246][ T40] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 489.463541][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.473969][ T40] usb 4-1: Product: syz [ 489.498049][ T40] usb 4-1: Manufacturer: syz [ 489.708449][ T40] usb 4-1: SerialNumber: syz [ 489.983836][ T5224] loop4: detected capacity change from 0 to 512 [ 489.995078][ T5224] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 490.014511][ T285] EXT4-fs (loop0): unmounting filesystem. [ 490.140896][ T5224] EXT4-fs (loop4): 1 truncate cleaned up [ 490.146844][ T5224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 490.310587][ T40] usbhid 4-1:1.0: can't add hid device: -22 [ 490.343849][ T40] usbhid: probe of 4-1:1.0 failed with error -22 [ 490.527314][ T40] usb 4-1: USB disconnect, device number 43 [ 490.828254][ T5229] loop3: detected capacity change from 0 to 512 [ 490.836130][ T5229] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 490.893112][ T5229] EXT4-fs (loop3): 1 truncate cleaned up [ 490.898992][ T5229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 492.871619][ T303] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 492.872688][ T286] EXT4-fs (loop4): unmounting filesystem. [ 492.891340][ T283] EXT4-fs (loop3): unmounting filesystem. [ 492.947162][ T19] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 493.371071][ T5246] binder: BINDER_SET_CONTEXT_MGR already set [ 493.377256][ T5246] binder: 5238:5246 ioctl 4018620d 200000000040 returned -16 [ 493.663681][ T19] usb 3-1: device descriptor read/64, error -71 [ 493.727662][ T1042] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 493.876565][ T5259] loop2: detected capacity change from 0 to 256 [ 493.911797][ T1042] usb 4-1: Using ep0 maxpacket: 16 [ 498.749970][ T5262] loop0: detected capacity change from 0 to 512 [ 498.862799][ T1042] usb 4-1: device descriptor read/all, error -71 [ 499.002933][ T4271] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.120192][ T5273] netlink: 'syz.3.1313': attribute type 4 has an invalid length. [ 499.131709][ T5273] netlink: 'syz.3.1313': attribute type 4 has an invalid length. [ 502.270804][ T5277] loop2: detected capacity change from 0 to 512 [ 502.276810][ T5279] loop1: detected capacity change from 0 to 512 [ 502.297395][ T5277] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 502.309767][ T5279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 502.426245][ T305] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 502.491239][ T5277] EXT4-fs (loop2): 1 truncate cleaned up [ 502.497158][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 502.590172][ T5279] EXT4-fs (loop1): 1 truncate cleaned up [ 502.596034][ T5279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 503.005153][ T287] EXT4-fs (loop2): unmounting filesystem. [ 503.156694][ T284] EXT4-fs (loop1): unmounting filesystem. [ 503.674707][ T5302] binder: BINDER_SET_CONTEXT_MGR already set [ 503.680836][ T5302] binder: 5294:5302 ioctl 4018620d 200000000040 returned -16 [ 503.750794][ T5301] loop1: detected capacity change from 0 to 256 [ 504.411657][ T303] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 504.864473][ T19] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 507.828700][ T5310] loop0: detected capacity change from 0 to 512 [ 507.898529][ T5312] loop3: detected capacity change from 0 to 512 [ 508.961454][ T5312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 508.961513][ T5310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 509.029159][ T5318] loop4: detected capacity change from 0 to 512 [ 509.037839][ T5310] EXT4-fs (loop0): 1 truncate cleaned up [ 509.037922][ T5312] EXT4-fs (loop3): 1 truncate cleaned up [ 509.043529][ T5310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 509.049250][ T5312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 509.069173][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 509.095975][ T19] usb 3-1: device descriptor read/all, error -71 [ 509.212841][ T285] EXT4-fs (loop0): unmounting filesystem. [ 509.266245][ T5318] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 509.278457][ T5318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 509.329681][ T5318] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 509.340633][ T5318] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 509.341617][ T283] EXT4-fs (loop3): unmounting filesystem. [ 509.355486][ T5318] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 509.384960][ T5338] syz.3.1332[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.389652][ T5335] binder: BINDER_SET_CONTEXT_MGR already set [ 509.407135][ T5335] binder: 5328:5335 ioctl 4018620d 200000000040 returned -16 [ 509.417630][ T5326] loop2: detected capacity change from 0 to 512 [ 509.424608][ T5326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 509.435285][ T303] usb 5-1: device not accepting address 41, error -71 [ 509.446746][ T5318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1326: bg 0: block 40: padding at end of block bitmap is not set [ 509.464873][ T5318] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 509.474257][ T5318] EXT4-fs (loop4): 1 truncate cleaned up [ 509.480149][ T5318] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 509.515363][ T5326] EXT4-fs (loop2): 1 truncate cleaned up [ 509.521190][ T5326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 509.557172][ T286] EXT4-fs (loop4): unmounting filesystem. [ 509.949357][ T287] EXT4-fs (loop2): unmounting filesystem. [ 510.419445][ T5356] netlink: 'syz.2.1335': attribute type 4 has an invalid length. [ 510.474667][ T5361] netlink: 'syz.2.1335': attribute type 4 has an invalid length. [ 511.744924][ T5373] loop1: detected capacity change from 0 to 256 [ 511.849307][ T19] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 511.978151][ T303] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 512.112822][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 512.240846][ T5377] loop3: detected capacity change from 0 to 512 [ 512.283944][ T5377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 513.197615][ T303] usb 5-1: Using ep0 maxpacket: 32 [ 514.550511][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.368571][ T5377] EXT4-fs: failed to create workqueue [ 516.374119][ T5377] EXT4-fs (loop3): mount failed [ 516.392868][ T303] usb 5-1: device descriptor read/all, error -71 [ 516.407558][ T19] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.424488][ T19] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.463491][ T19] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 516.476694][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.490127][ T19] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00 [ 516.499483][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.513897][ T19] usb 3-1: config 0 descriptor?? [ 516.519952][ T19] usb 3-1: can't set config #0, error -71 [ 516.529653][ T19] usb 3-1: USB disconnect, device number 56 [ 516.842651][ T5392] kvm: pic: non byte write [ 517.739609][ T5398] loop4: detected capacity change from 0 to 512 [ 517.920284][ T5398] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 518.088867][ T5398] EXT4-fs (loop4): 1 truncate cleaned up [ 518.094768][ T5398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 518.668379][ T286] EXT4-fs (loop4): unmounting filesystem. [ 518.746459][ T5410] loop0: detected capacity change from 0 to 256 [ 518.767023][ T5410] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 518.802887][ T19] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 519.278209][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 519.284551][ T19] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 519.306234][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.315893][ T19] usb 3-1: config 0 descriptor?? [ 519.325331][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 519.343470][ T19] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 519.479280][ T473] usb 3-1: USB disconnect, device number 57 [ 519.494764][ T473] ftdi_sio 3-1:0.0: device disconnected [ 519.644912][ T303] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 519.816815][ T5433] loop0: detected capacity change from 0 to 256 [ 522.270235][ T303] usb 2-1: Using ep0 maxpacket: 8 [ 522.279556][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.421469][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.701020][ T303] usb 2-1: device descriptor read/all, error -71 [ 523.357706][ T5446] loop2: detected capacity change from 0 to 256 [ 527.109815][ T5449] loop1: detected capacity change from 0 to 512 [ 531.514551][ T5449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 531.534724][ T5449] EXT4-fs: failed to create workqueue [ 531.540127][ T5449] EXT4-fs (loop1): mount failed [ 531.935580][ T5462] loop3: detected capacity change from 0 to 256 [ 533.647648][ T5463] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 534.849004][ T5467] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 535.392557][ T5489] binder: