last executing test programs: 4.376854535s ago: executing program 3 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 4.353918916s ago: executing program 3 (id=1235): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000540)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES32=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x21, 0x1513, &(0x7f0000020a00)="$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") socket(0x26, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x67) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x20}}, 0x400c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000004) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') pread64(r5, &(0x7f0000000c00)=""/59, 0x3b, 0x545) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 4.176886439s ago: executing program 3 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) tgkill(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) userfaultfd(0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast1}, &(0x7f00000001c0)=0xc) sendmsg$xdp(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x3, r7, 0x7}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="40334cb6d3bc6aeb89666fd72c0a5e2eff2c0f1c5f6205aa3b7ef306340937e48a5591f5294dd96e4833214d800bba71", 0x30}, {&(0x7f00000005c0)="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", 0xff}, {&(0x7f00000007c0)="27d038b9e560b67308902dd3ed063b37560a0c5bcf73366484fa947a11bb54e67ba90de8fa0396be4c3d4ac8aef62d26e821bc403fc03f5fb3277ca33f95ed6d365a8d5f9347fc9c5c9b5f64eb7d272611c4d87fcd365ab71f90c9e9468f4258bdeada3b79f3a0902cd5b52d0a0feb90ee8a4a8a2429ccf006a9c14ba32c1c08bb9b4999895b61613d36491dbe6dd5bdd9a90dd662ec3b3671a045b0d44a4339a55e9e8e30f83d0a3b36a14f0bdd86c04855f626244c53f97344e6c59f0599ce85cdcefc42effc68a96bc4c2ef999e0d7675e29ca604b5c30ae59fb00e6622ffbd4e41862a68b92a2c300bf39b0ae932f17ee5a6f152", 0xf6}, {&(0x7f00000008c0)="90e57ed26323104fca52b91ff1d19b95e64a4dab2327f2807ea04042ec8d2b3d491dfe7c5687e81a440f8da24cf7f7e1b53ac8c7c78e105167337457d130a11d7a3c76d7cb558f2c925c3a3446f5499698b1d23435be3a47a4a2c081e0c70756cda02764465d8a6e49a2f46593e48f19bfe49f00989767a66a0544b806d86809164717a19058a536db8c74200434ec0ddcb112933360e5de29095c82dc0c04c7149ab7a1fde0f1b57e528f7ac3f20d6badb77cb0092853b558d618146a57193fecc29f4a1a36ee77f38f07", 0xcb}], 0x4, 0x0, 0x0, 0x44801}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 3.411944363s ago: executing program 4 (id=1243): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.747749716s ago: executing program 3 (id=1248): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000540)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES32=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x21, 0x1513, &(0x7f0000020a00)="$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") socket(0x26, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x67) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x20}}, 0x400c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') pread64(r7, &(0x7f0000000c00)=""/59, 0x3b, 0x545) 2.746755986s ago: executing program 4 (id=1249): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 2.58868802s ago: executing program 2 (id=1251): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ec32831a079882440718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b8898ff070000000000007a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x124) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f00000041c0)={{0x1, 0x100, 0x6, 0x0, 0x7ff, 0x2c59}, 0x3f, [0x8, 0x1, 0x7, 0x4, 0x5, 0x1, 0x7f, 0x4, 0x9, 0xfffffff8, 0x1, 0x1, 0x2, 0x4, 0x800, 0x7, 0xc, 0x1, 0x10000, 0x6, 0xfffffffb, 0xd3, 0x8309, 0x5, 0x4, 0x10000, 0x81, 0x10000, 0x1ff, 0x2, 0x0, 0x475, 0x800, 0x9, 0x1, 0x9, 0x5, 0xffff, 0x0, 0x4, 0x200, 0x0, 0x10, 0xa2, 0x8000, 0x7, 0x6, 0xe, 0x80000000, 0x5, 0x4, 0x1, 0x5, 0x3, 0x8001, 0x3e9, 0x4, 0xa7, 0x4, 0x4, 0x0, 0xfffffff7, 0x90a, 0x6, 0x7, 0x3, 0x1, 0x3, 0x735af3c2, 0x8, 0x20000000, 0xfffffff7, 0x1, 0x5, 0x1, 0x3, 0x200, 0xecf, 0x207, 0x1, 0x4, 0xffffffff, 0x6, 0x5, 0x1, 0x3, 0x1, 0x6, 0x6, 0x2, 0x6930, 0x8, 0x7fffffff, 0x6, 0x5, 0x3, 0x800000, 0x3, 0xb, 0xc, 0xb0, 0x80, 0xfffffffb, 0x3, 0x80, 0xed5, 0x2, 0x7ff, 0x9, 0x0, 0x2c, 0xe9d, 0x5, 0x2, 0x7fff, 0x2c, 0x7, 0x3488cf11, 0x8f, 0xfffffffe, 0x6, 0x3, 0x2, 0x0, 0x40000000, 0x8, 0x1c0, 0x8, 0x80, 0x7, 0x4, 0xffffffcc, 0x8, 0x3fae4fe3, 0xe, 0x6, 0x4, 0x800, 0x1, 0x5, 0x2, 0x3, 0x0, 0x7fffffff, 0x9, 0x4, 0xa, 0x59bcec0f, 0x9, 0x8, 0xffff7e12, 0xb22, 0x31, 0x1, 0x1, 0x3, 0xfffffff4, 0x5, 0x8, 0x1, 0x2, 0x1, 0x42, 0x7, 0x7, 0x7, 0xfffffffb, 0x8, 0x3, 0x7, 0xd, 0x96, 0xfff, 0x484fb1bd, 0x7, 0x9, 0x10, 0x7, 0x4, 0x3, 0x61af, 0xfffff2bb, 0x9c, 0x81, 0x5ff, 0x7, 0xa87, 0x9, 0x5, 0x5f28, 0x6, 0x10000, 0x1, 0x2, 0x8, 0x5, 0x1000, 0x7, 0x8, 0x1, 0x6, 0x4, 0x101, 0x2, 0x4, 0x6, 0x8, 0x7, 0x4, 0x3, 0x7, 0x0, 0x856, 0x1, 0x1000, 0x80000000, 0x9, 0x7, 0x3, 0x5, 0x1, 0x40, 0xc5, 0x9, 0x3ff, 0x5, 0xe91, 0x100, 0x1, 0x80, 0x5e78, 0x7, 0xfffffffe, 0x9, 0xd, 0x2, 0xa4, 0x7fff, 0x0, 0x2, 0x101, 0x0, 0x88d, 0xd, 0x0, 0x400, 0x4, 0x8001, 0x3ff, 0x1, 0xd33, 0x1000, 0x7, 0xf7, 0x77b, 0xc7, 0x8, 0x993, 0x1, 0xe0, 0x3, 0x0, 0x6, 0x0, 0xad, 0x10000, 0xfffffff7, 0xe, 0x8, 0x8, 0x6428, 0xfffffff7, 0x7ff, 0x7f, 0x3, 0x712, 0x200, 0x2, 0x7f, 0x5, 0x5, 0xbe, 0x10, 0x401, 0x7, 0x800, 0x74, 0x9, 0x5, 0x9, 0xfffffff7, 0xfffffffd, 0x10, 0x4, 0x0, 0x5, 0xa, 0x1, 0x6, 0xffffffff, 0x5, 0x0, 0xffffffff, 0x6, 0xfffffffb, 0x8, 0x8, 0xb, 0x3, 0x1, 0x3, 0x2, 0x100, 0x9, 0x0, 0x2, 0x3e6, 0xffffffff, 0x93b, 0x3f31, 0x7, 0xc00, 0x6, 0x518, 0x7, 0x3, 0x60b4, 0x5, 0x4, 0x1, 0xff, 0x486c, 0x3, 0x0, 0x8, 0x387d, 0x1, 0x400, 0x9, 0x7, 0xfffffffd, 0x16, 0x1000, 0x3, 0x3, 0x5, 0x7, 0x18, 0x900, 0xb, 0x289, 0x4, 0x2d08, 0x1000, 0x5, 0x5, 0x1, 0x694d, 0xce30, 0xdd16, 0x200, 0x8f8, 0xffff, 0x2400000, 0xffffffff, 0x0, 0x4, 0x7, 0x8001, 0x8, 0x9, 0x0, 0x1, 0x666, 0x3, 0x9, 0x40, 0xff, 0x6, 0x7, 0x4, 0x8, 0x1, 0x1, 0xfff, 0x8000, 0x3, 0xffffffff, 0xfffffff8, 0x0, 0x10001, 0x4, 0x6, 0x5, 0xfffffff9, 0x2, 0x5ed, 0x9, 0x80, 0xfffffffe, 0x80000001, 0x6, 0x6, 0x7, 0x1ff, 0x810001, 0x5, 0x3, 0x97e, 0x8, 0x2668, 0x3, 0x4, 0x3, 0x1, 0x6, 0x7, 0x3, 0x0, 0x5, 0xfffffff7, 0x527d, 0xc, 0x9, 0xce60, 0xf7, 0xcf5, 0x3ff, 0x6, 0xffffffff, 0xfff, 0x5, 0x1ff, 0x9, 0x2, 0x5, 0x1, 0x5, 0xe, 0x4, 0x4, 0x8, 0xfffffffe, 0x6, 0x2, 0x7, 0x4, 0x3, 0x8, 0x2c, 0xa, 0xe91e, 0x3, 0x8, 0x101, 0x1, 0xfffff801, 0x2, 0x80000001, 0x0, 0x4, 0x2, 0x9, 0x6, 0x9f5, 0x0, 0x5, 0x8001, 0x40, 0x7ff, 0x5, 0x6, 0x9, 0x71f, 0x2, 0x1, 0x80000000, 0x2, 0xac, 0xfff, 0x80000001, 0x7fff, 0x0, 0x9, 0x0, 0x6738, 0x6, 0x1, 0x8, 0x1, 0x4, 0x40, 0x80000000, 0x400, 0x0, 0x800, 0x400, 0xfff, 0x6, 0x2, 0xc, 0x8, 0xd5, 0xfff, 0x7, 0xe75, 0x2, 0x720, 0x7, 0x0, 0x1, 0x0, 0x81, 0x5, 0x3, 0x54, 0x6, 0x9, 0xffffff7f, 0x9, 0xacd1, 0x5, 0x8b5d, 0xfffff800, 0x1004, 0x800, 0x2e0, 0x3056, 0x6, 0xc70, 0x3, 0x92, 0x3, 0x0, 0x6, 0x5, 0xd, 0x400, 0x200, 0x4, 0x4, 0xffff79eb, 0x1, 0x6, 0xe781, 0x6, 0x4, 0x17, 0xf, 0x5, 0xd3a, 0xfffff801, 0x1d300000, 0xa, 0x3, 0x4, 0x2, 0x1, 0x81, 0x5, 0x3, 0xbcb, 0x75, 0x3, 0x3, 0xfffff17f, 0xffffffff, 0x4, 0x7, 0xe86, 0x40, 0x0, 0x6, 0x1, 0xfffffff9, 0x2, 0x1, 0x4724, 0x2, 0xa, 0xb3c, 0x1, 0x2deb800, 0x3b1, 0x7fff, 0x9, 0x100, 0x101b3746, 0xffff, 0x7, 0x6, 0x9, 0x8, 0x9, 0x2, 0x8ad, 0x1, 0x5, 0x7, 0x800, 0x6, 0x6, 0x8731, 0x1, 0xfffffc01, 0x4, 0x4, 0x8, 0x31f, 0x50, 0xb86f, 0x1, 0x7fffffff, 0x1ff, 0x7, 0xb51, 0x8de, 0x1, 0xb, 0xf, 0x80000001, 0x5, 0xedf1, 0x7f, 0x4, 0x6, 0x8, 0x0, 0x800, 0xd, 0x298, 0x2, 0x1, 0x17c7, 0x5, 0x401, 0x3, 0x6, 0x7, 0x9, 0xc010, 0x3, 0x1, 0x4, 0x2, 0x0, 0x5, 0x3, 0x1, 0x2cb, 0x49, 0x1b, 0x9, 0x7, 0xdd7, 0x1ff, 0x1, 0x28b, 0x80000000, 0x8, 0x101, 0x9d, 0x7f, 0x741, 0x2, 0x55e, 0x5, 0xf1, 0x9, 0x7, 0x7, 0x2, 0x4, 0x80, 0xa25, 0x8, 0x9, 0x3, 0xc, 0x62, 0xfffff000, 0x4, 0x8, 0x401, 0x7, 0x80, 0xf, 0x1, 0x80000001, 0x8, 0x0, 0x100, 0x6, 0x800, 0xd, 0xff, 0x4, 0x101, 0x0, 0x3b91, 0x7fff, 0x3, 0x1, 0x2, 0x5, 0x4, 0x5, 0x10000000, 0x3, 0x400, 0x7229, 0x2000000, 0x0, 0x7, 0x6, 0xffff8001, 0x7, 0x2, 0x8, 0x6067, 0x800, 0x1000, 0x8, 0x5, 0x9, 0x400, 0x4, 0x9, 0x8, 0x0, 0x9, 0x2550, 0x5, 0x10001, 0x1, 0x38000000, 0x4, 0x584b, 0xffff, 0x64f, 0x7, 0x8, 0x6, 0x40, 0x1, 0x5, 0xffffffff, 0x2, 0x6, 0x3, 0x4, 0x3, 0x9, 0x5, 0x1, 0xb0, 0x800, 0x80000000, 0x3, 0x8000, 0x8, 0x1, 0x7fff, 0x9, 0xffff, 0xc9c, 0xa0b, 0x0, 0x6, 0x3, 0x800, 0x7, 0x6, 0x3, 0xda0, 0x1, 0x1a300, 0x8, 0x0, 0xce0, 0xffffac25, 0x9, 0xf, 0x7fffffff, 0x6, 0x5, 0x274a770b, 0x6, 0x7, 0x6, 0x1000, 0x5, 0x7, 0xffff808d, 0x7, 0x5, 0x5, 0x8000, 0x7, 0x4, 0x38, 0x2, 0x7, 0x401, 0x0, 0x0, 0x3, 0xfffffffc, 0xc, 0xc, 0xc68, 0xa, 0x200, 0x862b, 0x10001, 0x0, 0x2, 0x1, 0x2b0, 0xd168, 0x5, 0xbff, 0x7, 0x101, 0x71, 0xc, 0x6a2, 0x1, 0x2b, 0xc0, 0x80000001, 0x6, 0x8, 0x5, 0x5, 0x8, 0x8, 0x8, 0xa3c9, 0x81, 0xef, 0xc, 0xa, 0x9, 0x2, 0x6, 0x2, 0x7, 0x7, 0x1f, 0x1, 0x2, 0x7, 0xa1, 0x8001, 0x1, 0x9, 0x1, 0x200, 0x751, 0x8, 0x3, 0x8, 0xfdcd, 0x4, 0x8, 0x7, 0x6, 0x7, 0x2, 0xc, 0x40, 0x1, 0x5, 0x100, 0x7, 0x7fffffff, 0x7fff, 0x6, 0xce, 0xfffffff9, 0x2, 0xadb, 0x1, 0xd, 0xffffffff, 0x5, 0xb61, 0x6, 0x80, 0x0, 0xbc000000, 0xe6, 0x10001, 0x7dda, 0x4, 0x3, 0x2, 0x101, 0x5, 0x6, 0x40, 0xe, 0x5, 0x3fe, 0x2, 0xffffffcb, 0x3, 0x1ff, 0x9, 0x48f4, 0x5d27, 0x0, 0xe, 0x9, 0xd, 0x5, 0x7ff, 0x6, 0xfffffffb, 0x7fff, 0x1, 0x8, 0x63, 0x1, 0x1973, 0x5, 0x3, 0x8, 0x101, 0x226, 0x6e9, 0xd, 0x0, 0x1, 0x200, 0x1, 0x7, 0x752, 0x400, 0x7e, 0x6, 0x9, 0x3, 0x4, 0xfffffff9, 0x8, 0xaf, 0x100, 0x6, 0x6, 0x7, 0x97c1, 0x9, 0x1ff, 0x4b, 0x4, 0x401, 0xf5c9, 0xffff, 0x35f9, 0x40, 0x3, 0x9, 0x8, 0x6, 0x6, 0x4, 0x200, 0x9, 0x7, 0x9, 0x3, 0x3, 0x3, 0x1c, 0x80000000, 0xffff, 0x3, 0xa7a, 0x7fff, 0x1, 0x7, 0x8, 0x5, 0x0, 0x5, 0x8, 0x9, 0x7e3, 0x6, 0x1000, 0x0, 0x9, 0x4, 0x7, 0x4, 0xe, 0xedc9, 0x3, 0xc, 0x7d0, 0x7, 0x4, 0x4, 0x3, 0xffffff29, 0x6, 0x6, 0x2, 0x7, 0x1ff, 0x98e, 0x1, 0x4, 0x9, 0x2, 0x9, 0xfff, 0x80000001, 0x4, 0x5, 0xa, 0x5cf2]}) 2.57653331s ago: executing program 3 (id=1252): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10b002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000080)) 2.414070463s ago: executing program 2 (id=1253): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000540)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES32=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x21, 0x1513, &(0x7f0000020a00)="$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") socket(0x26, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x67) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x20}}, 0x400c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000004) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') pread64(r5, &(0x7f0000000c00)=""/59, 0x3b, 0x545) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2.011134421s ago: executing program 2 (id=1254): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) link(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 1.996050961s ago: executing program 2 (id=1255): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0) 1.868604804s ago: executing program 4 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0xdc, 0x32, 0x8, 0xb57, 0x2a8d, 0x3374, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, [], [{{0x9, 0x5, 0x88, 0x3, 0x400, 0xfe, 0xfa, 0x1}}]}}]}}]}}, 0x0) 1.061661939s ago: executing program 2 (id=1262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.061168679s ago: executing program 1 (id=1263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 1.0479394s ago: executing program 2 (id=1264): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "02eb2272"}]}}, 0x0}, 0x0) 1.03545116s ago: executing program 1 (id=1265): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7c, 0xa3, 0x5, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10002, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0xff, 0x9, 0x7, 0x9, 0x7}], "", ['\x00']}, 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 959.713681ms ago: executing program 1 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x807, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0xbb6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 948.821411ms ago: executing program 1 (id=1267): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 745.324595ms ago: executing program 0 (id=1268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0x3}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 685.958146ms ago: executing program 0 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) 634.717797ms ago: executing program 0 (id=1270): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 634.284538ms ago: executing program 0 (id=1271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 633.988408ms ago: executing program 0 (id=1272): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 633.345527ms ago: executing program 0 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x3, 0x7d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cfadcb403d1bda0168790102030109026b0001000000100904"], 0x0) 580.498928ms ago: executing program 4 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="338987303a8188ff003c62256c8078a04657b3dc718a1d58e4c8cb16d5be9e4c22403f5bd4171fad22ec6ca82cae6a7dcf232dfc4e66348c78555fd419caa18e43d980557a8edf2a0bc3d0479be64367dd"], 0x8) close(r3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 470.229651ms ago: executing program 4 (id=1275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 449.956231ms ago: executing program 3 (id=1276): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x65bf, 0x6, 0x4, 0x1, 0xffffffff}, 0x50) 400.837812ms ago: executing program 4 (id=1277): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x1e, 0x4, 0x0) ioctl$int_out(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 61.573709ms ago: executing program 1 (id=1278): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000540)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES32=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x21, 0x1513, &(0x7f0000020a00)="$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") socket(0x26, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x67) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x20}}, 0x400c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000004) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') pread64(r7, &(0x7f0000000c00)=""/59, 0x3b, 0x545) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 0s ago: executing program 1 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) tgkill(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) userfaultfd(0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast1}, &(0x7f00000001c0)=0xc) sendmsg$xdp(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x3, r7, 0x7}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="40334cb6d3bc6aeb89666fd72c0a5e2eff2c0f1c5f6205aa3b7ef306340937e48a5591f5294dd96e4833214d800bba71", 0x30}, {&(0x7f00000005c0)="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", 0xff}, {&(0x7f00000007c0)="27d038b9e560b67308902dd3ed063b37560a0c5bcf73366484fa947a11bb54e67ba90de8fa0396be4c3d4ac8aef62d26e821bc403fc03f5fb3277ca33f95ed6d365a8d5f9347fc9c5c9b5f64eb7d272611c4d87fcd365ab71f90c9e9468f4258bdeada3b79f3a0902cd5b52d0a0feb90ee8a4a8a2429ccf006a9c14ba32c1c08bb9b4999895b61613d36491dbe6dd5bdd9a90dd662ec3b3671a045b0d44a4339a55e9e8e30f83d0a3b36a14f0bdd86c04855f626244c53f97344e6c59f0599ce85cdcefc42effc68a96bc4c2ef999e0d7675e29ca604b5c30ae59fb00e6622ffbd4e41862a68b92a2c300bf39b0ae932f17ee5a6f152", 0xf6}, {&(0x7f00000008c0)="90e57ed26323104fca52b91ff1d19b95e64a4dab2327f2807ea04042ec8d2b3d491dfe7c5687e81a440f8da24cf7f7e1b53ac8c7c78e105167337457d130a11d7a3c76d7cb558f2c925c3a3446f5499698b1d23435be3a47a4a2c081e0c70756cda02764465d8a6e49a2f46593e48f19bfe49f00989767a66a0544b806d86809164717a19058a536db8c74200434ec0ddcb112933360e5de29095c82dc0c04c7149ab7a1fde0f1b57e528f7ac3f20d6badb77cb0092853b558d618146a57193fecc29f4a1a36ee77f38f07", 0xcb}], 0x4, 0x0, 0x0, 0x44801}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) kernel console output (not intermixed with test programs): ntents [ 94.770062][ T1385] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.325: mark_inode_dirty error [ 94.784123][ T1385] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.325: corrupted inode contents [ 94.797302][ T1385] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.325: mark_inode_dirty error [ 94.809995][ T1385] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.325: corrupted inode contents [ 94.818463][ T425] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 94.829577][ T1385] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 94.838703][ T1385] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.325: corrupted inode contents [ 94.850800][ T1385] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.325: mark_inode_dirty error [ 94.862084][ T1385] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 94.871813][ T1385] EXT4-fs (loop2): 1 truncate cleaned up [ 94.877543][ T1385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.886589][ T1385] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.943589][ T8] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.962201][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 