last executing test programs: 11.887059454s ago: executing program 2 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x1) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffff6d}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x18) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000180)=0x8, 0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESHEX=r3], 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x7ffffffd, 0x1000, 0x8, 0xffffffff}, 0x8b, 0x0, 0x4, 0x200008, 0x100, 0x14, 0x2, 0x0, 0x0, 0x0, {0x100, 0x0, 0x0, 0x0, 0x10}}}}]}, 0x78}}, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 8.778145763s ago: executing program 2 (id=635): creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r5 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) preadv(r5, &(0x7f0000000340), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000014c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000ac0)={[{@journal_path={'journal_path', 0x3d, './file2'}}, {@test_dummy_encryption}, {@dax_inode}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq}]}, 0x3, 0x447, &(0x7f0000000500)="$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") 7.707013349s ago: executing program 2 (id=637): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) fallocate(r0, 0x10, 0x0, 0x950e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000c00)={r6, 0x0, 0x20000000}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/18, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB], 0x80}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x1e, &(0x7f0000000080), 0x4) 7.614082088s ago: executing program 3 (id=638): creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r5 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) preadv(r5, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000014c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000ac0)={[{@journal_path={'journal_path', 0x3d, './file2'}}, {@test_dummy_encryption}, {@dax_inode}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq}]}, 0x3, 0x447, &(0x7f0000000500)="$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") 6.927835946s ago: executing program 1 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xeaad1e477319f9de, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008881}, 0x4041) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="20000280", @ANYRES32=r7, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32, @ANYBLOB="00000000ac1404ae00000000000000000000000086dd"], 0x58}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 6.462184674s ago: executing program 3 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) 6.441270824s ago: executing program 3 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xd) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, &(0x7f0000000500)="0b032200e0ff25000200480302edeb4de81845640f1046a058bbc736b74344deca98ef0defb78f814a48234043bc7392b32c87277dd4e4be77e30f59f1d5a76260d68e96d50b5670743e00000000000000000000000000007c97485c3dcf26a902610585b4d11ed1a16db7a6da21e87e26d960179ac065f300f0b8494b9c1ed495664b42", 0x84, 0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 6.398607654s ago: executing program 2 (id=643): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.log\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_script(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @remote, 0x1}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r5, r5, 0x0, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.810391932s ago: executing program 3 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write(r2, 0x0, 0x640270e0988cb8c2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/105, 0x69) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000300)={'\x00', 0x3, 0x7, 0xbfd9, 0x3, 0x355, r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.773040372s ago: executing program 1 (id=645): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)='a', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, 0x0, &(0x7f0000001c40)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x100, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd34, &(0x7f00000002c0)=0x2002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000480)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)={r4}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) futex_waitv(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x1) unshare(0x60000480) 5.704940461s ago: executing program 2 (id=646): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x33) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0xffec, 0x3) 3.577112564s ago: executing program 3 (id=647): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000040)=0x80000000, 0x4) getpeername$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb91}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x48880) syz_usb_connect(0x1, 0xc3d, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xc7, 0xd5, 0x28, 0xff, 0x1410, 0xa002, 0xda9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2b, 0x3, 0x0, 0x6, 0x80, 0x9, [{{0x9, 0x4, 0xef, 0x8, 0xf, 0x19, 0x95, 0xf4, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c9c9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x1000, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x6, 0xb8, 0x7}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x35, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x1a}, @mdlm={0x15, 0x24, 0x12, 0x3}, @country_functional={0xc, 0x24, 0x7, 0xf, 0xb, [0x8, 0x0, 0x8]}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "8c48"}, {0x5, 0x24, 0x0, 0xff00}, {0xd, 0x24, 0xf, 0x1, 0xa9b8, 0x300, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0xb}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x3, [0x5]}, @obex={0x5, 0x24, 0x15, 0x36}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x14, 0x1, 0xfff, 0x39}]}], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xff}]}}, {{0x9, 0x5, 0x7, 0x4be16be83f6de37e, 0x200, 0xf, 0xfd, 0x4}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x7fff}, @generic={0x62, 0xd, "16357061fa25ece3a44fb4399412b7ee0157116f1ae7133c493b8c77e3312414bc3581c6149b0cfeaa5a134ff4832a7876a03c47d94ba11506c85c7f119791e7fb25bfe5c019b4b85e1e0d0df25f1ac48fcab6cb4c25bdd870ef29d0bb3a1a1f"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0x6, 0x8d, [@generic={0x79, 0x5, "a24ccd7a693b3ef804e2f42de00766164118b880a674cbd8c742924695ffb04875b0c0c0436871ca041b4b0fa3acfe6a94dd5da8ef85c44574ed1283a403c958e45e8a03090792783bbcb7c7956f1d35fb413a0e8913a2b0e8a7152b202cdb54d33677973531cd8e798dcf90993c43cd8aba3594955ccf"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x34, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x95, 0x61, 0x3, [@generic={0xb2, 0x3e, "a2216eee5169929657f79aaa5856a3d08e3ed957ff4ab318c672d99512765ce19a0ea1f45fa8336a435b66600e8a92eb5afc20ddc82a53e6ede3fd05c02463f5dcda2ec08e99c2f9865c98abeef98eda6a67b8c31e9de07ddb879f25ab2f1044dcc03dfe58ff8bbe244bfbfb9499bbd5d3c4dc289d10f5ab7c39f16fb5e773b6f815bbc8809dfa064fa1b9a800983e6061a1f400899098e57ec3be2df372306bf10958143ebb54f14390091456ecb861"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x6a, 0x5, 0x5, [@generic={0xa7, 0xc, "fc949811687bcb361f476fa02253878466b9d97b8263f78551e09c4a077cedac5d87590c0785ed428ea68e806f933d313b329fa3658f26d58a9fcdd892d0e87656753aa7acd33e6b0d92d2e6504872e65def6101ff5078439b709dd0906809fab432149d6fb65591b50a61fb3967b714cb69edb6407d1658b64bf001991380a84d7b58a46aa59d4e135269351e8410435ab8edcbb170e1e54a2f4424166a0ab7af112df2d9"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xf8, 0x5, 0xf}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x2, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x1e, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x7}, @generic={0xcd, 0x6, "a709fbf1c616ea1ce01891362341f3e42977e93f2b0139135b935dc7eb18bb94e82f76dbff701a272339a98a9f05c53f993bd2b08ab523ab011e9bf715ba2267144d2627b4c54d53c1e561756f28bc382fd1c99de9d9ca6fed1a4035778da06465bae07d4a10586c5ff0ea7c133fa573f24fc3fc411ea290438c1dcec45b202bc660c4e63dc6e53ee61975123e21f36d9453e776a02c46ad005b7dd5341fe995b27f9fc819b9c55ee80688f6d7479dc0da3988b719ce3086208bd6d2f9bfedc6fa6e48b581ca9687a9a0a9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x3, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbf, 0x2}, @generic={0x7a, 0x3, "4c5349cc5e33b1def15f2cf4bb60e8a927fe06ff8788092316f547bdc1a15ce2349aa921734e04c9852481056fc8c63f3060cf9f4d7ca986339dd6a8140608d0d125c4cd55a6205ecf939dea7844ac789462985b3dd20dd3f782c93fb4be0c2b90684bde81577270a92c43c9f5e1b608e9de31fe2fd861d2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0x81, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x8, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}, @generic={0xf7, 0xa, "131d7cad3556264097a7d48f874717d2330ba1194153cb27b61542bed6e6ecd83b7d1ab7f59a9a23332d754a148702eb02e50535e58c770b552900906fe10b45de522941fc7313ea94aed525c2bfb2b218dd3ad16eb913b9fbb80cdcd898f938e76a10456fbac3dfa63cfaba3aa7e6690bc263b142b0ec74f54ec6dcac4028f4e90d64a4c3de3b49428a2b3e15723fd0e0262311016aa8b9776698c81388f27617e42d7ff2a77d8314be4e1bd170513e8dcdcf01259b30c4929984a86562a6e79252f6197c5c279d8a1e41027259b5ade007d7d108b7e2789a70eac69291ef7c18f56dfc7cf3c27260754edd73193b508df4e6eff5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x6, 0x88, 0x47}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xa0, 0x2, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x6f, 0xfc00}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xea, 0xf22}]}}]}}, {{0x9, 0x4, 0x60, 0x1, 0x4, 0xff, 0xff, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x6f5}}, @generic={0xde, 0x23, "c8afac44843a06101087f3b04ee75140ab046e71288efb47e90af24d474d9de2e452ec064ab5fdb6222f675c636e3e97891b4de71a20b21323ba41f8fdb3990d344b84cb673a6bb6cae509d0388f444b23ea36e6581f1e86ede6f6de08f2c69e143370088af343d23b599bbe43f683ed5ab801abc9901de209e91d30bfbde40cc2890b960f2d8b561d76aad292c310616b7f88c0e998a799583aa3ccdd6944cbd322bc8023955ca20b15ce3f7341a4e4d5db6015df84a53d73d104fbb6e50c81b2fbdd0b09f6445dba7f76dd3068544a307030ca97dd3004d6e29829"}], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x4, 0x0, 0x5, [@generic={0x8f, 0x1, "989cb3efa5b3c0d80060a581d920c1eee8ee716cf73753e34ae1f6acc307e20a4d88dc076a607566572f79ac1126f4dadd9f8d93ecb3c1c019d4721849d7648c5d66c78e100e09c077c77e203347f624397261f70b381b92dadbe77378f207aae3ecfebed9ce3603b36dd89d5b8c0785ed3004e159c98011a23d7f37ef07881c71031e6352b0226fd823657957"}, @generic={0xfd, 0x1, "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"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x5, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}, @generic={0xae, 0xf, "89b920c9ff465eaa24b94e97d68785df555023d7d578edea35ede86c322dcc11f90aeba22a37cd87ea68a777ccaeebb31886c3894300216de4caf9ce989a997bed88faf8c7727ea51c88bf8adcf83aecd1a060faca992c556e3b3f81b1a80e58c2b9a1016542ac1190649b3593c7ac13c83605599af342ffd24a7918bb08c4616de0f935e0629394d7a5ed3abb29176d27b40066a46fe05d2a78af12df5e070d845aa5e8316ee5880e0866d5"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x3}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x0, 0x6, 0x6, [@generic={0x73, 0xd, "aa38a9f9a43a6f6940f23870d29f0b5c9a8e4b90dadb0ef16b12ea4a11e99b295ba95620f3f888feb8a2d3fa45501150af4544b5357b910d5e56a9b0bd65bc064c1eb2d54cf91ec53236293ae00776237b58489852b34a11c3446e1a18fa79b0bddb59b5044ddf471959f6ddcab2ea7e1c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}]}}, {{0x9, 0x4, 0x42, 0x9, 0x8, 0x97, 0xa3, 0xed, 0x9, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x7, 0xdb, "e7c71dd66e3c44"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x2, 0x48, 0x1, "0280252306a7af"}]}], [{{0x9, 0x5, 0x1, 0x4, 0x20, 0x1, 0x30, 0xb, [@generic={0x45, 0x22, "e4e7641b40960603dbad528ccc8f8ec74f90df45c67c8587ba7bb2b54540026a69ed52f2350c00d6f5312bb672373ca79740706b2cb4db36ae32844d2271ff0e1d8937"}, @generic={0x4d, 0x24, "7b372e6b0515d96304a9e304ac37773e3d03328c44b579c31e33fe55b1e03ae4a22f6af02f6ecab5e8d76789bc8e584b8f8c20d983b97efe6caacebbeb96a17a6ff8b144146d443a190a14"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x0, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x1c, 0x40, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x81}, @generic={0x23, 0x30, "30db54b181a277f4759590d344d85be9dde694165102bddf679792c2645a070618"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x10, 0x5, 0x75, [@generic={0x7f, 0x2, "ba596c3d9747b56738bb42c722bc2a67dbd7b4e4bf9e382e9487138630a8161cd6559e14ed7adc5475a4d8c2e25bd13eeb74bfdb06971cac3ef10aea59eee2ca8a411e3b05b9c880913890bf3fa12fda7ff574bb5e95625d9f8897c2a0ea99a2e32c369fc78a40f760bf47ba00849d46756ea836fd64e588d40915feca"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0xdc, 0xdf, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x6, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x89, 0x5}, @generic={0x1e, 0x21, "fd7ff084968489be61dd6f3784e5edcfa358e00229460da61c2063f7"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x5, 0x88, 0xfc, [@generic={0xa7, 0x11, "cf94b24bf2b66bb7faab3b24bfe91039c8cb71aa8085c3a8914af97ab349a7d08f351a9779d52ce42b08ba72535a7176570ccaedf1e81478bbb7c3f8e089e9f10cf76e0d34f05858796541990f9516c7d4c5d276de585cef54d3c5e0f2d89aa3eae96a75ccb54023900e64eda1172d54a58aea174c81bf55bb73cb18dc0d681d726865c0cbfa825fe016d340d3fcf3b094e84f2b6304ab18cf487f015e79852d802816a781"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x2, 0x5, 0x8e}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x110, 0xb, 0x7f, 0x8, 0x8, 0x10}, 0x3e, &(0x7f0000000f00)={0x5, 0xf, 0x3e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x7, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "ea33b405028929afa563bf84433b51fd"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d2851a71a0ac93aa6fcad7a84a54510f"}, @ss_cap={0xa, 0x10, 0x3, 0x880ba32aa6bbfaf4, 0xc, 0xe4, 0x25, 0x3}]}, 0xa, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x436}}, {0x94, &(0x7f0000000f80)=@string={0x94, 0x3, "751c2a282a102c932117ae946db5a28da0fb5a743b4ca9159d285d13983f3fc06f3ebd757931e05b93b5507e82f10f8f3a4ae05a8977621dc13f2d05c55d1defd6f252d40942a98b19ebee0c213b7074c34686004235f09091f3c45e91554b134a11850fc53110165d2fc3f4d3b8e528da73a0ee466dec9f77146e243df1c2abbd81e46c67956a6a860838c85ae878648942"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x403}}, {0x3a, &(0x7f0000001080)=@string={0x3a, 0x3, "10b5bae193df2c04c9d7578e1ebf704cad525b5651ba561623ec57bd49f755147ac2ab1ea98ca72da1ae085e95745f54a448e1823d647401"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0xc04}}, {0x41, &(0x7f0000001140)=@string={0x41, 0x3, "6d16aa9b45c514148c54c39fe8543b5d5a3fd0716969285c7411dd88bbd6496264fd674093a0dd357e8d26a025e59b7e6b9e09792478825e9db6065cb21e6d"}}, {0x7a, &(0x7f00000011c0)=@string={0x7a, 0x3, "1fcb21cc309819e8a3ff0f88c6f723687b22f4604a6b7f8f1da63a7b4ffdc0ab29977a92125e136700b6c2ab5ad6e0bf76d9246ebd30ca7eb952181f4258ad035c291f5c50ce722a275950982d03c6f118122036bc9041a9bc1ff0a5e772ccf83d84ccbf1f7eff2ca59e40ea99588e5460abf7785df6ee2c"}}, {0xd7, &(0x7f0000001240)=@string={0xd7, 0x3, "b223667be0673c94bb82b6bcf8c1f9b974ff1fa2afd17284e21beef4a89842841cffd2a8b1a8ea1079fdff5e9da10861ce1389b2b4df05a50a9f5a9e4e1ec8292ac03f3d7bee1a4531df3bf9dd3ee3b50de696516e8eb109009ee2322653c4774b57235c9d1e2d5efd3a8d2e1f96cda6a04f64d3373a3f1b26082372aaff0c1e1831b3e9ef4f2aa8f108165f1f489eb8a1441a7342a109d8d5d532ff41703e1f6f941be55710429540dc5c5ecdc09112ff5b46f1e540dbd3877b3d8f2ac7ef3f7cee8e53e38ec6fc5e2b24f3f59ec235e0800a17f5"}}, {0x99, &(0x7f0000001340)=@string={0x99, 0x3, "30a0a08a31f4c1b917709a042fc6f7db2104469652c3a8b2fafd03e1e9aef5705101afe0e975b2437d6182e767ed213c742cd6e20af0efa6e8c40c36b34fdecc07c6812ad10f17a3c3137668b79b5e56bbdc3a1585e1fb316df6e5a36b96cdfae16bc6330c72e8d74c510d9d58692e4c8d4b101c4ddaaeccd8998a8ba4d526c4be67fda7153b432ca6069d1be00d6051593848493f1c34"}}]}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000014c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000001500)) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x18, r3, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x240081d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x6c, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x6c}}, 0xc085) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a40)={'gre0\x00', &(0x7f00000019c0)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x8, 0x14b321d5, {{0x11, 0x4, 0x2, 0x6, 0x44, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0x13, 0x97, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ssrr={0x89, 0x1b, 0x8f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @remote, @broadcast, @loopback]}]}}}}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x11, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@map_fd={0x18, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b80)='syzkaller\x00', 0xffffff62, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x2, 0x4, 0xffffffbf, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001c40)=[{0x5, 0x2, 0xa, 0x4}], 0x10, 0x7, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x15, 0x1b, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xd, 0x7, 0x1, 0x30, 0xfffffffffffffff0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1a000}}]}, &(0x7f0000001940)='GPL\x00', 0x80000001, 0x1f, &(0x7f0000001980)=""/31, 0x40f00, 0x49, '\x00', r7, @fallback=0x876fd84fadd105a6, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x5, 0x0, &(0x7f0000001d40)=[{0x0, 0x2, 0x7, 0xa}, {0x5, 0x4, 0x1, 0x9}, {0x4, 0x4, 0x9, 0x1}, {0x3, 0x3, 0xa, 0xc}, {0x0, 0x1, 0x1, 0x5}], 0x10, 0x3, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r2) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x34, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x423}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa74}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf39}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20e76d6f, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) r12 = socket(0x1f, 0x800, 0x800) splice(r11, &(0x7f00000020c0)=0x1, r6, &(0x7f0000002100)=0x7f, 0x9, 0xd) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002140)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002180)={r13, r6}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f00000021c0)={0x1, 0x6, 0xff, 0x5, 0x7, 0x1, 0x7af}, 0xc) r14 = openat(0xffffffffffffffff, &(0x7f0000002200)='./file0\x00', 0x30000, 0x112) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r14, 0x8982, &(0x7f0000002240)={0x0, 'geneve0\x00', {0x2}, 0x4c}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002480)={{r9}, 0x0, 0x1c, @unused=[0x3, 0x1, 0xd3, 0x8], @subvolid}) 2.178950429s ago: executing program 2 (id=650): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'lo\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "818f700db6a0f45ab60260dbca2754f59ab99cba2bae81a61e730bec8a0916e0", "2892d406cc52b53f98b142327ce3fc933ca0bd0fef46ae917e31a290b03ea5e4", "6a6d4d079bb5a071f3047e941bdf839b228c5339034dc4dbc9aac62885f89b13", "399a72fa7e8ea5b0050000b1d0bb1d7a3a2080aa4a01000000000010000400", "e110d3b1ba62dddea29b8b11dd000999266db7e300be42b2d05a4a912004b961", "a0149a2235537562b318fec0"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000001c0)=0x1) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0x12, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) 1.866935987s ago: executing program 1 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) 1.832062627s ago: executing program 1 (id=653): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.812460067s ago: executing program 1 (id=654): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') dup3(r0, r1, 0x0) 1.802965797s ago: executing program 0 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="220600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000040000000000000000000000000000ecbbf10000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xdd, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r9 = syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r11}, 0x10) r12 = dup3(r9, r10, 0x80000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x2fa, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000f1ffffffffbe91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xe9, &(0x7f00000007c0)=""/233, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x36, r12, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x9, 0xff}, 0x10, r13, r11, 0x4, 0x0, &(0x7f0000000680)=[{0x4, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x10, 0x4}, {0x1, 0x1, 0x9, 0xb}, {0x3, 0x4}], 0x10, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x18, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fcffffff18240000", @ANYRES32=r1, @ANYBLOB="00000000090000001847000003000000000000000000000004d5ff01b7030000852000000100000018400000060000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1000, 0xd0, &(0x7f0000000100)=""/208, 0x40f00, 0x22, '\x00', r8, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r0, 0x2, 0x0, &(0x7f0000000a00)=[{0x4, 0x4, 0x5, 0xa}, {0x4, 0x5, 0x3, 0xa}], 0x10, 0xffff2a98, @void, @value}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x26}}, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r15, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000b40)={0x1, &(0x7f0000000b00)=[{0x81, 0x4, 0xd, 0x6}]}, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r14, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) 1.766095647s ago: executing program 0 (id=656): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a03b35acbfab1f415c576bcee8e8116c599cd6b0e1607b7b5d8f89e1889d07716793f0dbe7b74a3899250e8282480aec821b28074fe7397e870706ef4fd938cbca2246bc0c8b4206a7515b0439047fe4393c9ea04f8b1304377cf962383371c8df93e5002e302d6574de90d4cb5b228c8cae32fab4e4"], 0x48) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x100010}}, 0x50) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') dup3(0xffffffffffffffff, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.597498106s ago: executing program 0 (id=657): creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000014c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000ac0)={[{@journal_path={'journal_path', 0x3d, './file2'}}, {@test_dummy_encryption}, {@dax_inode}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq}]}, 0x3, 0x447, &(0x7f0000000500)="$eJzs28+PE1UcAPDvTLcLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GhPvxqP/gie9GOPJxKveDQkxXABPNdPOsG1pu2xpKdLPJxl4b+bNvvftzGvfm9cGMLKmsn+SiG0R8WdETNSzzQWm6v9du3Ju4fqVcwtJVKvv/ZPUyl29cm6hKFqctzXPTKcR6ZdJ7GlT78qZsyfmK5Wl03l+dvXkx7MrZ86+ePzk/LGlY0unDhw+fOjg3CsvH3ipL3Fmbbq6+7Plvbve/vCbd45sboq/JY4+mep28Jlqtc/VDdf2hnQyNsSGsCGliMguV7nW/yeiFGsXbyLe+mKojQMGqlqtVrd2Pny+CtzDkmjO6/IwKooP+mz+W2ytg4DXBjf8GLrLr9cnQFnc1/KtfmQs0rxMuWV+209TEfHB+X+/y7YYzHMIAIAmP2Xjnxfajf/SeLih3P352tBkRDwQETsi4sGI2BkRD0XUyj4SEY9usP7WRZKbxz/ppZ4Cu0XZ+O/VfG2refxXjP5ispTnttfiLydHj1eW9uevyXSUN2X5uS51/PzmH193OtY4/su2rP5iLJi349LYpuZzFudX528n5kaXL0TsHmsXf3JjJSCJiF0RsbvHOo4/98PeTsfWj7+LPqwzVb+PeLZ+/c9HS/yFpPv65OzmqCztny3uipv99vvFdzvVf1vx90F2/e9re//fiH8yaVyvXdl4HRf/+qrjnKbX+388eb+WHs/3fTq/unp6LmI8OVJvdOP+A2vnFvmifBb/9L72/X9HrL0SeyIiu4kfi4jHI+KJvO1PRsRTEbGvS/y/vvH0R73HP1hZ/Isbuv5rifFo3dM+UTrxy49NlU7eFP/17tf/UC01ne9Z9/1vU8SttKu3uxkAAAD+f9KI2BZJOnMjnaYzM/Xvy++MSCvLK6vPH13+5NRi/TcCk1FOiyddEw3PQ+fyaX09fyEi6l8tKI4fzJ8bf1vaUsvPLCxXFocdPIy4rR36f+bv0rBbBwyc32vB6NL/YXTp/zC69H8YXW36/5ZhtAO489p9/n8+hHYAd15L/7fsByPE/B9Gl/4Po0v/h5G0siXW/5F810Txl3o8/Z5NRPmuaMbAEpHeFc2QGFBiuO9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fJfAAAA//9zB+BU") 1.451015455s ago: executing program 1 (id=659): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x18, 0x2d, 0x9c, 0x10, 0x930, 0xa13, 0x7644, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000b00), 0xfffffffffffffffc, 0x84640) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xb, 0xf9, 0x8b, 0x40, 0x4f2, 0xaffc, 0x8861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000980)={0x40, 0x11, 0x2, "1a7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.404631626s ago: executing program 4 (id=661): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.325758665s ago: executing program 4 (id=662): move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x19, 0x0, 0x2000e881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00'}, 0x10) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.298716725s ago: executing program 4 (id=663): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) io_uring_setup(0x36a3, &(0x7f0000000540)={0x0, 0x3}) 1.282599685s ago: executing program 4 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) 984.760764ms ago: executing program 4 (id=665): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x100, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000011c0)={&(0x7f0000000040)="d63ea7f5cc3190a2e69022990ae515", &(0x7f0000001140)=""/106, &(0x7f0000001740)="7399fa0c64bc539608d6343a518b48ccfeab691867f5df0fe93d750e485a4a8de31253699b760ef4b54b9d943945279520b9ef2d3c1259ad6fd1a709de9f18485c92c07515fdb971850b82a7834a32c6dbae3ab20bcca8eb1266deaf86dc3c583a3af015e809e1e8a1627a66df665561040ff10f1f9dd08edc8ebb0f1c89cc8fb58d0a1b2a31b2f5c12f85c735856e2722075fc2a1ba1b21083ef6ce51", &(0x7f0000001800)="6672a6f3a30bbb04645633a6208a41b8b907e28d53b14951981db7edc0cab880da4b2c69cffa2e911faf2885505d3c1e091caf74aa727a2b9a428039fd40d48d14ba3eea26dcf8e4aad102a3d4a635daaaec3dbbe66b85fa427dc804c55624d5754c18cb8956a0e13fb9941b9f04a74cbe618a2f0f2b13bd340e0f3e7da2e6f5d07ce43b23e0485c0e", 0x1ff, r4}, 0x38) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)={r6}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee1568810003c000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e312a", 0xb8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x2d) futex_waitv(&(0x7f0000000140)=[{0xe, 0xfffffffffffffffd, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x60000480) 740.763383ms ago: executing program 4 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x33) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0xffec, 0x3) 588.641563ms ago: executing program 0 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080), 0x4) 357.426612ms ago: executing program 0 (id=668): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 39.187361ms ago: executing program 0 (id=669): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff06ffffaf64000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f000000ccc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f000000cdc0)={&(0x7f000000cc80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000cd80)={&(0x7f000000cd00)={0x64, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x98}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd445}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x4000080) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) sysinfo(&(0x7f0000000000)=""/198) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 0s ago: executing program 3 (id=670): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x2a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listxattr(0x0, &(0x7f00000000c0)=""/58, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x121342, 0x0) syz_clone(0x40800, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r7, &(0x7f00000082c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): ce number 5 [ 53.918124][ T304] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 54.148257][ T304] usb 4-1: Using ep0 maxpacket: 32 [ 54.155418][ T304] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.167354][ T304] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 54.177576][ T304] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.187767][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.238176][ T304] usb 4-1: config 0 descriptor?? [ 54.611338][ T28] audit: type=1400 audit(1738054396.204:270): avc: denied { map } for pid=794 comm="syz.2.125" path="socket:[17459]" dev="sockfs" ino=17459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.648036][ T28] audit: type=1400 audit(1738054396.204:271): avc: denied { read } for pid=794 comm="syz.2.125" path="socket:[17459]" dev="sockfs" ino=17459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.296503][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 55.396795][ T819] loop1: detected capacity change from 0 to 512 [ 55.419062][ T819] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 55.427138][ T819] System zones: 0-2, 18-18, 34-34 [ 55.434259][ T819] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.133: bg 0: block 248: padding at end of block bitmap is not set [ 55.449050][ T819] Quota error (device loop1): write_blk: dquota write failed [ 55.456279][ T819] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 55.466604][ T819] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.133: Failed to acquire dquot type 1 [ 55.478560][ T819] EXT4-fs (loop1): 1 truncate cleaned up [ 55.484028][ T819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.493672][ T819] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.648376][ T732] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 55.868124][ T732] usb 1-1: Using ep0 maxpacket: 16 [ 55.875050][ T732] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 56.134001][ T28] audit: type=1400 audit(1738054397.724:272): avc: denied { read } for pid=829 comm="syz.4.135" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.180316][ T732] usb 1-1: config 4 has no interface number 0 [ 56.730126][ T732] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 56.778566][ T732] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 56.802807][ T28] audit: type=1400 audit(1738054397.754:273): avc: denied { open } for pid=829 comm="syz.4.135" path="net:[4026532294]" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.836961][ T732] usb 1-1: config 4 interface 15 has no altsetting 0 [ 56.847213][ T28] audit: type=1400 audit(1738054398.394:274): avc: denied { block_suspend } for pid=833 comm="syz.3.137" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.869466][ T292] EXT4-fs (loop1): unmounting filesystem. [ 56.879551][ T304] usb 4-1: USB disconnect, device number 5 [ 56.888633][ T732] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 56.918723][ T732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.926577][ T732] usb 1-1: Product: syz [ 56.933229][ T732] usb 1-1: Manufacturer: syz [ 56.937660][ T732] usb 1-1: SerialNumber: syz [ 57.054599][ T842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'. [ 57.065572][ T817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.073863][ T817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.094991][ T845] xt_hashlimit: max too large, truncated to 1048576 [ 57.124161][ T849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.141'. [ 57.304753][ T817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.317861][ T817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.589510][ T28] audit: type=1400 audit(1738054400.184:275): avc: denied { read } for pid=862 comm="syz.4.145" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.625856][ T28] audit: type=1400 audit(1738054400.204:276): avc: denied { open } for pid=862 comm="syz.4.145" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.650491][ T28] audit: type=1400 audit(1738054400.204:277): avc: denied { ioctl } for pid=862 comm="syz.4.145" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.657553][ T871] netlink: 84 bytes leftover after parsing attributes in process `syz.4.147'. [ 58.702977][ T874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.149'. [ 59.262887][ T304] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 59.271671][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 59.478140][ T304] usb 3-1: Using ep0 maxpacket: 32 [ 59.575426][ T304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.587037][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 60.100904][ T304] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.115114][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 60.155016][ T304] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 60.182246][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 60.308820][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.319318][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 60.330466][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 60.344328][ T304] usb 3-1: config 0 descriptor?? [ 60.356358][ T304] hub 3-1:0.0: bad descriptor, ignoring hub [ 61.562076][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.574166][ T304] hub: probe of 3-1:0.0 failed with error -5 [ 61.593582][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.604920][ T304] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 61.671895][ T900] loop3: detected capacity change from 0 to 128 [ 61.690932][ T28] audit: type=1400 audit(1738054403.274:278): avc: denied { mount } for pid=892 comm="syz.3.154" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 61.873983][ T898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 62.068099][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 62.301085][ T28] audit: type=1400 audit(1738054403.894:279): avc: denied { relabelfrom } for pid=906 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.330851][ T28] audit: type=1400 audit(1738054403.914:280): avc: denied { relabelto } for pid=906 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.231517][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 64.242265][ T28] audit: type=1400 audit(1738054405.764:281): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.338078][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 65.228356][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 65.247957][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 65.344840][ T926] loop2: detected capacity change from 0 to 128 [ 66.618077][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 66.618424][ T339] usb 3-1: USB disconnect, device number 6 [ 66.652042][ T935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 66.662408][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 66.785379][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 66.797284][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 66.836602][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 66.967419][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 67.131462][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 67.166148][ T28] audit: type=1400 audit(1738054408.754:282): avc: denied { setattr } for pid=943 comm="syz.0.165" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 67.207034][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 67.239512][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 67.250874][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 67.262313][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 67.273569][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 67.284756][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 67.295964][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 67.307090][ T732] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 67.308054][ T339] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 67.320626][ T732] ax88179_178a 1-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter, 6e:51:55:0e:24:b7 [ 67.377074][ T732] usb 1-1: USB disconnect, device number 3 [ 67.414603][ T732] ax88179_178a 1-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter [ 67.466075][ T955] loop3: detected capacity change from 0 to 512 [ 67.474439][ T955] EXT4-fs: Ignoring removed i_version option [ 67.480708][ T955] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.551686][ T955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.588051][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 67.595373][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.607037][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.617206][ T339] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 67.626327][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.637564][ T339] usb 3-1: config 0 descriptor?? [ 67.644218][ T955] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.699606][ T955] EXT4-fs (loop3): 1 truncate cleaned up [ 67.701709][ T339] hub 3-1:0.0: USB hub found [ 67.705117][ T955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.219422][ T28] audit: type=1400 audit(1738054409.804:283): avc: denied { create } for pid=954 comm="syz.3.169" name="rdma.