BINDER_SET_CONTEXT_MGR already set [ 535.398769][ T5489] binder: 5485:5489 ioctl 4018620d 200000000040 returned -16 [ 535.578553][ T5488] loop4: detected capacity change from 0 to 512 [ 536.430361][ T5488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 536.613926][ T473] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 536.628773][ T5488] EXT4-fs (loop4): 1 truncate cleaned up [ 536.634546][ T5488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 537.293038][ T286] EXT4-fs (loop4): unmounting filesystem. [ 537.303835][ T473] usb 1-1: Using ep0 maxpacket: 8 [ 537.310408][ T473] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 537.320300][ T473] usb 1-1: config 179 has no interface number 0 [ 537.392705][ T5502] binder: BINDER_SET_CONTEXT_MGR already set [ 537.398880][ T5502] binder: 5492:5502 ioctl 4018620d 200000000040 returned -16 [ 537.494355][ T473] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 537.508257][ T473] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 537.521248][ T473] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 537.533617][ T473] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 537.638205][ T473] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 537.651693][ T473] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 537.661018][ T473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.672008][ T5484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 537.778840][ T372] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 537.806806][ T305] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 537.867545][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 537.867548][ T4736] usb 1-1: USB disconnect, device number 46 [ 537.882282][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 537.909417][ T303] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 537.919275][ T60] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 537.943340][ T5508] netlink: 'syz.0.1377': attribute type 4 has an invalid length. [ 537.946801][ T372] usb 2-1: Using ep0 maxpacket: 32 [ 537.957660][ T372] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 537.958806][ T5508] netlink: 'syz.0.1377': attribute type 4 has an invalid length. [ 537.966840][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.983556][ T372] usb 2-1: config 0 descriptor?? [ 537.988589][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 537.995016][ T372] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 538.002761][ T372] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 538.009015][ T305] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 538.018103][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.028500][ T305] usb 3-1: config 0 descriptor?? [ 538.035855][ T305] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 538.043655][ T305] ftdi_sio ttyUSB1: unknown device type: 0x55d [ 538.086524][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 538.086737][ T303] usb 4-1: Using ep0 maxpacket: 16 [ 538.092855][ T60] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 538.098685][ T303] usb 4-1: unable to get BOS descriptor or descriptor too short [ 538.105193][ T60] usb 5-1: config 179 has no interface number 0 [ 538.113903][ T303] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.119114][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 538.143008][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 538.143070][ T303] usb 4-1: config 1 interface 0 has no altsetting 0 [ 538.154398][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 538.172264][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 538.185033][ T303] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 538.193404][ T60] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 538.194310][ T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.212730][ T60] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 538.215607][ T303] usb 4-1: Product: syz [ 538.224750][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.236189][ T303] usb 4-1: Manufacturer: syz [ 538.241534][ T303] usb 4-1: SerialNumber: syz [ 538.242737][ T5503] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 538.464389][ T303] usbhid 4-1:1.0: can't add hid device: -22 [ 538.496094][ T303] usbhid: probe of 4-1:1.0 failed with error -22 [ 538.599660][ T303] usb 4-1: USB disconnect, device number 46 [ 539.066180][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.141758][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.343169][ T305] usb 5-1: USB disconnect, device number 46 [ 540.349153][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 540.349205][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 540.903311][ T5524] loop0: detected capacity change from 0 to 512 [ 541.321818][ T5524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 541.553792][ T5524] EXT4-fs (loop0): 1 truncate cleaned up [ 541.559630][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 541.813068][ T4736] usb 3-1: USB disconnect, device number 58 [ 541.819453][ T4736] ftdi_sio 3-1:0.0: device disconnected [ 541.896398][ T285] EXT4-fs (loop0): unmounting filesystem. [ 541.950148][ T5538] netlink: 'syz.3.1385': attribute type 4 has an invalid length. [ 541.976628][ T5540] loop0: detected capacity change from 0 to 256 [ 541.985336][ T5538] netlink: 'syz.3.1385': attribute type 4 has an invalid length. [ 542.017488][ T5540] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 542.122424][ T305] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 542.299308][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 542.305826][ T305] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 542.315234][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.337798][ T305] usb 5-1: config 0 descriptor?? [ 542.345455][ T305] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 542.354719][ T305] ftdi_sio ttyUSB1: unknown device type: 0x55d [ 542.433557][ T4736] usb 2-1: USB disconnect, device number 53 [ 542.445362][ T4736] ftdi_sio 2-1:0.0: device disconnected [ 543.846621][ T5559] loop0: detected capacity change from 0 to 256 [ 544.644232][ T5565] netlink: 'syz.2.1393': attribute type 4 has an invalid length. [ 544.655113][ T5565] netlink: 'syz.2.1393': attribute type 4 has an invalid length. [ 545.813954][ T305] usb 5-1: USB disconnect, device number 47 [ 545.820287][ T305] ftdi_sio 5-1:0.0: device disconnected [ 545.891052][ T5571] loop2: detected capacity change from 0 to 256 [ 545.924510][ T5571] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 547.012247][ T5585] loop4: detected capacity change from 0 to 256 [ 547.028115][ T5585] FAT-fs (loop4): Directory bread(block 64) failed [ 547.034963][ T5585] FAT-fs (loop4): Directory bread(block 65) failed [ 547.041572][ T5585] FAT-fs (loop4): Directory bread(block 66) failed [ 547.049031][ T5585] FAT-fs (loop4): Directory bread(block 67) failed [ 547.055732][ T5585] FAT-fs (loop4): Directory bread(block 68) failed [ 547.062355][ T5585] FAT-fs (loop4): Directory bread(block 69) failed [ 547.068909][ T5585] FAT-fs (loop4): Directory bread(block 70) failed [ 547.075473][ T4736] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 547.075821][ T5585] FAT-fs (loop4): Directory bread(block 71) failed [ 547.089635][ T5585] FAT-fs (loop4): Directory bread(block 72) failed [ 547.096208][ T372] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 547.096406][ T5585] FAT-fs (loop4): Directory bread(block 73) failed [ 547.196967][ T5592] netlink: 'syz.2.1401': attribute type 4 has an invalid length. [ 547.207411][ T5592] netlink: 'syz.2.1401': attribute type 4 has an invalid length. [ 547.248541][ T4736] usb 2-1: Using ep0 maxpacket: 32 [ 547.254805][ T4736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.265017][ T4736] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.276023][ T4736] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.285887][ T4736] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.295245][ T372] usb 1-1: Using ep0 maxpacket: 32 [ 547.298778][ T4736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 547.305546][ T372] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 547.310550][ T4736] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00 [ 547.320008][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.328599][ T4736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.335289][ T4736] usb 2-1: config 0 descriptor?? [ 547.338194][ T372] usb 1-1: config 0 descriptor?? [ 547.355749][ T372] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 547.363591][ T372] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 547.397687][ T473] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 547.416368][ T305] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 547.557251][ T372] usb 1-1: USB disconnect, device number 47 [ 547.563641][ T372] ftdi_sio 1-1:0.0: device disconnected [ 547.569287][ T473] usb 4-1: Using ep0 maxpacket: 32 [ 547.575551][ T473] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 