95.089653][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.108602][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.125496][ T425] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.143864][ T425] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.155870][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.185154][ T425] usb 4-1: config 0 descriptor?? [ 95.242666][ T1407] loop4: detected capacity change from 0 to 512 [ 95.611114][ T1407] EXT4-fs (loop4): 1 orphan inode deleted [ 95.616973][ T1407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.630142][ T1407] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.952159][ T425] usbhid 4-1:0.0: can't add hid device: -71 [ 95.958168][ T425] usbhid: probe of 4-1:0.0 failed with error -71 [ 96.009700][ T425] usb 4-1: USB disconnect, device number 8 [ 96.145046][ T833] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.177615][ T833] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 96.213331][ T286] EXT4-fs (loop4): unmounting filesystem. [ 96.304555][ T1413] loop0: detected capacity change from 0 to 1024 [ 96.362679][ T1413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.379152][ T1413] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.422067][ T1413] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 96.532731][ T1413] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 96.570396][ T1413] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.570396][ T1413] [ 96.644195][ T1427] loop4: detected capacity change from 0 to 512 [ 96.839181][ T1413] EXT4-fs (loop0): Total free blocks count 0 [ 96.895520][ T1427] EXT4-fs (loop4): 1 orphan inode deleted [ 96.901363][ T1427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.912454][ T1427] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.006542][ T28] audit: type=1400 audit(1759737040.177:246): avc: denied { map } for pid=1412 comm="syz.0.334" path="/74/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.047098][ T1413] EXT4-fs (loop0): Free/Dirty block details [ 97.349889][ T1432] device pim6reg1 entered promiscuous mode [ 97.358575][ T1413] EXT4-fs (loop0): free_blocks=4293918720 [ 97.364356][ T1413] EXT4-fs (loop0): dirty_blocks=16 [ 97.383982][ T28] audit: type=1400 audit(1759737040.207:247): avc: denied { execute } for pid=1412 comm="syz.0.334" path="/74/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.417481][ T1413] EXT4-fs (loop0): Block reservation details [ 97.427565][ T1413] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 97.588447][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.601173][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 97.613498][ T286] EXT4-fs (loop4): unmounting filesystem. [ 97.620025][ T282] EXT4-fs (loop0): unmounting filesystem. [ 97.648446][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 97.738505][ T284] EXT4-fs (loop2): unmounting filesystem. [ 98.486798][ T39] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 98.495279][ T39] usb 4-1: config 0 has no interface number 0 [ 98.503806][ T39] usb 4-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 98.514679][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.523667][ T39] usb 4-1: Product: syz [ 98.527961][ T39] usb 4-1: Manufacturer: syz [ 98.532644][ T39] usb 4-1: SerialNumber: syz [ 99.124122][ T1453] loop2: detected capacity change from 0 to 512 [ 99.143543][ T39] usb 4-1: config 0 descriptor?? [ 99.321781][ T1453] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.343: corrupted inode contents [ 99.334818][ T1453] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.343: mark_inode_dirty error [ 99.348683][ T1453] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.343: corrupted inode contents [ 99.361472][ T1453] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.343: mark_inode_dirty error [ 99.374922][ T1453] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.343: corrupted inode contents [ 99.387921][ T1453] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 99.397256][ T1453] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.343: corrupted inode contents [ 99.410198][ T1453] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.343: mark_inode_dirty error [ 99.422759][ T1453] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 99.434174][ T1453] EXT4-fs (loop2): 1 truncate cleaned up [ 99.439937][ T1453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.449465][ T1453] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.779072][ T334] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 99.822010][ T334] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 99.950044][ T284] EXT4-fs (loop2): unmounting filesystem. [ 99.972377][ T1474] device pim6reg1 entered promiscuous mode [ 100.049581][ T39] asix 4-1:0.225 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 100.060452][ T39] asix 4-1:0.225 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 100.108451][ T436] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 100.520273][ T39] asix 4-1:0.225 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 100.531167][ T39] asix 4-1:0.225 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 100.723676][ T39] asix 4-1:0.225 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:aa [ 100.764460][ T39] usb 4-1: USB disconnect, device number 9 [ 100.771746][ T39] asix 4-1:0.225 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 101.039262][ T436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.075844][ T436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.095906][ T436] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.128586][ T436] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.153235][ T436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.389611][ T1505] loop3: detected capacity change from 0 to 512 [ 101.458271][ T1507] device pim6reg1 entered promiscuous mode [ 101.665215][ T1505] EXT4-fs (loop3): 1 orphan inode deleted [ 101.671155][ T1505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.682788][ T1505] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.269118][ T8] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.279378][ T436] usb 1-1: config 0 descriptor?? [ 102.284923][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 102.297541][ T283] EXT4-fs (loop3): unmounting filesystem. [ 102.641409][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.718398][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.829412][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.839284][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.852148][ T6] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 102.861239][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.870109][ T6] usb 2-1: config 0 descriptor?? [ 102.895287][ T436] usbhid 1-1:0.0: can't add hid device: -71 [ 102.901399][ T436] usbhid: probe of 1-1:0.0 failed with error -71 [ 102.909194][ T436] usb 1-1: USB disconnect, device number 11 [ 102.915208][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.922499][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 102.932596][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.941366][ T19] usb 3-1: config 0 descriptor?? [ 103.277967][ T6] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 103.285234][ T6] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 103.292449][ T6] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 103.299738][ T6] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 103.594428][ T19] wacom 0003:056A:00FA.0005: unknown main item tag 0x1 [ 103.601349][ T6] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 103.608533][ T19] wacom 0003:056A:00FA.0005: unknown main item tag 0x1 [ 103.617454][ T19] wacom 0003:056A:00FA.0005: hidraw0: USB HID v10.00 Device [HID 056a:00fa] on usb-dummy_hcd.2-1/input0 [ 103.629232][ T6] kovaplus 0003:1E7D:2D50.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 103.641592][ T19] usb 3-1: USB disconnect, device number 5 [ 103.667215][ T1529] fido_id[1529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 103.968418][ T425] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.029568][ T6] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 104.039441][ T6] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 104.061053][ T6] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71 [ 104.086766][ T6] usb 2-1: USB disconnect, device number 7 [ 104.119816][ T1543] fido_id[1543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 106.091080][ T1550] loop3: detected capacity change from 0 to 512 [ 106.499835][ T425] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 106.584603][ T425] usb 1-1: config 0 has no interface number 0 [ 106.652834][ T1550] EXT4-fs (loop3): 1 orphan inode deleted [ 106.658759][ T1550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.668552][ T1550] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.921718][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 107.269486][ T1569] device syzkaller0 entered promiscuous mode [ 107.340520][ T43] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.340599][ T425] usb 1-1: string descriptor 0 read error: -71 [ 107.355776][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:2: Failed to release dquot type 1 [ 107.356820][ T425] usb 1-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 107.377549][ T425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.386515][ T425] usb 1-1: config 0 descriptor?? [ 107.391861][ T425] usb 1-1: can't set config #0, error -71 [ 107.399404][ T425] usb 1-1: USB disconnect, device number 12 [ 107.405661][ T283] EXT4-fs (loop3): unmounting filesystem. [ 107.409891][ T1571] loop0: detected capacity change from 0 to 2048 [ 107.438545][ T1485] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.466545][ T1571] loop0: p1 < > p4 < > [ 107.482446][ T102] loop0: p1 < > p4 < > [ 107.505112][ T28] audit: type=1400 audit(1759737050.677:248): avc: denied { read } for pid=1570 comm="syz.0.387" name="loop0p4" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.531108][ T28] audit: type=1400 audit(1759737050.677:249): avc: denied { open } for pid=1570 comm="syz.0.387" path="/dev/loop0p4" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.568408][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.576064][ T467] udevd[467]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 107.578289][ T356] udevd[356]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 107.619491][ T1485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.630485][ T1485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.640262][ T1485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.653464][ T1485] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.662688][ T1485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.671452][ T1485] usb 5-1: config 0 descriptor?? [ 107.728405][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.748432][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 107.754638][ T6] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.762904][ T6] usb 2-1: config 0 has no interface number 0 [ 107.769039][ T6] usb 2-1: config 0 interface 184 has no altsetting 0 [ 107.777160][ T6] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.786260][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.794275][ T6] usb 2-1: Product: syz [ 107.798467][ T6] usb 2-1: Manufacturer: syz [ 107.803088][ T6] usb 2-1: SerialNumber: syz [ 107.808659][ T6] usb 2-1: config 0 descriptor?? [ 107.814355][ T6] smsc75xx v1.0.0 [ 107.898407][ T1455] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.909650][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.920573][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.930375][ T425] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 107.937992][ T39] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 107.947095][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.956169][ T39] usb 4-1: config 0 descriptor?? [ 108.079474][ T1455] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 108.087745][ T1455] usb 3-1: config 0 has no interface number 0 [ 108.095322][ T1455] usb 3-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 108.104489][ T1455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.112591][ T1455] usb 3-1: Product: syz [ 108.116777][ T1455] usb 3-1: Manufacturer: syz [ 108.121422][ T1455] usb 3-1: SerialNumber: syz [ 108.127059][ T1455] usb 3-1: config 0 descriptor?? [ 108.139508][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.149373][ T425] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 108.163642][ T425] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 108.166100][ T28] audit: type=1400 audit(1759737051.337:250): avc: denied { create } for pid=1576 comm="syz.3.389" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.173074][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.202843][ T28] audit: type=1400 audit(1759737051.337:251): avc: denied { mounton } for pid=1576 comm="syz.3.389" path="/74/file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.209462][ T425] usb 1-1: config 0 descriptor?? [ 108.225915][ T28] audit: type=1400 audit(1759737051.337:252): avc: denied { mount } for pid=1576 comm="syz.3.389" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.280626][ T1485] usbhid 5-1:0.0: can't add hid device: -71 [ 108.286701][ T1485] usbhid: probe of 5-1:0.0 failed with error -71 [ 108.294066][ T1485] usb 5-1: USB disconnect, device number 9 [ 108.404263][ T39] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 4/7 [ 108.412287][ T39] cp2112 0003:10C4:EA90.0006: parse failed [ 108.418146][ T39] cp2112: probe of 0003:10C4:EA90.0006 failed with error -22 [ 108.452920][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 108.463811][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.610295][ T39] usb 4-1: USB disconnect, device number 10 [ 108.634783][ T425] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 108.642043][ T425] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 108.649249][ T425] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 108.656422][ T425] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 108.663600][ T425] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 108.671532][ T425] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 108.734567][ T1455] asix 3-1:0.225 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 108.744871][ T1455] asix 3-1:0.225 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 108.930434][ T1455] asix 3-1:0.225 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 108.941180][ T1455] asix 3-1:0.225 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 109.139953][ T28] audit: type=1400 audit(1759737052.317:253): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.163750][ T1455] asix 3-1:0.225 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:aa [ 109.179824][ T1455] usb 3-1: USB disconnect, device number 6 [ 109.185916][ T1455] asix 3-1:0.225 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 109.284849][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 109.296034][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 109.305845][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 109.315704][ T6] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 109.320067][ T425] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 109.330995][ T425] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 109.345023][ T425] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -71 [ 109.358289][ T425] usb 1-1: USB disconnect, device number 13 [ 109.366160][ T1597] device syzkaller0 entered promiscuous mode [ 109.468960][ T1600] loop3: detected capacity change from 0 to 512 [ 109.824009][ T1600] EXT4-fs (loop3): 1 orphan inode deleted [ 109.829864][ T1600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.841064][ T1600] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.893649][ T1599] fido_id[1599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 110.324482][ T290] usb 2-1: USB disconnect, device number 8 [ 110.400543][ T10] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.410500][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 110.436317][ T1619] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.451138][ T1620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 110.669518][ T1619] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.688612][ T283] EXT4-fs (loop3): unmounting filesystem. [ 110.751258][ T1632] device syzkaller0 entered promiscuous mode [ 110.841439][ T1644] netlink: 'syz.3.415': attribute type 12 has an invalid length. [ 110.887921][ T1650] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.896855][ T1650] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.008431][ T290] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.019062][ T1666] device syzkaller0 entered promiscuous mode [ 111.098422][ T660] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 111.101890][ T1670] overlayfs: missing 'lowerdir' [ 111.189534][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.207166][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.229509][ T290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.247445][ T290] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.257129][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.292983][ T1695] overlayfs: missing 'lowerdir' [ 111.367957][ T1705] device syzkaller0 entered promiscuous mode [ 111.400240][ T290] usb 2-1: config 0 descriptor?? [ 111.478662][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 111.508613][ T660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.524865][ T660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.539917][ T660] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 111.799264][ T1709] loop3: detected capacity change from 0 to 512 [ 111.837382][ T1709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.439: corrupted inode contents [ 111.849924][ T1709] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.439: mark_inode_dirty error [ 111.862571][ T1709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.439: corrupted inode contents [ 111.874666][ T1709] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.439: mark_inode_dirty error [ 111.887347][ T1709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.439: corrupted inode contents [ 111.899886][ T1709] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 111.909014][ T1709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.439: corrupted inode contents [ 111.921122][ T1709] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.439: mark_inode_dirty error [ 111.932614][ T1709] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 111.942009][ T1709] EXT4-fs (loop3): 1 truncate cleaned up [ 111.947746][ T1709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.956767][ T1709] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.972169][ T334] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 111.996184][ T334] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 112.339639][ T660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.349221][ T660] usb 1-1: config 0 descriptor?? [ 112.360180][ T283] EXT4-fs (loop3): unmounting filesystem. [ 112.459970][ T1731] overlayfs: missing 'lowerdir' [ 112.479868][ T1733] tipc: Started in network mode [ 112.484865][ T1733] tipc: Node identity 1e8c5ea0abfe, cluster identity 4711 [ 112.492817][ T1733] tipc: Enabled bearer , priority 0 [ 112.504798][ T1733] tipc: Resetting bearer [ 112.543052][ T1732] tipc: Disabling bearer [ 113.125425][ T1747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 113.866041][ T290] usbhid 2-1:0.0: can't add hid device: -71 [ 113.881688][ T290] usbhid: probe of 2-1:0.0 failed with error -71 [ 113.889460][ T660] usbhid 1-1:0.0: can't add hid device: -71 [ 113.895458][ T660] usbhid: probe of 1-1:0.0 failed with error -71 [ 113.929448][ T290] usb 2-1: USB disconnect, device number 9 [ 113.943849][ T660] usb 1-1: USB disconnect, device number 14 [ 113.989968][ T1757] loop2: detected capacity change from 0 to 512 [ 114.192259][ T1757] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.457: corrupted inode contents [ 114.205171][ T1757] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.457: mark_inode_dirty error [ 114.218613][ T1757] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.457: corrupted inode contents [ 114.232084][ T1757] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.457: mark_inode_dirty error [ 114.245350][ T1757] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.457: corrupted inode contents [ 114.257995][ T1757] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 114.268095][ T1757] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.457: corrupted inode contents [ 114.280939][ T1757] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.457: mark_inode_dirty error [ 114.292880][ T1757] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 114.304389][ T1757] EXT4-fs (loop2): 1 truncate cleaned up [ 114.310199][ T1757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.319598][ T1757] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.644058][ T1763] overlayfs: missing 'workdir' [ 114.668900][ T334] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.728474][ T334] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 114.857826][ T284] EXT4-fs (loop2): unmounting filesystem. [ 115.326614][ T1784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 115.498519][ T660] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.542019][ T1794] overlayfs: missing 'workdir' [ 115.707797][ T290] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.738479][ T660] usb 3-1: Using ep0 maxpacket: 16 [ 115.749405][ T660] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.779548][ T660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.787673][ T660] usb 3-1: Product: syz [ 115.793875][ T660] usb 3-1: Manufacturer: syz [ 115.799291][ T660] usb 3-1: SerialNumber: syz [ 115.834222][ T1810] loop0: detected capacity change from 0 to 512 [ 115.920683][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.933509][ T660] r8152-cfgselector 3-1: config 0 descriptor?? [ 116.020860][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.065667][ T1810] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.481: corrupted inode contents [ 116.079470][ T1810] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.481: mark_inode_dirty error [ 116.092086][ T1810] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.481: corrupted inode contents [ 116.105712][ T1810] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.481: mark_inode_dirty error [ 116.118396][ T1810] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.481: corrupted inode contents [ 116.131406][ T1810] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 116.140781][ T1810] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.481: corrupted inode contents [ 116.153770][ T1810] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.481: mark_inode_dirty error [ 116.165917][ T1810] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 116.177777][ T1810] EXT4-fs (loop0): 1 truncate cleaned up [ 116.183568][ T1810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.193010][ T1810] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.300012][ T290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.347402][ T290] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.358174][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.401409][ T290] usb 2-1: config 0 descriptor?? [ 116.454141][ T660] r8152-cfgselector 3-1: Unknown version 0x0000 [ 116.575874][ T43] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 116.585853][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:2: Failed to release dquot type 1 [ 116.705747][ T660] r8152-cfgselector 3-1: bad CDC descriptors [ 116.707027][ T282] EXT4-fs (loop0): unmounting filesystem. [ 116.714409][ T660] r8152-cfgselector 3-1: Unknown version 0x0000 [ 116.724855][ T660] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 116.757165][ T1828] overlayfs: missing 'workdir' [ 116.783381][ T1830] tipc: Started in network mode [ 116.788317][ T1830] tipc: Node identity 4ac46dc67245, cluster identity 4711 [ 116.796849][ T1830] tipc: Enabled bearer , priority 0 [ 116.804914][ T1830] device syzkaller0 entered promiscuous mode [ 116.813939][ T1829] tipc: Resetting bearer [ 116.820866][ T1829] tipc: Disabling bearer [ 116.860646][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 116.981185][ T1837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 116.992345][ T1840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 117.071463][ T290] usbhid 2-1:0.0: can't add hid device: -71 [ 117.079328][ T290] usbhid: probe of 2-1:0.0 failed with error -71 [ 117.090345][ T290] usb 2-1: USB disconnect, device number 10 [ 117.163978][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.286922][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 117.296869][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.305804][ T24] usb 4-1: config 0 descriptor?? [ 117.723263][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 117.730718][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 117.739147][ T24] usb 4-1: USB disconnect, device number 11 [ 118.645866][ T1869] tipc: Enabled bearer , priority 0 [ 118.653225][ T1869] device syzkaller0 entered promiscuous mode [ 118.662010][ T1868] tipc: Resetting bearer [ 118.685831][ T1868] tipc: Disabling bearer [ 119.715433][ T1890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 119.872768][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.888772][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 119.976601][ T1907] netlink: 'syz.0.519': attribute type 12 has an invalid length. [ 120.858438][ T28] audit: type=1400 audit(1759737064.007:254): avc: denied { unmount } for pid=1908 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 120.963039][ T1916] input: syz0 as /devices/virtual/input/input12 [ 121.627008][ T28] audit: type=1400 audit(1759737064.107:255): avc: denied { read write } for pid=1908 comm="syz.0.520" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.728031][ T28] audit: type=1400 audit(1759737064.107:256): avc: denied { open } for pid=1908 comm="syz.0.520" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.799039][ T28] audit: type=1400 audit(1759737064.127:257): avc: denied { ioctl } for pid=1908 comm="syz.0.520" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.833378][ T1922] netlink: 96 bytes leftover after parsing attributes in process `syz.4.523'. [ 121.860155][ T1920] tipc: Enabled bearer , priority 0 [ 121.875377][ T1920] device syzkaller0 entered promiscuous mode [ 121.918561][ T1919] tipc: Resetting bearer [ 121.929910][ T28] audit: type=1400 audit(1759737064.747:258): avc: denied { write } for pid=1902 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.029261][ T1919] tipc: Disabling bearer [ 122.038309][ T1924] device pim6reg1 entered promiscuous mode [ 123.691108][ T1936] loop4: detected capacity change from 0 to 512 [ 128.128643][ T1936] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 128.149245][ T24] usb 3-1: device not accepting address 8, error -71 [ 128.194193][ T28] audit: type=1400 audit(1759737071.367:259): avc: denied { read } for pid=1941 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.304711][ T1945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 128.382237][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 128.838611][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.958470][ T290] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.042150][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.049205][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 129.058655][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.067238][ T24] usb 3-1: config 0 descriptor?? [ 129.102386][ T1964] netlink: 96 bytes leftover after parsing attributes in process `syz.0.536'. [ 129.128813][ T1967] netlink: 'syz.0.537': attribute type 12 has an invalid length. [ 129.139948][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.157007][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.166878][ T290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.179825][ T290] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.188915][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.197522][ T290] usb 5-1: config 0 descriptor?? [ 129.327655][ T1972] loop0: detected capacity change from 0 to 4096 [ 129.335531][ T1972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.409487][ T1972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.761123][ T1976] tipc: Enabled bearer , priority 0 [ 129.796426][ T1976] device syzkaller0 entered promiscuous mode [ 129.836699][ T1976] tipc: Resetting bearer [ 129.849865][ T1975] tipc: Resetting bearer [ 129.858201][ T1975] tipc: Disabling bearer [ 130.333352][ T282] EXT4-fs (loop0): unmounting filesystem. [ 130.338580][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 130.339571][ T1485] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 130.345298][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 130.359445][ T290] usbhid 5-1:0.0: can't add hid device: -71 [ 130.365562][ T290] usbhid: probe of 5-1:0.0 failed with error -71 [ 130.431398][ T24] usb 3-1: USB disconnect, device number 9 [ 130.439123][ T290] usb 5-1: USB disconnect, device number 10 [ 130.493463][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 130.568628][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 131.154482][ T28] audit: type=1400 audit(1759737074.327:260): avc: denied { name_bind } for pid=1979 comm="syz.3.541" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 131.361430][ T1485] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.388431][ T1485] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 131.397635][ T1485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.473107][ T1485] usb 2-1: config 0 descriptor?? [ 132.506245][ T2010] syz.2.548[2010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.506480][ T2010] syz.2.548[2010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.428503][ T660] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 134.971380][ T2018] tipc: Started in network mode [ 134.980926][ T2018] tipc: Node identity b6a79ddd6991, cluster identity 4711 [ 134.995819][ T2018] tipc: Enabled bearer , priority 0 [ 135.008916][ T2018] device syzkaller0 entered promiscuous mode [ 135.032639][ T2018] tipc: Resetting bearer [ 135.052732][ T2016] tipc: Resetting bearer [ 135.067308][ T2016] tipc: Disabling bearer [ 135.128398][ T660] usb 1-1: Using ep0 maxpacket: 8 [ 135.135485][ T660] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 135.166422][ T1485] usbhid 2-1:0.0: can't add hid device: -71 [ 135.172461][ T1485] usbhid: probe of 2-1:0.0 failed with error -71 [ 135.188944][ T1485] usb 2-1: USB disconnect, device number 11 [ 135.217591][ T2029] 9pnet_fd: Insufficient options for proto=fd [ 135.226766][ T660] usb 1-1: config 0 has no interface number 0 [ 135.233409][ T660] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 135.244878][ T660] usb 1-1: config 0 interface 96 has no altsetting 0 [ 135.253622][ T660] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 135.269477][ T660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.283392][ T660] usb 1-1: Product: syz [ 135.291687][ T660] usb 1-1: Manufacturer: syz [ 135.341002][ T660] usb 1-1: SerialNumber: syz [ 135.392563][ T660] usb 1-1: config 0 descriptor?? [ 135.475306][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 135.635369][ T660] usb 1-1: USB disconnect, device number 15 [ 135.798392][ T1485] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.979475][ T1485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.990483][ T1485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.000310][ T1485] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.013268][ T1485] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.022365][ T1485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.031076][ T1485] usb 2-1: config 0 descriptor?? [ 136.179104][ T2044] netlink: 'syz.2.562': attribute type 12 has an invalid length. [ 136.424484][ T2051] loop4: detected capacity change from 0 to 16 [ 136.449725][ T2051] erofs: (device loop4): mounted with root inode @ nid 36. [ 137.412760][ T2055] loop2: detected capacity change from 0 to 256 [ 137.423588][ T2055] exfat: Deprecated parameter 'utf8' [ 137.429719][ T2055] exfat: Deprecated parameter 'namecase' [ 137.435475][ T2055] exfat: Deprecated parameter 'namecase' [ 137.850266][ T28] audit: type=1400 audit(1759737080.877:261): avc: denied { bind } for pid=2042 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.883288][ T2055] exfat: Deprecated parameter 'utf8' [ 137.910557][ T2055] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 138.021660][ T28] audit: type=1400 audit(1759737081.197:262): avc: denied { create } for pid=2054 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.154076][ T2061] tipc: Enabled bearer , priority 0 [ 138.161366][ T2061] device syzkaller0 entered promiscuous mode [ 138.170473][ T2061] tipc: Resetting bearer [ 138.177250][ T2060] tipc: Resetting bearer [ 138.183940][ T2060] tipc: Disabling bearer [ 138.589521][ T1485] usbhid 2-1:0.0: can't add hid device: -71 [ 138.595511][ T1485] usbhid: probe of 2-1:0.0 failed with error -71 [ 138.605858][ T1485] usb 2-1: USB disconnect, device number 12 [ 138.633081][ T2068] loop0: detected capacity change from 0 to 128 [ 138.669096][ T2068] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 138.731720][ T2068] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 138.756938][ T2068] FAT-fs (loop0): Filesystem has been set read-only [ 138.763776][ T2068] syz.0.570: attempt to access beyond end of device [ 138.763776][ T2068] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 138.812784][ T2074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 139.128960][ T2100] syz.3.580[2100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.130269][ T2100] syz.3.580[2100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.590768][ T1485] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.376357][ T28] audit: type=1400 audit(1759737084.547:263): avc: denied { rename } for pid=2078 comm="syz.0.576" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 142.210902][ T2109] loop3: detected capacity change from 0 to 512 [ 144.278150][ T2111] loop0: detected capacity change from 0 to 16 [ 147.078528][ T2111] erofs: (device loop0): mounted with root inode @ nid 36. [ 147.248653][ T2109] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 147.342681][ T2120] loop0: detected capacity change from 0 to 512 [ 147.369863][ T2120] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.587: casefold flag without casefold feature [ 147.390808][ T2120] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.587: couldn't read orphan inode 15 (err -117) [ 147.413601][ T2120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.516168][ T2133] netlink: 96 bytes leftover after parsing attributes in process `syz.2.593'. [ 147.622900][ T2130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 147.828993][ T39] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 148.010484][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.021644][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.031568][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.044708][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.053846][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.062547][ T39] usb 4-1: config 0 descriptor?? [ 148.210480][ T282] EXT4-fs (loop0): unmounting filesystem. [ 148.704847][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 148.737791][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 148.855403][ T39] usb 4-1: USB disconnect, device number 12 [ 149.641074][ T2165] loop2: detected capacity change from 0 to 128 [ 149.672444][ T2158] syz.4.600 (2158) used greatest stack depth: 20336 bytes left [ 149.728386][ T28] audit: type=1400 audit(1759737092.897:264): avc: denied { sys_module } for pid=2169 comm="syz.0.603" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 149.859611][ T2174] netlink: 96 bytes leftover after parsing attributes in process `syz.4.606'. [ 150.428385][ T290] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.534201][ T28] audit: type=1400 audit(1759737093.707:265): avc: denied { set_context_mgr } for pid=2197 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.609528][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.625252][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.635920][ T290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.649702][ T290] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.664594][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.672130][ T2206] netlink: 96 bytes leftover after parsing attributes in process `syz.4.619'. [ 150.729156][ T290] usb 2-1: config 0 descriptor?? [ 151.237404][ T2216] loop4: detected capacity change from 0 to 128 [ 152.060241][ T290] usbhid 2-1:0.0: can't add hid device: -71 [ 152.069470][ T290] usbhid: probe of 2-1:0.0 failed with error -71 [ 152.095322][ T290] usb 2-1: USB disconnect, device number 13 [ 152.268486][ T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 152.397089][ T2236] syz.3.626[2236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.397372][ T2236] syz.3.626[2236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.451149][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.477625][ T24] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 152.489600][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.526693][ T24] usb 1-1: config 0 descriptor?? [ 152.948535][ T24] ntrig 0003:1B96:0010.0008: item fetching failed at offset 5/7 [ 152.962511][ T24] ntrig 0003:1B96:0010.0008: parse failed [ 153.011241][ T24] ntrig: probe of 0003:1B96:0010.0008 failed with error -22 [ 153.027866][ T2241] netlink: 96 bytes leftover after parsing attributes in process `syz.2.631'. [ 153.118652][ T2238] syz.1.630 (2238) used greatest stack depth: 19968 bytes left [ 153.160682][ T290] usb 1-1: USB disconnect, device number 16 [ 154.609146][ T2276] binder: 2275:2276 ioctl c0306201 200000000540 returned -22 [ 154.623142][ T2272] netlink: 96 bytes leftover after parsing attributes in process `syz.1.643'. [ 154.697796][ T2285] binder: 2275:2285 ioctl c0306201 200000000640 returned -22 [ 154.787158][ T2290] loop4: detected capacity change from 0 to 512 [ 154.797911][ T2290] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 154.808037][ T2290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 154.816453][ T2290] System zones: 1-12 [ 154.821437][ T2290] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.650: corrupted in-inode xattr [ 154.834492][ T2290] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.650: couldn't read orphan inode 15 (err -117) [ 154.848227][ T2290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.229608][ T290] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 155.376985][ T2300] loop0: detected capacity change from 0 to 128 [ 155.410172][ T290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.423409][ T290] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 155.433708][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.446883][ T290] usb 4-1: config 0 descriptor?? [ 155.661459][ T286] EXT4-fs (loop4): unmounting filesystem. [ 155.750317][ T2312] netlink: 'syz.4.657': attribute type 12 has an invalid length. [ 155.903002][ T290] usbhid 4-1:0.0: can't add hid device: -71 [ 155.911514][ T290] usbhid: probe of 4-1:0.0 failed with error -71 [ 155.988703][ T290] usb 4-1: USB disconnect, device number 13 [ 156.581548][ T2317] netlink: 96 bytes leftover after parsing attributes in process `syz.4.658'. [ 156.618519][ T293] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 156.814568][ T2332] loop0: detected capacity change from 0 to 256 [ 156.822472][ T2332] exfat: Deprecated parameter 'utf8' [ 156.827834][ T2332] exfat: Deprecated parameter 'namecase' [ 156.834810][ T2332] exfat: Deprecated parameter 'namecase' [ 156.840816][ T2332] exfat: Deprecated parameter 'utf8' [ 156.849135][ T2332] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 156.888373][ T293] usb 2-1: Using ep0 maxpacket: 16 [ 156.897129][ T293] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.913521][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.933299][ T293] usb 2-1: Product: syz [ 156.941507][ T293] usb 2-1: Manufacturer: syz [ 156.946341][ T293] usb 2-1: SerialNumber: syz [ 156.952410][ T293] r8152-cfgselector 2-1: config 0 descriptor?? [ 156.962240][ T28] audit: type=1400 audit(1759737101.137:266): avc: denied { search } for pid=2340 comm="syz.3.669" name="/" dev="configfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.986503][ T28] audit: type=1400 audit(1759737101.137:267): avc: denied { read } for pid=2340 comm="syz.3.669" name="/" dev="configfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.350044][ T28] audit: type=1400 audit(1759737101.137:268): avc: denied { open } for pid=2340 comm="syz.3.669" path="/" dev="configfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.451920][ T2348] syz.3.671[2348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.452065][ T2348] syz.3.671[2348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.500539][ T2348] loop3: detected capacity change from 0 to 1024 [ 157.518932][ T2348] EXT4-fs: Ignoring removed orlov option [ 157.598459][ T293] r8152-cfgselector 2-1: Unknown version 0x0000 [ 157.640342][ T293] r8152-cfgselector 2-1: bad CDC descriptors [ 157.794964][ T2348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.921942][ T28] audit: type=1400 audit(1759737102.027:269): avc: denied { mounton } for pid=2344 comm="syz.3.671" path="/135/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.420487][ T293] r8152-cfgselector 2-1: Unknown version 0x0000 [ 158.427396][ T293] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 158.480399][ T28] audit: type=1400 audit(1759737102.057:270): avc: denied { read append } for pid=2344 comm="syz.3.671" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.515731][ T2357] netlink: 96 bytes leftover after parsing attributes in process `syz.1.674'. [ 158.544394][ T28] audit: type=1400 audit(1759737102.067:271): avc: denied { open } for pid=2344 comm="syz.3.671" path="/135/file1/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.568526][ T28] audit: type=1400 audit(1759737102.717:272): avc: denied { rmdir } for pid=283 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.591231][ T28] audit: type=1400 audit(1759737102.747:273): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.613671][ T28] audit: type=1400 audit(1759737102.747:274): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 158.665271][ T283] EXT4-fs (loop3): unmounting filesystem. [ 160.927566][ T2400] netlink: 96 bytes leftover after parsing attributes in process `syz.4.690'. [ 160.963240][ T2403] loop2: detected capacity change from 0 to 512 [ 161.370103][ T2403] EXT4-fs (loop2): 1 orphan inode deleted [ 161.380638][ T2403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.390367][ T10] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 161.400779][ T2403] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.411870][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 161.618932][ T284] EXT4-fs (loop2): unmounting filesystem. [ 161.681482][ T2417] loop4: detected capacity change from 0 to 256 [ 161.689664][ T2417] exfat: Deprecated parameter 'utf8' [ 161.695168][ T2417] exfat: Deprecated parameter 'namecase' [ 161.704973][ T2417] exfat: Deprecated parameter 'namecase' [ 161.711583][ T2417] exfat: Deprecated parameter 'utf8' [ 161.719690][ T2417] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 162.388368][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.416437][ T2433] hub 9-0:1.0: USB hub found [ 162.429531][ T2433] hub 9-0:1.0: 1 port detected [ 162.453476][ T2435] netlink: 96 bytes leftover after parsing attributes in process `syz.1.701'. [ 162.569497][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.644218][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.654078][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.667032][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.676569][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.693951][ T24] usb 3-1: config 0 descriptor?? [ 163.141679][ T2460] loop3: detected capacity change from 0 to 512 [ 163.273843][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.710: corrupted inode contents [ 163.289324][ T2460] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.710: mark_inode_dirty error [ 163.301596][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.710: corrupted inode contents [ 163.316909][ T2460] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.710: mark_inode_dirty error [ 163.329669][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.710: corrupted inode contents [ 163.342777][ T2460] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 163.353065][ T2460] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.710: corrupted inode contents [ 163.365876][ T2460] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.710: mark_inode_dirty error [ 163.378350][ T2460] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 163.390545][ T2460] EXT4-fs (loop3): 1 truncate cleaned up [ 163.396306][ T2460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.405745][ T2460] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.472893][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 163.518833][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 163.624756][ T2464] fuse: Bad value for 'fd' [ 163.669475][ T24] usb 3-1: USB disconnect, device number 11 [ 163.856831][ T833] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.897233][ T833] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 164.052851][ T283] EXT4-fs (loop3): unmounting filesystem. [ 164.117551][ T2472] netlink: 96 bytes leftover after parsing attributes in process `syz.3.713'. [ 164.200038][ T2480] loop2: detected capacity change from 0 to 256 [ 164.219579][ T2480] exfat: Deprecated parameter 'utf8' [ 164.234501][ T2480] exfat: Deprecated parameter 'namecase' [ 164.252608][ T2480] exfat: Deprecated parameter 'namecase' [ 164.258853][ T2480] exfat: Deprecated parameter 'utf8' [ 164.267736][ T2486] tipc: Started in network mode [ 164.274439][ T2480] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 164.286927][ T2486] tipc: Node identity 76841a9e8ed6, cluster identity 4711 [ 164.325083][ T2486] tipc: Enabled bearer , priority 0 [ 164.336618][ T2487] device syzkaller0 entered promiscuous mode [ 164.346696][ T2486] tipc: Resetting bearer [ 164.353723][ T2485] tipc: Resetting bearer [ 164.365371][ T2485] tipc: Disabling bearer [ 164.695124][ T2493] syz.0.722[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.695203][ T2493] syz.0.722[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.670802][ T2506] loop2: detected capacity change from 0 to 512 [ 165.758605][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.895146][ T2506] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.725: corrupted inode contents [ 165.907904][ T2506] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.725: mark_inode_dirty error [ 165.921319][ T2506] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.725: corrupted inode contents [ 165.933862][ T2506] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.725: mark_inode_dirty error [ 165.946747][ T2506] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.725: corrupted inode contents [ 165.959514][ T2506] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 165.968997][ T2506] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.725: corrupted inode contents [ 165.981761][ T2506] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.725: mark_inode_dirty error [ 165.993700][ T2506] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 166.004803][ T2506] EXT4-fs (loop2): 1 truncate cleaned up [ 166.010533][ T2506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.019907][ T2506] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.110370][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.230520][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.398942][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.413140][ T2514] netlink: 96 bytes leftover after parsing attributes in process `syz.0.728'. [ 166.432492][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.457643][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.476706][ T24] usb 2-1: config 0 descriptor?? [ 166.530348][ T334] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.557640][ T334] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 166.623081][ T284] EXT4-fs (loop2): unmounting filesystem. [ 166.645352][ T2528] tipc: Started in network mode [ 166.650356][ T2528] tipc: Node identity 9a30ed2735c5, cluster identity 4711 [ 166.657528][ T2528] tipc: Enabled bearer , priority 0 [ 166.664956][ T2528] device syzkaller0 entered promiscuous mode [ 166.674612][ T2528] tipc: Resetting bearer [ 166.681578][ T2527] tipc: Resetting bearer [ 166.697853][ T2527] tipc: Disabling bearer [ 166.838356][ T293] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 167.039494][ T293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.052506][ T293] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 167.061826][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.073642][ T293] usb 1-1: config 0 descriptor?? [ 167.282735][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 167.289847][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 167.303746][ T24] usb 2-1: USB disconnect, device number 15 [ 167.401818][ T2540] loop3: detected capacity change from 0 to 256 [ 167.408837][ T2540] exfat: Deprecated parameter 'utf8' [ 167.414250][ T2540] exfat: Deprecated parameter 'namecase' [ 167.420288][ T2540] exfat: Deprecated parameter 'namecase' [ 167.426045][ T2540] exfat: Deprecated parameter 'utf8' [ 167.434467][ T2540] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 167.484302][ T293] ntrig 0003:1B96:0010.0009: item fetching failed at offset 5/7 [ 167.496255][ T293] ntrig 0003:1B96:0010.0009: parse failed [ 167.502253][ T293] ntrig: probe of 0003:1B96:0010.0009 failed with error -22 [ 167.787742][ T660] usb 1-1: USB disconnect, device number 17 [ 168.271461][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 168.300188][ T2558] tipc: Enabled bearer , priority 0 [ 168.307280][ T2558] device syzkaller0 entered promiscuous mode [ 168.327444][ T2558] tipc: Resetting bearer [ 168.334503][ T2557] tipc: Resetting bearer [ 168.341415][ T2557] tipc: Disabling bearer [ 168.481044][ T28] audit: type=1400 audit(1759737112.657:275): avc: denied { append } for pid=2573 comm="syz.3.752" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.489721][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.511135][ T2576] fuse: Bad value for 'fd' [ 168.516494][ T24] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 168.598016][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.606870][ T24] usb 2-1: Product: syz [ 168.611433][ T24] usb 2-1: Manufacturer: syz [ 168.616156][ T24] usb 2-1: SerialNumber: syz [ 168.624065][ T24] usb 2-1: config 0 descriptor?? [ 168.632156][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 168.641331][ T24] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 168.738370][ T1485] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.864429][ T24] usb 2-1: USB disconnect, device number 16 [ 168.897110][ T24] ftdi_sio 2-1:0.0: device disconnected [ 168.919887][ T1485] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.927605][ T1485] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 168.936946][ T1485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.951405][ T1485] usb 3-1: config 0 descriptor?? [ 169.330545][ T2584] loop3: detected capacity change from 0 to 256 [ 169.337251][ T2584] exfat: Deprecated parameter 'utf8' [ 169.342822][ T2584] exfat: Deprecated parameter 'namecase' [ 169.348691][ T2584] exfat: Deprecated parameter 'namecase' [ 169.354449][ T2584] exfat: Deprecated parameter 'utf8' [ 169.408683][ T1485] usbhid 3-1:0.0: can't add hid device: -71 [ 169.414761][ T1485] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.429089][ T1485] usb 3-1: USB disconnect, device number 12 [ 169.436489][ T2584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 169.728466][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 169.774766][ T2594] device syzkaller0 entered promiscuous mode [ 169.969596][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.969869][ T2606] fuse: Invalid rootmode [ 169.996076][ T24] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 170.005557][ T2608] netlink: 96 bytes leftover after parsing attributes in process `syz.2.765'. [ 170.012677][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.099394][ T24] usb 2-1: config 0 descriptor?? [ 170.513310][ T2622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 170.797714][ T24] ntrig 0003:1B96:0010.000A: item fetching failed at offset 5/7 [ 170.808832][ T24] ntrig 0003:1B96:0010.000A: parse failed [ 170.820860][ T24] ntrig: probe of 0003:1B96:0010.000A failed with error -22 [ 171.002389][ T24] usb 2-1: USB disconnect, device number 17 [ 171.064568][ T2636] tipc: Enabled bearer , priority 0 [ 171.077470][ T2636] device syzkaller0 entered promiscuous mode [ 171.087396][ T2636] tipc: Resetting bearer [ 171.094855][ T2635] tipc: Resetting bearer [ 171.100132][ T2638] fuse: Invalid rootmode [ 171.105972][ T2635] tipc: Disabling bearer [ 171.136666][ T2642] netlink: 96 bytes leftover after parsing attributes in process `syz.3.777'. [ 171.248455][ T290] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.333301][ T2651] loop4: detected capacity change from 0 to 128 [ 171.462730][ T290] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.473868][ T290] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 171.499031][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.563392][ T290] usb 3-1: config 0 descriptor?? [ 172.043915][ T290] usbhid 3-1:0.0: can't add hid device: -71 [ 172.050498][ T290] usbhid: probe of 3-1:0.0 failed with error -71 [ 172.071042][ T290] usb 3-1: USB disconnect, device number 13 [ 172.210603][ T2670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 172.563374][ T2677] fuse: Invalid rootmode [ 172.568368][ T2675] tipc: Enabled bearer , priority 0 [ 172.584077][ T2675] device syzkaller0 entered promiscuous mode [ 172.601760][ T2675] tipc: Resetting bearer [ 172.614968][ T2674] tipc: Resetting bearer [ 172.625133][ T2674] tipc: Disabling bearer [ 173.721824][ T2706] fuse: Bad value for 'rootmode' [ 173.770257][ T2708] netlink: 'syz.1.801': attribute type 12 has an invalid length. [ 173.840412][ T2714] tipc: Enabled bearer , priority 0 [ 173.870532][ T2714] device syzkaller0 entered promiscuous mode [ 173.901675][ T2714] tipc: Resetting bearer [ 173.919371][ T2713] tipc: Resetting bearer [ 173.938379][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 173.946809][ T2713] tipc: Disabling bearer [ 174.136467][ T2722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 174.300279][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.364876][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.460562][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.473876][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.483134][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.492817][ T24] usb 3-1: config 0 descriptor?? [ 174.848019][ T2737] fuse: Bad value for 'rootmode' [ 175.158150][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 175.165042][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 175.179447][ T24] usb 3-1: USB disconnect, device number 14 [ 175.489082][ T2754] tipc: Enabled bearer , priority 0 [ 175.497482][ T2754] device syzkaller0 entered promiscuous mode [ 175.514937][ T2754] tipc: Resetting bearer [ 175.527807][ T2753] tipc: Resetting bearer [ 175.536197][ T2753] tipc: Disabling bearer [ 175.713610][ T2762] fuse: Bad value for 'rootmode' [ 176.791859][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 177.161981][ T2782] netlink: 'syz.1.829': attribute type 12 has an invalid length. [ 177.468663][ T28] audit: type=1400 audit(1759737121.517:276): avc: denied { listen } for pid=2768 comm="syz.0.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.613025][ T2790] hub 9-0:1.0: USB hub found [ 177.618227][ T2790] hub 9-0:1.0: 1 port detected [ 177.799629][ T1485] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 178.428371][ T1455] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 178.444605][ T2800] netlink: 96 bytes leftover after parsing attributes in process `syz.0.834'. [ 178.547166][ T290] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 178.570738][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 178.650794][ T1485] usb 5-1: Using ep0 maxpacket: 8 [ 178.669335][ T1485] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 178.678497][ T1485] usb 5-1: config 0 has no interface number 0 [ 178.691863][ T1485] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 178.704174][ T1485] usb 5-1: config 0 interface 96 has no altsetting 0 [ 178.709594][ T1455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.712896][ T1485] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 178.731394][ T1455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.741253][ T1455] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.755032][ T1455] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.764427][ T1455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.792878][ T1455] usb 3-1: config 0 descriptor?? [ 178.800387][ T290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.816630][ T290] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 178.829582][ T1485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.832552][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.846979][ T1485] usb 5-1: Product: syz [ 178.852261][ T1485] usb 5-1: Manufacturer: syz [ 178.854529][ T290] usb 4-1: config 0 descriptor?? [ 178.864164][ T1485] usb 5-1: SerialNumber: syz [ 178.882452][ T1485] usb 5-1: config 0 descriptor?? [ 179.093876][ T1485] usb 5-1: USB disconnect, device number 11 [ 179.269194][ T290] ntrig 0003:1B96:0010.000B: item fetching failed at offset 5/7 [ 179.277095][ T290] ntrig 0003:1B96:0010.000B: parse failed [ 179.283064][ T290] ntrig: probe of 0003:1B96:0010.000B failed with error -22 [ 179.436536][ T1455] usbhid 3-1:0.0: can't add hid device: -71 [ 179.442604][ T1455] usbhid: probe of 3-1:0.0 failed with error -71 [ 179.452740][ T1455] usb 3-1: USB disconnect, device number 15 [ 179.472720][ T290] usb 4-1: USB disconnect, device number 14 [ 180.736893][ T2835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 181.154702][ T2859] loop3: detected capacity change from 0 to 512 [ 181.189020][ T2862] netlink: 96 bytes leftover after parsing attributes in process `syz.0.857'. [ 181.210622][ T2859] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 181.225857][ T2864] SELinux: Context Ž is not valid (left unmapped). [ 181.238672][ T2859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 181.246641][ T2859] System zones: 1-12 [ 181.272753][ T2859] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.856: corrupted in-inode xattr [ 181.302110][ T2859] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.856: couldn't read orphan inode 15 (err -117) [ 181.306598][ T2868] loop0: detected capacity change from 0 to 256 [ 181.314547][ T2859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.331615][ T2868] exfat: Deprecated parameter 'utf8' [ 181.336965][ T2868] exfat: Deprecated parameter 'namecase' [ 181.343638][ T2868] exfat: Deprecated parameter 'namecase' [ 181.349404][ T2868] exfat: Deprecated parameter 'utf8' [ 181.357574][ T2868] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 181.791767][ T2875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 182.006958][ T283] EXT4-fs (loop3): unmounting filesystem. [ 182.202963][ T2882] netlink: 'syz.4.864': attribute type 12 has an invalid length. [ 182.264534][ T2888] loop3: detected capacity change from 0 to 256 [ 182.284979][ T2888] exfat: Deprecated parameter 'utf8' [ 182.305001][ T2888] exfat: Deprecated parameter 'namecase' [ 182.341862][ T2888] exfat: Deprecated parameter 'namecase' [ 182.368562][ T2888] exfat: Deprecated parameter 'utf8' [ 182.509774][ T2888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 184.639752][ T2916] loop0: detected capacity change from 0 to 256 [ 184.647460][ T2916] exfat: Deprecated parameter 'utf8' [ 184.671684][ T2916] exfat: Deprecated parameter 'namecase' [ 184.691363][ T2916] exfat: Deprecated parameter 'namecase' [ 184.764404][ T2920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 184.990881][ T2916] exfat: Deprecated parameter 'utf8' [ 185.051629][ T2916] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 185.824136][ T2941] netlink: 'syz.0.881': attribute type 12 has an invalid length. [ 186.248240][ T2957] loop3: detected capacity change from 0 to 512 [ 186.292330][ T2957] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.885: corrupted inode contents [ 186.305502][ T2957] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.885: mark_inode_dirty error [ 186.317042][ T2957] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.885: corrupted inode contents [ 186.329171][ T2957] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.885: mark_inode_dirty error [ 186.340673][ T2957] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.885: corrupted inode contents [ 186.352655][ T2957] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 186.361449][ T2957] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.885: corrupted inode contents [ 186.373435][ T2957] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.885: mark_inode_dirty error [ 186.384679][ T2957] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 186.395373][ T2957] EXT4-fs (loop3): 1 truncate cleaned up [ 186.401123][ T2957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.410230][ T2957] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.420919][ T334] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 186.448711][ T334] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 186.660461][ T2956] loop2: detected capacity change from 0 to 40427 [ 186.675451][ T2956] F2FS-fs (loop2): invalid crc value [ 187.290956][ T2967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 187.319980][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 187.740706][ T283] EXT4-fs (loop3): unmounting filesystem. [ 187.758491][ T2956] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.786953][ T2976] tipc: Enabled bearer , priority 0 [ 187.807167][ T2956] F2FS-fs (loop2): Start checkpoint disabled! [ 187.814894][ T2976] device syzkaller0 entered promiscuous mode [ 187.816293][ T2956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 187.830252][ T2976] tipc: Resetting bearer [ 187.846495][ T28] audit: type=1400 audit(1759737132.017:277): avc: denied { create } for pid=2955 comm="syz.2.886" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 187.846581][ T2974] tipc: Resetting bearer [ 187.896634][ T2974] tipc: Disabling bearer [ 187.898918][ T28] audit: type=1400 audit(1759737132.067:278): avc: denied { read } for pid=2955 comm="syz.2.886" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 188.621686][ T833] kworker/u4:8: attempt to access beyond end of device [ 188.621686][ T833] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 188.636727][ T833] kworker/u4:8: attempt to access beyond end of device [ 188.636727][ T833] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 188.651059][ T28] audit: type=1400 audit(1759737132.817:279): avc: denied { map } for pid=2996 comm="syz.0.897" path="socket:[27606]" dev="sockfs" ino=27606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.686146][ T28] audit: type=1400 audit(1759737132.817:280): avc: denied { read } for pid=2996 comm="syz.0.897" path="socket:[27606]" dev="sockfs" ino=27606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.934740][ T3005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 189.224980][ T3009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 190.309233][ T28] audit: type=1400 audit(1759737134.487:281): avc: denied { append } for pid=3028 comm="syz.4.907" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.346604][ T3029] loop4: detected capacity change from 0 to 512 [ 190.356349][ T3029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.367686][ T3029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.375226][ T3029] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.385385][ T3029] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 190.393676][ T3029] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 190.402530][ T3029] EXT4-fs (loop4): 1 truncate cleaned up [ 190.408254][ T3029] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.490205][ T3043] netlink: 96 bytes leftover after parsing attributes in process `syz.2.912'. [ 190.821139][ T19] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 190.898356][ T1485] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 191.009517][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.022488][ T19] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 191.031625][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.040297][ T19] usb 4-1: config 0 descriptor?? [ 191.078360][ T1485] usb 2-1: Using ep0 maxpacket: 16 [ 191.086039][ T1485] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 191.095210][ T1485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.103263][ T1485] usb 2-1: Product: syz [ 191.107453][ T1485] usb 2-1: Manufacturer: syz [ 191.112092][ T1485] usb 2-1: SerialNumber: syz [ 191.117400][ T1485] r8152-cfgselector 2-1: config 0 descriptor?? [ 191.137758][ T286] EXT4-fs (loop4): unmounting filesystem. [ 191.289075][ T3058] netlink: 'syz.4.916': attribute type 12 has an invalid length. [ 191.482828][ T19] ntrig 0003:1B96:0010.000C: item fetching failed at offset 5/7 [ 191.494268][ T19] ntrig 0003:1B96:0010.000C: parse failed [ 191.500095][ T19] ntrig: probe of 0003:1B96:0010.000C failed with error -22 [ 191.542053][ T1485] r8152-cfgselector 2-1: Unknown version 0x0000 [ 191.567727][ T3073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 191.721658][ T1485] r8152-cfgselector 2-1: bad CDC descriptors [ 191.815639][ T19] usb 4-1: USB disconnect, device number 15 [ 191.867179][ T1485] r8152-cfgselector 2-1: Unknown version 0x0000 [ 191.955526][ T1485] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 192.253329][ T3078] tipc: Enabled bearer , priority 0 [ 192.260677][ T3078] device syzkaller0 entered promiscuous mode [ 192.283412][ T3078] tipc: Resetting bearer [ 192.308041][ T3077] tipc: Resetting bearer [ 192.332191][ T3077] tipc: Disabling bearer [ 192.378248][ T3087] fuse: Bad value for 'fd' [ 192.520185][ T3098] netlink: 'syz.3.931': attribute type 12 has an invalid length. [ 192.868377][ T19] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 192.928357][ T1485] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 193.048378][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 193.056194][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 193.065564][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.073771][ T19] usb 5-1: Product: syz [ 193.078095][ T19] usb 5-1: Manufacturer: syz [ 193.083279][ T19] usb 5-1: SerialNumber: syz [ 193.093581][ T19] r8152-cfgselector 5-1: config 0 descriptor?? [ 193.109458][ T1485] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.121053][ T1485] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 193.130370][ T1485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.138419][ T1485] usb 1-1: Product: syz [ 193.142678][ T1485] usb 1-1: Manufacturer: syz [ 193.147317][ T1485] usb 1-1: SerialNumber: syz [ 193.152761][ T1485] usb 1-1: config 0 descriptor?? [ 193.158845][ T1485] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 193.166831][ T1485] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 193.360887][ T1485] usb 1-1: USB disconnect, device number 18 [ 193.367862][ T1485] ftdi_sio 1-1:0.0: device disconnected [ 193.373561][ T475] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 193.506632][ T3119] hub 9-0:1.0: USB hub found [ 193.511997][ T3119] hub 9-0:1.0: 1 port detected [ 194.278857][ T3125] netlink: 'syz.3.942': attribute type 12 has an invalid length. [ 194.418429][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 194.425112][ T19] r8152-cfgselector 5-1: bad CDC descriptors [ 194.431641][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 194.771741][ T19] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 194.790189][ T475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.810948][ T475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.821576][ T475] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.867659][ T475] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.877452][ T475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.889777][ T475] usb 2-1: config 0 descriptor?? [ 194.935146][ T3129] loop4: detected capacity change from 0 to 40427 [ 194.964978][ T3129] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.010801][ T3129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.050770][ T28] audit: type=1400 audit(1759737139.227:282): avc: denied { ioctl } for pid=3127 comm="syz.4.944" path="/225/file0/memory.events.local" dev="loop4" ino=10 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 195.103156][ T286] syz-executor: attempt to access beyond end of device [ 195.103156][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.318193][ T475] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 195.327457][ T475] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 195.561602][ T660] usb 2-1: USB disconnect, device number 19 [ 195.776672][ T3169] loop0: detected capacity change from 0 to 512 [ 195.783815][ T3169] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 195.793374][ T3169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 195.801604][ T3169] System zones: 1-12 [ 195.806536][ T3169] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.957: corrupted in-inode xattr [ 195.818749][ T3169] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.957: couldn't read orphan inode 15 (err -117) [ 195.831807][ T3169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 196.081052][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.328412][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 196.349186][ T3185] hub 9-0:1.0: USB hub found [ 196.354658][ T3185] hub 9-0:1.0: 1 port detected [ 196.370656][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 196.433677][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.474979][ T24] usb 5-1: Product: syz [ 196.503811][ T24] usb 5-1: Manufacturer: syz [ 196.575682][ T24] usb 5-1: SerialNumber: syz [ 196.674319][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 197.107787][ T3187] netlink: 'syz.1.962': attribute type 12 has an invalid length. [ 197.161939][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 197.175012][ T24] r8152-cfgselector 5-1: bad CDC descriptors [ 197.211559][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 197.238444][ T24] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 197.273430][ T3193] tipc: Enabled bearer , priority 0 [ 197.313350][ T3193] device syzkaller0 entered promiscuous mode [ 197.356557][ T3193] tipc: Resetting bearer [ 197.375823][ T3192] tipc: Resetting bearer [ 197.382651][ T3192] tipc: Disabling bearer [ 197.389808][ T282] EXT4-fs (loop0): unmounting filesystem. [ 197.467569][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 197.948363][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 198.068347][ T475] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 198.139686][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.162582][ T24] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 198.207644][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.235113][ T24] usb 1-1: config 0 descriptor?? [ 198.259522][ T475] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.289313][ T475] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 198.300247][ T3217] netlink: 'syz.2.974': attribute type 12 has an invalid length. [ 198.308222][ T475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.333264][ T475] usb 5-1: config 0 descriptor?? [ 198.659896][ T24] ntrig 0003:1B96:0010.000E: item fetching failed at offset 5/7 [ 198.669443][ T24] ntrig 0003:1B96:0010.000E: parse failed [ 198.675469][ T24] ntrig: probe of 0003:1B96:0010.000E failed with error -22 [ 198.704355][ T3229] hub 9-0:1.0: USB hub found [ 198.709637][ T3229] hub 9-0:1.0: 1 port detected [ 198.877615][ T24] usb 1-1: USB disconnect, device number 19 [ 199.490811][ T3231] loop0: detected capacity change from 0 to 512 [ 199.537692][ T3231] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 199.576691][ T3231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 199.594940][ T3231] System zones: 1-12 [ 199.605895][ T3236] tipc: Enabled bearer , priority 0 [ 199.615838][ T3231] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.980: corrupted in-inode xattr [ 199.638276][ T3236] device syzkaller0 entered promiscuous mode [ 199.647661][ T3236] tipc: Resetting bearer [ 199.665067][ T3231] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.980: couldn't read orphan inode 15 (err -117) [ 199.680736][ T475] ntrig 0003:1B96:0010.000F: item fetching failed at offset 5/7 [ 199.688637][ T475] ntrig 0003:1B96:0010.000F: parse failed [ 199.696060][ T475] ntrig: probe of 0003:1B96:0010.000F failed with error -22 [ 199.704496][ T475] usb 5-1: USB disconnect, device number 14 [ 199.711419][ T3235] tipc: Resetting bearer [ 199.717486][ T3231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.726433][ T3235] tipc: Disabling bearer [ 199.726708][ T3241] fuse: Bad value for 'fd' [ 199.900486][ T3247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 200.638382][ T660] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 200.764252][ T282] EXT4-fs (loop0): unmounting filesystem. [ 200.872211][ T660] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.889337][ T660] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 200.899321][ T660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.908534][ T660] usb 3-1: config 0 descriptor?? [ 201.272918][ T3291] binder: 3290:3291 ioctl c0306201 200000000540 returned -22 [ 201.317258][ T660] ntrig 0003:1B96:0010.0010: item fetching failed at offset 5/7 [ 201.330505][ T660] ntrig 0003:1B96:0010.0010: parse failed [ 201.347854][ T3292] binder: 3290:3292 ioctl c0306201 200000000640 returned -22 [ 201.356150][ T660] ntrig: probe of 0003:1B96:0010.0010 failed with error -22 [ 201.528934][ T660] usb 3-1: USB disconnect, device number 16 [ 201.836441][ T3306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 202.892812][ T3349] binder: 3348:3349 ioctl c0306201 200000000540 returned -22 [ 202.955060][ T3350] binder: 3348:3350 ioctl c0306201 200000000640 returned -22 [ 203.083622][ T3354] tipc: Enabled bearer , priority 0 [ 203.093190][ T3354] device syzkaller0 entered promiscuous mode [ 203.102752][ T3354] tipc: Resetting bearer [ 203.109635][ T3353] tipc: Resetting bearer [ 203.116247][ T3353] tipc: Disabling bearer [ 203.228354][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 204.009003][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.047456][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.057784][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.228577][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 204.418346][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 204.426192][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.435720][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.443915][ T6] usb 3-1: Product: syz [ 204.448219][ T6] usb 3-1: Manufacturer: syz [ 204.453030][ T6] usb 3-1: SerialNumber: syz [ 204.466965][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 204.591700][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.601072][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.617386][ T24] usb 4-1: config 0 descriptor?? [ 204.742048][ T3383] tipc: Enabled bearer , priority 0 [ 204.749167][ T3383] device syzkaller0 entered promiscuous mode [ 204.759263][ T3383] tipc: Resetting bearer [ 204.766039][ T3382] tipc: Resetting bearer [ 204.772826][ T3382] tipc: Disabling bearer [ 204.876204][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 204.885795][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 204.898824][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 204.922763][ T6] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 205.034571][ T24] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 205.045704][ T24] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 205.429905][ T3400] netlink: 'syz.2.1041': attribute type 12 has an invalid length. [ 205.533935][ T3406] 9pnet_fd: Insufficient options for proto=fd [ 206.361961][ T3434] netlink: 'syz.3.1055': attribute type 12 has an invalid length. [ 206.819179][ T3438] loop2: detected capacity change from 0 to 512 [ 206.918420][ T290] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 206.973263][ T3438] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.1057: corrupted inode contents [ 206.986530][ T3438] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.1057: mark_inode_dirty error [ 207.001292][ T3438] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.1057: corrupted inode contents [ 207.016989][ T3438] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1057: mark_inode_dirty error [ 207.028596][ T3438] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.1057: corrupted inode contents [ 207.040732][ T3438] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 207.049558][ T3438] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.1057: corrupted inode contents [ 207.061640][ T3438] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.1057: mark_inode_dirty error [ 207.073069][ T3438] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 207.082520][ T3438] EXT4-fs (loop2): 1 truncate cleaned up [ 207.088176][ T3438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.097134][ T3438] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.107788][ T833] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 207.117735][ T833] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 207.129858][ T290] usb 1-1: Using ep0 maxpacket: 16 [ 207.139972][ T290] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 207.172395][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.180769][ T290] usb 1-1: Product: syz [ 207.185184][ T290] usb 1-1: Manufacturer: syz [ 207.190229][ T290] usb 1-1: SerialNumber: syz [ 207.229931][ T290] r8152-cfgselector 1-1: config 0 descriptor?? [ 207.285064][ T284] EXT4-fs (loop2): unmounting filesystem. [ 207.325836][ T3456] fuse: Unknown parameter 'grou00000000000000000000' [ 207.370609][ T3459] binder: BINDER_SET_CONTEXT_MGR already set [ 207.376640][ T3459] binder: 3458:3459 ioctl 4018620d 200000004a80 returned -16 [ 207.439091][ T6] usb 4-1: USB disconnect, device number 16 [ 207.478879][ T3471] loop2: detected capacity change from 0 to 512 [ 207.514800][ T3471] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 207.543754][ T3471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 207.555963][ T3471] System zones: 1-12 [ 207.568091][ T3471] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1068: corrupted in-inode xattr [ 207.593571][ T3471] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1068: couldn't read orphan inode 15 (err -117) [ 207.618597][ T3471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.331981][ T290] r8152-cfgselector 1-1: Unknown version 0x0000 [ 208.338599][ T290] r8152-cfgselector 1-1: bad CDC descriptors [ 208.346508][ T290] r8152-cfgselector 1-1: Unknown version 0x0000 [ 208.353473][ T290] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 208.486257][ T3492] fuse: Unknown parameter 'grou00000000000000000000' [ 208.785165][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.905488][ T284] EXT4-fs (loop2): unmounting filesystem. [ 208.905644][ T3500] SELinux: failed to load policy [ 208.911442][ T28] audit: type=1400 audit(1759737153.077:283): avc: denied { load_policy } for pid=3499 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 208.970009][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.981009][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.991583][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.004951][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.014110][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.022908][ T24] usb 5-1: config 0 descriptor?? [ 209.228362][ T6] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 209.408413][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 209.734201][ T3517] hub 9-0:1.0: USB hub found [ 209.739571][ T3517] hub 9-0:1.0: 1 port detected [ 209.764124][ T24] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 209.874289][ T24] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 210.272617][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.281901][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.290010][ T6] usb 3-1: Product: syz [ 210.294325][ T6] usb 3-1: Manufacturer: syz [ 210.299283][ T6] usb 3-1: SerialNumber: syz [ 210.309771][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 210.594545][ T3532] loop0: detected capacity change from 0 to 512 [ 210.605883][ T3532] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 210.618045][ T3532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 210.626129][ T3532] System zones: 1-12 [ 210.634626][ T3532] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1089: corrupted in-inode xattr [ 210.647188][ T3532] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1089: couldn't read orphan inode 15 (err -117) [ 210.647242][ T475] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 210.659820][ T3532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.718424][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 210.724814][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 210.744999][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 210.762247][ T6] r8152-cfgselector 3-1: USB disconnect, device number 18 [ 210.973932][ T475] usb 2-1: config 0 interface 0 has no altsetting 0 [ 210.980808][ T475] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 210.990216][ T475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.002962][ T475] usb 2-1: config 0 descriptor?? [ 211.535499][ T282] EXT4-fs (loop0): unmounting filesystem. [ 211.612048][ T475] usbhid 2-1:0.0: can't add hid device: -71 [ 211.635879][ T3567] loop3: detected capacity change from 0 to 4096 [ 211.642694][ T3567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.714427][ T3573] hub 9-0:1.0: USB hub found [ 211.719862][ T3573] hub 9-0:1.0: 1 port detected [ 211.847287][ T3567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 212.186838][ T3577] binder_alloc: 3576: binder_alloc_buf, no vma [ 212.278436][ T28] audit: type=1400 audit(1759737156.357:284): avc: denied { call } for pid=3576 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 212.340042][ T24] usb 5-1: USB disconnect, device number 15 [ 212.662445][ T475] usbhid: probe of 2-1:0.0 failed with error -71 [ 212.670002][ T475] usb 2-1: USB disconnect, device number 20 [ 212.690517][ T283] EXT4-fs (loop3): unmounting filesystem. [ 213.045748][ T3603] syz.1.1114[3603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.045836][ T3603] syz.1.1114[3603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.361861][ T3605] fuse: Bad value for 'fd' [ 213.446863][ T3609] binder: 3608:3609 ioctl c0306201 200000000540 returned -22 [ 213.448383][ T39] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 213.461935][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 213.520731][ T3610] binder: 3608:3610 ioctl c0306201 200000000640 returned -22 [ 213.648379][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 213.654834][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.666036][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.676095][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.678358][ T475] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.689474][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.705987][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.714271][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 213.723383][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.732315][ T39] usb 4-1: config 0 descriptor?? [ 213.737382][ T24] usb 3-1: Product: syz [ 213.741865][ T24] usb 3-1: Manufacturer: syz [ 213.747346][ T24] usb 3-1: SerialNumber: syz [ 213.752973][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 213.889456][ T475] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.896115][ T475] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 213.905205][ T475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.928585][ T475] usb 5-1: config 0 descriptor?? [ 214.144839][ T39] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 214.155034][ T39] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 214.167785][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 214.175293][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 214.181881][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 214.202852][ T24] r8152-cfgselector 3-1: USB disconnect, device number 19 [ 214.245482][ T3616] hub 9-0:1.0: USB hub found [ 214.250569][ T3616] hub 9-0:1.0: 1 port detected [ 215.232171][ T475] usbhid 5-1:0.0: can't add hid device: -71 [ 215.238219][ T475] usbhid: probe of 5-1:0.0 failed with error -71 [ 215.245832][ T475] usb 5-1: USB disconnect, device number 16 [ 215.463979][ T3648] 9pnet_fd: Insufficient options for proto=fd [ 216.365601][ T3655] netlink: 'syz.0.1133': attribute type 12 has an invalid length. [ 216.488380][ T19] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 216.518876][ T3662] fuse: Unknown parameter 'fd0x0000000000000004' [ 216.586092][ T3675] 9pnet_fd: Insufficient options for proto=fd [ 217.316060][ T3684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 217.516410][ T3691] netlink: 'syz.1.1148': attribute type 12 has an invalid length. [ 217.543749][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.552271][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 217.563094][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.572266][ T19] usb 3-1: config 0 descriptor?? [ 217.661354][ T3708] 9pnet_fd: Insufficient options for proto=fd [ 217.739080][ T3715] tipc: Enabled bearer , priority 0 [ 217.746286][ T3715] device syzkaller0 entered promiscuous mode [ 217.763664][ T3715] tipc: Resetting bearer [ 217.771028][ T3714] tipc: Resetting bearer [ 217.777788][ T3714] tipc: Disabling bearer [ 217.839351][ T39] usb 4-1: USB disconnect, device number 17 [ 217.938377][ T293] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 217.987690][ T19] wacom 0003:056A:00FA.0014: unknown main item tag 0x1 [ 218.005628][ T19] wacom 0003:056A:00FA.0014: hidraw0: USB HID v10.00 Device [HID 056a:00fa] on usb-dummy_hcd.2-1/input0 [ 218.129694][ T293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.158346][ T293] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 218.167448][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.176430][ T293] usb 2-1: config 0 descriptor?? [ 218.189784][ T19] usb 3-1: USB disconnect, device number 20 [ 218.544370][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 218.867110][ T293] ntrig 0003:1B96:0010.0015: item fetching failed at offset 5/7 [ 218.875107][ T293] ntrig 0003:1B96:0010.0015: parse failed [ 218.880957][ T293] ntrig: probe of 0003:1B96:0010.0015 failed with error -22 [ 218.889388][ T293] usb 2-1: USB disconnect, device number 21 [ 219.140193][ T3731] netlink: 'syz.3.1162': attribute type 12 has an invalid length. [ 219.388719][ T3744] 9pnet_fd: Insufficient options for proto=fd [ 219.478463][ T28] audit: type=1400 audit(1759737163.657:285): avc: denied { setopt } for pid=3749 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.734709][ T3758] loop4: detected capacity change from 0 to 256 [ 220.741460][ T3758] exfat: Deprecated parameter 'utf8' [ 220.746810][ T3758] exfat: Deprecated parameter 'namecase' [ 220.752893][ T3758] exfat: Deprecated parameter 'namecase' [ 220.797673][ T3758] exfat: Deprecated parameter 'utf8' [ 220.840050][ T3758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 221.258343][ T39] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 221.510543][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.538335][ T39] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 221.547420][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.569052][ T39] usb 1-1: config 0 descriptor?? [ 221.689354][ T3788] 9pnet_fd: Insufficient options for proto=fd [ 221.979282][ T39] ntrig 0003:1B96:0010.0016: item fetching failed at offset 5/7 [ 221.988341][ T39] ntrig 0003:1B96:0010.0016: parse failed [ 221.994394][ T39] ntrig: probe of 0003:1B96:0010.0016 failed with error -22 [ 222.192392][ T39] usb 1-1: USB disconnect, device number 21 [ 222.207418][ T3801] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1187'. [ 222.406009][ T3805] syz.1.1188[3805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.406423][ T3805] syz.1.1188[3805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.221859][ T3812] netlink: 'syz.3.1190': attribute type 12 has an invalid length. [ 223.244771][ T3813] loop0: detected capacity change from 0 to 256 [ 223.265524][ T3813] exfat: Deprecated parameter 'utf8' [ 223.285477][ T3813] exfat: Deprecated parameter 'namecase' [ 223.298404][ T3813] exfat: Deprecated parameter 'namecase' [ 223.304134][ T3813] exfat: Deprecated parameter 'utf8' [ 223.326384][ T3813] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 223.371430][ T3815] netlink: 'syz.3.1192': attribute type 12 has an invalid length. [ 223.454123][ T3819] 9pnet_fd: Insufficient options for proto=fd [ 223.591256][ T3823] loop3: detected capacity change from 0 to 4096 [ 223.598077][ T3823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.669845][ T3823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.461848][ T19] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 224.473902][ T283] EXT4-fs (loop3): unmounting filesystem. [ 224.556947][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 224.648351][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 224.656046][ T19] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 224.672378][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.688667][ T19] usb 3-1: Product: syz [ 224.696250][ T19] usb 3-1: Manufacturer: syz [ 224.701072][ T3843] loop4: detected capacity change from 0 to 256 [ 224.701303][ T19] usb 3-1: SerialNumber: syz [ 224.712818][ T19] r8152-cfgselector 3-1: config 0 descriptor?? [ 224.720016][ T3843] exfat: Deprecated parameter 'utf8' [ 224.725530][ T3843] exfat: Deprecated parameter 'namecase' [ 224.732679][ T3843] exfat: Deprecated parameter 'namecase' [ 224.744139][ T3843] exfat: Deprecated parameter 'utf8' [ 224.752405][ T3843] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 224.798350][ T293] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 224.898800][ T28] audit: type=1400 audit(1759737169.077:286): avc: denied { compute_member } for pid=3845 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 224.944065][ T3848] loop4: detected capacity change from 0 to 1024 [ 224.950956][ T3848] EXT4-fs: quotafile must be on filesystem root [ 224.989468][ T293] usb 4-1: Using ep0 maxpacket: 8 [ 224.997122][ T293] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 225.008844][ T293] usb 4-1: config 0 has no interface number 0 [ 225.015129][ T293] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 225.026799][ T293] usb 4-1: config 0 interface 96 has no altsetting 0 [ 225.037334][ T3852] 9pnet_fd: Insufficient options for proto=fd [ 225.045004][ T293] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 225.062531][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.071161][ T293] usb 4-1: Product: syz [ 225.075524][ T293] usb 4-1: Manufacturer: syz [ 225.080401][ T293] usb 4-1: SerialNumber: syz [ 225.090823][ T293] usb 4-1: config 0 descriptor?? [ 225.133143][ T19] r8152-cfgselector 3-1: Unknown version 0x0000 [ 225.141237][ T19] r8152-cfgselector 3-1: bad CDC descriptors [ 225.147844][ T19] r8152-cfgselector 3-1: Unknown version 0x0000 [ 225.157866][ T19] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 225.191126][ T3863] loop4: detected capacity change from 0 to 256 [ 225.200613][ T3863] exfat: Deprecated parameter 'utf8' [ 225.206022][ T3863] exfat: Deprecated parameter 'namecase' [ 225.212236][ T3863] exfat: Deprecated parameter 'namecase' [ 225.218003][ T3863] exfat: Deprecated parameter 'utf8' [ 225.226309][ T3863] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 225.306218][ T293] usb 4-1: USB disconnect, device number 18 [ 225.742633][ T3875] loop2: detected capacity change from 0 to 256 [ 225.749413][ T3875] exfat: Deprecated parameter 'utf8' [ 225.754876][ T3875] exfat: Deprecated parameter 'namecase' [ 225.761409][ T3875] exfat: Deprecated parameter 'namecase' [ 225.767169][ T3875] exfat: Deprecated parameter 'utf8' [ 225.777882][ T3875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 225.824537][ T3879] 9pnet_fd: Insufficient options for proto=fd [ 226.020024][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 226.251507][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 226.261643][ T3904] binder: 3903:3904 ioctl 4018620d 0 returned -22 [ 226.269459][ T3904] binder: 3903:3904 ioctl c0306201 200000000540 returned -22 [ 226.327882][ T3905] binder: 3903:3905 ioctl c0306201 200000000640 returned -22 [ 226.814892][ T3910] 9pnet_fd: Insufficient options for proto=fd [ 227.000898][ T3922] netlink: 'syz.3.1234': attribute type 12 has an invalid length. [ 227.034285][ T3926] loop3: detected capacity change from 0 to 256 [ 227.041268][ T3926] exfat: Deprecated parameter 'utf8' [ 227.049530][ T3926] exfat: Deprecated parameter 'namecase' [ 227.055407][ T3926] exfat: Deprecated parameter 'namecase' [ 227.061698][ T3926] exfat: Deprecated parameter 'utf8' [ 227.070313][ T3926] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 227.108379][ T293] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 227.254848][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 227.274906][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 227.378373][ T293] usb 2-1: Using ep0 maxpacket: 8 [ 227.384785][ T293] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 227.393213][ T293] usb 2-1: config 0 has no interface number 0 [ 227.399560][ T293] usb 2-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 227.411091][ T293] usb 2-1: config 0 interface 96 has no altsetting 0 [ 227.419602][ T293] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 227.429021][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.437101][ T293] usb 2-1: Product: syz [ 227.441604][ T293] usb 2-1: Manufacturer: syz [ 227.446281][ T293] usb 2-1: SerialNumber: syz [ 227.456332][ T293] usb 2-1: config 0 descriptor?? [ 227.625661][ T3937] fuse: Bad value for 'fd' [ 227.668597][ T293] usb 2-1: USB disconnect, device number 22 [ 228.249522][ T3953] netlink: 'syz.1.1246': attribute type 12 has an invalid length. [ 228.630133][ T3960] loop3: detected capacity change from 0 to 256 [ 228.636907][ T3960] exfat: Deprecated parameter 'utf8' [ 228.642424][ T3960] exfat: Deprecated parameter 'namecase' [ 228.648192][ T3960] exfat: Deprecated parameter 'namecase' [ 228.654513][ T3960] exfat: Deprecated parameter 'utf8' [ 228.707129][ T3960] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 228.767384][ T3964] loop4: detected capacity change from 0 to 512 [ 228.802175][ T3968] fuse: Bad value for 'fd' [ 228.807578][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.816204][ T3964] EXT4-fs (loop4): 1 orphan inode deleted [ 228.822217][ T3964] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.868592][ T3964] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.968534][ T28] audit: type=1400 audit(1759737173.077:287): avc: denied { watch } for pid=3962 comm="syz.0.1250" path="/257" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 229.114668][ T3975] loop2: detected capacity change from 0 to 256 [ 229.128314][ T43] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 229.128443][ T28] audit: type=1400 audit(1759737173.097:288): avc: denied { bind } for pid=3962 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.145834][ T43] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:2: Failed to release dquot type 1 [ 229.157460][ T28] audit: type=1400 audit(1759737173.107:289): avc: denied { listen } for pid=3962 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.178522][ T3975] exfat: Deprecated parameter 'utf8' [ 229.188363][ T28] audit: type=1400 audit(1759737173.117:290): avc: denied { connect } for pid=3962 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.202957][ T3975] exfat: Deprecated parameter 'namecase' [ 229.213408][ T293] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 229.219301][ T3975] exfat: Deprecated parameter 'namecase' [ 229.226968][ T28] audit: type=1400 audit(1759737173.127:291): avc: denied { write } for pid=3962 comm="syz.0.1250" path="socket:[31674]" dev="sockfs" ino=31674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.232676][ T3975] exfat: Deprecated parameter 'utf8' [ 229.263213][ T3975] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 229.380743][ T28] audit: type=1400 audit(1759737173.557:292): avc: denied { getopt } for pid=3978 comm="syz.2.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.429742][ T293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.441610][ T293] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 229.451513][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.459933][ T293] usb 2-1: Product: syz [ 229.495060][ T293] usb 2-1: Manufacturer: syz [ 229.499788][ T293] usb 2-1: SerialNumber: syz [ 229.505612][ T286] EXT4-fs (loop4): unmounting filesystem. [ 229.514077][ T293] usb 2-1: config 0 descriptor?? [ 229.554804][ T293] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 229.808573][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.850662][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 229.852304][ T293] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 229.869154][ T293] usb 2-1: USB disconnect, device number 23 [ 229.882560][ T293] ftdi_sio 2-1:0.0: device disconnected [ 229.998352][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 230.004604][ T24] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 230.012747][ T24] usb 5-1: config 0 has no interface number 0 [ 230.018900][ T24] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 230.030166][ T24] usb 5-1: config 0 interface 96 has no altsetting 0 [ 230.038204][ T24] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 230.047318][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.055370][ T24] usb 5-1: Product: syz [ 230.059582][ T24] usb 5-1: Manufacturer: syz [ 230.064299][ T24] usb 5-1: SerialNumber: syz [ 230.069914][ T24] usb 5-1: config 0 descriptor?? [ 230.292318][ T24] usb 5-1: USB disconnect, device number 17 [ 230.313266][ T3998] netlink: 'syz.1.1263': attribute type 12 has an invalid length. [ 230.340396][ T28] audit: type=1400 audit(1759737174.517:293): avc: denied { watch } for pid=4001 comm="syz.1.1265" path=2F6D656D66643A2D263A7B2DAA5D7B202864656C6574656429 dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 230.347907][ T4002] process 'syz.1.1265' launched '/dev/fd/8' with NULL argv: empty string added [ 230.375478][ T28] audit: type=1400 audit(1759737174.557:294): avc: denied { execute_no_trans } for pid=4001 comm="syz.1.1265" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 230.608344][ T293] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 230.788818][ T293] usb 3-1: Using ep0 maxpacket: 16 [ 230.795272][ T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.806340][ T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.816183][ T293] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 230.825720][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.845313][ T4021] loop4: detected capacity change from 0 to 4096 [ 230.852026][ T4021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.860350][ T293] usb 3-1: config 0 descriptor?? [ 230.866673][ T4021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 230.878369][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 230.883847][ T882] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.892473][ T3971] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 230.899457][ T286] EXT4-fs (loop4): unmounting filesystem. [ 231.008423][ T475] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 231.160232][ T4031] hub 9-0:1.0: USB hub found [ 231.165341][ T4031] hub 9-0:1.0: 1 port detected [ 231.246981][ T475] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.477565][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 231.826782][ T293] hid-multitouch 0003:1FD2:6007.0017: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 231.840739][ T293] usb 3-1: USB disconnect, device number 22 [ 231.863841][ T475] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 231.883612][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.891731][ T475] usb 1-1: Product: syz [ 231.896038][ T475] usb 1-1: Manufacturer: syz [ 231.900719][ T475] usb 1-1: SerialNumber: syz [ 231.906436][ T475] usb 1-1: config 0 descriptor?? [ 231.913201][ T475] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 231.928500][ T293] ================================================================== [ 231.936612][ T293] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 231.943686][ T293] Write of size 8 at addr ffff8881161b8a00 by task kworker/0:2/293 [ 231.951596][ T293] [ 231.953939][ T293] CPU: 0 PID: 293 Comm: kworker/0:2 Not tainted syzkaller #0 [ 231.961331][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.971413][ T293] Workqueue: usb_hub_wq hub_event [ 231.976505][ T293] Call Trace: [ 231.979794][ T293] [ 231.982737][ T293] __dump_stack+0x21/0x24 [ 231.987088][ T293] dump_stack_lvl+0xee/0x150 [ 231.991699][ T293] ? __cfi_dump_stack_lvl+0x8/0x8 [ 231.996742][ T293] ? enqueue_timer+0xae/0x480 [ 232.001447][ T293] print_address_description+0x71/0x200 [ 232.007026][ T293] print_report+0x4a/0x60 [ 232.011403][ T293] kasan_report+0x122/0x150 [ 232.015938][ T293] ? enqueue_timer+0xae/0x480 [ 232.020642][ T293] __asan_report_store8_noabort+0x17/0x20 [ 232.026379][ T293] enqueue_timer+0xae/0x480 [ 232.030910][ T293] __mod_timer+0x79f/0xb30 [ 232.035352][ T293] schedule_timeout+0x127/0x2e0 [ 232.040242][ T293] ? __cfi_schedule_timeout+0x10/0x10 [ 232.045659][ T293] ? __cfi_process_timeout+0x10/0x10 [ 232.050981][ T293] ? _raw_spin_lock+0x8e/0xe0 [ 232.055690][ T293] wait_for_common+0x354/0x620 [ 232.060478][ T293] ? usb_hcd_giveback_urb+0x351/0x410 [ 232.065879][ T293] ? wait_for_completion+0x20/0x20 [ 232.071019][ T293] ? usb_submit_urb+0x1142/0x1810 [ 232.076079][ T293] wait_for_completion_timeout+0xe/0x10 [ 232.081650][ T293] usb_start_wait_urb+0x166/0x2f0 [ 232.086707][ T293] ? usb_alloc_urb+0x44/0x140 [ 232.091413][ T293] ? usb_api_blocking_completion+0xb0/0xb0 [ 232.097247][ T293] ? kasan_save_alloc_info+0x25/0x30 [ 232.102563][ T293] ? usb_alloc_urb+0x44/0x140 [ 232.107265][ T293] ? __kasan_check_write+0x14/0x20 [ 232.112402][ T293] usb_control_msg+0x241/0x3f0 [ 232.117203][ T293] hub_ext_port_status+0x100/0x6b0 [ 232.122344][ T293] hub_port_debounce+0x1c7/0x250 [ 232.127310][ T293] hub_event+0x1b01/0x4350 [ 232.131808][ T293] ? __cfi_hub_event+0x10/0x10 [ 232.136600][ T293] ? __kasan_check_write+0x14/0x20 [ 232.141716][ T293] ? _raw_spin_lock_irq+0x8f/0xe0 [ 232.146757][ T293] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 232.152302][ T293] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 232.157676][ T293] process_one_work+0x71f/0xc40 [ 232.162536][ T293] worker_thread+0xd2e/0x11f0 [ 232.167219][ T293] kthread+0x281/0x320 [ 232.171295][ T293] ? __cfi_worker_thread+0x10/0x10 [ 232.176408][ T293] ? __cfi_kthread+0x10/0x10 [ 232.180997][ T293] ret_from_fork+0x1f/0x30 [ 232.185423][ T293] [ 232.188439][ T293] [ 232.190760][ T293] Allocated by task 3971: [ 232.195095][ T293] kasan_set_track+0x4b/0x70 [ 232.199682][ T293] kasan_save_alloc_info+0x25/0x30 [ 232.204796][ T293] __kasan_kmalloc+0x95/0xb0 [ 232.209380][ T293] __kmalloc+0xb1/0x1e0 [ 232.213540][ T293] hci_alloc_dev_priv+0x27/0x1bd0 [ 232.218560][ T293] hci_uart_tty_ioctl+0x3d6/0xa20 [ 232.223598][ T293] tty_ioctl+0x8ef/0xc60 [ 232.227839][ T293] __se_sys_ioctl+0x12f/0x1b0 [ 232.232532][ T293] __x64_sys_ioctl+0x7b/0x90 [ 232.237115][ T293] x64_sys_call+0x58b/0x9a0 [ 232.241612][ T293] do_syscall_64+0x4c/0xa0 [ 232.246063][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.251956][ T293] [ 232.254271][ T293] Freed by task 3971: [ 232.258254][ T293] kasan_set_track+0x4b/0x70 [ 232.262845][ T293] kasan_save_free_info+0x31/0x50 [ 232.269193][ T293] ____kasan_slab_free+0x132/0x180 [ 232.274301][ T293] __kasan_slab_free+0x11/0x20 [ 232.279060][ T293] slab_free_freelist_hook+0xc2/0x190 [ 232.284449][ T293] __kmem_cache_free+0xb7/0x1b0 [ 232.289298][ T293] kfree+0x6f/0xf0 [ 232.293019][ T293] hci_release_dev+0x12a3/0x13b0 [ 232.297954][ T293] bt_host_release+0x82/0x90 [ 232.302552][ T293] device_release+0xa4/0x1d0 [ 232.307138][ T293] kobject_put+0x19d/0x280 [ 232.311547][ T293] put_device+0x1f/0x30 [ 232.315698][ T293] hci_dev_cmd+0x265/0x720 [ 232.320115][ T293] hci_sock_ioctl+0x41e/0x7f0 [ 232.324809][ T293] sock_do_ioctl+0x101/0x310 [ 232.329402][ T293] sock_ioctl+0x4d8/0x6e0 [ 232.333726][ T293] __se_sys_ioctl+0x12f/0x1b0 [ 232.338395][ T293] __x64_sys_ioctl+0x7b/0x90 [ 232.342978][ T293] x64_sys_call+0x58b/0x9a0 [ 232.347475][ T293] do_syscall_64+0x4c/0xa0 [ 232.351901][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.357809][ T293] [ 232.360124][ T293] Last potentially related work creation: [ 232.365825][ T293] kasan_save_stack+0x3a/0x60 [ 232.370496][ T293] __kasan_record_aux_stack+0xb6/0xc0 [ 232.375890][ T293] kasan_record_aux_stack_noalloc+0xb/0x10 [ 232.381694][ T293] insert_work+0x51/0x300 [ 232.386034][ T293] __queue_work+0x9b1/0xd30 [ 232.390546][ T293] queue_work_on+0xd2/0x140 [ 232.395044][ T293] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 232.399976][ T293] hci_cmd_sync_status+0x53/0x120 [ 232.405016][ T293] hci_dev_cmd+0x628/0x720 [ 232.409435][ T293] hci_sock_ioctl+0x41e/0x7f0 [ 232.414105][ T293] sock_do_ioctl+0x101/0x310 [ 232.418778][ T293] sock_ioctl+0x4d8/0x6e0 [ 232.423101][ T293] __se_sys_ioctl+0x12f/0x1b0 [ 232.427767][ T293] __x64_sys_ioctl+0x7b/0x90 [ 232.432364][ T293] x64_sys_call+0x58b/0x9a0 [ 232.436863][ T293] do_syscall_64+0x4c/0xa0 [ 232.441294][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.447182][ T293] [ 232.449495][ T293] Second to last potentially related work creation: [ 232.456062][ T293] kasan_save_stack+0x3a/0x60 [ 232.460732][ T293] __kasan_record_aux_stack+0xb6/0xc0 [ 232.466107][ T293] kasan_record_aux_stack_noalloc+0xb/0x10 [ 232.471911][ T293] insert_work+0x51/0x300 [ 232.476240][ T293] __queue_work+0x9b1/0xd30 [ 232.480738][ T293] queue_work_on+0xd2/0x140 [ 232.485235][ T293] hci_cmd_timeout+0x191/0x200 [ 232.490007][ T293] process_one_work+0x71f/0xc40 [ 232.494866][ T293] worker_thread+0xa29/0x11f0 [ 232.499541][ T293] kthread+0x281/0x320 [ 232.503622][ T293] ret_from_fork+0x1f/0x30 [ 232.508042][ T293] [ 232.510371][ T293] The buggy address belongs to the object at ffff8881161b8000 [ 232.510371][ T293] which belongs to the cache kmalloc-8k of size 8192 [ 232.524441][ T293] The buggy address is located 2560 bytes inside of [ 232.524441][ T293] 8192-byte region [ffff8881161b8000, ffff8881161ba000) [ 232.537908][ T293] [ 232.540232][ T293] The buggy address belongs to the physical page: [ 232.546633][ T293] page:ffffea0004586e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1161b8 [ 232.556878][ T293] head:ffffea0004586e00 order:3 compound_mapcount:0 compound_pincount:0 [ 232.565192][ T293] flags: 0x4000000000010200(slab|head|zone=1) [ 232.571272][ T293] raw: 4000000000010200 ffffea0004338400 dead000000000004 ffff888100043500 [ 232.579865][ T293] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 232.588438][ T293] page dumped because: kasan: bad access detected [ 232.594846][ T293] page_owner tracks the page as allocated [ 232.600566][ T293] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 462, tgid 461 (syz.0.34), ts 40725078626, free_ts 39547982123 [ 232.622794][ T293] post_alloc_hook+0x1f5/0x210 [ 232.627567][ T293] prep_new_page+0x1c/0x110 [ 232.632117][ T293] get_page_from_freelist+0x2c7b/0x2cf0 [ 232.637678][ T293] __alloc_pages+0x1c3/0x450 [ 232.642267][ T293] alloc_slab_page+0x6e/0xf0 [ 232.646854][ T293] new_slab+0x98/0x3d0 [ 232.650926][ T293] ___slab_alloc+0x6bd/0xb20 [ 232.655512][ T293] __slab_alloc+0x5e/0xa0 [ 232.659851][ T293] __kmem_cache_alloc_node+0x203/0x2c0 [ 232.665310][ T293] __kmalloc_node+0xa1/0x1e0 [ 232.669898][ T293] get_callchain_buffers+0x175/0x350 [ 232.675181][ T293] check_helper_call+0x57eb/0x61c0 [ 232.680291][ T293] do_check+0x627d/0xf060 [ 232.684633][ T293] do_check_common+0x11ae/0x1950 [ 232.689586][ T293] bpf_check+0x3de0/0x10ca0 [ 232.694085][ T293] bpf_prog_load+0x1071/0x15a0 [ 232.698844][ T293] page last free stack trace: [ 232.703502][ T293] free_unref_page_prepare+0x742/0x750 [ 232.708976][ T293] free_unref_page+0x8f/0x530 [ 232.713648][ T293] __free_pages+0x67/0x100 [ 232.718064][ T293] __free_slab+0xca/0x1a0 [ 232.722399][ T293] __unfreeze_partials+0x160/0x190 [ 232.727512][ T293] put_cpu_partial+0xa9/0x100 [ 232.732187][ T293] __slab_free+0x1c4/0x280 [ 232.736615][ T293] ___cache_free+0xbf/0xd0 [ 232.741041][ T293] qlist_free_all+0xc6/0x140 [ 232.745803][ T293] kasan_quarantine_reduce+0x14a/0x170 [ 232.751259][ T293] __kasan_slab_alloc+0x24/0x80 [ 232.756108][ T293] slab_post_alloc_hook+0x4f/0x2d0 [ 232.761220][ T293] kmem_cache_alloc+0x16e/0x330 [ 232.766089][ T293] getname_flags+0xb9/0x500 [ 232.770593][ T293] __x64_sys_symlinkat+0x7c/0xb0 [ 232.775524][ T293] x64_sys_call+0x282/0x9a0 [ 232.780024][ T293] [ 232.782342][ T293] Memory state around the buggy address: [ 232.787964][ T293] ffff8881161b8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.796015][ T293] ffff8881161b8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.804068][ T293] >ffff8881161b8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.812117][ T293] ^ [ 232.816189][ T293] ffff8881161b8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.824267][ T293] ffff8881161b8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to send rpc fd=3 want=1560 sent=0 n=-1 (errno 32: Broken pipe) [ 232.832314][ T293] ================================================================== [ 232.840363][ T293] Disabling lock debugging due to kernel taint [ 232.849370][ T475] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 232.865647][ T28] audit: type=1400 audit(1759737177.037:295): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[14436]" dev="pipefs" ino=14436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 232.882197][ T475] usb 1-1: USB disconnect, device number 22 [ 232.922551][ T4037] fido_id[4037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 232.958378][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 232.970140][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 232.978588][ C0] CPU: 0 PID: 278 Comm: syz-executor Tainted: G B syzkaller #0 [ 232.987548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.988342][ T28] audit: type=1400 audit(1759737177.047:296): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 232.997621][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 233.024648][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 4c 4a 6d 00 49 8b 7d 00 e8 53 d7 [ 233.044590][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 233.050690][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811f65a880 [ 233.058403][ T28] audit: type=1400 audit(1759737177.047:297): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.058682][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 233.086912][ T28] audit: type=1400 audit(1759737177.047:298): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.087910][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 233.109268][ T28] audit: type=1400 audit(1759737177.047:299): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.117053][ C0] R10: ffffed1022c37139 R11: 1ffff11022c37139 R12: dffffc0000000000 [ 233.138145][ T28] audit: type=1400 audit(1759737177.047:300): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.145489][ C0] R13: 0000000000000000 R14: ffff8881161b89c8 R15: 0000000000000008 [ 233.145504][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 233.145521][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.166224][ T28] audit: type=1400 audit(1759737177.047:301): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.173874][ C0] CR2: 00007f6e68eb5ab8 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 233.173893][ C0] Call Trace: [ 233.173901][ C0] [ 233.173912][ C0] delayed_work_timer_fn+0x61/0x80 [ 233.183160][ T28] audit: type=1400 audit(1759737177.047:302): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.189409][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 233.189439][ C0] call_timer_fn+0x46/0x2a0 [ 233.189463][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 233.269918][ C0] __run_timers+0x667/0x9a0 [ 233.274424][ C0] ? calc_index+0x200/0x200 [ 233.278923][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 233.284120][ C0] run_timer_softirq+0x6a/0xf0 [ 233.288881][ C0] handle_softirqs+0x1d7/0x600 [ 233.294872][ C0] __irq_exit_rcu+0x52/0xf0 [ 233.299366][ C0] irq_exit_rcu+0x9/0x10 [ 233.303602][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 233.309232][ C0] [ 233.312151][ C0] [ 233.315074][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 233.321053][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x290 [ 233.327295][ C0] Code: 8d 65 f0 5b 41 5e 5d c3 e8 cd 8a 8c 03 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 b6 63 6b ad <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 ba 00 00 00 [ 233.346891][ C0] RSP: 0018:ffffc90000e072c0 EFLAGS: 00000257 [ 233.352953][ C0] RAX: ffffffff814252e0 RBX: ffffc90000e07380 RCX: 0000000000e07300 [ 233.360918][ C0] RDX: ffffc90000e07b01 RSI: ffffffff814252e0 RDI: ffffc90000e07380 [ 233.368882][ C0] RBP: ffffc90000e07350 R08: ffffc90000e07390 R09: ffffc90000e07388 [ 233.376851][ C0] R10: 0000000000000000 R11: 1ffff920001c0e59 R12: ffff88811f65a880 [ 233.384814][ C0] R13: 1ffff920001c0e84 R14: ffffffff8160e2f0 R15: ffffc90000e072c8 [ 233.392782][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 233.398941][ C0] ? do_group_exit+0x210/0x2d0 [ 233.403703][ C0] ? do_group_exit+0x210/0x2d0 [ 233.408463][ C0] ? arch_stack_walk+0x118/0x150 [ 233.413399][ C0] ? do_group_exit+0x210/0x2d0 [ 233.418162][ C0] stack_trace_save+0x98/0xe0 [ 233.422851][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 233.428233][ C0] ? __stack_depot_save+0x36/0x480 [ 233.433334][ C0] ? memset+0x35/0x40 [ 233.437309][ C0] save_stack+0xf3/0x1e0 [ 233.441563][ C0] ? __reset_page_owner+0x190/0x190 [ 233.446752][ C0] ? free_unref_page_prepare+0x742/0x750 [ 233.452379][ C0] ? free_unref_page+0x8f/0x530 [ 233.457223][ C0] ? __free_pages+0x67/0x100 [ 233.461806][ C0] ? __vunmap+0x9af/0xb70 [ 233.466125][ C0] ? vfree+0x61/0x90 [ 233.470010][ C0] ? kcov_close+0x2b/0x50 [ 233.474336][ C0] ? __fput+0x1fc/0x8f0 [ 233.478485][ C0] ? ____fput+0x15/0x20 [ 233.482633][ C0] ? task_work_run+0x1db/0x240 [ 233.487389][ C0] ? do_exit+0xa25/0x2650 [ 233.491738][ C0] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 233.497720][ C0] ? call_rcu+0xd4/0xf90 [ 233.501957][ C0] ? __fput+0x66a/0x8f0 [ 233.506107][ C0] ? ____fput+0x15/0x20 [ 233.510252][ C0] ? do_exit+0xa25/0x2650 [ 233.514578][ C0] ? do_group_exit+0x210/0x2d0 [ 233.519339][ C0] __reset_page_owner+0x54/0x190 [ 233.524265][ C0] ? __kasan_check_write+0x14/0x20 [ 233.529385][ C0] ? _raw_spin_trylock+0xb1/0x140 [ 233.534404][ C0] free_unref_page_prepare+0x742/0x750 [ 233.539861][ C0] free_unref_page+0x8f/0x530 [ 233.544534][ C0] ? __cfi_free_unref_page+0x10/0x10 [ 233.549826][ C0] __free_pages+0x67/0x100 [ 233.554259][ C0] __vunmap+0x9af/0xb70 [ 233.558404][ C0] ? __kasan_check_write+0x14/0x20 [ 233.563507][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 233.569390][ C0] ? vunmap+0x60/0x60 [ 233.573357][ C0] ? __cfi_call_rcu+0x10/0x10 [ 233.578028][ C0] ? security_file_free+0xd8/0xf0 [ 233.583050][ C0] vfree+0x61/0x90 [ 233.586758][ C0] kcov_close+0x2b/0x50 [ 233.590909][ C0] ? __cfi_kcov_close+0x10/0x10 [ 233.595756][ C0] __fput+0x1fc/0x8f0 [ 233.599734][ C0] ____fput+0x15/0x20 [ 233.603710][ C0] task_work_run+0x1db/0x240 [ 233.608302][ C0] ? __cfi_task_work_run+0x10/0x10 [ 233.613417][ C0] ? free_nsproxy+0x21f/0x270 [ 233.618092][ C0] do_exit+0xa25/0x2650 [ 233.622249][ C0] ? __switch_to_asm+0x3a/0x60 [ 233.627012][ C0] ? __cfi_do_exit+0x10/0x10 [ 233.631598][ C0] ? __schedule+0xb8f/0x14e0 [ 233.636181][ C0] ? __kasan_check_write+0x14/0x20 [ 233.641285][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 233.646749][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 233.652652][ C0] ? __kasan_check_write+0x14/0x20 [ 233.657770][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 233.662784][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 233.668331][ C0] do_group_exit+0x210/0x2d0 [ 233.672919][ C0] ? __kasan_check_write+0x14/0x20 [ 233.678021][ C0] get_signal+0x13b5/0x1520 [ 233.682522][ C0] ? put_pid+0xc5/0x120 [ 233.686671][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 233.692298][ C0] ? __cfi_child_wait_callback+0x10/0x10 [ 233.697950][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 233.704098][ C0] ? __cfi___x64_sys_wait4+0x10/0x10 [ 233.709379][ C0] ? do_user_addr_fault+0x9ac/0x1050 [ 233.714660][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 233.719853][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 233.725305][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 233.730761][ C0] do_syscall_64+0x58/0xa0 [ 233.735170][ C0] ? clear_bhb_loop+0x30/0x80 [ 233.739842][ C0] ? clear_bhb_loop+0x30/0x80 [ 233.744512][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.750402][ C0] RIP: 0033:0x7fba22184fd3 [ 233.754820][ C0] Code: Unable to access opcode bytes at 0x7fba22184fa9. [ 233.761821][ C0] RSP: 002b:00007fffa004d6c8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 233.770241][ C0] RAX: fffffffffffffe00 RBX: 000000000000011d RCX: 00007fba22184fd3 [ 233.778205][ C0] RDX: 0000000040000000 RSI: 00007fffa004d6dc RDI: 00000000ffffffff [ 233.786165][ C0] RBP: 00007fffa004d6dc R08: 0000000000000000 R09: 0000000000000000 [ 233.794134][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 233.802104][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 233.810076][ C0] [ 233.813097][ C0] Modules linked in: [ 233.816991][ C0] ---[ end trace 0000000000000000 ]--- [ 233.822447][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 233.827731][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 4c 4a 6d 00 49 8b 7d 00 e8 53 d7 [ 233.847328][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 233.853389][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811f65a880 [ 233.861360][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 233.869324][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 233.877291][ C0] R10: ffffed1022c37139 R11: 1ffff11022c37139 R12: dffffc0000000000 [ 233.885255][ C0] R13: 0000000000000000 R14: ffff8881161b89c8 R15: 0000000000000008 [ 233.893221][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 233.902147][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.908728][ C0] CR2: 00007f6e68eb5ab8 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 233.916701][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 233.924213][ C0] Kernel Offset: disabled [ 233.928534][ C0] Rebooting in 86400 seconds..