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.356467][ T339] hub 3-1:0.0: 1 port detected [ 68.362036][ T28] audit: type=1400 audit(1738054409.804:284): avc: denied { read append open } for pid=954 comm="syz.3.169" path="/34/file0/rdma.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.362097][ T28] audit: type=1400 audit(1738054409.814:285): avc: denied { read } for pid=954 comm="syz.3.169" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.362124][ T28] audit: type=1400 audit(1738054409.814:286): avc: denied { open } for pid=954 comm="syz.3.169" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.560488][ T28] audit: type=1400 audit(1738054409.814:287): avc: denied { ioctl } for pid=954 comm="syz.3.169" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.586612][ T28] audit: type=1400 audit(1738054409.874:288): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 68.609259][ T968] FAULT_INJECTION: forcing a failure. [ 68.609259][ T968] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.623037][ T339] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 68.631270][ T339] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 68.644074][ T968] CPU: 0 PID: 968 Comm: syz.1.172 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 68.653548][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.663692][ T968] Call Trace: [ 68.666798][ T968] [ 68.669584][ T968] dump_stack_lvl+0x151/0x1b7 [ 68.674094][ T968] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 68.679382][ T968] dump_stack+0x15/0x18 [ 68.683381][ T968] should_fail_ex+0x3d0/0x520 [ 68.687898][ T968] should_fail_alloc_page+0x68/0x90 [ 68.692923][ T968] prepare_alloc_pages+0x14e/0x6f0 [ 68.697871][ T968] ? __alloc_pages_bulk+0xcc0/0xcc0 [ 68.702920][ T968] __alloc_pages+0x162/0x610 [ 68.707484][ T968] ? prep_new_page+0x110/0x110 [ 68.712046][ T968] __folio_alloc+0x15/0x40 [ 68.716293][ T968] shmem_alloc_and_acct_folio+0x78c/0xa50 [ 68.721851][ T968] ? shmem_replace_folio+0x6a0/0x6a0 [ 68.726972][ T968] ? xas_load+0x38f/0x3b0 [ 68.731163][ T968] ? __filemap_get_folio+0xaa1/0xae0 [ 68.736259][ T968] ? page_cache_prev_miss+0x410/0x410 [ 68.741465][ T968] ? down_read_trylock+0x319/0x7d0 [ 68.746425][ T968] shmem_get_folio_gfp+0x12d4/0x24b0 [ 68.751547][ T968] ? shmem_get_folio+0xa0/0xa0 [ 68.756140][ T968] ? fault_in_iov_iter_readable+0x49/0x290 [ 68.761780][ T968] ? fault_in_readable+0x172/0x2d0 [ 68.766809][ T968] ? fault_in_readable+0x17c/0x2d0 [ 68.771758][ T968] shmem_write_begin+0x164/0x3a0 [ 68.776533][ T968] ? shmem_writepage+0xe00/0xe00 [ 68.781304][ T968] generic_perform_write+0x318/0x780 [ 68.786421][ T968] ? __mnt_drop_write_file+0xc3/0x100 [ 68.791642][ T968] ? generic_file_direct_write+0x6b0/0x6b0 [ 68.797268][ T968] ? __file_remove_privs+0x640/0x640 [ 68.802393][ T968] ? generic_write_checks+0x15c/0x1c0 [ 68.807600][ T968] __generic_file_write_iter+0x174/0x3a0 [ 68.813175][ T968] generic_file_write_iter+0xb1/0x310 [ 68.818801][ T968] vfs_write+0xaf6/0xed0 [ 68.822973][ T968] ? __kasan_slab_free+0x11/0x20 [ 68.827740][ T968] ? file_end_write+0x1c0/0x1c0 [ 68.832442][ T968] ? mutex_lock+0xb1/0x1e0 [ 68.836673][ T968] ? bit_wait_io_timeout+0x120/0x120 [ 68.841818][ T968] ? __fdget_pos+0x2e2/0x390 [ 68.846219][ T968] ? ksys_write+0x77/0x2c0 [ 68.850590][ T968] ksys_write+0x199/0x2c0 [ 68.854755][ T968] ? __this_cpu_preempt_check+0x13/0x20 [ 68.860138][ T968] ? __ia32_sys_read+0x90/0x90 [ 68.864859][ T968] ? debug_smp_processor_id+0x17/0x20 [ 68.870067][ T968] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 68.875983][ T968] __x64_sys_write+0x7b/0x90 [ 68.880392][ T968] x64_sys_call+0x2f/0x9a0 [ 68.884657][ T968] do_syscall_64+0x3b/0xb0 [ 68.888901][ T968] ? clear_bhb_loop+0x55/0xb0 [ 68.893416][ T968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.899180][ T968] RIP: 0033:0x7f71c018cd29 [ 68.903396][ T968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.922838][ T968] RSP: 002b:00007f71c0fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.931174][ T968] RAX: ffffffffffffffda RBX: 00007f71c03a5fa0 RCX: 00007f71c018cd29 [ 68.939015][ T968] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000007 [ 68.946813][ T968] RBP: 00007f71c0fc4090 R08: 0000000000000000 R09: 0000000000000000 [ 68.954875][ T968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.962758][ T968] R13: 0000000000000000 R14: 00007f71c03a5fa0 R15: 00007ffcf56bc4e8 [ 68.970577][ T968] [ 68.974674][ T295] EXT4-fs (loop3): unmounting filesystem. [ 68.976385][ T339] usbhid 3-1:0.0: can't add hid device: -71 [ 68.989809][ T339] usbhid: probe of 3-1:0.0 failed with error -71 [ 69.038987][ T339] usb 3-1: USB disconnect, device number 7 [ 69.049538][ T28] audit: type=1400 audit(1738054410.644:289): avc: denied { listen } for pid=973 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.090418][ T978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 69.102345][ T28] audit: type=1400 audit(1738054410.694:290): avc: denied { setcurrent } for pid=969 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 69.138863][ T980] FAULT_INJECTION: forcing a failure. [ 69.138863][ T980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.151959][ T980] CPU: 0 PID: 980 Comm: syz.0.178 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 69.161423][ T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.171318][ T980] Call Trace: [ 69.174531][ T980] [ 69.177302][ T980] dump_stack_lvl+0x151/0x1b7 [ 69.181818][ T980] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 69.187106][ T980] ? kstrtouint+0xf6/0x180 [ 69.191358][ T980] ? _kstrtol+0x150/0x150 [ 69.195523][ T980] dump_stack+0x15/0x18 [ 69.199602][ T980] should_fail_ex+0x3d0/0x520 [ 69.204115][ T980] should_fail+0xb/0x10 [ 69.208112][ T980] should_fail_usercopy+0x1a/0x20 [ 69.212989][ T980] _copy_from_user+0x1e/0xc0 [ 69.217437][ T980] copy_msghdr_from_user+0xaa/0x670 [ 69.222436][ T980] ? sendmsg_copy_msghdr+0x70/0x70 [ 69.227393][ T980] __sys_sendmsg+0x236/0x390 [ 69.231814][ T980] ? ____sys_sendmsg+0x9a0/0x9a0 [ 69.236583][ T980] ? __kasan_check_write+0x14/0x20 [ 69.241528][ T980] ? mutex_unlock+0xb2/0x260 [ 69.245960][ T980] ? __kasan_check_write+0x14/0x20 [ 69.250915][ T980] ? __ia32_sys_read+0x90/0x90 [ 69.255499][ T980] ? debug_smp_processor_id+0x17/0x20 [ 69.260707][ T980] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 69.266878][ T980] __x64_sys_sendmsg+0x7f/0x90 [ 69.271468][ T980] x64_sys_call+0x16a/0x9a0 [ 69.275801][ T980] do_syscall_64+0x3b/0xb0 [ 69.280056][ T980] ? clear_bhb_loop+0x55/0xb0 [ 69.284571][ T980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.290309][ T980] RIP: 0033:0x7fd98e98cd29 [ 69.294554][ T980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.313995][ T980] RSP: 002b:00007fd98f7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.322244][ T980] RAX: ffffffffffffffda RBX: 00007fd98eba5fa0 RCX: 00007fd98e98cd29 [ 69.330052][ T980] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 69.337868][ T980] RBP: 00007fd98f7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 69.345689][ T980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.353489][ T980] R13: 0000000000000000 R14: 00007fd98eba5fa0 R15: 00007fff55180888 [ 69.361305][ T980] [ 70.386025][ T28] audit: type=1400 audit(1738054411.964:291): avc: denied { bind } for pid=982 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.885137][ T997] loop2: detected capacity change from 0 to 512 [ 70.962521][ T997] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 70.973980][ T997] System zones: 0-2, 18-18, 34-34 [ 71.005390][ T997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.182: bg 0: block 248: padding at end of block bitmap is not set [ 71.077368][ T997] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.182: Failed to acquire dquot type 1 [ 71.124796][ T997] EXT4-fs (loop2): 1 truncate cleaned up [ 71.153879][ T997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.200166][ T1010] FAULT_INJECTION: forcing a failure. [ 71.200166][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 71.222099][ T997] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.251729][ T997] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 71.294398][ T1010] CPU: 0 PID: 1010 Comm: syz.4.187 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 71.304575][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.314642][ T1010] Call Trace: [ 71.317763][ T1010] [ 71.320627][ T1010] dump_stack_lvl+0x151/0x1b7 [ 71.325228][ T1010] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 71.330534][ T1010] dump_stack+0x15/0x18 [ 71.334600][ T1010] should_fail_ex+0x3d0/0x520 [ 71.339112][ T1010] __should_failslab+0xaf/0xf0 [ 71.343713][ T1010] ? kvmalloc_node+0x221/0x640 [ 71.348314][ T1010] should_failslab+0x9/0x20 [ 71.352769][ T1010] __kmem_cache_alloc_node+0x3d/0x2a0 [ 71.357960][ T1010] ? kvmalloc_node+0x221/0x640 [ 71.362632][ T1010] __kmalloc_node+0xa3/0x1e0 [ 71.367060][ T1010] ? _parse_integer+0x2a/0x40 [ 71.371600][ T1010] kvmalloc_node+0x221/0x640 [ 71.376079][ T1010] ? __kasan_check_write+0x14/0x20 [ 71.381040][ T1010] ? mutex_lock+0xb1/0x1e0 [ 71.385278][ T1010] ? vm_mmap+0xb0/0xb0 [ 71.389195][ T1010] ? putname+0x30/0x150 [ 71.393203][ T1010] seq_read_iter+0x1ff/0xd00 [ 71.397618][ T1010] ? __kasan_check_write+0x14/0x20 [ 71.403034][ T1010] ? kstrtouint_from_user+0x124/0x180 [ 71.408193][ T1010] ? iov_iter_init+0x53/0x1c0 [ 71.413701][ T1010] seq_read+0x289/0x380 [ 71.417681][ T1010] ? seq_open+0x130/0x130 [ 71.421852][ T1010] ? fsnotify_perm+0x269/0x5b0 [ 71.426571][ T1010] ? security_file_permission+0x86/0xb0 [ 71.432099][ T1010] ? seq_open+0x130/0x130 [ 71.436269][ T1010] vfs_read+0x26c/0xae0 [ 71.440272][ T1010] ? kernel_read+0x1f0/0x1f0 [ 71.444679][ T1010] ? mutex_lock+0xb1/0x1e0 [ 71.448935][ T1010] ? bit_wait_io_timeout+0x120/0x120 [ 71.454051][ T1010] ? __fdget_pos+0x2e2/0x390 [ 71.458472][ T1010] ? ksys_read+0x77/0x2c0 [ 71.462765][ T1010] ksys_read+0x199/0x2c0 [ 71.466982][ T1010] ? __this_cpu_preempt_check+0x13/0x20 [ 71.472333][ T1010] ? vfs_write+0xed0/0xed0 [ 71.476591][ T1010] ? debug_smp_processor_id+0x17/0x20 [ 71.481806][ T1010] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 71.487702][ T1010] __x64_sys_read+0x7b/0x90 [ 71.492071][ T1010] x64_sys_call+0x28/0x9a0 [ 71.496288][ T1010] do_syscall_64+0x3b/0xb0 [ 71.500808][ T1010] ? clear_bhb_loop+0x55/0xb0 [ 71.505400][ T1010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.511133][ T1010] RIP: 0033:0x7f2a7498cd29 [ 71.515376][ T1010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.534850][ T1010] RSP: 002b:00007f2a75839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.543069][ T1010] RAX: ffffffffffffffda RBX: 00007f2a74ba5fa0 RCX: 00007f2a7498cd29 [ 71.550997][ T1010] RDX: 0000000000002020 RSI: 0000000020000080 RDI: 0000000000000003 [ 71.558805][ T1010] RBP: 00007f2a75839090 R08: 0000000000000000 R09: 0000000000000000 [ 71.566706][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.574506][ T1010] R13: 0000000000000000 R14: 00007f2a74ba5fa0 R15: 00007ffe8b123cb8 [ 71.582414][ T1010] [ 71.627398][ T1019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 71.706567][ T1022] loop4: detected capacity change from 0 to 512 [ 71.753510][ T1022] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.190: Failed to acquire dquot type 0 [ 71.765598][ T1022] EXT4-fs (loop4): Remounting filesystem read-only [ 71.772620][ T1022] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.190: Failed to acquire dquot type 0 [ 71.790134][ T1022] EXT4-fs (loop4): Remounting filesystem read-only [ 71.799222][ T1022] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.190: Failed to acquire dquot type 0 [ 71.812844][ T1022] EXT4-fs (loop4): Remounting filesystem read-only [ 71.820643][ T1022] EXT4-fs (loop4): 1 orphan inode deleted [ 71.826620][ T1022] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.837287][ T1022] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.938028][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 71.994995][ T1037] xt_hashlimit: max too large, truncated to 1048576 [ 72.079585][ T1044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 72.128032][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 72.134162][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.153619][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.163771][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.211183][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.225641][ T19] usb 2-1: config 0 descriptor?? [ 72.232106][ T19] hub 2-1:0.0: USB hub found [ 72.635055][ T19] hub 2-1:0.0: 1 port detected [ 72.654422][ T293] EXT4-fs (loop4): unmounting filesystem. [ 72.666479][ T19] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 72.676390][ T19] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 72.697203][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 72.703201][ T1054] FAULT_INJECTION: forcing a failure. [ 72.703201][ T1054] name failslab, interval 1, probability 0, space 0, times 0 [ 72.710392][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 72.719882][ T1054] CPU: 1 PID: 1054 Comm: syz.0.201 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 72.731350][ T1054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.741215][ T1054] Call Trace: [ 72.744339][ T1054] [ 72.747116][ T1054] dump_stack_lvl+0x151/0x1b7 [ 72.751629][ T1054] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 72.756932][ T1054] ? veth_set_features+0x6a/0x300 [ 72.761780][ T1054] ? __kasan_check_read+0x11/0x20 [ 72.766643][ T1054] dump_stack+0x15/0x18 [ 72.768489][ T19] usb 2-1: USB disconnect, device number 5 [ 72.770675][ T1054] should_fail_ex+0x3d0/0x520 [ 72.780793][ T1054] __should_failslab+0xaf/0xf0 [ 72.785407][ T1054] should_failslab+0x9/0x20 [ 72.789737][ T1054] kmem_cache_alloc_node+0x42/0x330 [ 72.794766][ T1054] ? __alloc_skb+0xcc/0x2d0 [ 72.799106][ T1054] __alloc_skb+0xcc/0x2d0 [ 72.803371][ T1054] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 72.808495][ T1054] rtnetlink_event+0xf3/0x1b0 [ 72.813001][ T1054] raw_notifier_call_chain+0x8c/0xf0 [ 72.818127][ T1054] netdev_update_features+0x159/0x1c0 [ 72.823337][ T1054] ? dev_disable_lro+0x1d0/0x1d0 [ 72.828106][ T1054] ? veth_disable_xdp+0x416/0x490 [ 72.832965][ T1054] veth_xdp+0x4fa/0x6b0 [ 72.836959][ T1054] ? veth_set_rx_headroom+0x160/0x160 [ 72.842168][ T1054] bpf_xdp_link_release+0x316/0x4c0 [ 72.847329][ T1054] ? __radix_tree_delete+0x257/0x3a0 [ 72.852438][ T1054] ? __netdev_adjacent_dev_remove+0x460/0x460 [ 72.858340][ T1054] bpf_link_free+0x129/0x3f0 [ 72.862770][ T1054] ? bpf_link_put_deferred+0x20/0x20 [ 72.867887][ T1054] ? bpf_prog_get_stats+0x290/0x290 [ 72.872913][ T1054] bpf_link_release+0x170/0x180 [ 72.877617][ T1054] ? bpf_prog_get_stats+0x290/0x290 [ 72.882647][ T1054] __fput+0x1e5/0x870 [ 72.886471][ T1054] ____fput+0x15/0x20 [ 72.890276][ T1054] task_work_run+0x24d/0x2e0 [ 72.894704][ T1054] ? task_work_cancel+0x2e0/0x2e0 [ 72.899578][ T1054] ? filp_close+0x105/0x150 [ 72.903901][ T1054] exit_to_user_mode_loop+0x94/0xa0 [ 72.908947][ T1054] exit_to_user_mode_prepare+0x5a/0xa0 [ 72.914243][ T1054] syscall_exit_to_user_mode+0x26/0x130 [ 72.919703][ T1054] do_syscall_64+0x47/0xb0 [ 72.924165][ T1054] ? clear_bhb_loop+0x55/0xb0 [ 72.928684][ T1054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.934512][ T1054] RIP: 0033:0x7fd98e98cd29 [ 72.938760][ T1054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.958287][ T1054] RSP: 002b:00007fd98f7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 72.966531][ T1054] RAX: 0000000000000000 RBX: 00007fd98eba5fa0 RCX: 00007fd98e98cd29 [ 72.974776][ T1054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 72.982588][ T1054] RBP: 00007fd98f7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 72.990485][ T1054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.998295][ T1054] R13: 0000000000000000 R14: 00007fd98eba5fa0 R15: 00007fff55180888 [ 73.006112][ T1054] [ 73.008069][ T339] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.018517][ T296] EXT4-fs (loop2): unmounting filesystem. [ 73.110755][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.118591][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.134840][ T1065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54800 sclass=netlink_route_socket pid=1065 comm=syz.3.205 [ 73.181157][ T1067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 73.203861][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.215205][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.225040][ T339] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 73.225474][ T1070] xt_hashlimit: max too large, truncated to 1048576 [ 73.234325][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.252963][ T339] usb 5-1: config 0 descriptor?? [ 73.334466][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 73.334484][ T28] audit: type=1400 audit(1738054414.924:294): avc: denied { bind } for pid=1075 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.582845][ T1089] netlink: 25 bytes leftover after parsing attributes in process `syz.3.209'. [ 73.674169][ T1089] device gretap0 entered promiscuous mode [ 74.252739][ T1092] loop4: detected capacity change from 0 to 128 [ 74.279221][ T1092] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.287280][ T1092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.334877][ T28] audit: type=1400 audit(1738054415.924:295): avc: denied { mounton } for pid=1096 comm="syz.0.214" path="/43/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.409671][ T1092] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.857064][ T1100] loop3: detected capacity change from 0 to 256 [ 74.879516][ T1097] block device autoloading is deprecated and will be removed. [ 74.903078][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 74.911739][ T1104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 74.937033][ T28] audit: type=1400 audit(1738054416.524:296): avc: denied { write } for pid=1055 comm="syz.4.200" name="file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.031303][ T1104] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 75.086214][ T1097] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.218194][ T1100] FAT-fs (loop3): Directory bread(block 64) failed [ 75.529926][ T1100] FAT-fs (loop3): Directory bread(block 65) failed [ 75.536877][ T1100] FAT-fs (loop3): Directory bread(block 66) failed [ 75.548073][ T1097] FAT-fs (loop1): unable to read boot sector [ 75.554034][ T1100] FAT-fs (loop3): Directory bread(block 67) failed [ 75.560755][ T28] audit: type=1400 audit(1738054416.524:297): avc: denied { add_name } for pid=1055 comm="syz.4.200" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.581313][ T1100] FAT-fs (loop3): Directory bread(block 68) failed [ 75.587719][ T1100] FAT-fs (loop3): Directory bread(block 69) failed [ 75.602866][ T1100] FAT-fs (loop3): Directory bread(block 70) failed [ 75.616638][ T1100] FAT-fs (loop3): Directory bread(block 71) failed [ 75.626752][ T1100] FAT-fs (loop3): Directory bread(block 72) failed [ 75.636089][ T1100] FAT-fs (loop3): Directory bread(block 73) failed [ 75.770895][ T339] hid-generic 0003:05AC:4262.0001: collection stack underflow [ 75.778458][ T339] hid-generic 0003:05AC:4262.0001: item 0 1 0 12 parsing failed [ 75.786163][ T339] hid-generic: probe of 0003:05AC:4262.0001 failed with error -22 [ 75.830439][ T1116] xt_hashlimit: max too large, truncated to 1048576 [ 75.866266][ T28] audit: type=1400 audit(1738054417.454:298): avc: denied { write } for pid=1120 comm="syz.1.219" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.935686][ T1124] FAULT_INJECTION: forcing a failure. [ 75.935686][ T1124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.959351][ T28] audit: type=1400 audit(1738054417.554:299): avc: denied { write } for pid=1099 comm="syz.3.215" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.988103][ T1124] CPU: 0 PID: 1124 Comm: syz.0.220 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 75.997662][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.007559][ T1124] Call Trace: [ 76.010681][ T1124] [ 76.013459][ T1124] dump_stack_lvl+0x151/0x1b7 [ 76.017974][ T1124] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 76.023268][ T1124] ? __sched_text_start+0x8/0x8 [ 76.027948][ T1124] ? do_vfs_ioctl+0xba7/0x29a0 [ 76.032642][ T1124] dump_stack+0x15/0x18 [ 76.036636][ T1124] should_fail_ex+0x3d0/0x520 [ 76.041152][ T1124] should_fail+0xb/0x10 [ 76.045222][ T1124] should_fail_usercopy+0x1a/0x20 [ 76.050092][ T1124] _copy_to_user+0x1e/0x90 [ 76.054342][ T1124] simple_read_from_buffer+0xc7/0x150 [ 76.059548][ T1124] proc_fail_nth_read+0x1a3/0x210 [ 76.064408][ T1124] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 76.069874][ T1124] ? proc_fault_inject_write+0x390/0x390 [ 76.075337][ T1124] ? vfs_read+0x1de/0xae0 [ 76.079508][ T1124] ? vfs_read+0x256/0xae0 [ 76.083678][ T1124] ? proc_fault_inject_write+0x390/0x390 [ 76.089136][ T1124] vfs_read+0x26c/0xae0 [ 76.093133][ T1124] ? __this_cpu_preempt_check+0x13/0x20 [ 76.098524][ T1124] ? kernel_read+0x1f0/0x1f0 [ 76.103031][ T1124] ? mutex_lock+0xb1/0x1e0 [ 76.107462][ T1124] ? bit_wait_io_timeout+0x120/0x120 [ 76.112599][ T1124] ? __fdget_pos+0x2e2/0x390 [ 76.117004][ T1124] ? ksys_read+0x77/0x2c0 [ 76.121170][ T1124] ksys_read+0x199/0x2c0 [ 76.125251][ T1124] ? vfs_write+0xed0/0xed0 [ 76.129514][ T1124] ? fpregs_restore_userregs+0x130/0x290 [ 76.134975][ T1124] __x64_sys_read+0x7b/0x90 [ 76.139314][ T1124] x64_sys_call+0x28/0x9a0 [ 76.143577][ T1124] do_syscall_64+0x3b/0xb0 [ 76.147824][ T1124] ? clear_bhb_loop+0x55/0xb0 [ 76.152329][ T1124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.158065][ T1124] RIP: 0033:0x7fd98e98b73c [ 76.162311][ T1124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.181754][ T1124] RSP: 002b:00007fd98f7f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.190006][ T1124] RAX: ffffffffffffffda RBX: 00007fd98eba5fa0 RCX: 00007fd98e98b73c [ 76.197807][ T1124] RDX: 000000000000000f RSI: 00007fd98f7f90a0 RDI: 0000000000000004 [ 76.205718][ T1124] RBP: 00007fd98f7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 76.213525][ T1124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.221444][ T1124] R13: 0000000000000000 R14: 00007fd98eba5fa0 R15: 00007fff55180888 [ 76.229345][ T1124] [ 76.267118][ T19] usb 5-1: USB disconnect, device number 6 [ 76.430427][ T293] EXT4-fs (loop4): unmounting filesystem. [ 76.658537][ T1142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.224'. [ 77.761566][ T1146] loop1: detected capacity change from 0 to 512 [ 77.811296][ T1146] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 77.840762][ T1146] System zones: 0-2, 18-18, 34-34 [ 77.852276][ T1146] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.226: bg 0: block 248: padding at end of block bitmap is not set [ 77.897281][ T1146] Quota error (device loop1): write_blk: dquota write failed [ 77.921106][ T1146] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.998042][ T339] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 78.008295][ T1146] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.226: Failed to acquire dquot type 1 [ 78.028767][ T1146] EXT4-fs (loop1): 1 truncate cleaned up [ 78.034344][ T1146] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.054616][ T1146] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.189078][ T339] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 78.208035][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.374445][ T292] EXT4-fs (loop1): unmounting filesystem. [ 79.380460][ T339] usb 3-1: config 0 descriptor?? [ 79.878431][ T339] usbhid 3-1:0.0: can't add hid device: -71 [ 79.884264][ T339] usbhid: probe of 3-1:0.0 failed with error -71 [ 79.914509][ T1167] xt_hashlimit: max too large, truncated to 1048576 [ 79.921703][ T339] usb 3-1: USB disconnect, device number 8 [ 80.032363][ T28] audit: type=1400 audit(1738054421.624:300): avc: denied { ioctl } for pid=1176 comm="syz.2.233" path="socket:[19279]" dev="sockfs" ino=19279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.620620][ T1184] loop1: detected capacity change from 0 to 512 [ 80.693255][ T1184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 80.701700][ T1184] System zones: 0-2, 18-18, 34-34 [ 80.715691][ T1184] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.235: bg 0: block 248: padding at end of block bitmap is not set [ 80.731664][ T1184] Quota error (device loop1): write_blk: dquota write failed [ 80.741429][ T1184] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 80.758908][ T1184] EXT4-fs error (device loop1): ext4_acquire_dquot:6781: comm syz.1.235: Failed to acquire dquot type 1 [ 80.773231][ T1184] EXT4-fs (loop1): 1 truncate cleaned up [ 80.779068][ T1184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.787931][ T1184] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.857148][ T1191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 83.641428][ T28] audit: type=1400 audit(1738054425.234:301): avc: denied { wake_alarm } for pid=1215 comm="syz.3.244" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.660953][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.667532][ T1217] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 83.671987][ T28] audit: type=1400 audit(1738054425.254:302): avc: denied { create } for pid=1215 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.687569][ T292] EXT4-fs (loop1): unmounting filesystem. [ 83.698608][ T28] audit: type=1400 audit(1738054425.254:303): avc: denied { read } for pid=1215 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.730017][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.741237][ T28] audit: type=1400 audit(1738054425.314:304): avc: denied { read write } for pid=1215 comm="syz.3.244" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.764628][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.772302][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.779987][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.787278][ T28] audit: type=1400 audit(1738054425.314:305): avc: denied { open } for pid=1215 comm="syz.3.244" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.814960][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.822583][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.830090][ T339] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.837692][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.845283][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.852632][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.860317][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.867518][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.874796][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.881953][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.889706][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.897439][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.904746][ T6] hid-generic 8B0B:1000:0003.0002: unknown main item tag 0x0 [ 83.912633][ T6] hid-generic 8B0B:1000:0003.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.011787][ T1229] FAULT_INJECTION: forcing a failure. [ 84.011787][ T1229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.024924][ T1229] CPU: 1 PID: 1229 Comm: syz.4.248 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 84.035691][ T1229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.045611][ T1229] Call Trace: [ 84.048702][ T1229] [ 84.051492][ T1229] dump_stack_lvl+0x151/0x1b7 [ 84.056010][ T1229] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 84.061723][ T1229] ? vfs_write+0x952/0xed0 [ 84.065987][ T1229] ? __kasan_slab_free+0x11/0x20 [ 84.070750][ T1229] dump_stack+0x15/0x18 [ 84.074740][ T1229] should_fail_ex+0x3d0/0x520 [ 84.079254][ T1229] should_fail+0xb/0x10 [ 84.083250][ T1229] should_fail_usercopy+0x1a/0x20 [ 84.088107][ T1229] _copy_from_user+0x1e/0xc0 [ 84.092529][ T1229] __sys_bpf+0x23b/0x7f0 [ 84.096628][ T1229] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 84.101821][ T1229] ? __ia32_sys_read+0x90/0x90 [ 84.106416][ T1229] ? debug_smp_processor_id+0x17/0x20 [ 84.111633][ T1229] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 84.117557][ T1229] __x64_sys_bpf+0x7c/0x90 [ 84.121786][ T1229] x64_sys_call+0x87f/0x9a0 [ 84.126119][ T1229] do_syscall_64+0x3b/0xb0 [ 84.130371][ T1229] ? clear_bhb_loop+0x55/0xb0 [ 84.134887][ T1229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.141329][ T1229] RIP: 0033:0x7f2a7498cd29 [ 84.145605][ T1229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.165120][ T1229] RSP: 002b:00007f2a75839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.173540][ T1229] RAX: ffffffffffffffda RBX: 00007f2a74ba5fa0 RCX: 00007f2a7498cd29 [ 84.181334][ T1229] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 84.189157][ T1229] RBP: 00007f2a75839090 R08: 0000000000000000 R09: 0000000000000000 [ 84.196961][ T1229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.204766][ T1229] R13: 0000000000000000 R14: 00007f2a74ba5fa0 R15: 00007ffe8b123cb8 [ 84.212592][ T1229] [ 84.249841][ T28] audit: type=1326 audit(1738054425.844:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5578cd29 code=0x7fc00000 [ 84.273439][ T28] audit: type=1326 audit(1738054425.844:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fac5578cd29 code=0x7fc00000 [ 84.855897][ T1250] loop2: detected capacity change from 0 to 128 [ 84.930413][ T1250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.941101][ T1250] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.077485][ T339] usb 5-1: device not accepting address 7, error -71 [ 85.195042][ T325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.204091][ T296] EXT4-fs (loop2): unmounting filesystem. [ 85.207515][ T1254] loop3: detected capacity change from 0 to 512 [ 85.216368][ T1254] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 85.366690][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 85.366729][ T28] audit: type=1400 audit(1738054426.844:313): avc: denied { write } for pid=1255 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.771570][ T325] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 85.781027][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.798608][ T325] usb 1-1: config 0 descriptor?? [ 85.838097][ T339] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.048096][ T339] usb 5-1: Using ep0 maxpacket: 32 [ 86.054601][ T339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.127779][ T339] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.142355][ T339] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.142813][ T28] audit: type=1400 audit(1738054427.734:314): avc: denied { connect } for pid=1275 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.151639][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.171620][ T360] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.181353][ T339] usb 5-1: config 0 descriptor?? [ 86.192171][ T339] hub 5-1:0.0: bad descriptor, ignoring hub [ 86.197898][ T339] hub: probe of 5-1:0.0 failed with error -5 [ 86.206939][ T339] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 86.219673][ T325] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 86.226930][ T325] playstation 0003:054C:0DF2.0003: item fetching failed at offset 3/5 [ 86.231960][ T28] audit: type=1400 audit(1738054427.824:315): avc: denied { write } for pid=1275 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.235448][ T325] playstation 0003:054C:0DF2.0003: Parse failed [ 86.260211][ T325] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 86.276560][ T1281] FAULT_INJECTION: forcing a failure. [ 86.276560][ T1281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.289776][ T1281] CPU: 1 PID: 1281 Comm: syz.2.266 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 86.299331][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.309314][ T1281] Call Trace: [ 86.312431][ T1281] [ 86.315213][ T1281] dump_stack_lvl+0x151/0x1b7 [ 86.319718][ T1281] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 86.325028][ T1281] ? arch_stack_walk+0xf3/0x140 [ 86.329827][ T1281] ? _parse_integer_limit+0x19b/0x1e0 [ 86.335322][ T1281] dump_stack+0x15/0x18 [ 86.339399][ T1281] should_fail_ex+0x3d0/0x520 [ 86.343910][ T1281] should_fail+0xb/0x10 [ 86.347901][ T1281] should_fail_usercopy+0x1a/0x20 [ 86.352897][ T1281] _copy_from_user+0x1e/0xc0 [ 86.357350][ T1281] copy_msghdr_from_user+0xaa/0x670 [ 86.362367][ T1281] ? putname+0xfa/0x150 [ 86.366354][ T1281] ? sendmsg_copy_msghdr+0x70/0x70 [ 86.371412][ T1281] do_recvmmsg+0x408/0xab0 [ 86.375642][ T1281] ? __sys_recvmmsg+0x270/0x270 [ 86.380347][ T1281] ? vfs_write+0x952/0xed0 [ 86.384665][ T1281] ? __kasan_slab_free+0x11/0x20 [ 86.389441][ T1281] ? __kasan_check_write+0x14/0x20 [ 86.394386][ T1281] ? mutex_unlock+0xb2/0x260 [ 86.398819][ T1281] ? fput+0x15b/0x1b0 [ 86.402634][ T1281] ? ksys_write+0x260/0x2c0 [ 86.406973][ T1281] __x64_sys_recvmmsg+0x195/0x240 [ 86.411833][ T1281] ? do_recvmmsg+0xab0/0xab0 [ 86.416345][ T1281] ? debug_smp_processor_id+0x17/0x20 [ 86.421557][ T1281] ? exit_to_user_mode_prepare+0x39/0xa0 [ 86.427019][ T1281] x64_sys_call+0x7e5/0x9a0 [ 86.431452][ T1281] do_syscall_64+0x3b/0xb0 [ 86.435701][ T1281] ? clear_bhb_loop+0x55/0xb0 [ 86.440221][ T1281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.446025][ T1281] RIP: 0033:0x7fac5578cd29 [ 86.450281][ T1281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.470074][ T1281] RSP: 002b:00007fac56562038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 86.478514][ T1281] RAX: ffffffffffffffda RBX: 00007fac559a5fa0 RCX: 00007fac5578cd29 [ 86.486445][ T1281] RDX: 0000000000000002 RSI: 0000000020004640 RDI: 0000000000000003 [ 86.494265][ T1281] RBP: 00007fac56562090 R08: 0000000000000000 R09: 0000000000000000 [ 86.502063][ T1281] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 86.509891][ T1281] R13: 0000000000000000 R14: 00007fac559a5fa0 R15: 00007ffec5632488 [ 86.517784][ T1281] [ 86.547812][ T1288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 86.677911][ T360] usb 4-1: Using ep0 maxpacket: 32 [ 86.684096][ T360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.694362][ T360] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.707031][ T360] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.715876][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724409][ T360] usb 4-1: config 0 descriptor?? [ 86.730139][ T360] hub 4-1:0.0: bad descriptor, ignoring hub [ 86.736029][ T360] hub: probe of 4-1:0.0 failed with error -5 [ 86.742315][ T360] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 86.868051][ T553] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.049545][ T553] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 87.058495][ T553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.067165][ T553] usb 2-1: config 0 descriptor?? [ 87.400991][ T1296] loop2: detected capacity change from 0 to 512 [ 87.410076][ T1296] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.269: casefold flag without casefold feature [ 87.423534][ T1296] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.269: couldn't read orphan inode 15 (err -117) [ 