547.584780][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 547.590053][ T473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.599648][ T305] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 547.608312][ T473] usb 4-1: config 0 descriptor?? [ 547.613320][ T305] usb 5-1: config 4 has no interface number 0 [ 547.619414][ T305] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.630626][ T305] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.640687][ T305] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 547.641423][ T473] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 547.657999][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.667075][ T473] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 547.673951][ T305] hub 5-1:4.128: USB hub found [ 547.726619][ T4736] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 547.734740][ T4736] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 547.742680][ T4736] hid-thrustmaster 0003:044F:B65D.0011: item fetching failed at offset 2/5 [ 547.751704][ T4736] hid-thrustmaster 0003:044F:B65D.0011: parse failed with error -22 [ 547.759750][ T4736] hid-thrustmaster: probe of 0003:044F:B65D.0011 failed with error -22 [ 547.860650][ T305] hub 5-1:4.128: 10 ports detected [ 547.865862][ T305] hub 5-1:4.128: Using single TT (err -22) [ 547.871898][ T305] hub 5-1:4.128: insufficient power available to use all downstream ports [ 547.958737][ T4736] usb 2-1: USB disconnect, device number 54 [ 550.001161][ T5613] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 550.092786][ T5603] loop2: detected capacity change from 0 to 512 [ 550.099537][ T5603] EXT4-fs: Ignoring removed nobh option [ 550.107226][ T5613] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 550.117285][ T305] usb 5-1: USB disconnect, device number 48 [ 550.237808][ T5603] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 550.254161][ T2323] usb 4-1: USB disconnect, device number 47 [ 550.265749][ T5603] EXT4-fs (loop2): invalid inodes per group: 3 [ 550.265749][ T5603] [ 550.834135][ T5618] loop0: detected capacity change from 0 to 512 [ 550.846809][ T5618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 551.018855][ T5618] EXT4-fs (loop0): 1 truncate cleaned up [ 551.024641][ T5618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 551.466886][ T2323] ftdi_sio 4-1:0.0: device disconnected [ 551.511909][ T285] EXT4-fs (loop0): unmounting filesystem. [ 551.522193][ T5625] loop1: detected capacity change from 0 to 512 [ 551.538416][ T5625] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.547869][ T5625] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 551.680865][ T28] audit: type=1400 audit(2000000364.696:507): avc: denied { accept } for pid=5626 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 551.681624][ T5625] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 551.710459][ T5625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 551.720733][ T5625] System zones: 0-2, 18-18, 34-34 [ 551.726911][ T5625] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 551.743649][ T5625] EXT4-fs (loop1): 1 truncate cleaned up [ 551.749380][ T5625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 551.783075][ T284] EXT4-fs (loop1): unmounting filesystem. [ 552.220122][ T5636] loop2: detected capacity change from 0 to 512 [ 552.231572][ T5636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 552.252198][ T2323] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 552.909483][ T5636] EXT4-fs (loop2): 1 truncate cleaned up [ 552.915324][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 552.990506][ T5650] loop4: detected capacity change from 0 to 256 [ 553.654742][ T287] EXT4-fs (loop2): unmounting filesystem. [ 553.729219][ T2323] usb 4-1: Using ep0 maxpacket: 32 [ 554.126970][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 554.195786][ T2323] usb 4-1: device descriptor read/all, error -71 [ 555.590005][ T5687] FAULT_INJECTION: forcing a failure. [ 555.590005][ T5687] name failslab, interval 1, probability 0, space 0, times 0 [ 556.812531][ T5693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.446918][ T5696] loop3: detected capacity change from 0 to 512 [ 557.457690][ T5696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 557.613267][ T5687] CPU: 1 PID: 5687 Comm: syz.0.1429 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 557.623221][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.633297][ T5687] Call Trace: [ 557.636611][ T5687] [ 557.639555][ T5687] __dump_stack+0x21/0x24 [ 557.643927][ T5687] dump_stack_lvl+0xee/0x150 [ 557.648540][ T5687] ? __cfi_dump_stack_lvl+0x8/0x8 [ 557.653583][ T5687] ? ____fput+0x15/0x20 [ 557.657761][ T5687] ? exit_to_user_mode_loop+0x9b/0xb0 [ 557.663156][ T5687] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 557.668907][ T5687] ? syscall_exit_to_user_mode+0x1a/0x30 [ 557.674556][ T5687] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.680652][ T5687] dump_stack+0x15/0x24 [ 557.684830][ T5687] should_fail_ex+0x3d4/0x520 [ 557.689522][ T5687] __should_failslab+0xac/0xf0 [ 557.694305][ T5687] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 557.700305][ T5687] should_failslab+0x9/0x20 [ 557.704843][ T5687] __kmem_cache_alloc_node+0x3d/0x2c0 [ 557.710234][ T5687] ? __cfi_mutex_lock+0x10/0x10 [ 557.715102][ T5687] ? delete_node+0x2f4/0xa60 [ 557.719716][ T5687] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 557.725729][ T5687] __kmalloc+0xa1/0x1e0 [ 557.729912][ T5687] ? __cfi___bpf_trace_tlb_flush+0x10/0x10 [ 557.735756][ T5687] tracepoint_probe_unregister+0x1e6/0x8b0 [ 557.741589][ T5687] bpf_probe_unregister+0x61/0x70 [ 557.746736][ T5687] bpf_raw_tp_link_release+0x63/0x90 [ 557.752065][ T5687] bpf_link_free+0x13a/0x390 [ 557.756694][ T5687] ? bpf_link_put_deferred+0x20/0x20 [ 557.762010][ T5687] ? security_file_free+0xd8/0xf0 [ 557.767078][ T5687] bpf_link_release+0x15f/0x170 [ 557.771955][ T5687] ? __cfi_bpf_link_release+0x10/0x10 [ 557.777349][ T5687] __fput+0x1fc/0x8f0 [ 557.781352][ T5687] ? _raw_spin_unlock+0x4c/0x70 [ 557.786228][ T5687] ____fput+0x15/0x20 [ 557.790223][ T5687] task_work_run+0x1db/0x240 [ 557.794828][ T5687] ? __cfi_task_work_run+0x10/0x10 [ 557.799952][ T5687] ? __cfi___close_range+0x10/0x10 [ 557.805082][ T5687] exit_to_user_mode_loop+0x9b/0xb0 [ 557.810312][ T5687] exit_to_user_mode_prepare+0x5a/0xa0 [ 557.815797][ T5687] syscall_exit_to_user_mode+0x1a/0x30 [ 557.821282][ T5687] do_syscall_64+0x58/0xa0 [ 557.825728][ T5687] ? clear_bhb_loop+0x15/0x70 [ 557.830423][ T5687] ? clear_bhb_loop+0x15/0x70 [ 557.835124][ T5687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.841043][ T5687] RIP: 0033:0x7facac98e929 [ 557.845476][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.865098][ T5687] RSP: 002b:00007facad7fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 557.873544][ T5687] RAX: 0000000000000000 RBX: 00007facacbb5fa0 RCX: 00007facac98e929 [ 557.881534][ T5687] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 557.889536][ T5687] RBP: 00007facad7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 557.897540][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.905533][ T5687] R13: 0000000000000000 R14: 00007facacbb5fa0 R15: 00007ffc4c3b4f68 [ 557.913532][ T5687] [ 557.919658][ T5696] EXT4-fs (loop3): 1 truncate cleaned up [ 557.925396][ T5696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.995138][ T5687] CFI failure at __traceiter_tlb_flush+0x80/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0x205553a5) [ 557.995208][ T5695] CFI failure at __traceiter_tlb_flush+0x80/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0x205553a5) [ 558.006770][ T5687] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 558.006788][ T5687] CPU: 1 PID: 5687 Comm: syz.0.1429 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 558.006804][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.006813][ T5687] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 558.006831][ T5687] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 e8 5d 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 558.006845][ T5687] RSP: 0018:ffffc9000f65f928 EFLAGS: 00010093 [ 558.006860][ T5687] RAX: 1ffff1102095ca56 RBX: ffffffff81710d60 RCX: ffff88813e0d0000 [ 558.006872][ T5687] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc9000fcdd000 [ 558.006883][ T5687] RBP: ffffc9000f65f958 R08: dffffc0000000000 R09: ffffed10265f2cab [ 558.006895][ T5687] R10: 0000000084eb1367 R11: 1ffff110265f2caa R12: ffff888104ae52a8 [ 558.006906][ T5687] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888104ae52a8 [ 558.006917][ T5687] FS: 00007facad7fe6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 558.006931][ T5687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.006941][ T5687] CR2: 0000001b2db08ff8 CR3: 0000000112b50000 CR4: 00000000003506a0 [ 558.006955][ T5687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.006964][ T5687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.006973][ T5687] Call Trace: [ 558.006978][ T5687] [ 558.006986][ T5687] switch_mm_irqs_off+0x61f/0x980 [ 558.007002][ T5687] __schedule+0x9eb/0x14e0 [ 558.007043][ T5687] ? release_firmware_map_entry+0x194/0x194 [ 558.007066][ T5687] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 558.007083][ T5687] ? irqentry_exit+0x37/0x40 [ 558.007109][ T5687] preempt_schedule_irq+0x9b/0x110 [ 558.007131][ T5687] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 558.007155][ T5687] raw_irqentry_exit_cond_resched+0x29/0x30 [ 558.007171][ T5687] irqentry_exit+0x37/0x40 [ 558.007188][ T5687] sysvec_reschedule_ipi+0x78/0x80 [ 558.007204][ T5687] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 558.007221][ T5687] RIP: 0010:bpf_link_free+0x13f/0x390 [ 558.007243][ T5687] Code: 80 3c 28 00 74 08 4c 89 ff e8 4d b2 34 00 48 89 df 4d 8b 1f 41 ba 89 c2 80 a9 45 03 53 fc 74 02 0f 0b 41 ff d3 43 80 3c 2c 00 <74> 08 4c 89 f7 e8 27 b2 34 00 4d 8b 36 49 83 c6 38 4c 89 f0 48 c1 [ 558.007257][ T5687] RSP: 0018:ffffc9000f65fc60 EFLAGS: 00000246 [ 558.007270][ T5687] RAX: ffffffff817bd78a RBX: ffff888104ae5b00 RCX: ffff88813e0d0000 [ 558.007282][ T5687] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 558.007292][ T5687] RBP: ffffc9000f65fd08 R08: dffffc0000000000 R09: fffff52001ecbf61 [ 558.007304][ T5687] R10: fffff52001ecbf61 R11: 1ffff92001ecbf60 R12: 1ffff1102095cb63 [ 558.007316][ T5687] R13: dffffc0000000000 R14: ffff888104ae5b18 R15: ffffffff858c52c0 [ 558.007329][ T5687] ? bpf_put_raw_tracepoint+0x4a/0x60 [ 558.007353][ T5687] ? bpf_link_put_deferred+0x20/0x20 [ 558.007373][ T5687] ? security_file_free+0xd8/0xf0 [ 558.007392][ T5687] bpf_link_release+0x15f/0x170 [ 558.007414][ T5687] ? __cfi_bpf_link_release+0x10/0x10 [ 558.007437][ T5687] __fput+0x1fc/0x8f0 [ 558.007456][ T5687] ? _raw_spin_unlock+0x4c/0x70 [ 558.007477][ T5687] ____fput+0x15/0x20 [ 558.007492][ T5687] task_work_run+0x1db/0x240 [ 558.007511][ T5687] ? __cfi_task_work_run+0x10/0x10 [ 558.007529][ T5687] ? __cfi___close_range+0x10/0x10 [ 558.007553][ T5687] exit_to_user_mode_loop+0x9b/0xb0 [ 558.007568][ T5687] exit_to_user_mode_prepare+0x5a/0xa0 [ 558.007602][ T5687] syscall_exit_to_user_mode+0x1a/0x30 [ 558.007620][ T5687] do_syscall_64+0x58/0xa0 [ 558.007643][ T5687] ? clear_bhb_loop+0x15/0x70 [ 558.007658][ T5687] ? clear_bhb_loop+0x15/0x70 [ 558.007674][ T5687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.007699][ T5687] RIP: 0033:0x7facac98e929 [ 558.007712][ T5687] Code: Unable to access opcode bytes at 0x7facac98e8ff. [ 558.007720][ T5687] RSP: 002b:00007facad7fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 558.007736][ T5687] RAX: 0000000000000000 RBX: 00007facacbb5fa0 RCX: 00007facac98e929 [ 558.007747][ T5687] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 558.007757][ T5687] RBP: 00007facad7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 558.007767][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.007776][ T5687] R13: 0000000000000000 R14: 00007facacbb5fa0 R15: 00007ffc4c3b4f68 [ 558.007791][ T5687] [ 558.007796][ T5687] Modules linked in: [ 558.007809][ T5687] ---[ end trace 0000000000000000 ]--- [ 558.007816][ T5687] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 558.007834][ T5687] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 e8 5d 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 558.007848][ T5687] RSP: 0018:ffffc9000f65f928 EFLAGS: 00010093 [ 558.007862][ T5687] RAX: 1ffff1102095ca56 RBX: ffffffff81710d60 RCX: ffff88813e0d0000 [ 558.007874][ T5687] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc9000fcdd000 [ 558.007886][ T5687] RBP: ffffc9000f65f958 R08: dffffc0000000000 R09: ffffed10265f2cab [ 558.007898][ T5687] R10: 0000000084eb1367 R11: 1ffff110265f2caa R12: ffff888104ae52a8 [ 558.007909][ T5687] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888104ae52a8 [ 558.007921][ T5687] FS: 00007facad7fe6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 558.007935][ T5687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.007947][ T5687] CR2: 0000001b2db08ff8 CR3: 0000000112b50000 CR4: 00000000003506a0 [ 558.007961][ T5687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.007970][ T5687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.007982][ T5687] Kernel panic - not syncing: Fatal exception [ 559.186446][ T5687] Shutting down cpus with NMI [ 559.186877][ T5687] Kernel Offset: disabled [ 559.757241][ T5687] Rebooting in 86400 seconds..