87.435612][ T1296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.489169][ T1299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 87.578241][ T19] usb 5-1: USB disconnect, device number 8 [ 87.600120][ T553] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 87.615050][ T553] playstation 0003:054C:0DF2.0004: item fetching failed at offset 3/5 [ 87.620661][ T360] usb 1-1: USB disconnect, device number 4 [ 87.624228][ T553] playstation 0003:054C:0DF2.0004: Parse failed [ 87.940316][ T553] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 88.520788][ T1321] xt_hashlimit: max too large, truncated to 1048576 [ 89.222052][ T296] EXT4-fs (loop2): unmounting filesystem. [ 89.349940][ T39] usb 2-1: USB disconnect, device number 6 [ 89.363275][ T360] usb 4-1: USB disconnect, device number 7 [ 90.274391][ T1347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.284'. [ 90.493599][ T1352] loop3: detected capacity change from 0 to 128 [ 91.188924][ T1351] loop1: detected capacity change from 0 to 512 [ 91.195668][ T1351] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 92.354852][ T1366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 92.442857][ T1369] xt_hashlimit: max too large, truncated to 1048576 [ 92.962279][ T1377] loop3: detected capacity change from 0 to 512 [ 92.968871][ T1377] EXT4-fs: Ignoring removed i_version option [ 92.975079][ T1377] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.998501][ T1377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.011478][ T1377] EXT4-fs (loop3): 1 truncate cleaned up [ 93.017007][ T1377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.025212][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.950905][ T1386] loop4: detected capacity change from 0 to 512 [ 93.957419][ T1386] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 93.988291][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.328128][ T318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.340323][ T295] EXT4-fs (loop3): unmounting filesystem. [ 94.408263][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 94.416637][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.506288][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.550914][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.599878][ T1394] device wg2 left promiscuous mode [ 94.616365][ T39] usb 3-1: config 0 descriptor?? [ 94.625791][ T39] hub 3-1:0.0: bad descriptor, ignoring hub [ 94.632666][ T39] hub: probe of 3-1:0.0 failed with error -5 [ 94.640260][ T39] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 94.661700][ T1401] loop4: detected capacity change from 0 to 512 [ 94.739854][ T1401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 94.748064][ T1401] System zones: 0-2, 18-18, 34-34 [ 94.754300][ T1401] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.298: bg 0: block 248: padding at end of block bitmap is not set [ 94.769229][ T1401] Quota error (device loop4): write_blk: dquota write failed [ 94.776665][ T1401] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 94.787472][ T1401] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.298: Failed to acquire dquot type 1 [ 94.800429][ T1401] EXT4-fs (loop4): 1 truncate cleaned up [ 94.806045][ T1401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.815207][ T1401] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.844185][ T1401] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 94.856982][ T1415] xt_hashlimit: max too large, truncated to 1048576 [ 94.987120][ T1424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'. [ 95.899430][ T1425] loop3: detected capacity change from 0 to 512 [ 95.906325][ T1425] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 96.895720][ T365] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.986133][ T1401] syz.4.298 (1401) used greatest stack depth: 19432 bytes left [ 97.039817][ T297] usb 3-1: USB disconnect, device number 9 [ 97.075104][ T1435] loop2: detected capacity change from 0 to 128 [ 97.393119][ T293] EXT4-fs (loop4): unmounting filesystem. [ 97.506857][ T28] audit: type=1400 audit(1738054439.094:316): avc: denied { ioctl } for pid=1433 comm="syz.2.308" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19638 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.032182][ T1466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.317'. [ 98.100629][ T1468] overlayfs: workdir and upperdir must be separate subtrees [ 98.232462][ T1471] 9pnet_fd: Insufficient options for proto=fd [ 98.294372][ T1477] loop2: detected capacity change from 0 to 512 [ 98.319189][ T1477] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 98.327147][ T1477] System zones: 0-2, 18-18, 34-34 [ 98.334312][ T1477] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.321: bg 0: block 248: padding at end of block bitmap is not set [ 98.349078][ T1477] Quota error (device loop2): write_blk: dquota write failed [ 98.356879][ T1477] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.367426][ T1477] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.321: Failed to acquire dquot type 1 [ 98.379569][ T1477] EXT4-fs (loop2): 1 truncate cleaned up [ 98.385279][ T1477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.394514][ T1477] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.420419][ T1477] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 99.360667][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.400237][ T1484] loop4: detected capacity change from 0 to 512 [ 99.418367][ T1484] EXT4-fs: Ignoring removed i_version option [ 99.424291][ T1484] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.552248][ T1484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.564363][ T1484] EXT4-fs (loop4): 1 truncate cleaned up [ 99.570338][ T1484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.868150][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 102.491639][ T296] EXT4-fs (loop2): unmounting filesystem. [ 102.525061][ T39] usb 1-1: unable to read config index 0 descriptor/all [ 102.558053][ T39] usb 1-1: can't read configurations, error -71 [ 102.605000][ T293] EXT4-fs (loop4): unmounting filesystem. [ 103.804841][ T1536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 103.824115][ T1536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 103.835124][ T1517] loop2: detected capacity change from 0 to 1024 [ 104.047981][ C0] sched: RT throttling activated [ 104.227335][ T1517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.254343][ T28] audit: type=1400 audit(1738054445.844:317): avc: denied { write } for pid=1513 comm="syz.2.330" path="/56/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.384103][ T1549] loop4: detected capacity change from 0 to 512 [ 104.391059][ T1549] EXT4-fs: Ignoring removed i_version option [ 104.396952][ T1549] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.403911][ T1549] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.423579][ T1549] EXT4-fs (loop4): 1 truncate cleaned up [ 104.438620][ T1549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.940331][ T296] EXT4-fs (loop2): unmounting filesystem. [ 105.207815][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 105.265479][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 105.318147][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.417248][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.429897][ T293] EXT4-fs (loop4): unmounting filesystem. [ 107.536138][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.545697][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.553147][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.561416][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.575072][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.582585][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.590549][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.597871][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.605325][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.612802][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.620256][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.628231][ T329] hid-generic 8B0B:1000:0003.0005: unknown main item tag 0x0 [ 107.639207][ T329] hid-generic 8B0B:1000:0003.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.649614][ T1588] syz.0.347 uses obsolete (PF_INET,SOCK_PACKET) [ 108.024065][ T1590] device wg2 entered promiscuous mode [ 108.055401][ T1597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.137041][ T1606] loop4: detected capacity change from 0 to 256 [ 108.143583][ T1606] exfat: Deprecated parameter 'utf8' [ 108.148899][ T1606] exfat: Deprecated parameter 'namecase' [ 108.154418][ T1606] exfat: Bad value for 'namecase' [ 108.252101][ T365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.078968][ T1612] loop4: detected capacity change from 0 to 256 [ 109.085381][ T1612] FAT-fs (loop4): Unrecognized mount option "uoi_xlate=0" or missing value [ 109.120544][ T28] audit: type=1400 audit(1738054450.714:318): avc: denied { create } for pid=1602 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.316365][ T297] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.868309][ T1622] tty tty27: ldisc open failed (-12), clearing slot 26 [ 110.980161][ T297] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 111.000521][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.012419][ T297] usb 2-1: config 0 descriptor?? [ 111.081172][ T297] usbhid 2-1:0.0: can't add hid device: -71 [ 111.087057][ T297] usbhid: probe of 2-1:0.0 failed with error -71 [ 111.116260][ T297] usb 2-1: USB disconnect, device number 7 [ 111.908111][ T28] audit: type=1400 audit(1738054453.404:319): avc: denied { map } for pid=1650 comm="syz.4.366" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.967463][ T28] audit: type=1400 audit(1738054453.404:320): avc: denied { read write } for pid=1650 comm="syz.4.366" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.992330][ T1653] loop4: detected capacity change from 0 to 1024 [ 112.003590][ T28] audit: type=1400 audit(1738054453.594:321): avc: denied { mounton } for pid=1650 comm="syz.4.366" path="/86/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 113.275917][ T1670] Zero length message leads to an empty skb [ 113.284652][ T1672] netlink: 84 bytes leftover after parsing attributes in process `syz.2.372'. [ 113.664224][ T1678] loop4: detected capacity change from 0 to 512 [ 113.704346][ T1678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 113.716379][ T1678] System zones: 0-2, 18-18, 34-34 [ 113.740157][ T1678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.374: bg 0: block 248: padding at end of block bitmap is not set [ 113.767618][ T1678] Quota error (device loop4): write_blk: dquota write failed [ 113.776044][ T1678] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 113.786093][ T1678] EXT4-fs error (device loop4): ext4_acquire_dquot:6781: comm syz.4.374: Failed to acquire dquot type 1 [ 113.798692][ T1678] EXT4-fs (loop4): 1 truncate cleaned up [ 113.804236][ T1678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.813447][ T1678] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.132810][ T1704] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 116.268456][ T293] EXT4-fs (loop4): unmounting filesystem. [ 116.330574][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.337476][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.391979][ T1718] netlink: 84 bytes leftover after parsing attributes in process `syz.4.383'. [ 117.064109][ T1733] loop2: detected capacity change from 0 to 512 [ 117.101469][ T1733] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 117.118083][ T1733] System zones: 0-2, 18-18, 34-34 [ 117.468530][ T1733] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.387: bg 0: block 248: padding at end of block bitmap is not set [ 117.485377][ T1733] Quota error (device loop2): write_blk: dquota write failed [ 117.492920][ T1733] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.508068][ T1733] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.387: Failed to acquire dquot type 1 [ 117.530667][ T1733] EXT4-fs (loop2): 1 truncate cleaned up [ 117.548072][ T1733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.571292][ T1733] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.815968][ T1743] loop4: detected capacity change from 0 to 512 [ 117.828025][ T1743] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 118.800175][ T365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.055201][ T1763] netlink: 84 bytes leftover after parsing attributes in process `syz.1.394'. [ 120.682373][ T1775] loop4: detected capacity change from 0 to 16 [ 120.690785][ T1775] erofs: (device loop4): mounted with root inode @ nid 36. [ 120.710879][ T1776] syz.4.397: attempt to access beyond end of device [ 120.710879][ T1776] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 120.800345][ T28] audit: type=1400 audit(1738054462.184:322): avc: denied { ioctl } for pid=1767 comm="syz.4.397" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.830464][ T1771] xt_hashlimit: max too large, truncated to 1048576 [ 120.859514][ T296] EXT4-fs (loop2): unmounting filesystem. [ 120.960859][ T28] audit: type=1400 audit(1738054462.554:323): avc: denied { read } for pid=1768 comm="syz.1.396" name="file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.104659][ T1786] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 121.413049][ T1788] loop2: detected capacity change from 0 to 16 [ 122.044877][ T1788] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.061675][ T1794] syz.2.398: attempt to access beyond end of device [ 122.061675][ T1794] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 122.068130][ T28] audit: type=1400 audit(1738054463.654:324): avc: denied { ioctl } for pid=1779 comm="syz.3.399" path="socket:[20237]" dev="sockfs" ino=20237 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.108587][ T28] audit: type=1400 audit(1738054463.654:325): avc: denied { bind } for pid=1779 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.200516][ T28] audit: type=1400 audit(1738054463.794:326): avc: denied { setopt } for pid=1779 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.321390][ T1801] loop4: detected capacity change from 0 to 512 [ 122.329419][ T1801] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 122.561107][ T1805] FAULT_INJECTION: forcing a failure. [ 122.561107][ T1805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.578110][ T1805] CPU: 0 PID: 1805 Comm: syz.0.404 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 122.587681][ T1805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.597657][ T1805] Call Trace: [ 122.600776][ T1805] [ 122.603566][ T1805] dump_stack_lvl+0x151/0x1b7 [ 122.608208][ T1805] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 122.613504][ T1805] ? vfs_write+0x952/0xed0 [ 122.617761][ T1805] ? __kasan_slab_free+0x11/0x20 [ 122.622617][ T1805] dump_stack+0x15/0x18 [ 122.626614][ T1805] should_fail_ex+0x3d0/0x520 [ 122.630968][ T1813] netlink: 84 bytes leftover after parsing attributes in process `syz.2.406'. [ 122.631415][ T1805] should_fail+0xb/0x10 [ 122.644467][ T1805] should_fail_usercopy+0x1a/0x20 [ 122.649315][ T1805] _copy_from_user+0x1e/0xc0 [ 122.653743][ T1805] __sys_bpf+0x23b/0x7f0 [ 122.657824][ T1805] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 122.663127][ T1805] ? __ia32_sys_read+0x90/0x90 [ 122.665933][ T28] audit: type=1400 audit(1738054464.234:327): avc: denied { create } for pid=1814 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.667712][ T1805] ? debug_smp_processor_id+0x17/0x20 [ 122.688699][ T28] audit: type=1400 audit(1738054464.234:328): avc: denied { read } for pid=1814 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.692534][ T1805] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 122.717980][ T1805] __x64_sys_bpf+0x7c/0x90 [ 122.722233][ T1805] x64_sys_call+0x87f/0x9a0 [ 122.726569][ T1805] do_syscall_64+0x3b/0xb0 [ 122.730952][ T1805] ? clear_bhb_loop+0x55/0xb0 [ 122.735470][ T1805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.741205][ T1805] RIP: 0033:0x7fd98e98cd29 [ 122.745449][ T1805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.764887][ T1805] RSP: 002b:00007fd98f7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.773129][ T1805] RAX: ffffffffffffffda RBX: 00007fd98eba5fa0 RCX: 00007fd98e98cd29 [ 122.780942][ T1805] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a [ 122.788753][ T1805] RBP: 00007fd98f7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 122.796574][ T1805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.804375][ T1805] R13: 0000000000000000 R14: 00007fd98eba5fa0 R15: 00007fff55180888 [ 122.812194][ T1805] [ 122.893012][ T1825] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 126.860487][ T1858] netlink: 84 bytes leftover after parsing attributes in process `syz.1.420'. [ 127.004277][ T297] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.011667][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.879203][ T1867] device erspan0 entered promiscuous mode [ 127.883321][ T1867] device erspan0 left promiscuous mode [ 128.183084][ T1874] fuse: Bad value for 'fd' [ 128.314831][ T19] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 128.324725][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.324820][ T1880] device wg2 entered promiscuous mode [ 128.338752][ T19] usb 1-1: config 0 descriptor?? [ 128.379632][ T1890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 128.388483][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 128.469661][ T1895] netlink: 84 bytes leftover after parsing attributes in process `syz.4.434'. [ 128.842601][ T329] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.868067][ T28] audit: type=1400 audit(1738054470.444:329): avc: denied { unlink } for pid=1887 comm="syz.3.431" name="#1" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.976203][ T1900] loop4: detected capacity change from 0 to 128 [ 129.188109][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 129.195534][ T329] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 129.993545][ T329] usb 2-1: config 4 has no interface number 0 [ 130.002044][ T329] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.012012][ T329] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.022397][ T329] usb 2-1: config 4 interface 15 has no altsetting 0 [ 130.031852][ T19] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 130.041233][ T329] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 130.098004][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.116018][ T329] usb 2-1: Product: syz [ 130.122683][ T1909] fuse: Bad value for 'fd' [ 130.143739][ T329] usb 2-1: Manufacturer: syz [ 130.161386][ T329] usb 2-1: SerialNumber: syz [ 130.180306][ T1876] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.188351][ T732] usb 1-1: USB disconnect, device number 8 [ 130.198119][ T1876] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.248025][ T297] usb 5-1: device not accepting address 9, error -71 [ 130.369585][ T1926] netlink: 84 bytes leftover after parsing attributes in process `syz.3.445'. [ 130.379243][ T1924] device wg2 left promiscuous mode [ 130.461518][ T1924] device wg2 entered promiscuous mode [ 130.470259][ T1876] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.489781][ T1876] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.703649][ T1939] FAULT_INJECTION: forcing a failure. [ 130.703649][ T1939] name failslab, interval 1, probability 0, space 0, times 0 [ 130.716241][ T1939] CPU: 1 PID: 1939 Comm: syz.2.448 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 130.725786][ T1939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 130.735686][ T1939] Call Trace: [ 130.738815][ T1939] [ 130.741594][ T1939] dump_stack_lvl+0x151/0x1b7 [ 130.746093][ T1939] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 130.751394][ T1939] dump_stack+0x15/0x18 [ 130.755381][ T1939] should_fail_ex+0x3d0/0x520 [ 130.759898][ T1939] __should_failslab+0xaf/0xf0 [ 130.764501][ T1939] ? __get_vm_area_node+0x129/0x370 [ 130.769532][ T1939] should_failslab+0x9/0x20 [ 130.774098][ T1939] __kmem_cache_alloc_node+0x3d/0x2a0 [ 130.779299][ T1939] ? __get_vm_area_node+0x129/0x370 [ 130.784339][ T1939] kmalloc_node_trace+0x26/0xb0 [ 130.789021][ T1939] __get_vm_area_node+0x129/0x370 [ 130.793880][ T1939] __vmalloc_node_range+0x338/0x1560 [ 130.799088][ T1939] ? kvm_dev_ioctl+0x19c/0x10d0 [ 130.803783][ T1939] ? vsnprintf+0x1b93/0x1c70 [ 130.808289][ T1939] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 130.813775][ T1939] ? snprintf+0xd6/0x120 [ 130.817841][ T1939] ? vmap+0x2b0/0x2b0 [ 130.821654][ T1939] ? kvm_dev_ioctl+0x154/0x10d0 [ 130.826340][ T1939] ? vscnprintf+0x80/0x80 [ 130.830515][ T1939] ? kvm_dev_ioctl+0x19c/0x10d0 [ 130.835200][ T1939] __vmalloc+0x7a/0x90 [ 130.839112][ T1939] ? kvm_dev_ioctl+0x19c/0x10d0 [ 130.843784][ T1939] kvm_dev_ioctl+0x19c/0x10d0 [ 130.848299][ T1939] ? irqentry_exit+0x30/0x40 [ 130.852722][ T1939] ? sysvec_reschedule_ipi+0x8f/0x170 [ 130.857943][ T1939] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 130.863407][ T1939] ? kvm_reboot+0x40/0x40 [ 130.867654][ T1939] ? __se_sys_ioctl+0x5e/0x190 [ 130.872262][ T1939] ? __sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 130.878325][ T1939] ? kvm_reboot+0x40/0x40 [ 130.882491][ T1939] __se_sys_ioctl+0x114/0x190 [ 130.887005][ T1939] __x64_sys_ioctl+0x7b/0x90 [ 130.891444][ T1939] x64_sys_call+0x98/0x9a0 [ 130.895704][ T1939] do_syscall_64+0x3b/0xb0 [ 130.899942][ T1939] ? clear_bhb_loop+0x55/0xb0 [ 130.904452][ T1939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.910535][ T1939] RIP: 0033:0x7fac5578cd29 [ 130.914790][ T1939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.934831][ T1939] RSP: 002b:00007fac56520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.943253][ T1939] RAX: ffffffffffffffda RBX: 00007fac559a6160 RCX: 00007fac5578cd29 [ 130.951071][ T1939] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 130.958875][ T1939] RBP: 00007fac56520090 R08: 0000000000000000 R09: 0000000000000000 [ 130.966680][ T1939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.974498][ T1939] R13: 0000000000000000 R14: 00007fac559a6160 R15: 00007ffec5632488 [ 130.982311][ T1939] [ 130.988479][ T1939] syz.2.448: vmalloc error: size 41016, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 131.004436][ T1939] CPU: 1 PID: 1939 Comm: syz.2.448 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 131.013894][ T1939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 131.023777][ T1939] Call Trace: [ 131.026907][ T1939] [ 131.029690][ T1939] dump_stack_lvl+0x151/0x1b7 [ 131.034676][ T1939] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 131.040087][ T1939] ? __rcu_read_unlock+0x7e/0xd0 [ 131.044840][ T1939] dump_stack+0x15/0x18 [ 131.048822][ T1939] warn_alloc+0x21a/0x3a0 [ 131.053061][ T1939] ? should_failslab+0x9/0x20 [ 131.057576][ T1939] ? zone_watermark_ok_safe+0x270/0x270 [ 131.062956][ T1939] ? kmalloc_node_trace+0x3d/0xb0 [ 131.067817][ T1939] ? __get_vm_area_node+0x361/0x370 [ 131.072850][ T1939] __vmalloc_node_range+0x35c/0x1560 [ 131.077999][ T1939] ? vsnprintf+0x1b93/0x1c70 [ 131.082481][ T1939] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 131.087947][ T1939] ? snprintf+0xd6/0x120 [ 131.092028][ T1939] ? vmap+0x2b0/0x2b0 [ 131.095846][ T1939] ? kvm_dev_ioctl+0x154/0x10d0 [ 131.100532][ T1939] ? vscnprintf+0x80/0x80 [ 131.104751][ T1939] ? kvm_dev_ioctl+0x19c/0x10d0 [ 131.109481][ T1939] __vmalloc+0x7a/0x90 [ 131.113698][ T1939] ? kvm_dev_ioctl+0x19c/0x10d0 [ 131.118632][ T1939] kvm_dev_ioctl+0x19c/0x10d0 [ 131.123439][ T1939] ? irqentry_exit+0x30/0x40 [ 131.127835][ T1939] ? sysvec_reschedule_ipi+0x8f/0x170 [ 131.133030][ T1939] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 131.138597][ T1939] ? kvm_reboot+0x40/0x40 [ 131.142752][ T1939] ? __se_sys_ioctl+0x5e/0x190 [ 131.147379][ T1939] ? __sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 131.153427][ T1939] ? kvm_reboot+0x40/0x40 [ 131.157681][ T1939] __se_sys_ioctl+0x114/0x190 [ 131.162195][ T1939] __x64_sys_ioctl+0x7b/0x90 [ 131.167006][ T1939] x64_sys_call+0x98/0x9a0 [ 131.171249][ T1939] do_syscall_64+0x3b/0xb0 [ 131.175503][ T1939] ? clear_bhb_loop+0x55/0xb0 [ 131.180107][ T1939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.185864][ T1939] RIP: 0033:0x7fac5578cd29 [ 131.190081][ T1939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.209609][ T1939] RSP: 002b:00007fac56520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.217851][ T1939] RAX: ffffffffffffffda RBX: 00007fac559a6160 RCX: 00007fac5578cd29 [ 131.225667][ T1939] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 131.233478][ T1939] RBP: 00007fac56520090 R08: 0000000000000000 R09: 0000000000000000 [ 131.241373][ T1939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.249457][ T1939] R13: 0000000000000000 R14: 00007fac559a6160 R15: 00007ffec5632488 [ 131.257266][ T1939] [ 131.260360][ T1939] Mem-Info: [ 131.263326][ T1939] active_anon:12929 inactive_anon:1 isolated_anon:0 [ 131.263326][ T1939] active_file:15338 inactive_file:2060 isolated_file:0 [ 131.263326][ T1939] unevictable:0 dirty:472 writeback:0 [ 131.263326][ T1939] slab_reclaimable:8568 slab_unreclaimable:72533 [ 131.263326][ T1939] mapped:35074 shmem:8847 pagetables:665 [ 131.263326][ T1939] sec_pagetables:0 bounce:0 [ 131.263326][ T1939] kernel_misc_reclaimable:0 [ 131.263326][ T1939] free:1513895 free_pcp:5017 free_cma:0 [ 131.308022][ T1939] Node 0 active_anon:51716kB inactive_anon:4kB active_file:61352kB inactive_file:8240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140296kB dirty:1888kB writeback:0kB shmem:35388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4732kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no [ 131.340085][ T1939] DMA32 free:2966484kB boost:0kB min:62552kB low:78188kB high:93824kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971536kB mlocked:0kB bounce:0kB free_pcp:5052kB local_pcp:4996kB free_cma:0kB [ 131.368319][ T1939] lowmem_reserve[]: 0 3932 3932 3932 [ 131.373605][ T1939] Normal free:3089096kB boost:0kB min:84900kB low:106124kB high:127348kB reserved_highatomic:0KB active_anon:51716kB inactive_anon:4kB active_file:61352kB inactive_file:8240kB unevictable:0kB writepending:1888kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:15000kB local_pcp:6680kB free_cma:0kB [ 131.403299][ T1939] lowmem_reserve[]: 0 0 0 0 [ 131.407826][ T1939] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 722*4096kB (M) = 2966484kB [ 131.424281][ T1939] Normal: 2*4kB (UM) 8*8kB (U) 106*16kB (UME) 599*32kB (UME) 328*64kB (UME) 98*128kB (UM) 52*256kB (UME) 23*512kB (UME) 9*1024kB (UME) 3*2048kB (ME) 731*4096kB (UM) = 3089096kB [ 131.441928][ T1939] 26246 total pagecache pages [ 131.446552][ T1939] 1 pages in swap cache [ 131.450520][ T1939] Free swap = 124460kB [ 131.454495][ T1939] Total swap = 124996kB [ 131.458504][ T1939] 2097051 pages RAM [ 131.462131][ T1939] 0 pages HighMem/MovableOnly [ 131.466641][ T1939] 347567 pages reserved [ 131.470653][ T1939] 0 pages cma reserved [ 131.501299][ T1944] fuse: Bad value for 'fd' [ 131.597827][ T1951] loop4: detected capacity change from 0 to 512 [ 131.656315][ T1957] FAULT_INJECTION: forcing a failure. [ 131.656315][ T1957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.669389][ T1957] CPU: 0 PID: 1957 Comm: syz.3.456 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 131.678931][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 131.688824][ T1957] Call Trace: [ 131.691953][ T1957] [ 131.694726][ T1957] dump_stack_lvl+0x151/0x1b7 [ 131.699251][ T1957] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 131.704529][ T1957] ? __kasan_check_write+0x14/0x20 [ 131.709481][ T1957] ? kstrtouint_from_user+0x124/0x180 [ 131.714687][ T1957] dump_stack+0x15/0x18 [ 131.718686][ T1957] should_fail_ex+0x3d0/0x520 [ 131.723190][ T1957] should_fail+0xb/0x10 [ 131.727195][ T1957] should_fail_usercopy+0x1a/0x20 [ 131.732056][ T1957] _copy_from_user+0x1e/0xc0 [ 131.736476][ T1957] iovec_from_user+0xc7/0x320 [ 131.740994][ T1957] ? selinux_file_permission+0x2bb/0x560 [ 131.746459][ T1957] __import_iovec+0x70/0x430 [ 131.750886][ T1957] ? __fget_files+0x2cb/0x330 [ 131.755391][ T1957] import_iovec+0xe5/0x120 [ 131.759650][ T1957] do_readv+0x237/0x460 [ 131.763637][ T1957] ? generic_file_rw_checks+0x270/0x270 [ 131.769629][ T1957] ? fput+0x15b/0x1b0 [ 131.773447][ T1957] ? ksys_write+0x260/0x2c0 [ 131.777787][ T1957] ? debug_smp_processor_id+0x17/0x20 [ 131.782993][ T1957] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 131.788893][ T1957] __x64_sys_readv+0x7d/0x90 [ 131.793405][ T1957] x64_sys_call+0xad/0x9a0 [ 131.797659][ T1957] do_syscall_64+0x3b/0xb0 [ 131.801914][ T1957] ? clear_bhb_loop+0x55/0xb0 [ 131.806425][ T1957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.812311][ T1957] RIP: 0033:0x7fc64a78cd29 [ 131.816575][ T1957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.836383][ T1957] RSP: 002b:00007fc64b65c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 131.845325][ T1957] RAX: ffffffffffffffda RBX: 00007fc64a9a5fa0 RCX: 00007fc64a78cd29 [ 131.853118][ T1957] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 131.860964][ T1957] RBP: 00007fc64b65c090 R08: 0000000000000000 R09: 0000000000000000 [ 131.868744][ T1957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.876554][ T1957] R13: 0000000000000000 R14: 00007fc64a9a5fa0 R15: 00007ffd852d09e8 [ 131.884369][ T1957] [ 131.893804][ T1951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.902750][ T1951] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.939017][ T1964] netlink: 84 bytes leftover after parsing attributes in process `syz.2.457'. [ 131.983649][ T293] EXT4-fs (loop4): unmounting filesystem. [ 132.011394][ T1977] device wg2 left promiscuous mode [ 132.019400][ T1977] device wg2 entered promiscuous mode [ 132.069653][ T28] audit: type=1400 audit(1738054473.664:330): avc: denied { create } for pid=1978 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.116704][ T28] audit: type=1400 audit(1738054473.704:331): avc: denied { read write } for pid=1970 comm="syz.0.458" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.141183][ T28] audit: type=1400 audit(1738054473.704:332): avc: denied { open } for pid=1970 comm="syz.0.458" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.388136][ T325] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.511529][ T1958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.521322][ T1958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.534010][ T1958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.563361][ T1958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.588205][ T325] usb 3-1: Using ep0 maxpacket: 32 [ 132.595815][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.608804][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.620070][ T325] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.630409][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.668707][ T325] usb 3-1: config 0 descriptor?? [ 132.684493][ T325] hub 3-1:0.0: USB hub found [ 133.285195][ T325] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 133.293781][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 133.323865][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.440148][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 133.451952][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 133.463279][ T1997] Illegal XDP return value 4294967274 on prog (id 392) dev N/A, expect packet loss! [ 133.475346][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 133.486034][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 133.502415][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 133.520554][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 133.533284][ T325] usbhid 3-1:0.0: can't add hid device: -71 [ 133.558072][ T325] usbhid: probe of 3-1:0.0 failed with error -71 [ 133.574090][ T2008] netlink: 84 bytes leftover after parsing attributes in process `syz.4.470'. [ 133.582955][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.645545][ T325] usb 3-1: USB disconnect, device number 10 [ 133.678226][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.705531][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.738247][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.755904][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 133.776570][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.788260][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 133.799567][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 133.810484][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 133.923527][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 133.934960][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 133.946235][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 133.957293][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 133.968352][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 133.979363][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 133.990388][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 134.001987][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 134.012891][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 134.024852][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 134.035942][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 134.051567][ T2020] device wg2 entered promiscuous mode [ 134.056853][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 134.071233][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 134.091550][ T329] ax88179_178a 2-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter, 02:b3:fe:c8:62:c9 [ 134.111345][ T28] audit: type=1400 audit(1738054475.704:333): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.111749][ T2024] 9p: Unknown access argument 18446744073709551615: -34 [ 134.133207][ T329] usb 2-1: USB disconnect, device number 8 [ 134.145878][ T329] ax88179_178a 2-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter [ 134.157612][ T28] audit: type=1400 audit(1738054475.734:334): avc: denied { read } for pid=140 comm="dhcpcd" name="n17" dev="tmpfs" ino=2418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.193726][ T28] audit: type=1400 audit(1738054475.734:335): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=2418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.216470][ T28] audit: type=1400 audit(1738054475.734:336): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=2418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.239524][ T28] audit: type=1400 audit(1738054475.804:337): avc: denied { read } for pid=2028 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.262718][ T28] audit: type=1400 audit(1738054475.804:338): avc: denied { open } for pid=2028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.264628][ T2024] tipc: Failed to remove unknown binding: 66,1,1/0:3846558060/3846558062 [ 134.298187][ T28] audit: type=1400 audit(1738054475.804:339): avc: denied { getattr } for pid=2028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.325183][ T28] audit: type=1400 audit(1738054475.854:340): avc: denied { bind } for pid=2023 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.349461][ T28] audit: type=1400 audit(1738054475.944:341): avc: denied { write } for pid=2027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.400696][ T28] audit: type=1400 audit(1738054475.944:342): avc: denied { add_name } for pid=2027 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.483953][ T2045] block device autoloading is deprecated and will be removed. [ 134.491681][ T2045] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.515975][ T2045] FAT-fs (loop1): unable to read boot sector [ 134.529061][ T2055] netlink: 84 bytes leftover after parsing attributes in process `syz.4.481'. [ 134.595744][ T2063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.483'. [ 136.008702][ T2087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.488'. [ 136.136570][ T2094] loop2: detected capacity change from 0 to 512 [ 136.149842][ T2094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 136.157736][ T2094] System zones: 0-2, 18-18, 34-34 [ 136.164998][ T2094] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.491: bg 0: block 248: padding at end of block bitmap is not set [ 136.179529][ T2094] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.491: Failed to acquire dquot type 1 [ 136.191346][ T2094] EXT4-fs (loop2): 1 truncate cleaned up [ 136.196934][ T2094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.206070][ T2094] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.234001][ T329] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.518054][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 136.541083][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.554583][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.565717][ T329] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.576069][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.629103][ T329] usb 1-1: config 0 descriptor?? [ 136.796683][ T329] hub 1-1:0.0: USB hub found [ 137.528361][ T329] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 137.594264][ T296] EXT4-fs (loop2): unmounting filesystem. [ 137.614719][ T2107] netlink: 84 bytes leftover after parsing attributes in process `syz.3.494'. [ 137.766755][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 137.772616][ T329] usbhid: probe of 1-1:0.0 failed with error -71 [ 138.036204][ T329] usb 1-1: USB disconnect, device number 9 [ 138.642124][ T2122] loop2: detected capacity change from 0 to 128 [ 139.314592][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 139.314612][ T28] audit: type=1400 audit(1738054480.894:348): avc: denied { mount } for pid=2112 comm="syz.3.497" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.995990][ T2136] loop4: detected capacity change from 0 to 512 [ 140.002456][ T2136] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 140.528110][ T2143] loop1: detected capacity change from 0 to 512 [ 140.540587][ T2143] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 141.079674][ T28] audit: type=1400 audit(1738054482.604:349): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.160746][ T365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.168081][ T318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.587435][ T2157] netlink: 84 bytes leftover after parsing attributes in process `syz.4.508'. [ 142.655373][ T2162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 142.764178][ T2164] device wg2 left promiscuous mode [ 142.777303][ T2169] device wg2 entered promiscuous mode [ 142.853536][ T2174] device wg2 left promiscuous mode [ 142.867749][ T2174] device wg2 entered promiscuous mode [ 142.875853][ T28] audit: type=1400 audit(1738054484.464:350): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.946493][ T2181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 144.163974][ T2197] loop1: detected capacity change from 0 to 512 [ 144.171947][ T2197] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 144.426182][ T365] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.458485][ T2200] netlink: 84 bytes leftover after parsing attributes in process `syz.4.522'. [ 144.881888][ T2209] device wg2 entered promiscuous mode [ 144.889445][ T2212] device wg2 left promiscuous mode [ 144.897240][ T2212] device wg2 entered promiscuous mode [ 144.904550][ T2214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 145.676497][ T2227] loop2: detected capacity change from 0 to 512 [ 145.683494][ T2227] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 146.056002][ T2230] netlink: 84 bytes leftover after parsing attributes in process `syz.0.533'. [ 146.196690][ T2234] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 146.495557][ T2243] loop4: detected capacity change from 0 to 512 [ 146.507280][ T2243] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 148.773124][ T28] audit: type=1400 audit(1738054490.364:351): avc: denied { name_bind } for pid=2222 comm="syz.1.532" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 148.953356][ T28] audit: type=1400 audit(1738054490.394:352): avc: denied { read } for pid=2222 comm="syz.1.532" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.498028][ T553] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.314446][ T2273] loop2: detected capacity change from 0 to 512 [ 150.320941][ T2273] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 151.086222][ T553] usb 5-1: Using ep0 maxpacket: 32 [ 151.093530][ T553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.106520][ T553] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 151.115759][ T553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.125592][ T2284] netlink: 84 bytes leftover after parsing attributes in process `syz.3.547'. [ 151.135280][ T553] usb 5-1: config 0 descriptor?? [ 151.170303][ T365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.251758][ T2294] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.727569][ T553] usbhid 5-1:0.0: can't add hid device: -71 [ 151.733738][ T553] usbhid: probe of 5-1:0.0 failed with error -71 [ 151.742012][ T553] usb 5-1: USB disconnect, device number 11 [ 151.810891][ T2311] netlink: 84 bytes leftover after parsing attributes in process `syz.4.558'. [ 151.955553][ T2321] block device autoloading is deprecated and will be removed. [ 151.963190][ T2321] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.972423][ T2321] FAT-fs (loop7): unable to read boot sector [ 152.203782][ T2327] loop4: detected capacity change from 0 to 512 [ 152.210192][ T2327] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 152.416510][ T2313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.556'. [ 152.451405][ T2313] loop2: detected capacity change from 0 to 256 [ 152.538555][ T318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.211182][ T2350] device wg2 left promiscuous mode [ 155.219195][ T2350] device wg2 entered promiscuous mode [ 155.250054][ T2347] device wg2 left promiscuous mode [ 155.250104][ T553] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.263054][ T2354] netlink: 84 bytes leftover after parsing attributes in process `syz.0.570'. [ 155.272115][ T2349] device wg2 entered promiscuous mode [ 155.277643][ T2353] xt_hashlimit: max too large, truncated to 1048576 [ 155.458083][ T553] usb 2-1: Using ep0 maxpacket: 32 [ 155.464373][ T553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.485795][ T553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.688606][ T2378] FAULT_INJECTION: forcing a failure. [ 156.688606][ T2378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.701906][ T2378] CPU: 0 PID: 2378 Comm: syz.2.576 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 156.711487][ T2378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.721809][ T2378] Call Trace: [ 156.724933][ T2378] [ 156.727712][ T2378] dump_stack_lvl+0x151/0x1b7 [ 156.732245][ T2378] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 156.737528][ T2378] ? vfs_write+0x952/0xed0 [ 156.741762][ T2378] ? __kasan_slab_free+0x11/0x20 [ 156.746706][ T2378] dump_stack+0x15/0x18 [ 156.750696][ T2378] should_fail_ex+0x3d0/0x520 [ 156.755209][ T2378] should_fail+0xb/0x10 [ 156.759198][ T2378] should_fail_usercopy+0x1a/0x20 [ 156.764058][ T2378] _copy_from_user+0x1e/0xc0 [ 156.768572][ T2378] __sys_bpf+0x23b/0x7f0 [ 156.772660][ T2378] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 156.777875][ T2378] ? __ia32_sys_read+0x90/0x90 [ 156.782464][ T2378] ? debug_smp_processor_id+0x17/0x20 [ 156.787665][ T2378] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 156.793569][ T2378] __x64_sys_bpf+0x7c/0x90 [ 156.797908][ T2378] x64_sys_call+0x87f/0x9a0 [ 156.802334][ T2378] do_syscall_64+0x3b/0xb0 [ 156.806591][ T2378] ? clear_bhb_loop+0x55/0xb0 [ 156.811102][ T2378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.816829][ T2378] RIP: 0033:0x7fac5578cd29 [ 156.821086][ T2378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.840528][ T2378] RSP: 002b:00007fac56520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.848775][ T2378] RAX: ffffffffffffffda RBX: 00007fac559a6160 RCX: 00007fac5578cd29 [ 156.856668][ T2378] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 156.864591][ T2378] RBP: 00007fac56520090 R08: 0000000000000000 R09: 0000000000000000 [ 156.872380][ T2378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.880344][ T2378] R13: 0000000000000000 R14: 00007fac559a6160 R15: 00007ffec5632488 [ 156.888157][ T2378] [ 157.085506][ T553] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.163006][ T553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.174984][ T553] usb 2-1: config 0 descriptor?? [ 157.183609][ T553] usb 2-1: can't set config #0, error -71 [ 157.194579][ T553] usb 2-1: USB disconnect, device number 9 [ 157.205527][ T2385] loop2: detected capacity change from 0 to 512 [ 157.321102][ T2392] netlink: 84 bytes leftover after parsing attributes in process `syz.0.583'. [ 157.368617][ T2385] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 157.376921][ T2398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 157.385995][ T2385] System zones: 0-2, 18-18, 34-34 [ 157.513672][ T2399] loop1: detected capacity change from 0 to 512 [ 157.521808][ T2399] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 157.682477][ T2385] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.580: bg 0: block 248: padding at end of block bitmap is not set [ 157.723684][ T2385] Quota error (device loop2): write_blk: dquota write failed [ 157.741429][ T2402] device wg2 left promiscuous mode [ 157.746780][ T2385] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 157.770160][ T2402] device wg2 entered promiscuous mode [ 157.777117][ T2385] EXT4-fs error (device loop2): ext4_acquire_dquot:6781: comm syz.2.580: Failed to acquire dquot type 1 [ 157.798764][ T2385] EXT4-fs (loop2): 1 truncate cleaned up [ 157.809460][ T2385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.819401][ T2385] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.395649][ T2415] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.408252][ T2394] loop4: detected capacity change from 0 to 40427 [ 159.422159][ T2415] FAT-fs (loop1): unable to read boot sector [ 159.429639][ T2394] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.436042][ T296] EXT4-fs (loop2): unmounting filesystem. [ 159.467191][ T2394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.051452][ T28] audit: type=1400 audit(1738054501.114:353): avc: denied { accept } for pid=2419 comm="syz.1.590" path="socket:[22178]" dev="sockfs" ino=22178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.878715][ T2394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.006527][ T2394] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 161.093997][ T28] audit: type=1400 audit(1738054502.674:354): avc: denied { mount } for pid=2426 comm="syz.2.591" name="/" dev="incremental-fs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 161.488139][ T329] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.806620][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 161.816655][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.938178][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.970883][ T329] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.000385][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.034217][ T329] usb 2-1: config 0 descriptor?? [ 162.043439][ T329] hub 2-1:0.0: USB hub found [ 162.194524][ T28] audit: type=1400 audit(1738054503.784:355): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.244777][ T329] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 162.440440][ T28] audit: type=1400 audit(1738054504.034:356): avc: denied { write } for pid=2446 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.466552][ T2452] device wg2 left promiscuous mode [ 162.468260][ T329] usbhid 2-1:0.0: can't add hid device: -71 [ 162.477452][ T2452] device wg2 entered promiscuous mode [ 162.554290][ T329] usbhid: probe of 2-1:0.0 failed with error -71 [ 162.588402][ T329] usb 2-1: USB disconnect, device number 10 [ 162.631770][ T2461] xt_hashlimit: max too large, truncated to 1048576 [ 163.176836][ T2475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 163.205686][ T2479] loop1: detected capacity change from 0 to 128 [ 163.879431][ T2480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 163.888879][ T2480] FAULT_INJECTION: forcing a failure. [ 163.888879][ T2480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.901961][ T2480] CPU: 0 PID: 2480 Comm: syz.3.603 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 163.911421][ T2480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.921712][ T2480] Call Trace: [ 163.924775][ T2480] [ 163.927788][ T2480] dump_stack_lvl+0x151/0x1b7 [ 163.932466][ T2480] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 163.937760][ T2480] ? vfs_write+0x952/0xed0 [ 163.942027][ T2480] ? __kasan_slab_free+0x11/0x20 [ 163.946793][ T2480] dump_stack+0x15/0x18 [ 163.950786][ T2480] should_fail_ex+0x3d0/0x520 [ 163.955376][ T2480] should_fail+0xb/0x10 [ 163.959458][ T2480] should_fail_usercopy+0x1a/0x20 [ 163.964324][ T2480] _copy_from_user+0x1e/0xc0 [ 163.968913][ T2480] __sys_bpf+0x23b/0x7f0 [ 163.972994][ T2480] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 163.978207][ T2480] ? __ia32_sys_read+0x90/0x90 [ 163.983257][ T2480] ? debug_smp_processor_id+0x17/0x20 [ 163.988447][ T2480] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 163.994788][ T2480] __x64_sys_bpf+0x7c/0x90 [ 163.999204][ T2480] x64_sys_call+0x87f/0x9a0 [ 164.003537][ T2480] do_syscall_64+0x3b/0xb0 [ 164.007798][ T2480] ? clear_bhb_loop+0x55/0xb0 [ 164.012484][ T2480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.018218][ T2480] RIP: 0033:0x7fc64a78cd29 [ 164.022473][ T2480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.042209][ T2480] RSP: 002b:00007fc64b63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.050620][ T2480] RAX: ffffffffffffffda RBX: 00007fc64a9a6080 RCX: 00007fc64a78cd29 [ 164.058432][ T2480] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 0000000000000002 [ 164.066347][ T2480] RBP: 00007fc64b63b090 R08: 0000000000000000 R09: 0000000000000000 [ 164.074158][ T2480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.081983][ T2480] R13: 0000000000000000 R14: 00007fc64a9a6080 R15: 00007ffd852d09e8 [ 164.089892][ T2480] [ 164.459163][ T2479] EXT4-fs (loop1): Test dummy encryption mode enabled [ 164.504527][ T2491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 164.628508][ T2492] device wg2 left promiscuous mode [ 164.659879][ T2479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.671680][ T2492] device wg2 entered promiscuous mode [ 164.678418][ T2479] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.114670][ T325] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.308207][ T329] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.605381][ T292] EXT4-fs (loop1): unmounting filesystem. [ 166.705603][ T329] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 166.718614][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.740360][ T329] usb 1-1: config 0 descriptor?? [ 166.746331][ T2525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.620'. [ 167.823457][ T2527] loop1: detected capacity change from 0 to 512 [ 167.830033][ T2527] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 168.593184][ T2545] loop1: detected capacity change from 0 to 512 [ 168.601409][ T2545] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 169.835017][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 169.841947][ T329] usbhid: probe of 1-1:0.0 failed with error -71 [ 169.889806][ T28] audit: type=1400 audit(1738054511.484:357): avc: denied { name_bind } for pid=2551 comm="syz.0.626" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 169.921331][ T329] usb 1-1: USB disconnect, device number 10 [ 169.941505][ T28] audit: type=1400 audit(1738054511.504:358): avc: denied { node_bind } for pid=2551 comm="syz.0.626" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 170.440959][ T2562] netlink: 88 bytes leftover after parsing attributes in process `syz.0.627'. [ 170.449721][ T2562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'. [ 170.546849][ T28] audit: type=1400 audit(1738054512.034:359): avc: denied { shutdown } for pid=2558 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.608059][ T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.838811][ T39] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 170.847722][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.865050][ T39] usb 2-1: config 0 descriptor?? [ 170.948353][ T2575] xt_hashlimit: max too large, truncated to 1048576 [ 170.974996][ T2539] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.988091][ T2539] FAT-fs (loop7): unable to read boot sector [ 170.998587][ T2578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 171.603155][ T1357] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.114785][ T2587] loop2: detected capacity change from 0 to 512 [ 172.121585][ T2587] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 172.568009][ T1357] usb 5-1: Using ep0 maxpacket: 32 [ 172.581022][ T2594] loop2: detected capacity change from 0 to 2048 [ 172.583955][ T2591] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.597903][ T2591] FAT-fs (loop1): unable to read boot sector [ 172.642538][ T1357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.658470][ T1357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.669130][ T2594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.708839][ T1357] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.718044][ T1357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.731617][ T1357] usb 5-1: config 0 descriptor?? [ 172.741630][ T2603] netlink: 96 bytes leftover after parsing attributes in process `syz.2.637'. [ 172.750708][ T1357] hub 5-1:0.0: USB hub found [ 172.754304][ T2603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 173.202860][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 173.267516][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 173.348110][ T666] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.391563][ T39] usb 2-1: USB disconnect, device number 11 [ 173.720369][ T2607] loop1: detected capacity change from 0 to 128 [ 173.728481][ T1357] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 173.750907][ T2607] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.763491][ T2607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.772656][ T2607] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.848413][ T296] EXT4-fs (loop2): unmounting filesystem. [ 173.888142][ T666] usb 1-1: Using ep0 maxpacket: 16 [ 173.895089][ T666] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 173.917250][ T666] usb 1-1: config 4 has no interface number 0 [ 173.934447][ T666] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.944830][ T666] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 173.950953][ T1357] usbhid 5-1:0.0: can't add hid device: -71 [ 173.956082][ T666] usb 1-1: config 4 interface 15 has no altsetting 0 [ 173.960943][ T1357] usbhid: probe of 5-1:0.0 failed with error -71 [ 173.969551][ T666] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 173.983078][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.427172][ T1357] usb 5-1: USB disconnect, device number 13 [ 174.439788][ T666] usb 1-1: Product: syz [ 174.471120][ T666] usb 1-1: Manufacturer: syz [ 174.475735][ T666] usb 1-1: SerialNumber: syz [ 174.476842][ T292] EXT4-fs (loop1): unmounting filesystem. [ 174.540899][ T2602] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 174.548384][ T2602] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 176.317704][ T2631] loop2: detected capacity change from 0 to 128 [ 177.062270][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 177.083878][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 177.566100][ T2641] loop4: detected capacity change from 0 to 512 [ 177.578458][ T2641] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 178.458160][ T19] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 178.518606][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 178.778475][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 178.851537][ T2668] xt_hashlimit: max too large, truncated to 1048576 [ 178.862543][ T325] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.870197][ T19] usb 4-1: device descriptor read/64, error -71 [ 178.874058][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 178.886935][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 178.906743][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 178.924015][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 178.935521][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 178.946786][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 178.969248][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 178.983460][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 178.997348][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 179.009743][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.209939][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 179.222817][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 179.235332][ T325] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 179.255869][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 179.266572][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.274632][ T329] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 179.282700][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.345094][ T325] usb 3-1: config 0 descriptor?? [ 179.353802][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 179.364982][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 179.376075][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 179.387272][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.398404][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 179.408168][ T19] usb 4-1: device descriptor read/64, error -71 [ 179.409464][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.426840][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 179.452655][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.463702][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 179.504015][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.571078][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 179.622416][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 179.656137][ T666] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 179.667518][ T329] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 179.683301][ T329] usb 2-1: config 4 has no interface number 0 [ 179.692835][ T666] ax88179_178a 1-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter, ca:f2:bc:cc:42:8a [ 179.706027][ T329] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 179.743840][ T2688] loop4: detected capacity change from 0 to 128 [ 179.886090][ T666] usb 1-1: USB disconnect, device number 11 [ 179.895138][ T329] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 179.962922][ T19] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 180.048108][ T666] ax88179_178a 1-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter [ 180.111425][ T329] usb 2-1: config 4 interface 15 has no altsetting 0 [ 180.296519][ T329] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 180.797150][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.812274][ T329] usb 2-1: Product: syz [ 181.018081][ T329] usb 2-1: Manufacturer: syz [ 181.026928][ T329] usb 2-1: SerialNumber: syz [ 181.033026][ T360] ================================================================== [ 181.041004][ T360] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 181.048040][ T360] Read of size 8 at addr ffff88811a9e2ce0 by task kworker/1:6/360 [ 181.055870][ T360] [ 181.058031][ T360] CPU: 1 PID: 360 Comm: kworker/1:6 Not tainted 6.1.121-syzkaller-00998-g11620ab958c2 #0 [ 181.067667][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.077664][ T360] Workqueue: 0x0 (events) [ 181.081979][ T360] Call Trace: [ 181.085114][ T360] [ 181.087889][ T360] dump_stack_lvl+0x151/0x1b7 [ 181.092414][ T360] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 181.097697][ T360] ? _printk+0xd1/0x111 [ 181.101689][ T360] ? __virt_addr_valid+0x242/0x2f0 [ 181.106641][ T360] print_report+0x158/0x4e0 [ 181.110976][ T360] ? __virt_addr_valid+0x242/0x2f0 [ 181.115924][ T360] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 181.121997][ T360] ? worker_thread+0xa36/0x1260 [ 181.126700][ T360] kasan_report+0x13c/0x170 [ 181.131025][ T360] ? worker_thread+0xa36/0x1260 [ 181.135717][ T360] __asan_report_load8_noabort+0x14/0x20 [ 181.141377][ T360] worker_thread+0xa36/0x1260 [ 181.146175][ T360] kthread+0x26d/0x300 [ 181.150124][ T360] ? worker_clr_flags+0x1a0/0x1a0 [ 181.155002][ T360] ? kthread_blkcg+0xd0/0xd0 [ 181.159426][ T360] ret_from_fork+0x1f/0x30 [ 181.163670][ T360] [ 181.166530][ T360] [ 181.168691][ T360] Allocated by task 666: [ 181.172775][ T360] kasan_set_track+0x4b/0x70 [ 181.177206][ T360] kasan_save_alloc_info+0x1f/0x30 [ 181.182152][ T360] __kasan_kmalloc+0x9c/0xb0 [ 181.186570][ T360] __kmalloc_node+0xb4/0x1e0 [ 181.191008][ T360] kvmalloc_node+0x221/0x640 [ 181.195512][ T360] alloc_netdev_mqs+0x8c/0xf90 [ 181.200120][ T360] alloc_etherdev_mqs+0x36/0x40 [ 181.204801][ T360] usbnet_probe+0x213/0x28a0 [ 181.209232][ T360] usb_probe_interface+0x5b6/0xa90 [ 181.214175][ T360] really_probe+0x2b8/0x920 [ 181.218511][ T360] __driver_probe_device+0x1a0/0x310 [ 181.223631][ T360] driver_probe_device+0x54/0x3d0 [ 181.228496][ T360] __device_attach_driver+0x2e3/0x490 [ 181.233701][ T360] bus_for_each_drv+0x183/0x200 [ 181.238522][ T360] __device_attach+0x312/0x510 [ 181.243145][ T360] device_initial_probe+0x1a/0x20 [ 181.247993][ T360] bus_probe_device+0xbe/0x1e0 [ 181.252760][ T360] device_add+0xb60/0xf10 [ 181.257007][ T360] usb_set_configuration+0x190f/0x1e80 [ 181.262539][ T360] usb_generic_driver_probe+0x8b/0x150 [ 181.267854][ T360] usb_probe_device+0x144/0x260 [ 181.272556][ T360] really_probe+0x2b8/0x920 [ 181.277897][ T360] __driver_probe_device+0x1a0/0x310 [ 181.283021][ T360] driver_probe_device+0x54/0x3d0 [ 181.288078][ T360] __device_attach_driver+0x2e3/0x490 [ 181.293261][ T360] bus_for_each_drv+0x183/0x200 [ 181.297951][ T360] __device_attach+0x312/0x510 [ 181.302554][ T360] device_initial_probe+0x1a/0x20 [ 181.307524][ T360] bus_probe_device+0xbe/0x1e0 [ 181.312126][ T360] device_add+0xb60/0xf10 [ 181.316574][ T360] usb_new_device+0xf2f/0x1820 [ 181.321199][ T360] hub_event+0x2db1/0x4830 [ 181.325523][ T360] process_one_work+0x73d/0xcb0 [ 181.330400][ T360] worker_thread+0xa60/0x1260 [ 181.334899][ T360] kthread+0x26d/0x300 [ 181.339355][ T360] ret_from_fork+0x1f/0x30 [ 181.344290][ T360] [ 181.346686][ T360] Freed by task 666: [ 181.350488][ T360] kasan_set_track+0x4b/0x70 [ 181.355593][ T360] kasan_save_free_info+0x2b/0x40 [ 181.360471][ T360] ____kasan_slab_free+0x131/0x180 [ 181.365500][ T360] __kasan_slab_free+0x11/0x20 [ 181.370152][ T360] __kmem_cache_free+0x21d/0x410 [ 181.374878][ T360] kfree+0x7a/0xf0 [ 181.378551][ T360] kvfree+0x35/0x40 [ 181.382387][ T360] netdev_freemem+0x3f/0x60 [ 181.386928][ T360] netdev_release+0x7f/0xb0 [ 181.391452][ T360] device_release+0x95/0x1c0 [ 181.395955][ T360] kobject_put+0x178/0x260 [ 181.400296][ T360] put_device+0x1f/0x30 [ 181.404295][ T360] free_netdev+0x393/0x480 [ 181.408613][ T360] usbnet_disconnect+0x25f/0x3b0 [ 181.413365][ T360] ax88179_disconnect+0x81/0xb0 [ 181.418014][ T360] usb_unbind_interface+0x1fa/0x8c0 [ 181.423029][ T360] device_release_driver_internal+0x53e/0x870 [ 181.429106][ T360] device_release_driver+0x19/0x20 [ 181.434415][ T360] bus_remove_device+0x2fa/0x360 [ 181.439621][ T360] device_del+0x663/0xe90 [ 181.444387][ T360] usb_disable_device+0x380/0x720 [ 181.450721][ T360] usb_disconnect+0x32a/0x890 [ 181.456177][ T360] hub_event+0x1ed8/0x4830 [ 181.460619][ T360] process_one_work+0x73d/0xcb0 [ 181.466127][ T360] worker_thread+0xd71/0x1260 [ 181.470884][ T360] kthread+0x26d/0x300 [ 181.474794][ T360] ret_from_fork+0x1f/0x30 [ 181.479070][ T360] [ 181.481210][ T360] Last potentially related work creation: [ 181.486767][ T360] kasan_save_stack+0x3b/0x60 [ 181.491282][ T360] __kasan_record_aux_stack+0xb4/0xc0 [ 181.496524][ T360] kasan_record_aux_stack_noalloc+0xb/0x10 [ 181.502353][ T360] insert_work+0x56/0x310 [ 181.506485][ T360] __queue_work+0x9b6/0xd70 [ 181.510999][ T360] queue_work_on+0x105/0x170 [ 181.515470][ T360] usbnet_link_change+0x182/0x1a0 [ 181.520286][ T360] ax88179_reset+0x3b36/0x5fb0 [ 181.524984][ T360] ax88179_bind+0x2c4/0x390 [ 181.529327][ T360] usbnet_probe+0xb4f/0x28a0 [ 181.533775][ T360] usb_probe_interface+0x5b6/0xa90 [ 181.538698][ T360] really_probe+0x2b8/0x920 [ 181.543039][ T360] __driver_probe_device+0x1a0/0x310 [ 181.548149][ T360] driver_probe_device+0x54/0x3d0 [ 181.553187][ T360] __device_attach_driver+0x2e3/0x490 [ 181.558574][ T360] bus_for_each_drv+0x183/0x200 [ 181.563261][ T360] __device_attach+0x312/0x510 [ 181.567856][ T360] device_initial_probe+0x1a/0x20 [ 181.572720][ T360] bus_probe_device+0xbe/0x1e0 [ 181.577316][ T360] device_add+0xb60/0xf10 [ 181.581490][ T360] usb_set_configuration+0x190f/0x1e80 [ 181.586777][ T360] usb_generic_driver_probe+0x8b/0x150 [ 181.592081][ T360] usb_probe_device+0x144/0x260 [ 181.596880][ T360] really_probe+0x2b8/0x920 [ 181.601512][ T360] __driver_probe_device+0x1a0/0x310 [ 181.606625][ T360] driver_probe_device+0x54/0x3d0 [ 181.611488][ T360] __device_attach_driver+0x2e3/0x490 [ 181.616697][ T360] bus_for_each_drv+0x183/0x200 [ 181.621381][ T360] __device_attach+0x312/0x510 [ 181.626133][ T360] device_initial_probe+0x1a/0x20 [ 181.631096][ T360] bus_probe_device+0xbe/0x1e0 [ 181.635690][ T360] device_add+0xb60/0xf10 [ 181.639953][ T360] usb_new_device+0xf2f/0x1820 [ 181.644548][ T360] hub_event+0x2db1/0x4830 [ 181.648810][ T360] process_one_work+0x73d/0xcb0 [ 181.653574][ T360] worker_thread+0xa60/0x1260 [ 181.658085][ T360] kthread+0x26d/0x300 [ 181.661987][ T360] ret_from_fork+0x1f/0x30 [ 181.666247][ T360] [ 181.668419][ T360] The buggy address belongs to the object at ffff88811a9e2000 [ 181.668419][ T360] which belongs to the cache kmalloc-4k of size 4096 [ 181.682388][ T360] The buggy address is located 3296 bytes inside of [ 181.682388][ T360] 4096-byte region [ffff88811a9e2000, ffff88811a9e3000) [ 181.695926][ T360] [ 181.698194][ T360] The buggy address belongs to the physical page: [ 181.704717][ T360] page:ffffea00046a7800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a9e0 [ 181.714787][ T360] head:ffffea00046a7800 order:3 compound_mapcount:0 compound_pincount:0 [ 181.722950][ T360] flags: 0x4000000000010200(slab|head|zone=1) [ 181.728855][ T360] raw: 4000000000010200 ffffea00046a8a00 dead000000000002 ffff888100043380 [ 181.737266][ T360] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 181.745869][ T360] page dumped because: kasan: bad access detected [ 181.752252][ T360] page_owner tracks the page as allocated [ 181.757751][ T360] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 106, tgid 106 (udevd), ts 5699839325, free_ts 0 [ 181.778665][ T360] post_alloc_hook+0x213/0x220 [ 181.784130][ T360] prep_new_page+0x1b/0x110 [ 181.789378][ T360] get_page_from_freelist+0x2f41/0x2fc0 [ 181.795075][ T360] __alloc_pages+0x234/0x610 [ 181.799930][ T360] alloc_slab_page+0x6c/0xf0 [ 181.804682][ T360] new_slab+0x90/0x3e0 [ 181.808808][ T360] ___slab_alloc+0x6f9/0xb80 [ 181.813351][ T360] __slab_alloc+0x5d/0xa0 [ 181.817483][ T360] __kmem_cache_alloc_node+0x207/0x2a0 [ 181.822921][ T360] kmalloc_trace+0x2a/0xa0 [ 181.827165][ T360] uevent_show+0x158/0x330 [ 181.831415][ T360] dev_attr_show+0x56/0xd0 [ 181.836121][ T360] sysfs_kf_seq_show+0x27c/0x3a0 [ 181.840878][ T360] kernfs_seq_show+0x119/0x160 [ 181.845493][ T360] seq_read_iter+0x430/0xd00 [ 181.849906][ T360] kernfs_fop_read_iter+0x145/0x470 [ 181.854944][ T360] page_owner free stack trace missing [ 181.860153][ T360] [ 181.862317][ T360] Memory state around the buggy address: [ 181.867805][ T360] ffff88811a9e2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.875695][ T360] ffff88811a9e2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.884085][ T360] >ffff88811a9e2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.893648][ T360] ^ [ 181.901195][ T360] ffff88811a9e2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.910311][ T360] ffff88811a9e2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.918845][ T360] ================================================================== [ 181.926847][ T360] Disabling lock debugging due to kernel taint [ 181.976327][ T2670] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 181.987047][ T325] usbhid 3-1:0.0: can't add hid device: -71 [ 181.993672][ T325] usbhid: probe of 3-1:0.0 failed with error -71 [ 181.999939][ T2670] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.014518][ T325] usb 3-1: USB disconnect, device number 11 [ 182.057345][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.077684][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.608437][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.838292][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.849764][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 182.860466][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 182.870933][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 182.882611][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 182.893799][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.905049][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.916305][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.927550][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.938890][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.950375][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.961938][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.973163][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.984009][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.995349][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 183.006424][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 183.018293][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 183.030033][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 183.041207][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 183.052110][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 183.063137][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 183.074001][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 183.085384][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 183.097737][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 183.108785][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 183.122208][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 183.135593][ T329] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 183.150755][ T329] ax88179_178a 2-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter, 62:82:9d:7d:49:0f [ 183.164868][ T329] usb 2-1: USB disconnect, device number 12 [ 183.171485][ T329] ax88179_178a 2-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter