last executing test programs: 10.915466339s ago: executing program 1 (id=4804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) unshare(0x2040600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) syz_usb_connect(0x2, 0x67d, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x67, 0x69, 0x5f, 0x10, 0x1410, 0xb001, 0x83d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66b, 0x3, 0xb, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0xb8, 0x9, 0xa, 0xff, 0xff, 0xff, 0x1, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "87"}, {0x5, 0x24, 0x0, 0xc1fe}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xb, 0xc, 0x8}}], [{{0x9, 0x5, 0x5, 0xc, 0x200, 0xfb, 0x1, 0x80, [@generic={0x81, 0x0, "e87ddba0aa85947b3210f14abe86a040cf05c91de31f28701ddc6c34de9c311c9c2468840c552134cd9faec135a5c3155c0f50d3f5060ee630a9c91dac8812d2735c8fa184c477c42a09aadc75c0614342b21a36e360a1269f0c6144abbc7f56c7566f71b4bbb2be1dbdd6c97383582657af008d672a0cfff38aae0ab6a313"}, @generic={0x91, 0x21, "c0d89559b76d70d48258a30964d2383688f0d3db6079b0507c5802025ed76ab41ad90c86a40c4d9b81a7b49d179d6aff4bccca78420eb4c343dfa6238820ab9f2eceb6bd250759f2856b79f4b684ba7d3adf2fd822b0e4a9cadc317dc5cd67f75af2b55b6d8327472210df4897f56b132d682e20774423227cb9ed2249011a9a42925de54faf380db01c5466cf7cf1"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x0, 0x0, 0xa}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x81, 0x8, 0x1, [@generic={0x4f, 0x22, "0033ea4b986697bcc462bc35b9eb49c10939f3408b49d17bddecfb4153edf5eacd5e083c1f70c7b3b4e8ece117660057308b1bf0ecb714ea84b0e1a38ff587eab413b7a4c5abcb3b26547f6a9f"}, @generic={0x80, 0x4, "e220b58b3144aa522fcb87e38aaa7fe11552799553d28ae1d63cbc9a46f69417bdfa4469cd72dd8f0de67ffe731aa0726dbb6952953b3f0d7871274a09ad90ecf431636b968c0ff306783e2ec5be0e7a3298f515bd008f5a667fad35f9b661550810b9c47cc2dc34e439be9e708c2144055d8e038df8643f480072a93f53"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0xfa, 0x8, [@generic={0x5, 0x30, "161961"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x4, 0x7, 0xff, [@generic={0x78, 0x4, "1df77daf180f089766bb72023fef92d6dbcd31fd5877fe49f06739f65d3e724b9ab6d5c173968354ff1e970bae2cd8e1ae708740fb8897c21db9fe4bb05c525697ef27cc710b880c00c1a17f429649c73db8dec6fced792939e164a4e7a646e91fc6c8b0e87c1c4e901fb9cdead133f236cc2528d927"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x40, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x98, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x9, 0x7, 0xe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xaf, 0x6, 0xe0, [@generic={0xba, 0x3, "985cfb40c8080b5df1a3600b37001fe380b7078fbd7c43a0394160973e99787048452c4ba3b8bd50ad667b0785a39cdda0696b05b86c4cdbfaf6ab6fdd4bd26837056c92aee9cf90903a39942f029633a134b04d61c920ab4318096ee0a276f99e01074b7c5991b75c4c65976f180c2080847ce0dc58666614dc7c48d95361c2ad6d7a6cf9153b207e7fb418630ec95b402612b5ece0654eaf68d66ccd85de11c8936a7dfa243520dc4f5b498edab86726b125bb5b77726f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x10, 0x24, 0x89, [@generic={0x51, 0x8, "c6731f0d4e339de952fef32b7ddfea02da208468cc4045019e02a2d60cd4369f31a5115a2a528d12f3d37a12e8f63bf7facbe48fd26e6d99be2e282dedb6d4fbf99b6fb04644f8d3b6925d392eb5ba"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x8e, 0x5, 0xf}}]}}, {{0x9, 0x4, 0xa, 0xc, 0x0, 0xff, 0xd9, 0x16, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x2, 0x2, 0xc}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "ddedbb44a5"}]}]}}, {{0x9, 0x4, 0x95, 0x96, 0x5, 0xbd, 0xd8, 0x14, 0x5, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8001, 0xe0, "2ae91ec056232e"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x2, 0x5, 0x5}]}, @uac_as], [{{0x9, 0x5, 0x1, 0x8, 0x1b7, 0x2e, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x2, 0x5, [@generic={0xf2, 0x4, "675945c73ee7e6884c8ee069d8172785beaf775a341f46ae8a93d75202b1a4c1c6ce5ef77e1cf100841f02f766cd08b13f9c9cc02a3ba7c7b27ca33fef4acab3a7dc7b6d72f5f97a99fc7adc126294199a87093af6f594cf9ddba2f932988ebbe0eccec8bb0ef58a9b6059ec224e94e768e6799823a43cffdfd2b8ee5c8e58d516ddfa66bd80b1cf69fd0b398258543a0893b03f85eb4ed9b1b59a7b42362fff3fa660bf635dc2d4fe2033cc5a50786dc24dc739266c1cf3e3695b8683229689c3e0c78c638a9413a854686165a66206c9b38ebfbc37c668223303d8a386dd29a98f8e8a9df7a8661a5672bb9003e596"}]}}, {{0x9, 0x5, 0x676bbbcb56e59c4c, 0x1, 0x40, 0x4, 0x2, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0x55, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x1, 0xb, 0x6, [@generic={0xe8, 0x30, "714eecf4cc2fdc2113d59a6000232a72c5e827937b9e75048da4f0cf0e8165f6df03020eb213f841c5d5addba2aa50ef754d2a22177b4e562887806c4a240bb380268a859ceb8ea00e6aecbe1ce089f089178109d6b6fe4b19f1f6210803546299f1d9283990db63e5348512f2dff113fcc6c39f44f1fbf1a1d8738e148b50e5e362a6bd8a318ea52f41e3bc0e88291e31ee63ef12bf57201bde0fb50fd1cca71657eda42172e895e717f554f96445347aaf084807eb3b0d36f99cc35fd092986146dee7fc809dda446200800e135985b472d1cc44dc29ac65feb3c30818ca185fe3eaeed529"}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x9, 0x80, 0xe, 0xff, 0x5}, 0x34, &(0x7f00000006c0)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "b0c193aade891f85ee3a3f6fa9557fbc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0x17}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "4d170903d884707f68836fd9a38819d1"}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x827}}]}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.713173367s ago: executing program 0 (id=4812): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r3}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newtaction={0x35c0, 0x30, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{0x250c, 0x1, [@m_bpf={0x1088, 0x4, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x4, 0x20000000, 0x0, 0x10001}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x74, 0x6, 0x8, 0xc866}, {0x3, 0x6, 0x0, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x0, 0x6, 0xf500, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_ct={0xb8, 0x15, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_MARK_MASK={0x8}]}, {0x55, 0x6, "5953b513351e0bbec8c3a2a497f536cf1453f394f7392ac4d776e1b0e2abea17550b7874ecda21c74dbd04553eebfc4b1b4854265777ff723bf57d54d8bbf0d9870779ec0cb84ef27266b526a64a4448e2"}, {0xc, 0x7, {0x0, 0xf85357cbdf1cbd40}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x84, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xca6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x37, 0x6, "f03026a6b71d40665ced3929052315d746feab94f50fc42c4d2b3b8d28e894bc75ba5c43af76462b0980b0841ed88a8ea868ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x106c, 0xd, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6006}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x371a7}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff8, 0x4, 0x20000000, 0x3, 0x2}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xcc, 0x10, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x78, 0x6, "dfdee9f700216b098ba85deedad2b7a9c75b9bba2e4e0572251a6e33512e82560668135092dbb0f2d1411aba4137533cde15c36f289a17d9a757b8917b120889eb7d6e77e74c9b78eac0c91a9adf4e76831702263b061f06a43aeee4e7585a609eec232c2d372c4b94e97ee209368ea0c2a39c65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xd8, 0x15, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15f3, 0xffffffffffffffff}}]}, {0x9f, 0x6, "512864ce53004458028c8b35ed838377b9e544f97bc39d2db30c44f8efc705d768d47a56a0d86226344bcc32ab12f7b468a9f3dd4076d3abd908a571f93aa7fe989bb66a210c977ec801de8180eb8b93b2d4e64688842c4d5f1fa9926d1a9f2cb00fcaa5f9abb4137557963f0afc013a3fa474a5bef5fa3de4eeb93ee2a52009b576829c13f9a6a923c5c1a3ba488fee6a154eddc7d2dab365c3e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x108, 0x8, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x10000000, 0x5}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x74f55}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x8, 0x4, 0x806b}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x884c}]}, {0x91, 0x6, "55b6a50f05bc88845080839540063c382f08566d1168211b473d67048d0365ec2601f7fd4a51abc1f7b59d0b61a5f112d9b9369a1c82a11760e581e64e0a91d7a4545d1919636588f93319f3034aaa13ccc63ca97ecf0626e364eed901996ecbeaee9ac9fea7ab498e36871e689a27518392042cef2e0bad849f2545bf4e9344addfbbfac8a5c608ea9606e3f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0xddc, 0x1, [@m_skbmod={0xe8, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xaf, 0x6, "6df6e3698669e7ede7304cbe43a7a36dfaf1cc55880f1b24be64eeb1fe10c6ca228df7b894c9fa254e467597e744b78d60b593349c5ba0c40fa1231f374c9d96b2a9de6a4734016149156c26eae45eb418ac5650c614d66e8a3067df186adeff0a7903ac4e1107e0c5a1943ec11c999c79108f4ab6e26463317d47c73db912d568e510dca81f130117d5cf941b63f18238e0de990b7c1a3896774577d9345ee678f90424dac185dba1133c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x138, 0xe, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x40000000, 0x3, 0x10000000, 0x800, 0x10}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x8, 0x5, 0x5, 0xff}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xb, 0x1ff, 0x8, 0x5, 0x8000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8174, 0x9, 0x10000000, 0x4, 0xfffffff8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x9b, 0x6, "f98279e0039518d39daab8f732b62bb12740d84c46d6c827f4264b05ec03530bdf15bab599975a1ccc058f6c8b75a4211f7a068861622f4b825770c5809be4ea9c7f02c0366b2968c4eac7c81434e1739373583a1751bca3c48d4375bf099f9a1261b963d676f2715c23f61391333414be8c00adc4c6d84505a17c1e052197e499668caaa4b02aa990deb80904b61375df73b584c066ba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_police={0x994, 0x12, 0x0, 0x0, {{0xb}, {0x904, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xe4d, 0xffffffffffffffff, 0x1, 0x46, 0x0, {0x25, 0x0, 0x8, 0x2, 0x8, 0x5}, {0x7, 0x1, 0x93e, 0x5, 0x60}, 0x1, 0x17, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x3, 0x6, 0x0, {0x4, 0x2, 0x401, 0x3, 0x6a}, {0x7f, 0x2, 0x9, 0x69e1, 0x8001, 0x2}, 0xe, 0x2, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9ea9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0xf, 0x5, 0x5, 0x2, 0x81, 0x455, 0x2, 0x4, 0x40, 0xb9f, 0x2c1, 0x7, 0x9, 0xfffffff7, 0x7, 0x7fffffff, 0xffff, 0x5, 0x2, 0x848c, 0x2d3523b9, 0x1, 0x4, 0x9, 0x8001, 0x5, 0x7ff, 0xfffffffe, 0xfff, 0x5, 0x1aafb3d0, 0xcf, 0x0, 0x3, 0x280, 0x5, 0xe1, 0x9, 0x5f, 0xf8, 0x2, 0x8f51, 0x1, 0x10001, 0x5cbe7f17, 0x3, 0x40, 0x7b, 0x5, 0x2, 0x0, 0x859, 0x8, 0xff, 0x7fffffff, 0xe, 0x9, 0x9, 0x4, 0x0, 0x7fffffff, 0x9, 0x8, 0xe9, 0x1, 0x9, 0xfffffffe, 0x3, 0x80, 0x9, 0xfffffffb, 0x4, 0x9, 0x7ff, 0xff, 0x9, 0x8, 0x1, 0x9, 0x7, 0xffff0000, 0x9, 0x3, 0xfe, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x2, 0xaf, 0xc0, 0x80000000, 0x200, 0x5, 0x2, 0x7, 0x4, 0xfff, 0x7, 0x9, 0x4, 0x5, 0x6, 0x4, 0x0, 0x1, 0x2, 0x800, 0xb92, 0x77, 0x5, 0x5, 0x6, 0x3, 0x7fff, 0x58ce, 0x1, 0x3ff, 0xc, 0x5, 0x6, 0x2, 0x4af1, 0x8, 0x5, 0x10001, 0x4, 0x7, 0x9, 0x6, 0x4, 0xfffffffe, 0x2, 0x101, 0x8be, 0x1, 0x480, 0x7481, 0xfff, 0x0, 0xf, 0x5, 0x0, 0x100, 0x7, 0x8, 0x80000000, 0x8, 0x5, 0x8, 0x0, 0x8, 0x1, 0x7f, 0x7, 0x1, 0x9, 0x6e, 0x8000, 0x8000, 0x2, 0x0, 0xe, 0xc6, 0x0, 0x3, 0x9, 0x5, 0x9e, 0x3, 0x6, 0xff, 0x7, 0x4, 0x7, 0x200, 0x4, 0x4, 0x8, 0x400, 0x8ec4, 0x10000, 0x1000, 0x5, 0x6, 0x8001, 0x0, 0x45, 0xfffffffa, 0x7fff, 0x2, 0x9, 0x0, 0xd93, 0x3ff, 0x8, 0x7, 0x3, 0xe27, 0x2, 0x3, 0x101, 0x8, 0x1000, 0x2, 0x7825, 0x3d, 0x401, 0x1, 0x5, 0x1b56, 0x8, 0x7, 0xf7, 0x80000001, 0xc, 0x8, 0x6, 0x98, 0x4, 0x7fff, 0x9, 0x3, 0x9, 0xffffffff, 0x9, 0x10001, 0x32, 0x10000, 0xffffffe1, 0x223, 0xfffffff7, 0x5, 0x3, 0xffff, 0x2, 0x510, 0x7fffffff, 0x3, 0x0, 0x4d34, 0xfffffffd, 0x8, 0x2, 0x9, 0x8, 0x0, 0x1, 0x8001, 0x0, 0x7, 0x9, 0x2e31, 0xf]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcd}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd5, 0x10000000, 0x6, 0x80000001, 0x5, {0x59, 0x1, 0xfc18, 0x7, 0x9, 0x1}, {0x3, 0x2, 0x1, 0xfff, 0x4, 0x10000}, 0x4, 0x1, 0x8000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fff, 0x7ff, 0x1, 0x6, 0xa, 0x9, 0x7, 0x400, 0xfffff000, 0x9, 0x1000, 0x3f, 0x100, 0xffff, 0xf3, 0x9, 0x3ff, 0x0, 0x6, 0x1, 0x4, 0x7, 0x1, 0x4, 0x80000001, 0x0, 0x3, 0x8, 0x1620156, 0x0, 0x7, 0x0, 0x1, 0x6, 0x5, 0x2, 0x8000, 0x7, 0xc772, 0x7f, 0x0, 0xffff, 0x6, 0x400, 0x0, 0x8, 0xa, 0x3ff, 0x6, 0x3, 0x4, 0x7, 0x732c, 0x5, 0x9f, 0x397, 0x8, 0x9, 0xe06, 0x7, 0x48, 0x6, 0xff9, 0x81, 0xa5, 0x5, 0x6, 0x2, 0x3, 0x4, 0x324, 0x7, 0xff, 0x9, 0x7fff, 0x9, 0xd7, 0x80000000, 0x10000, 0x31, 0x1, 0x9, 0x10, 0x7, 0x200, 0x4, 0x2, 0xc53b, 0x0, 0xb, 0x16, 0x401, 0x6, 0x7, 0x1, 0x5, 0x8, 0x7ff, 0x604a, 0xb, 0x3, 0xbcee0f6f, 0x3, 0x4, 0x3, 0x3, 0x7, 0x7, 0x9, 0xfffffffe, 0x2, 0x2, 0xfffffff9, 0x10, 0x3e, 0x5, 0x7, 0x5, 0x1, 0x4, 0x9, 0x5, 0x6, 0x0, 0x0, 0x2, 0x8001, 0x40, 0xd4e7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x6, 0x7, 0x6, 0xa000000, 0x18, 0x7f, 0xffff, 0x9, 0x0, 0x80000001, 0xf, 0x3, 0x4, 0x6, 0x5, 0x1000, 0x9, 0x8, 0x2, 0xe, 0xfffffffa, 0x9, 0x1, 0xfff, 0x3, 0x3, 0x273, 0x7dc5, 0x2, 0x400, 0x6, 0x67, 0x3, 0xa, 0x0, 0x7, 0x362b, 0x2, 0x8, 0x80000000, 0x200, 0x4, 0xf5, 0x50, 0x7fffffff, 0x8, 0x6, 0x6, 0xc, 0x1, 0x0, 0x6, 0x5, 0x0, 0xfffffff8, 0x52b2, 0x20, 0xe, 0xfffffff7, 0x6, 0x4ef, 0x1, 0x4, 0xfffff4a0, 0xffff, 0xe, 0xfffff001, 0x2, 0x9, 0x6fda501c, 0x3, 0x8, 0x1, 0xffffffff, 0x0, 0x5056e25f, 0x8, 0x52bc, 0x7, 0x40, 0x5, 0x3, 0x8, 0xffffffff, 0x11, 0xe, 0xfffffe48, 0x2, 0x800, 0xffffff00, 0x200, 0x4, 0x1, 0x2, 0x4, 0x5, 0x7, 0x4, 0x6, 0x0, 0x5, 0x80000000, 0x3, 0x0, 0x7fffffff, 0xbbec, 0x9, 0x9, 0x3, 0x2, 0xad69, 0x3, 0x1000, 0x7, 0x4040000, 0x7f, 0x1, 0xd, 0x7ff, 0xc68, 0xffff0001]}]]}, {0x68, 0x6, "e2a88c1e78f926018984c01fc49e66676e3c86493a2f39c346e33a79f31b1bff31ab30528a867721df8be0bba33f86ee5dc4967995ffa986ab326af604593104debbd57ae6ec8e6f3fc572adae64ffd52ebdd4b2da0b46f3c87af5412dd59cdca921a496"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xc4, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x5, 0x81, 0x1}, 0x2}}]}, {0x75, 0x6, "ef57278f8724e65adfce15a20e8e0e32eac545ef8e72eaaa42b88c277b74c731e1917b68163ac5cfe164963414bc9f8b778c257f53b05ade16a1540f88a5a872b80a9d8548e44dd679ef7003938adb6c8e9876bed8db22b7f49ee7d9ea5892692161b7e68d303c37d3baf15268a402235e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x160, 0xe, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10b2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x5, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0xb53, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd80, 0x10000000}}]}, {0xf5, 0x6, "130acdd1f49199fce4a900e3b251320014f47cfa65fe179bc542fd9e3192555e8e58b3e7a428d3a2b7972d1495789c88e2b2b593eec2c92157698d6a208a3df1d5c2361cad4f0e38324c9071ae9b3022c306cdd15270d9ab7defef60b506f1acedd1a1e164cc19fa89ec78fa026a39a566b29416eff4f85d51ee0c07d8eb73aaefb058e115df229723cc9be4acb0a899f12c1ec38c217b505bff219ff097430be430f7cb08afe4ea7f03b19534fe4d1ad81aea07e0ed78ae899bdaa9260fbed0b0b83e941f94f2345ad1b617cfbefda101201001c2faf112ac359c6c643300e89af2fdb827b5d07f2548e89fdabb073cc0"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x2c4, 0x1, [@m_xt={0x2c0, 0x5, 0x0, 0x0, {{0x7}, {0x200, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}, @TCA_IPT_TARG={0xb3, 0x6, {0xda, 'mangle\x00', 0x9, 0x5, "731ff9d3818b01911c70e0e07e0c954334dfef27f09beea65ec95cd9934adc1b68e0113d300886ca48c92bab9383d5de138b5a894652c090046869ba8895502d69202c90fe7f12e09d215717fce8def476df78ccbafa008318d1b660414d0be0bb9722643b84ed920b3d6f85ef9c0ceb18a893f68f26f2b1b30974e3195297f0231a60d0adc5dc1c20"}}, @TCA_IPT_TARG={0x101, 0x6, {0x5, 'raw\x00', 0x40, 0x0, "426ef8d97821f61c79986242572400f8f718800741f0f303a23c3e2cfa63e83655e6250a3c982518820dd5b712900b082c14cce646cc7911e03af708237e3397d00b80216ea03b8d800d9c099c1b963e2b3f8e5d9709117b31119ae8675708709b5d556de5181bc3ac2d5aeb8c292a286d25702bd3957f7d8c816ef77c444e93e2667144857ff3a28e02f1307c4ae20a2ffe59adc512bb3c5e368bf4cdeaed63483416987a1b14f7adb2b778f3bae1e09f18bb5db3c286e0b2ef9131c27ad7ce552be56979a7cca1647d9dcf5bcb3984dbbd025c09a136"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x9b, 0x6, "7b3c1f32d4d0cb09699ef2fadfac337e6a8befcc6857ac2edd96fa67f47d1345cc7a149c6c766d45f4503be1235a86dbf0e0c0dba11d283ed8f2a83297c1d1306054359f4d24a422ac3db9361a4507c7c9bec6a7759047cdcee1bf76ca08f0c88748c61c36aac6875e2e6938019b53460e77cc5ba4a157b470cb23335d285bb2c5b947279c5ec9d261b8ada98d3e212499ee64b9a2d1d2"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x35c0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140), 0x4240a2ca) splice(r0, 0x0, r4, 0x0, 0x84ffe0, 0x0) 8.85356425s ago: executing program 0 (id=4815): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0x100000000, 0x2, 0xffffffffffff0f76}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 8.787173831s ago: executing program 0 (id=4816): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6(0xa, 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="2c58f33760126304bf0333af6fcf6a862cd428057fe491ca077806bef97579857f04e659e25fb989a9673337a69f89742b4407daccb7b57a02d618ba62bde5d4cad9825288304392175c1b5ae0eaaa58e7fd3768160ef301f68d0e86dcd1ea99e945deafd2a68a4c8cf71aabdabd9d3c4435f74b8848ef66de358b7550701d06ebe447e85b8ea1d4a9512a3415cbc9b59e7d", 0x92, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff9ff0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 8.199452009s ago: executing program 1 (id=4817): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, 0x0, &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7.366097601s ago: executing program 0 (id=4819): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf26, 0x840}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0}, 0x38) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340), 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffb, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) setregid(0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000003280)=""/85, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3846}}, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x3, 0x61, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0xed, 0x35, 0x4, 0x8, 0x2040, 0xb700, 0xc739, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x2, 0x8, 0x80, 0xb, [{{0x9, 0x4, 0xd6, 0x4, 0x0, 0x90, 0x16, 0x2c, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x2, 0x6, [0x2, 0x7, 0x9, 0x2, 0x1, 0xa], 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x2, 0x3, 0x81}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1fe, 0x4, 0x6, 0xe1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x1, 0x5, 0x2}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0xa, "8d"}]}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x140, 0x6, 0x7, 0xf7, 0x8, 0x1}, 0x10e, &(0x7f0000000480)={0x5, 0xf, 0x10e, 0x4, [@generic={0xef, 0x10, 0xb, "3e236c511c9353a925d6e522c187436674bcd21467058feb308baddc0ee499c098867e3426b870889c89a4deb6554ed38e4dee0fce9e6f3551522163cf74ef5ac03b3afd3980bc49e69db93bf2ca0e189c428105107a13268ce86e2f5a0bce78a74007d586a1f84e8f0ae907cdfe8048fd74c72f8dc0969465687a3d2e3adb59f0d5af172c448202bf40e48e66a161fb813f49edf1f52b9d384b2e2097ed1e81f48b768a558ad697511f54fb119cd40347f31ad8144355ce8d3adb27f07475e59fd8af70b93f9c2f1ac7ae37fcd5acb4bd7b9e7ace53ad623520be7f82aece4d034ab6bbd0ce5ee507a60118"}, @ss_container_id={0x14, 0x10, 0x4, 0x38, "bf3824daf73d8aec983750ad8166c200"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x437}}, {0xbe, &(0x7f0000000680)=@string={0xbe, 0x3, "265342a5e380475470992fbbb075ac9653dafbb2cb99dd70879bc7b6cfa1e3b4ff5e70f9317039319ee70ea66814d2a4547eeeeeec86ff35654e088c68455e460eb580e600bff201ed650643041d2558a960914c6d343a94b34a63e5f015cbda07d3af4c222ab4e8b4ec3b4e94bc368962d9627965150af45fbd47568224a41b4ed9266baa53737721ad699eceb8e55a0d6b319b6756586b63261baea49aff149de6f89ee693f11b1737c5b2605a7791acfd2bbb66ed6c34c591b178"}}, {0x12, &(0x7f0000000400)=@string={0x12, 0x3, "13df3a38337592565b1ce926bb4b9f95"}}, {0x57, &(0x7f00000005c0)=@string={0x57, 0x3, "68e4707bfc920a5def67c2cfa3c4ec1ef73e34f781401cf272e64901d03f56ccd597af9a9c6e2d2a306c73a6cbb23dd16adb627ea0b90353ce0eda44064765254011de93c034f56ea9e57a3dac80b0346fb31fd3f4"}}, {0xbb, &(0x7f0000000740)=@string={0xbb, 0x3, "88b585d32305cfd790f339ddd1024b15e86dc04d5363561dd2f0cd0a05ff46afd5967bd9625ea6bde6e1b48831cb7a00d6318d5e394cc1d81b1048784d0afb6b6e49f292785c4bd6c6096b3d03c0ca9c83cc0527d20eb3cc8678da694f170791bc22de9c0b230c09648e66412fc506e14fbdf6d42091bd83d585b276329ec2eeab6f86b5953487a9d09abf19987fc3272889045142919124e02b9a6ea1eba24e43487d9995e2f9791804f9f7bc176b660438908b6828786e96"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1476}}, {0xe8, &(0x7f0000000840)=@string={0xe8, 0x3, "63e68cbe5d45260ee406b0bea00f1253cd02e0dc2de568e2589819125f534d6dc1ce6c89a997b3a99a45ff9060418f82f8b860a14a0b0b66b8db70cbb9bed29964564d1310716e7ec407fb6beb7667be9a826596ef2610546c9e0260b600d094e58ac0e8bdce1c074227043b524db7ec7cf0ad6c85675aec175bb68b98e43f03da9c4f23485103728dbc0ff8a8524caa28df6e27218316c0fa3acbbcde2971db804df00230931cf124ccfb667ccb4873c92406a86756666dfff1bd6a39fcda178fd7ba85775a64e257b25eb94fab55e7137f5db1ecddb4bcf6a62ed58b58b6f76dc6f25f9757"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x439}}, {0x8, &(0x7f0000000980)=@string={0x8, 0x3, "5be543149c8d"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x98dd67cf63b2cc81, 0x3, 0x1f, {0x1f, 0x30, "521842d12f66517d5908a5be5d1e6a5a71e174d273e58431c08ae7fe54"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "15ce2b6f6e7b3d74290c6d02c634d7d6117fb67b8cf24bec72607b2f440ff7295df610674dfadbc50b4a9f4fe44fc83a535bb796085aa392ef06f60b61a264e1bf470180016f042462f46504ef05344148530598fb87432696616bea1906188f5bcb7a89806617cbda6252d4f76b56d2491eb048d5795497bf114d2f7475e76cdecc2a98c6e429b88b55e46bdc92f2c3af0baeb0eead97c374a0559407a1a228461b0206e28707d583fe20ac18efb6b0b81ebbc9f6526b1f83974c62d9beec67887d1f093edb6fbe892ae8d1fba37bcc"}}}, &(0x7f00000016c0)={0x34, &(0x7f0000001480)={0x0, 0x17, 0xd8, "4133668d7a87665579789bcc46b664086e2f2333d9c1126cee80e9fc1c2fcd476270adec020554fd0e54251c63d92a47d2cf85ef191a2ed224672a92a8da2e45fe8e2f5c5045a884bee4a6064ad5d7519389be6a3567a83056fba23e3eab9809fc940a5dac40041a57a51bae7195cfe323f1ca84bc7ad85a60d44edcc5f2cf7d0e9ca2afce8748e366d98a093bdef603b5f5246cd16acb97344853ff7b212876624565e91ad9458a9bbf3c38ee1a25a73c5585c9530ae02ce09997780e434b3ea13af89935eab34600fea69a13b4210cdbfc618dba83fca7"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xcc}, &(0x7f0000001600)=ANY=[@ANYBLOB="200033000000003143fd94fff2be6de6ef7fe6a25439fa32b0b6f00b792d6f2f18949f990557581d19c9368c43de49989aff7f000000000000"], &(0x7f0000001640)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000001680)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x17, @string={0x17, 0x3, "4019ee15f628e4c4d4f5785aa2cf08bb092b7c5e98"}}, 0x0, 0x0, 0x0}, &(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xe7}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x12, 0xc3, 0x5b, 0x40, 0x403, 0x6010, 0xc698, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x75, 0xf6}}]}}]}}, 0x0) 7.250722923s ago: executing program 1 (id=4820): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000822e396f1d3e84d36b7f437d93d3ec524f0d971ef6c275c5dcdcd00416ff094aa4b483fe626d386a0aefc5cc77cca5e115f979923d30d3dbc52c7dc1f0a677d9d875b61296aeb5e001686ad6d5246d7ef495fd82d82deac6cbf8b15a20901b0bf949a79bdc624d99cb400f20c5866c097aa516be4c792f50ce694f83efc19e57721e5f35168106a49d27af062eac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16f2c985a76925c000"/30, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r3}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00'}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 7.198951964s ago: executing program 1 (id=4821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var, @func, @volatile, @volatile, @func={0x5, 0x0, 0x0, 0xc, 0x1}]}}, 0x0, 0x5a}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x90, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x420043, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x8000000}, 0x80) 7.079168116s ago: executing program 3 (id=4823): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000010000000000000005000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000020000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) 7.074765636s ago: executing program 4 (id=4824): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, 0x0, &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.052305061s ago: executing program 4 (id=4826): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c0001007665"], 0x48}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.006519711s ago: executing program 0 (id=4827): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x15) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000001b40)='./file0\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x1503, &(0x7f0000000580)="$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") socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, 0x0}, 0x20) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 5.914301483s ago: executing program 3 (id=4828): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0xc0800) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x60}}, 0x0) ioctl(r2, 0x0, &(0x7f0000001640)="4fdc9d56e7035cbd55a0d97c8f50569f2373eb2fd56fc8bb659488c41d07c3efd205606d0f404cf22b04de3335333582b5c606438c00ab402f0e2c6a530a8760e50527291722206525297aa53fe4ce2bcdeb6d623a779baedcee218570cc5f746437c205a435af5dcb72d1e943ad16e03e23bdceafd71338d9edecd61262339c2dc2566902b430f94d253d22e0fe741354a9c9abf7ac5a31da34b64e2dfb72bc95964f5cd86f621203f948a20bfb3acedd089e4cfd56afa764123702d3545c5b05738ac4498535a0d26dc19a6971b16d27a9744297e1bd97eea3") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 5.911848203s ago: executing program 1 (id=4829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.127499884s ago: executing program 4 (id=4830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 5.054492415s ago: executing program 4 (id=4831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0xffffff93) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac14141218009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140), 0x4240a2ca) splice(r1, 0x0, r7, 0x0, 0x84ffe0, 0x0) 4.954398027s ago: executing program 2 (id=4832): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c0001007665"], 0x48}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4.807615089s ago: executing program 3 (id=4833): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0xc0800) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) userfaultfd(0x80001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x60}}, 0x0) 3.096492554s ago: executing program 4 (id=4834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var, @func, @volatile, @volatile, @func={0x5, 0x0, 0x0, 0xc, 0x1}]}}, 0x0, 0x5a}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x420043, 0x1) fcntl$setlease(r3, 0x400, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x8000000}, 0x80) 2.950758576s ago: executing program 2 (id=4835): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0x100000000, 0x2, 0xffffffffffff0f76}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 2.949737046s ago: executing program 3 (id=4836): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c0001007665"], 0x48}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.939083436s ago: executing program 0 (id=4837): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020722500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_read_part_table(0x61b, &(0x7f0000000000)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) io_setup(0x200, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, &(0x7f0000000380)='\\', 0x1, 0x3000}]) 2.308511116s ago: executing program 2 (id=4838): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r11, @ANYBLOB="0000000200000000280012000c0001007665"], 0x48}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r12, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.166277638s ago: executing program 4 (id=4839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.239891361s ago: executing program 3 (id=4840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syncfs(r2) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0900000008000000dd000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000080000000000000000000000000000000000000079b07eaeb415d8bb9dc78e69634a1bf3c7a9575cef0045a1b850c5e44b187b27478519f818799a37eecd176f3ff24b97bf0708946879b856521aaaeb04118511eecdd8ae45fa5fa8214b4f3a70cd0c700b5d2b6ce9bc03540d5c3c257f4c41852338df1159783a6ba954901910fbeb4f8aee995ad13b532d9613a6aaa3fe2d95ab1032a04c9dc3fd365d8dfaa1fb790cb8df3a58645dc02b0d914f639db40e801c803839f08530ec0f35072b9de3410293e789cdab53b2c8a02218d0"], 0x50) close(0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") symlink(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000100)='.\x02\x00') 1.190451112s ago: executing program 2 (id=4841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000822e396f1d3e84d36b7f437d93d3ec524f0d971ef6c275c5dcdcd00416ff094aa4b483fe626d386a0aefc5cc77cca5e115f979923d30d3dbc52c7dc1f0a677d9d875b61296aeb5e001686ad6d5246d7ef495fd82d82deac6cbf8b15a20901b0bf949a79bdc624d99cb400f20c5866c097aa516be4c792f50ce694f83efc19e57721e5f35168106a49d27af062eac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16f2c985a76925c000"/30, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00'}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 1.152342713s ago: executing program 3 (id=4842): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x15) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000001b40)='./file0\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x1503, &(0x7f0000000580)="$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") socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, 0x0}, 0x20) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 1.144614603s ago: executing program 1 (id=4843): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff010000000100000056000000250000001900", 0x22}], 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.067726674s ago: executing program 2 (id=4844): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) rename(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r0, &(0x7f0000000180)='./file2\x00', 0x8901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c0001007665"], 0x48}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 2 (id=4845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) unshare(0x2040600) syz_usb_connect(0x2, 0xb37, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x67, 0x69, 0x5f, 0x10, 0x1410, 0xb001, 0x83d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb25, 0x4, 0xb, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0xb8, 0x9, 0xa, 0xff, 0xff, 0xff, 0x1, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "87"}, {0x5, 0x24, 0x0, 0xc1fe}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xb, 0xc, 0x8}}], [{{0x9, 0x5, 0x5, 0xc, 0x200, 0xfb, 0x1, 0x80, [@generic={0x81, 0x0, "e87ddba0aa85947b3210f14abe86a040cf05c91de31f28701ddc6c34de9c311c9c2468840c552134cd9faec135a5c3155c0f50d3f5060ee630a9c91dac8812d2735c8fa184c477c42a09aadc75c0614342b21a36e360a1269f0c6144abbc7f56c7566f71b4bbb2be1dbdd6c97383582657af008d672a0cfff38aae0ab6a313"}, @generic={0x91, 0x21, "c0d89559b76d70d48258a30964d2383688f0d3db6079b0507c5802025ed76ab41ad90c86a40c4d9b81a7b49d179d6aff4bccca78420eb4c343dfa6238820ab9f2eceb6bd250759f2856b79f4b684ba7d3adf2fd822b0e4a9cadc317dc5cd67f75af2b55b6d8327472210df4897f56b132d682e20774423227cb9ed2249011a9a42925de54faf380db01c5466cf7cf1"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x0, 0x0, 0xa}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x81, 0x8, 0x1, [@generic={0x4f, 0x22, "0033ea4b986697bcc462bc35b9eb49c10939f3408b49d17bddecfb4153edf5eacd5e083c1f70c7b3b4e8ece117660057308b1bf0ecb714ea84b0e1a38ff587eab413b7a4c5abcb3b26547f6a9f"}, @generic={0x80, 0x4, "e220b58b3144aa522fcb87e38aaa7fe11552799553d28ae1d63cbc9a46f69417bdfa4469cd72dd8f0de67ffe731aa0726dbb6952953b3f0d7871274a09ad90ecf431636b968c0ff306783e2ec5be0e7a3298f515bd008f5a667fad35f9b661550810b9c47cc2dc34e439be9e708c2144055d8e038df8643f480072a93f53"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0xfa, 0x8, [@generic={0x5, 0x30, "161961"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x4, 0x7, 0xff, [@generic={0x78, 0x4, "1df77daf180f089766bb72023fef92d6dbcd31fd5877fe49f06739f65d3e724b9ab6d5c173968354ff1e970bae2cd8e1ae708740fb8897c21db9fe4bb05c525697ef27cc710b880c00c1a17f429649c73db8dec6fced792939e164a4e7a646e91fc6c8b0e87c1c4e901fb9cdead133f236cc2528d927"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x40, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x98, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x9, 0x7, 0xe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xaf, 0x6, 0xe0, [@generic={0xba, 0x3, "985cfb40c8080b5df1a3600b37001fe380b7078fbd7c43a0394160973e99787048452c4ba3b8bd50ad667b0785a39cdda0696b05b86c4cdbfaf6ab6fdd4bd26837056c92aee9cf90903a39942f029633a134b04d61c920ab4318096ee0a276f99e01074b7c5991b75c4c65976f180c2080847ce0dc58666614dc7c48d95361c2ad6d7a6cf9153b207e7fb418630ec95b402612b5ece0654eaf68d66ccd85de11c8936a7dfa243520dc4f5b498edab86726b125bb5b77726f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x10, 0x24, 0x89, [@generic={0x51, 0x8, "c6731f0d4e339de952fef32b7ddfea02da208468cc4045019e02a2d60cd4369f31a5115a2a528d12f3d37a12e8f63bf7facbe48fd26e6d99be2e282dedb6d4fbf99b6fb04644f8d3b6925d392eb5ba"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x8e, 0x5, 0xf}}]}}, {{0x9, 0x4, 0xa, 0xc, 0x0, 0xff, 0xd9, 0x16, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x2, 0x2, 0xc}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "ddedbb44a5"}]}]}}, {{0x9, 0x4, 0x65, 0x8, 0xa, 0xa8, 0x33, 0xba, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '1'}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x4, 0x2, 0x73}, [@country_functional={0xc, 0x24, 0x7, 0x2, 0x40a7, [0x3240, 0x4, 0x10]}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x3}, @mdlm_detail={0x5b, 0x24, 0x13, 0xa9, "1149f0468b3210f71e2e5b2c493e5b2317ce4003b5fe61c00c129cdf69406256116bfd16580613c7bfe48620018b52b8cc47ed70d03a6f931dc94267ba0a31a9cccc150a246358d56796f285cee8f105b3a0288556612a"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x3, 0x7, 0x2, [@generic={0x46, 0xb, "8b52a4e61ee25f2903cfaf3b77539d54dd991dd25638c451b4710e78d71763b3fa1616e539389d37c914659c5102d4d741f8a2ab5b3992ded57060e2690b0751755b426a"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x4, 0x9, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2000}, @generic={0x55, 0x3, "75d6306b56903492d213be0eb0a386785c092687bfe7b42ed6a267405ebb46fc95ad6af504e875f9cfc2db5b1d307cfd02d4013e4ef6fe2fb482635f9f9a00aa0506f33dc47122dcabd620998833726e3d116a"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x6}, @generic={0x3b, 0x0, "4b6f4b742d27ffc1c960ebd8cc56be85a92c60c1bca7ab278f91e9fb99dfd24af4eb85c70f12f63a1de1717e4c323073d0e7d8643c59e80c4c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7, 0x3, 0x3, [@generic={0xe, 0x2c, "0682068269680e8a4aaac8d5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x39, 0x9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x9, 0x67, 0x81, [@generic={0xf5, 0x9, "7f11f5deb3c863877d26b276e90e481ea6044954f3c8336dbda20a136eba1304ed633d04c9085aa494fdb055a3c942a9788f252d5cd427921f849722c5f9c28bf43caad42d0f5501437dd66cd8eccaa4d589c59481d59c653c2f7128871b17711f42588f4c48682f216b70d6c7e5f347af3a3025475f7488c811e76bf26573783d9ab54c546f47693d7ab96db815c59662a338d3a9be948287fab342faad3ea39db183fc28d11a6cd664538acd4dfcf57fde56a4d14df6acf9ba7495d70558403aba55a36ff7183139e41b2355bfa1d2dcfe1cd64dc14e1eca95e1e4e72134dbcdeb6a10be91111163bc7b11fd62030e822ba4"}, @generic={0x86, 0xb, "6dea38234ad6ffca72debacd607b8d07bcfcb1c4ede0e791f6d78c61b740a221f370db1de6b19189c5d4b5223ec0e02c785599a1eaf9e721bd7a9f39c6fb24324327b688515a1c159d8966fbae520639c6f9676002eaaf83a76ada794a062bf3cf3c9ac726c10505c29655d7dab4332da1dd097f7710ba430394533ba5f3928e4c829d06"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0xfd, 0xe7, 0x2, [@generic={0x8b, 0x11, "fb5ee58b6f1f7848ffcf6aa326ea03a4736c66db22d980b1cd0fc5556ab623fb90d2a0d95a7b303c822ce8d224b6ee8341420d1cbfac2b364bfabfb34e7c68087e341f06a2f91d3ecf2e8195b427da0e71d7d655df0d1b0497a9a106c928cb95e290eb5208485be3cb49dad0ca334a37719ed4e2821070250a3c0e98a9bc7a2c92a3fc820ea509f0ae"}, @generic={0xd6, 0xa, "409cc12f323342d13df71e7245006ea3651cdf26a5b2212b0d567e2c02a90f60c328567def91496b76e014df8d366fce62f771b8a2dddd84b96d2a0b5af98ac9c3947cbf469b5cf00d6dda4ebf0c0beff7d0a3a4e73116c4477f1cf50f097489ebe922bf63ddccdec05da742b4e5dcd8289a15ccd7ce6eeb3280d46b8d432200619b14fd98a6945f70efadfcb5374c0ca28dd24cf8a066a414be00868ffd826f189ab1c0c56d96b0fa6a8388700a5ecaab7f87d62c6541fce25d63eb2225279d01bb19b9e4f3cb7c73cb3218b04fab29ddad3aa8"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x2, 0x2, 0x2}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x10, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x9, 0xbf}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x7f, 0xd, 0x6}}]}}, {{0x9, 0x4, 0x95, 0x96, 0x5, 0xbd, 0xd8, 0x14, 0x5, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8001, 0xe0, "2ae91ec056232e"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x69, 0x2, 0x5, 0x5, "ff4a8a88"}]}, @uac_as], [{{0x9, 0x5, 0x1, 0x8, 0x1b7, 0x2e, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x2, 0x5, [@generic={0xf2, 0x4, "675945c73ee7e6884c8ee069d8172785beaf775a341f46ae8a93d75202b1a4c1c6ce5ef77e1cf100841f02f766cd08b13f9c9cc02a3ba7c7b27ca33fef4acab3a7dc7b6d72f5f97a99fc7adc126294199a87093af6f594cf9ddba2f932988ebbe0eccec8bb0ef58a9b6059ec224e94e768e6799823a43cffdfd2b8ee5c8e58d516ddfa66bd80b1cf69fd0b398258543a0893b03f85eb4ed9b1b59a7b42362fff3fa660bf635dc2d4fe2033cc5a50786dc24dc739266c1cf3e3695b8683229689c3e0c78c638a9413a854686165a66206c9b38ebfbc37c668223303d8a386dd29a98f8e8a9df7a8661a5672bb9003e596"}]}}, {{0x9, 0x5, 0x676bbbcb56e59c4c, 0x1, 0x40, 0x4, 0x2, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0x55, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x1, 0xb, 0x6, [@generic={0xe1, 0x30, "714eecf4cc2fdc2113d59a6000232a72c5e827937b9e75048da4f0cf0e8165f6df03020eb213f841c5d5addba2aa50ef754d2a22177b4e562887806c4a240bb380268a859ceb8ea00e6aecbe1ce089f089178109d6b6fe4b19f1f6210803546299f1d9283990db63e5348512f2dff113fcc6c39f44f1fbf1a1d8738e148b50e5e362a6bd8a318ea52f41e3bc0e88291e31ee63ef12bf57201bde0fb50fd1cca71657eda42172e895e717f554f96445347aaf084807eb3b0d36f99cc35fd092986146dee7fc809dda446200800e135985b472d1cc44dc29ac65feb3c30818ca"}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x9, 0x80, 0xe, 0xff, 0x5}, 0x34, &(0x7f00000006c0)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "b0c193aade891f85ee3a3f6fa9557fbc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0x17}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "4d170903d884707f68836fd9a38819d1"}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x827}}]}) kernel console output (not intermixed with test programs): adm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 923.436537][ T28] audit: type=1400 audit(2000000527.896:1142): avc: denied { create } for pid=15533 comm="syz.0.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 923.462275][T15530] EXT4-fs (loop4): 1 truncate cleaned up [ 923.468113][T15530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 923.518439][T10554] EXT4-fs (loop3): unmounting filesystem. [ 923.534543][T15538] loop1: detected capacity change from 0 to 8192 [ 923.567459][T15538] loop1: p1 p2 p3 p4[EZD] [ 923.574178][T15538] loop1: p1 size 16128 extends beyond EOD, truncated [ 923.593315][T15538] loop1: p3 start 458783 is beyond EOD, truncated [ 923.600020][T15538] loop1: p4 size 65536 extends beyond EOD, truncated [ 923.729895][ T7838] udevd[7838]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 923.740550][T31545] udevd[31545]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 923.880135][T30497] udevd[30497]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 924.032271][T15548] loop3: detected capacity change from 0 to 512 [ 924.073632][T15548] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 924.088911][T15537] 9pnet_fd: Insufficient options for proto=fd [ 924.170261][T15548] EXT4-fs (loop3): 1 truncate cleaned up [ 924.176181][T15548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 924.307364][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 925.813127][T15561] loop2: detected capacity change from 0 to 512 [ 925.854301][T15561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 925.865883][T15560] loop1: detected capacity change from 0 to 8192 [ 925.878174][T15561] EXT4-fs (loop2): 1 truncate cleaned up [ 925.888698][T15561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 925.901666][ T3017] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 925.963999][T15560] loop1: p1 p2 p3 p4[EZD] [ 925.968762][T15560] loop1: p1 size 16128 extends beyond EOD, truncated [ 925.986807][T15560] loop1: p3 start 458783 is beyond EOD, truncated [ 925.993790][T15560] loop1: p4 size 65536 extends beyond EOD, truncated [ 926.181247][ T3017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.383926][ T3017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.519062][ T3017] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.543454][ T3017] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 928.307730][T15572] loop1: detected capacity change from 0 to 512 [ 928.388058][T15572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 928.484113][T15439] EXT4-fs (loop2): unmounting filesystem. [ 928.543353][T15572] EXT4-fs (loop1): 1 truncate cleaned up [ 928.549188][T15572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 928.791910][T15577] loop2: detected capacity change from 0 to 512 [ 928.833857][T15577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 928.885655][T15577] EXT4-fs (loop2): 1 truncate cleaned up [ 928.891450][T15577] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 929.024193][ T3017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.032990][ T3017] usb 5-1: config 0 descriptor?? [ 929.033353][T15133] EXT4-fs (loop1): unmounting filesystem. [ 929.066038][ T3017] usb 5-1: can't set config #0, error -71 [ 929.083620][ T3017] usb 5-1: USB disconnect, device number 91 [ 929.113718][ T28] audit: type=1400 audit(2000000533.610:1143): avc: denied { ioctl } for pid=15587 comm="syz.1.3201" path="socket:[93846]" dev="sockfs" ino=93846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 929.139094][T15588] FAULT_INJECTION: forcing a failure. [ 929.139094][T15588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.193116][T15588] CPU: 1 PID: 15588 Comm: syz.1.3201 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 929.203158][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 929.213247][T15588] Call Trace: [ 929.216634][T15588] [ 929.219751][T15588] __dump_stack+0x21/0x24 [ 929.224332][T15588] dump_stack_lvl+0xee/0x150 [ 929.228955][T15588] ? __cfi_dump_stack_lvl+0x8/0x8 [ 929.234007][T15588] ? vfs_write+0x9d6/0xca0 [ 929.238518][T15588] dump_stack+0x15/0x24 [ 929.243001][T15588] should_fail_ex+0x3d4/0x520 [ 929.247829][T15588] should_fail+0xb/0x10 [ 929.252267][T15588] should_fail_usercopy+0x1a/0x20 [ 929.257473][T15588] _copy_from_user+0x1e/0xc0 [ 929.262152][T15588] __sys_bind+0x1d1/0x420 [ 929.266526][T15588] ? __cfi___sys_bind+0x10/0x10 [ 929.271476][T15588] ? __kasan_check_write+0x14/0x20 [ 929.276859][T15588] ? debug_smp_processor_id+0x17/0x20 [ 929.277013][T15590] loop4: detected capacity change from 0 to 8192 [ 929.282254][T15588] __x64_sys_bind+0x7a/0x90 [ 929.282288][T15588] x64_sys_call+0x70c/0x9a0 [ 929.297785][T15588] do_syscall_64+0x4c/0xa0 [ 929.302386][T15588] ? clear_bhb_loop+0x30/0x80 [ 929.307089][T15588] ? clear_bhb_loop+0x30/0x80 [ 929.311832][T15588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.317813][T15588] RIP: 0033:0x7f2636d8e929 [ 929.322395][T15588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.342243][T15588] RSP: 002b:00007f2636bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 929.350894][T15588] RAX: ffffffffffffffda RBX: 00007f2636fb5fa0 RCX: 00007f2636d8e929 [ 929.359080][T15588] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 0000000000000006 [ 929.367276][T15588] RBP: 00007f2636bff090 R08: 0000000000000000 R09: 0000000000000000 [ 929.375303][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.383494][T15588] R13: 0000000000000000 R14: 00007f2636fb5fa0 R15: 00007ffe8a81cb08 [ 929.391714][T15588] [ 929.425193][T15590] loop4: p1 p2 p3 p4[EZD] [ 929.435203][T15590] loop4: p1 size 16128 extends beyond EOD, truncated [ 929.451953][T15590] loop4: p3 start 458783 is beyond EOD, truncated [ 929.465144][T15590] loop4: p4 size 65536 extends beyond EOD, truncated [ 929.582898][T31545] udevd[31545]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 929.582966][ T7838] udevd[7838]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 929.606196][T30497] udevd[30497]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 929.686520][T10554] EXT4-fs (loop3): unmounting filesystem. [ 929.695461][T15595] loop1: detected capacity change from 0 to 256 [ 929.697502][T15439] EXT4-fs (loop2): unmounting filesystem. [ 929.720322][T15595] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 929.764599][T15597] loop3: detected capacity change from 0 to 256 [ 929.773707][T15599] loop2: detected capacity change from 0 to 256 [ 929.793096][T15599] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 929.812559][T15597] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 930.013847][T15604] 9pnet_fd: Insufficient options for proto=fd [ 930.141146][T15608] 9pnet_fd: Insufficient options for proto=fd [ 930.175579][T15607] 9pnet_fd: Insufficient options for proto=fd [ 930.438428][T15610] FAULT_INJECTION: forcing a failure. [ 930.438428][T15610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.451629][T15610] CPU: 1 PID: 15610 Comm: syz.4.3209 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 930.461559][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.471627][T15610] Call Trace: [ 930.474920][T15610] [ 930.477856][T15610] __dump_stack+0x21/0x24 [ 930.482233][T15610] dump_stack_lvl+0xee/0x150 [ 930.486839][T15610] ? __cfi_dump_stack_lvl+0x8/0x8 [ 930.491881][T15610] dump_stack+0x15/0x24 [ 930.496060][T15610] should_fail_ex+0x3d4/0x520 [ 930.500761][T15610] should_fail+0xb/0x10 [ 930.504929][T15610] should_fail_usercopy+0x1a/0x20 [ 930.509966][T15610] _copy_to_user+0x1e/0x90 [ 930.514389][T15610] simple_read_from_buffer+0xe9/0x160 [ 930.519777][T15610] proc_fail_nth_read+0x19a/0x210 [ 930.524832][T15610] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 930.530395][T15610] ? security_file_permission+0x94/0xb0 [ 930.535946][T15610] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 930.541504][T15610] vfs_read+0x26e/0x8c0 [ 930.545671][T15610] ? __cfi_vfs_read+0x10/0x10 [ 930.550359][T15610] ? __kasan_check_write+0x14/0x20 [ 930.555507][T15610] ? mutex_lock+0x8d/0x1a0 [ 930.559926][T15610] ? __cfi_mutex_lock+0x10/0x10 [ 930.564797][T15610] ? __fdget_pos+0x2cd/0x380 [ 930.569404][T15610] ? ksys_read+0x71/0x240 [ 930.573753][T15610] ksys_read+0x140/0x240 [ 930.578005][T15610] ? __cfi_ksys_read+0x10/0x10 [ 930.582777][T15610] ? fpregs_restore_userregs+0x128/0x260 [ 930.588438][T15610] __x64_sys_read+0x7b/0x90 [ 930.592952][T15610] x64_sys_call+0x2f/0x9a0 [ 930.597375][T15610] do_syscall_64+0x4c/0xa0 [ 930.601820][T15610] ? clear_bhb_loop+0x30/0x80 [ 930.606505][T15610] ? clear_bhb_loop+0x30/0x80 [ 930.611192][T15610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.617091][T15610] RIP: 0033:0x7f87eb98d33c [ 930.621510][T15610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 930.641117][T15610] RSP: 002b:00007f87eb7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 930.649537][T15610] RAX: ffffffffffffffda RBX: 00007f87ebbb5fa0 RCX: 00007f87eb98d33c [ 930.657526][T15610] RDX: 000000000000000f RSI: 00007f87eb7ff0a0 RDI: 0000000000000009 [ 930.665497][T15610] RBP: 00007f87eb7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 930.673507][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.681487][T15610] R13: 0000000000000000 R14: 00007f87ebbb5fa0 R15: 00007ffdf1935368 [ 930.689471][T15610] [ 931.383815][T15626] loop1: detected capacity change from 0 to 512 [ 931.392277][T15626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 931.604326][T15626] EXT4-fs (loop1): 1 truncate cleaned up [ 931.610103][T15626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 931.932544][T15629] loop3: detected capacity change from 0 to 8192 [ 932.053891][ T28] audit: type=1400 audit(2000000536.556:1144): avc: denied { connect } for pid=15620 comm="syz.2.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 932.073772][ T28] audit: type=1400 audit(2000000536.556:1145): avc: denied { write } for pid=15620 comm="syz.2.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 932.093606][T22397] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 932.188090][T15133] EXT4-fs (loop1): unmounting filesystem. [ 932.194399][T15629] loop3: p1 p2 p3 p4[EZD] [ 932.205394][T15629] loop3: p1 size 16128 extends beyond EOD, truncated [ 932.223118][T15638] loop1: detected capacity change from 0 to 512 [ 932.244193][T15629] loop3: p3 start 458783 is beyond EOD, truncated [ 932.273388][T15638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 932.285243][T15629] loop3: p4 size 65536 extends beyond EOD, [ 932.286213][T22397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.304905][T15629] truncated [ 932.359389][T22397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.397310][T15638] EXT4-fs (loop1): 1 truncate cleaned up [ 932.424731][T15638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 932.438890][T22397] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 932.489058][T22397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.637808][ T28] audit: type=1400 audit(2000000537.147:1146): avc: denied { create } for pid=15640 comm="syz.4.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 932.655873][T22397] usb 1-1: config 0 descriptor?? [ 932.700547][T15643] loop3: detected capacity change from 0 to 512 [ 932.726937][T15643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 932.752716][T15643] EXT4-fs (loop3): 1 truncate cleaned up [ 932.764423][T31546] udevd[31546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 932.764471][T30497] udevd[30497]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 932.779414][T15643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 932.785903][T31545] udevd[31545]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 933.101214][T15133] EXT4-fs (loop1): unmounting filesystem. [ 933.205674][T15652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3218'. [ 933.445609][ T3017] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 933.503346][T15657] loop2: detected capacity change from 0 to 256 [ 933.515610][T15657] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 933.585397][ T291] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 933.586494][T10554] EXT4-fs (loop3): unmounting filesystem. [ 933.626845][ T3017] usb 5-1: not running at top speed; connect to a high speed hub [ 933.644866][ T3017] usb 5-1: config 11 has an invalid interface number: 184 but max is 3 [ 933.653908][ T3017] usb 5-1: config 11 has an invalid interface number: 226 but max is 3 [ 933.662505][ T3017] usb 5-1: config 11 has an invalid interface number: 29 but max is 3 [ 933.670951][ T3017] usb 5-1: config 11 has an invalid interface number: 10 but max is 3 [ 933.679292][ T3017] usb 5-1: config 11 has an invalid interface number: 149 but max is 3 [ 933.687634][ T3017] usb 5-1: config 11 has an invalid interface number: 103 but max is 3 [ 933.696017][ T3017] usb 5-1: config 11 has 6 interfaces, different from the descriptor's value: 4 [ 933.705083][ T3017] usb 5-1: config 11 has no interface number 0 [ 933.711378][ T3017] usb 5-1: config 11 has no interface number 1 [ 933.717598][ T3017] usb 5-1: config 11 has no interface number 2 [ 933.723839][ T3017] usb 5-1: config 11 has no interface number 3 [ 933.730114][ T3017] usb 5-1: config 11 has no interface number 4 [ 933.736360][ T3017] usb 5-1: config 11 has no interface number 5 [ 933.742599][ T3017] usb 5-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 933.754242][ T3017] usb 5-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 933.765528][T15661] 9pnet_fd: Insufficient options for proto=fd [ 933.771694][ T3017] usb 5-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 933.785590][T15631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.788927][ T291] usb 2-1: not running at top speed; connect to a high speed hub [ 933.794081][T15631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.804145][ T291] usb 2-1: config 11 has an invalid interface number: 184 but max is 3 [ 933.809608][ T3017] usb 5-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 933.820047][ T291] usb 2-1: config 11 has an invalid interface number: 226 but max is 3 [ 933.831019][ T3017] usb 5-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 933.837832][ T291] usb 2-1: config 11 has an invalid interface number: 29 but max is 3 [ 933.848555][ T3017] usb 5-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 933.857066][ T291] usb 2-1: config 11 has an invalid interface number: 10 but max is 3 [ 933.867914][ T3017] usb 5-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 933.876345][ T291] usb 2-1: config 11 has an invalid interface number: 149 but max is 3 [ 933.889559][ T3017] usb 5-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 933.908834][ T39] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 933.908987][ T3017] usb 5-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 933.927485][ T3017] usb 5-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 933.927593][ T291] usb 2-1: config 11 has an invalid interface number: 103 but max is 3 [ 933.938530][ T3017] usb 5-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 933.947067][ T291] usb 2-1: config 11 has 6 interfaces, different from the descriptor's value: 4 [ 933.966864][ T3017] usb 5-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 933.967136][ T291] usb 2-1: config 11 has no interface number 0 [ 933.980502][ T3017] usb 5-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 933.986835][ T291] usb 2-1: config 11 has no interface number 1 [ 933.997390][ T3017] usb 5-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 934.003726][ T291] usb 2-1: config 11 has no interface number 2 [ 934.016788][ T3017] usb 5-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 934.023643][ T291] usb 2-1: config 11 has no interface number 3 [ 934.034335][ T3017] usb 5-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 934.040847][ T291] usb 2-1: config 11 has no interface number 4 [ 934.051942][ T3017] usb 5-1: config 11 interface 149 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 934.060704][T22397] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00AD/input/input392 [ 934.071135][ T3017] usb 5-1: too many endpoints for config 11 interface 103 altsetting 89: 69, using maximum allowed: 30 [ 934.082632][ T291] usb 2-1: config 11 has no interface number 5 [ 934.093592][ T3017] usb 5-1: config 11 interface 103 altsetting 89 has an invalid endpoint with address 0x4C, skipping [ 934.100585][ T291] usb 2-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 934.111125][ T3017] usb 5-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x8, skipping [ 934.122954][T22397] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00AD/input/input393 [ 934.133258][ T3017] usb 5-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 934.144623][ T291] usb 2-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 934.155320][ T3017] usb 5-1: config 11 interface 103 altsetting 89 has 3 endpoint descriptors, different from the interface descriptor's value: 69 [ 934.166713][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.179638][ T3017] usb 5-1: config 11 interface 184 has no altsetting 0 [ 934.190810][ T291] usb 2-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 934.197603][ T3017] usb 5-1: config 11 interface 226 has no altsetting 0 [ 934.211596][T22397] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00AD/input/input394 [ 934.217981][ T3017] usb 5-1: config 11 interface 29 has no altsetting 0 [ 934.230077][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.236962][ T3017] usb 5-1: config 11 interface 10 has no altsetting 0 [ 934.247025][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 934.254054][ T3017] usb 5-1: config 11 interface 149 has no altsetting 0 [ 934.263630][T22397] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00AD/input/input395 [ 934.269774][ T3017] usb 5-1: config 11 interface 103 has no altsetting 0 [ 934.281626][ T291] usb 2-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 934.299465][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.307920][ T291] usb 2-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 934.311884][ T3017] usb 5-1: Dual-Role OTG device on HNP port [ 934.320509][ T291] usb 2-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 934.327024][ T3017] usb 5-1: New USB device found, idVendor=1410, idProduct=b001, bcdDevice=83.d0 [ 934.336493][ T39] usb 4-1: config 0 descriptor?? [ 934.351475][T22397] uclogic 0003:256C:006D.00AD: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 934.364204][ T3017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.367058][T22397] usb 1-1: USB disconnect, device number 83 [ 934.391011][ T291] usb 2-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 934.404396][ T3017] usb 5-1: Product: syz [ 934.426527][ T291] usb 2-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 934.428942][ T3017] usb 5-1: Manufacturer: раз [ 934.440942][T15662] fido_id[15662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 934.457157][ T3017] usb 5-1: SerialNumber: syz [ 934.457895][ T291] usb 2-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 934.493633][ T291] usb 2-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 934.505343][ T291] usb 2-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 934.534639][ T291] usb 2-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 934.553925][ T291] usb 2-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 934.574118][ T291] usb 2-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 934.603848][ T291] usb 2-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 934.624703][ T291] usb 2-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 934.643874][ T291] usb 2-1: config 11 interface 149 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 934.664185][ T291] usb 2-1: too many endpoints for config 11 interface 103 altsetting 89: 69, using maximum allowed: 30 [ 934.675407][ T291] usb 2-1: config 11 interface 103 altsetting 89 has an invalid endpoint with address 0x4C, skipping [ 934.686367][ T291] usb 2-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x8, skipping [ 934.697609][ T291] usb 2-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 934.708527][ T291] usb 2-1: config 11 interface 103 altsetting 89 has 3 endpoint descriptors, different from the interface descriptor's value: 69 [ 934.721890][ T291] usb 2-1: config 11 interface 184 has no altsetting 0 [ 934.728909][ T291] usb 2-1: config 11 interface 226 has no altsetting 0 [ 934.735807][ T291] usb 2-1: config 11 interface 29 has no altsetting 0 [ 934.742628][ T291] usb 2-1: config 11 interface 10 has no altsetting 0 [ 934.742672][ T291] usb 2-1: config 11 interface 149 has no altsetting 0 [ 934.742693][ T291] usb 2-1: config 11 interface 103 has no altsetting 0 [ 934.768967][ T291] usb 2-1: Dual-Role OTG device on HNP port [ 934.775150][ T291] usb 2-1: New USB device found, idVendor=1410, idProduct=b001, bcdDevice=83.d0 [ 934.782740][T15665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3225'. [ 934.784260][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.801226][ T291] usb 2-1: Product: syz [ 934.807193][ T291] usb 2-1: Manufacturer: раз [ 934.811863][ T291] usb 2-1: SerialNumber: syz [ 935.064790][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3226'. [ 935.433747][ T3017] usb 5-1: USB disconnect, device number 92 [ 935.516910][T15660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.526827][T15660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.587837][T15676] loop2: detected capacity change from 0 to 512 [ 935.632304][T15676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 935.833027][ T39] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00AE/input/input396 [ 936.007516][T15676] EXT4-fs (loop2): 1 truncate cleaned up [ 936.013331][T15676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 936.050265][T15660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.147372][ T291] usb 2-1: USB disconnect, device number 83 [ 936.190013][T15660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.342491][ T39] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00AE/input/input397 [ 936.403489][ T39] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00AE/input/input398 [ 936.427763][ T39] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00AE/input/input399 [ 936.454465][ T39] uclogic 0003:256C:006D.00AE: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 936.502919][T15685] device pim6reg1 entered promiscuous mode [ 936.516535][ T39] usb 4-1: USB disconnect, device number 90 [ 936.534900][T15439] EXT4-fs (loop2): unmounting filesystem. [ 936.617544][T15689] loop2: detected capacity change from 0 to 512 [ 936.633210][T15689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 936.650953][T15689] EXT4-fs (loop2): 1 truncate cleaned up [ 936.658655][T15689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 936.920783][ T3017] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 937.319943][T15701] loop1: detected capacity change from 0 to 256 [ 937.349742][T15701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 937.367729][ T3017] usb 5-1: Using ep0 maxpacket: 8 [ 937.376549][ T3017] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 937.389314][ T3017] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.409273][ T3017] usb 5-1: config 0 has no interface number 0 [ 937.423325][ T3017] usb 5-1: New USB device found, idVendor=9d6c, idProduct=75e1, bcdDevice=d2.34 [ 937.438906][ T3017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.498753][ T3017] usb 5-1: config 0 descriptor?? [ 937.506059][ T3017] usb-storage 5-1:0.1: USB Mass Storage device detected [ 937.507571][T15439] EXT4-fs (loop2): unmounting filesystem. [ 937.695304][T15711] 9pnet_fd: Insufficient options for proto=fd [ 937.810176][T15716] loop3: detected capacity change from 0 to 512 [ 937.870706][T15716] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 937.907698][T15716] EXT4-fs (loop3): 1 truncate cleaned up [ 937.913520][T15716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 938.403401][ T39] usb 5-1: USB disconnect, device number 93 [ 938.838088][T15721] loop4: detected capacity change from 0 to 512 [ 938.870368][T15721] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 938.883074][T10554] EXT4-fs (loop3): unmounting filesystem. [ 938.890274][T15721] EXT4-fs (loop4): 1 truncate cleaned up [ 938.896041][T15721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 938.948455][ T4073] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 938.956253][ T3017] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 939.361030][T15729] loop3: detected capacity change from 0 to 512 [ 939.408870][T15729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 939.488695][T15729] EXT4-fs (loop3): 1 truncate cleaned up [ 939.494477][T15729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 939.832815][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 939.838722][ T4073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.858426][ T3017] usb 1-1: not running at top speed; connect to a high speed hub [ 939.871820][ T4073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.882490][ T3017] usb 1-1: config 11 has an invalid interface number: 184 but max is 3 [ 939.903883][ T3017] usb 1-1: config 11 has an invalid interface number: 226 but max is 3 [ 939.913970][ T4073] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 939.942937][ T3017] usb 1-1: config 11 has an invalid interface number: 29 but max is 3 [ 939.951686][ T4073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.967311][ T3017] usb 1-1: config 11 has an invalid interface number: 10 but max is 3 [ 939.985832][ T3017] usb 1-1: config 11 has an invalid interface number: 149 but max is 3 [ 939.995010][T15732] loop4: detected capacity change from 0 to 8192 [ 940.001597][ T3017] usb 1-1: config 11 has an invalid interface number: 103 but max is 3 [ 940.011996][ T4073] usb 3-1: config 0 descriptor?? [ 940.019248][ T3017] usb 1-1: config 11 has 6 interfaces, different from the descriptor's value: 4 [ 940.028714][ T3017] usb 1-1: config 11 has no interface number 0 [ 940.035167][ T3017] usb 1-1: config 11 has no interface number 1 [ 940.042903][ T3017] usb 1-1: config 11 has no interface number 2 [ 940.049365][ T3017] usb 1-1: config 11 has no interface number 3 [ 940.055716][ T3017] usb 1-1: config 11 has no interface number 4 [ 940.063211][T15732] loop4: p1 p2 p3 p4[EZD] [ 940.074504][T15732] loop4: p1 size 16128 extends beyond EOD, truncated [ 940.087191][ T3017] usb 1-1: config 11 has no interface number 5 [ 940.095045][ T3017] usb 1-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 940.107304][T15732] loop4: p3 start 458783 is beyond EOD, truncated [ 940.113802][T15732] loop4: p4 size 65536 extends beyond EOD, truncated [ 940.120926][ T3017] usb 1-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 940.165359][ T3017] usb 1-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 940.193545][ T3017] usb 1-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 940.205181][ T3017] usb 1-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 940.216928][ T3017] usb 1-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 940.257019][ T3017] usb 1-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 940.304051][T10554] EXT4-fs (loop3): unmounting filesystem. [ 940.311797][ T7838] udevd[7838]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 940.313749][T31545] udevd[31545]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 940.324822][T31546] udevd[31546]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 940.336916][ T3017] usb 1-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 940.355446][ T3017] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 940.372692][ T3017] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 940.383904][ T3017] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 940.395117][ T3017] usb 1-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 940.408629][ T3017] usb 1-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 940.419391][ T3017] usb 1-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 940.432614][ T3017] usb 1-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 940.443813][ T3017] usb 1-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 940.454841][ T3017] usb 1-1: config 11 interface 149 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 940.468521][ T3017] usb 1-1: too many endpoints for config 11 interface 103 altsetting 89: 69, using maximum allowed: 30 [ 940.480992][ T3017] usb 1-1: config 11 interface 103 altsetting 89 has an invalid endpoint with address 0x4C, skipping [ 940.491974][ T3017] usb 1-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x8, skipping [ 940.502950][ T3017] usb 1-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 940.514132][ T3017] usb 1-1: config 11 interface 103 altsetting 89 has 3 endpoint descriptors, different from the interface descriptor's value: 69 [ 940.527611][ T3017] usb 1-1: config 11 interface 184 has no altsetting 0 [ 940.534541][ T3017] usb 1-1: config 11 interface 226 has no altsetting 0 [ 940.541678][ T3017] usb 1-1: config 11 interface 29 has no altsetting 0 [ 940.548702][ T3017] usb 1-1: config 11 interface 10 has no altsetting 0 [ 940.555558][ T3017] usb 1-1: config 11 interface 149 has no altsetting 0 [ 940.562741][ T3017] usb 1-1: config 11 interface 103 has no altsetting 0 [ 940.573496][ T3017] usb 1-1: Dual-Role OTG device on HNP port [ 940.581934][ T3017] usb 1-1: New USB device found, idVendor=1410, idProduct=b001, bcdDevice=83.d0 [ 940.591341][ T3017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.599633][ T3017] usb 1-1: Product: syz [ 940.603955][ T3017] usb 1-1: Manufacturer: раз [ 940.608908][ T3017] usb 1-1: SerialNumber: syz [ 940.615077][ T3017] usb 1-1: can't set config #11, error -71 [ 940.622690][ T3017] usb 1-1: USB disconnect, device number 84 [ 940.837476][ T4075] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 940.881398][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.901394][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.245175][T15751] loop3: detected capacity change from 0 to 512 [ 941.267820][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00AF/input/input400 [ 941.280499][T15751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 941.291050][ T4075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.304486][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00AF/input/input401 [ 941.316266][ T4075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.328060][ T4073] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00AF/input/input402 [ 941.341487][ T4075] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 941.352095][T15751] EXT4-fs (loop3): 1 truncate cleaned up [ 941.357926][ T4075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.366561][T15751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 941.387798][ T4073] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00AF/input/input403 [ 941.404078][ T4075] usb 5-1: config 0 descriptor?? [ 941.425143][ T4073] uclogic 0003:256C:006D.00AF: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 941.499847][ T4073] usb 3-1: USB disconnect, device number 95 [ 941.732181][ T28] audit: type=1400 audit(2000000546.238:1147): avc: denied { write } for pid=3017 comm="kworker/0:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94244 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 941.763317][ T28] audit: type=1400 audit(2000000546.278:1148): avc: denied { write } for pid=15764 comm="syz.1.3253" name="protocols" dev="proc" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 942.209511][T10554] EXT4-fs (loop3): unmounting filesystem. [ 942.320836][T15774] loop2: detected capacity change from 0 to 512 [ 942.328481][T15774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 942.340866][T15774] EXT4-fs (loop2): 1 truncate cleaned up [ 942.347564][T15774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 942.405095][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.415860][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.417599][ T39] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 943.252674][ T4075] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00B0/input/input404 [ 943.270504][ T4075] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00B0/input/input405 [ 943.283740][ T4075] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00B0/input/input406 [ 943.297985][ T4075] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00B0/input/input407 [ 943.312268][ T4075] uclogic 0003:256C:006D.00B0: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 943.335369][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.351577][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.364292][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.391264][T15439] EXT4-fs (loop2): unmounting filesystem. [ 943.394689][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.409927][ T39] usb 2-1: Product: syz [ 943.415399][ T39] usb 2-1: Manufacturer: syz [ 943.428644][ T39] usb 2-1: SerialNumber: syz [ 943.450358][ T4075] usb 5-1: USB disconnect, device number 94 [ 943.494323][ T39] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 943.799622][ T291] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 943.930754][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.976401][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.992164][ T28] audit: type=1400 audit(2000000548.500:1149): avc: denied { remount } for pid=15766 comm="syz.1.3254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 944.035086][T22397] usb 2-1: USB disconnect, device number 84 [ 944.083691][ T39] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 944.145756][ T291] usb 1-1: not running at top speed; connect to a high speed hub [ 944.155688][ T291] usb 1-1: config 11 has an invalid interface number: 184 but max is 3 [ 944.165744][ T291] usb 1-1: config 11 has an invalid interface number: 226 but max is 3 [ 944.175509][ T291] usb 1-1: config 11 has an invalid interface number: 29 but max is 3 [ 944.185342][ T291] usb 1-1: config 11 has an invalid interface number: 10 but max is 3 [ 944.195578][ T291] usb 1-1: config 11 has an invalid interface number: 149 but max is 3 [ 944.204738][ T291] usb 1-1: config 11 has an invalid interface number: 103 but max is 3 [ 944.214316][ T291] usb 1-1: config 11 has 6 interfaces, different from the descriptor's value: 4 [ 944.224675][ T291] usb 1-1: config 11 has no interface number 0 [ 944.230962][ T291] usb 1-1: config 11 has no interface number 1 [ 944.238990][ T291] usb 1-1: config 11 has no interface number 2 [ 944.245880][ T291] usb 1-1: config 11 has no interface number 3 [ 944.252607][ T291] usb 1-1: config 11 has no interface number 4 [ 944.260271][ T291] usb 1-1: config 11 has no interface number 5 [ 944.354557][ T291] usb 1-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 944.365947][ T291] usb 1-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 944.377367][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.388567][ T291] usb 1-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 944.402186][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.412259][ T291] usb 1-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 944.423783][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.436956][ T291] usb 1-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 944.448387][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.458263][ T291] usb 1-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 944.469717][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.481847][ T39] usb 4-1: config 0 descriptor?? [ 944.487009][ T291] usb 1-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 944.500774][ T291] usb 1-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 944.512344][ T291] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 944.524988][ T291] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 944.536364][ T291] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 944.547553][ T291] usb 1-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 944.561751][ T291] usb 1-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 944.572843][ T291] usb 1-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 944.586417][ T291] usb 1-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 944.597897][ T291] usb 1-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 944.609216][ T291] usb 1-1: config 11 interface 149 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 944.624396][ T28] audit: type=1400 audit(2000000549.130:1150): avc: denied { write } for pid=15792 comm="syz.2.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 944.644459][ T291] usb 1-1: too many endpoints for config 11 interface 103 altsetting 89: 69, using maximum allowed: 30 [ 944.656123][ T291] usb 1-1: config 11 interface 103 altsetting 89 has an invalid endpoint with address 0x4C, skipping [ 944.691749][ T291] usb 1-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x8, skipping [ 944.698041][T15796] loop1: detected capacity change from 0 to 512 [ 944.709090][T15794] loop2: detected capacity change from 0 to 512 [ 944.713362][T15796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 944.715953][ T291] usb 1-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 944.729903][T15794] EXT4-fs: Ignoring removed nobh option [ 944.742114][ T291] usb 1-1: config 11 interface 103 altsetting 89 has 3 endpoint descriptors, different from the interface descriptor's value: 69 [ 944.756737][ T291] usb 1-1: config 11 interface 184 has no altsetting 0 [ 944.763851][ T291] usb 1-1: config 11 interface 226 has no altsetting 0 [ 944.765853][T15794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 944.771426][ T291] usb 1-1: config 11 interface 29 has no altsetting 0 [ 944.786730][ T291] usb 1-1: config 11 interface 10 has no altsetting 0 [ 944.788355][T15796] EXT4-fs (loop1): 1 truncate cleaned up [ 944.793799][ T291] usb 1-1: config 11 interface 149 has no altsetting 0 [ 944.800057][T15796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 944.806291][ T291] usb 1-1: config 11 interface 103 has no altsetting 0 [ 944.824579][ T291] usb 1-1: Dual-Role OTG device on HNP port [ 944.825867][T15794] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.3261: corrupted in-inode xattr [ 944.832359][ T291] usb 1-1: New USB device found, idVendor=1410, idProduct=b001, bcdDevice=83.d0 [ 944.848694][T15794] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3261: couldn't read orphan inode 15 (err -117) [ 944.851608][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.864013][T15794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 944.871463][ T291] usb 1-1: Product: syz [ 944.884591][ T291] usb 1-1: Manufacturer: раз [ 944.889372][ T291] usb 1-1: SerialNumber: syz [ 944.915970][T15439] EXT4-fs (loop2): unmounting filesystem. [ 944.954667][ T39] plantronics 0003:047F:FFFF.00B1: unbalanced collection at end of report description [ 944.964908][ T39] plantronics 0003:047F:FFFF.00B1: parse failed [ 944.971299][ T39] plantronics: probe of 0003:047F:FFFF.00B1 failed with error -22 [ 945.009857][T15805] loop8: detected capacity change from 0 to 16384 [ 945.293769][ T4075] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 945.303757][T15804] loop2: detected capacity change from 0 to 2048 [ 945.315085][ T4073] usb 4-1: USB disconnect, device number 91 [ 945.342794][T15805] loop8: detected capacity change from 16384 to 16383 [ 945.344085][T31538] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 945.472597][ T4075] usb 5-1: Using ep0 maxpacket: 16 [ 945.479025][ T4075] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 945.487327][ T4075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.497511][ T4075] usb 5-1: config 0 has no interface number 0 [ 945.652476][T15133] EXT4-fs (loop1): unmounting filesystem. [ 946.057509][ T291] usb 1-1: USB disconnect, device number 85 [ 946.328316][ T28] audit: type=1400 audit(2000000550.731:1151): avc: denied { mount } for pid=15814 comm="syz.0.3267" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 946.355297][T15815] x_tables: duplicate underflow at hook 4 [ 946.388881][ T28] audit: type=1400 audit(2000000550.902:1152): avc: denied { read } for pid=15819 comm="syz.3.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 946.480249][T15820] loop3: detected capacity change from 0 to 1024 [ 946.511902][T15820] EXT4-fs: test_dummy_encryption requires encrypt feature [ 946.519739][T15824] loop4: detected capacity change from 0 to 512 [ 946.529644][ T4075] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 946.538784][ T4075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.546854][ T4075] usb 5-1: Product: syz [ 946.549460][T15824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 946.552865][ T4075] usb 5-1: Manufacturer: syz [ 946.565813][ T4075] usb 5-1: SerialNumber: syz [ 946.579767][ T4075] usb 5-1: config 0 descriptor?? [ 946.585999][ T4075] usb 5-1: can't set config #0, error -71 [ 946.596534][ T4075] usb 5-1: USB disconnect, device number 95 [ 946.622439][T15824] EXT4-fs (loop4): 1 truncate cleaned up [ 946.628294][T15824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 946.789207][T15833] loop1: detected capacity change from 0 to 512 [ 946.802621][T15833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 947.068358][T15833] EXT4-fs (loop1): 1 truncate cleaned up [ 947.074161][T15833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 947.294458][ T4073] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 947.454825][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 947.555101][T15839] device pim6reg1 entered promiscuous mode [ 947.642987][ T4073] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 947.659407][T15842] loop3: detected capacity change from 0 to 256 [ 947.666599][ T4073] usb 3-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 947.691308][T15842] exfat: Unknown parameter 'asymmetric' [ 947.699856][ T4073] usb 3-1: config 1 interface 0 has no altsetting 0 [ 947.710362][ T4073] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.40 [ 947.719938][ T4073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.729186][ T4073] usb 3-1: Product: щ┐▒яКПсФвтаЛтЖоуШЛъБбтЩЪхЛФшжмуМлыП┐чгЯхзеуСПяг▓р║ТчзОюЧЬхАЦьз╢ыдЕхКоц╜Тъ║Эф▒ЭцКЙяЯ╢ьЗЬуОгъб╛эГо├╜шЙМсЦ║чйЛч▒ТчИ╝ъ░бцЦБтЙ▒я▒СэЬМслФъФЗхлЙсШКуГ╝тМГтОвс╡┐цЮ╛цЙ▒ыйЯъЧМь┤Ф [ 947.748024][ T4073] usb 3-1: Manufacturer: фЧМцШУю╡╢ьШ▒чФнц┐▓фЮЮэЭ╕цНЩшй╝ю┤ЕтНкшЩбюХЩьЕЛтАЧшбЩуНЪш▓┤тддя╡ЪъЖдщмжхвТякПшШАчо┐ъЕКьЕ┐ъоЧяЧ╕ъХкцпйы▒ЯсеКэЗнхЧ▒ыЙ▓тХНъий┘║щГЪчнОя╖СрзбяДЪхТлхм╢х░Ыщ╜бщНехмбъЛЩу░ащмИсЫИтЛ╝твнтТШцк│ьдЪуКЦс┤ТумдхЕЗшХ╜уНТфжжуЦ║цРЪя▒бфФЮх╜▒ю▓Нржля▓УхЧРчд╜тФЙчз║хЖ│яДЙъ░ЫяШ╡шЙняЖ╖сБпч┐кщлГ╔║щ│ЖьеВхГНхТ│цЛЗуЬн╘Дю╖Хъ┐Ля╗АхлЗябйуе▓ук░ь╣п╟УьбУуввщУкщЯ╗шзжцаЖьБУхПЛр╣ЫшХЪялМюДЖшРм [ 947.784595][ T4073] usb 3-1: SerialNumber: syz [ 947.844927][T30497] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 947.854818][ T3017] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 947.863060][T15133] EXT4-fs (loop1): unmounting filesystem. [ 947.871984][T15842] loop3: detected capacity change from 0 to 256 [ 947.887759][T15842] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017bf5, chksum : 0x8472ea0e, utbl_chksum : 0xe619d30d) [ 947.901958][ T28] audit: type=1400 audit(2000000552.423:1153): avc: denied { ioctl } for pid=15841 comm="syz.3.3274" path="socket:[94407]" dev="sockfs" ino=94407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 947.997879][ T4073] usbhid 3-1:1.0: can't add hid device: -71 [ 948.002170][ T28] audit: type=1400 audit(2000000552.443:1154): avc: denied { map } for pid=15841 comm="syz.3.3274" path="socket:[95327]" dev="sockfs" ino=95327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 948.030714][ T4073] usbhid: probe of 3-1:1.0 failed with error -71 [ 948.035330][ T28] audit: type=1400 audit(2000000552.443:1155): avc: denied { write } for pid=15841 comm="syz.3.3274" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 948.045631][ T4073] usb 3-1: USB disconnect, device number 96 [ 948.059343][ T28] audit: type=1400 audit(2000000552.443:1156): avc: denied { add_name } for pid=15841 comm="syz.3.3274" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 948.066864][ T3017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.106811][ T28] audit: type=1400 audit(2000000552.443:1157): avc: denied { associate } for pid=15841 comm="syz.3.3274" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 948.167788][ T3017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.177686][ T3017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.190748][ T3017] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.199855][ T3017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.213583][ T3017] usb 1-1: config 0 descriptor?? [ 948.258308][T15855] loop1: detected capacity change from 0 to 512 [ 948.268842][T15855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 948.322489][T15855] EXT4-fs (loop1): 1 truncate cleaned up [ 948.328229][T15855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 948.354782][ T28] audit: type=1400 audit(2000000552.873:1158): avc: denied { getopt } for pid=15858 comm="syz.3.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 948.422520][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.444890][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.477240][T15861] device pim6reg1 entered promiscuous mode [ 948.706455][T15873] loop4: detected capacity change from 0 to 512 [ 948.735298][T15873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 948.751293][T15873] EXT4-fs (loop4): 1 truncate cleaned up [ 948.757117][T15873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 948.774170][T15133] EXT4-fs (loop1): unmounting filesystem. [ 948.904551][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 948.939900][ T28] audit: type=1400 audit(2000000553.453:1159): avc: denied { create } for pid=15882 comm="syz.4.3287" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 948.967883][T15883] input: syz1 as /devices/virtual/input/input408 [ 949.044040][T15886] loop3: detected capacity change from 0 to 512 [ 949.080761][T15886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 949.093251][ T28] audit: type=1400 audit(2000000553.613:1160): avc: denied { mounton } for pid=15882 comm="syz.4.3287" path="/94/file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 949.120580][T15883] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 949.176805][T15883] FAT-fs (loop9): unable to read boot sector [ 949.205676][T15886] EXT4-fs (loop3): 1 truncate cleaned up [ 949.211454][T15886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 949.517056][ T28] audit: type=1400 audit(2000000554.034:1161): avc: denied { unlink } for pid=9661 comm="syz-executor" name="file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 949.792458][T15892] loop4: detected capacity change from 0 to 256 [ 949.838344][T15892] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 950.014749][T15902] loop1: detected capacity change from 0 to 256 [ 950.033549][T10554] EXT4-fs (loop3): unmounting filesystem. [ 950.034353][ T3017] usbhid 1-1:0.0: can't add hid device: -71 [ 950.047164][ T3017] usbhid: probe of 1-1:0.0 failed with error -71 [ 950.055553][ T3017] usb 1-1: USB disconnect, device number 86 [ 950.252667][ T28] audit: type=1400 audit(2000000554.744:1162): avc: denied { read } for pid=15901 comm="syz.1.3292" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 950.340726][T15909] FAULT_INJECTION: forcing a failure. [ 950.340726][T15909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.410425][T15910] 9pnet_fd: Insufficient options for proto=fd [ 950.427507][T15909] CPU: 0 PID: 15909 Comm: syz.3.3293 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 950.437472][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.447556][T15909] Call Trace: [ 950.450858][T15909] [ 950.453813][T15909] __dump_stack+0x21/0x24 [ 950.458180][T15909] dump_stack_lvl+0xee/0x150 [ 950.462807][T15909] ? __cfi_dump_stack_lvl+0x8/0x8 [ 950.467869][T15909] dump_stack+0x15/0x24 [ 950.472082][T15909] should_fail_ex+0x3d4/0x520 [ 950.476789][T15909] should_fail+0xb/0x10 [ 950.480974][T15909] should_fail_usercopy+0x1a/0x20 [ 950.486028][T15909] _copy_from_user+0x1e/0xc0 [ 950.490648][T15909] __sys_bpf+0x277/0x780 [ 950.494927][T15909] ? bpf_link_show_fdinfo+0x320/0x320 [ 950.500346][T15909] ? fpregs_restore_userregs+0x128/0x260 [ 950.506009][T15909] __x64_sys_bpf+0x7c/0x90 [ 950.510466][T15909] x64_sys_call+0x488/0x9a0 [ 950.515002][T15909] do_syscall_64+0x4c/0xa0 [ 950.519446][T15909] ? clear_bhb_loop+0x30/0x80 [ 950.524240][T15909] ? clear_bhb_loop+0x30/0x80 [ 950.528945][T15909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.534867][T15909] RIP: 0033:0x7f2162f8e929 [ 950.539301][T15909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.558934][T15909] RSP: 002b:00007f2163e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 950.567385][T15909] RAX: ffffffffffffffda RBX: 00007f21631b6160 RCX: 00007f2162f8e929 [ 950.575395][T15909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 950.583397][T15909] RBP: 00007f2163e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 950.591396][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.599385][T15909] R13: 0000000000000000 R14: 00007f21631b6160 R15: 00007ffcdec559f8 [ 950.607382][T15909] [ 950.809301][ T3017] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 950.913229][T15924] loop4: detected capacity change from 0 to 512 [ 950.924366][T15924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 950.945595][T15924] EXT4-fs (loop4): 1 truncate cleaned up [ 950.951365][T15924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 951.000135][ T3017] usb 1-1: Using ep0 maxpacket: 16 [ 951.010341][ T3017] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 951.028863][ T3017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.047940][ T3017] usb 1-1: config 0 has no interface number 0 [ 951.068390][ T3017] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 951.080093][ T3017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.088198][ T3017] usb 1-1: Product: syz [ 951.092954][ T3017] usb 1-1: Manufacturer: syz [ 951.097669][ T3017] usb 1-1: SerialNumber: syz [ 951.099184][ T39] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 951.110828][ T3017] usb 1-1: config 0 descriptor?? [ 951.300120][ T39] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 951.308351][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.329043][ T291] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 951.342117][T15931] loop2: detected capacity change from 0 to 8192 [ 951.359696][ T39] usb 4-1: config 0 has no interface number 0 [ 951.365816][ T39] usb 4-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 951.442716][ T39] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice= f.e9 [ 951.469505][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.478618][T15931] loop2: p1 p2 p3 p4[EZD] [ 951.483692][T15931] loop2: p1 size 16128 extends beyond EOD, truncated [ 951.491975][T15931] loop2: p3 start 458783 is beyond EOD, truncated [ 951.498569][T15931] loop2: p4 size 65536 extends beyond EOD, truncated [ 951.505201][ T39] usb 4-1: config 0 descriptor?? [ 951.520006][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.541775][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.555002][ T39] usb 4-1: bad CDC descriptors [ 951.578912][ T291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 951.598919][ T291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 951.618936][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.627931][ T291] usb 2-1: config 0 descriptor?? [ 951.835660][T15929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.855644][T15929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.186036][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 952.585935][ T291] usbhid 2-1:0.0: can't add hid device: -71 [ 952.605710][ T291] usbhid: probe of 2-1:0.0 failed with error -71 [ 952.622118][ T291] usb 2-1: USB disconnect, device number 85 [ 952.747412][T15963] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 952.784878][ T39] usb 1-1: USB disconnect, device number 87 [ 952.798546][T15963] SELinux: failed to load policy [ 955.117239][ T39] usb 4-1: USB disconnect, device number 92 [ 955.260083][T15978] loop1: detected capacity change from 0 to 512 [ 955.270316][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 955.270490][ T28] audit: type=1400 audit(2000000559.746:1196): avc: denied { create } for pid=15972 comm="syz.1.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 955.296663][ T291] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 955.432258][T15978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 955.442209][T15978] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.947354][ T28] audit: type=1400 audit(2000000559.756:1197): avc: denied { bind } for pid=15972 comm="syz.1.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 956.254954][ T28] audit: type=1400 audit(2000000559.796:1198): avc: denied { mounton } for pid=15972 comm="syz.1.3314" path="/53/file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 956.299051][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.307687][ T28] audit: type=1400 audit(2000000559.966:1199): avc: denied { mount } for pid=15972 comm="syz.1.3314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 956.363657][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.364318][T15133] EXT4-fs (loop1): unmounting filesystem. [ 956.377930][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.394423][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.396916][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.412826][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.421657][ T291] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 956.430809][ T28] audit: type=1400 audit(2000000560.466:1200): avc: denied { write } for pid=15972 comm="syz.1.3314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 956.454240][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.465187][ T291] usb 3-1: config 0 descriptor?? [ 956.470904][ T28] audit: type=1400 audit(2000000560.466:1201): avc: denied { add_name } for pid=15972 comm="syz.1.3314" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 956.477992][T15986] overlayfs: statfs failed on './file0' [ 956.493803][ T28] audit: type=1400 audit(2000000560.466:1202): avc: denied { create } for pid=15972 comm="syz.1.3314" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 956.521941][ T28] audit: type=1400 audit(2000000560.506:1203): avc: denied { read append open } for pid=15972 comm="syz.1.3314" path="/53/file0/blkio.bfq.io_queued" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 956.547448][ T28] audit: type=1400 audit(2000000560.807:1204): avc: denied { bind } for pid=15977 comm="syz.0.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 956.567268][ T28] audit: type=1400 audit(2000000560.817:1205): avc: denied { setcurrent } for pid=15977 comm="syz.0.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 956.727788][ T291] usbhid 3-1:0.0: can't add hid device: -71 [ 956.739742][ T291] usbhid: probe of 3-1:0.0 failed with error -71 [ 956.750067][ T291] usb 3-1: USB disconnect, device number 97 [ 956.916802][ T3017] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 957.127968][ T3017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.139073][ T3017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.149994][ T3017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 958.338141][ T4073] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 958.345823][ T3017] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 958.355044][ T3017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.355249][T16026] loop3: detected capacity change from 0 to 256 [ 958.365981][ T3017] usb 2-1: config 0 descriptor?? [ 958.448163][T16028] loop2: detected capacity change from 0 to 512 [ 958.458662][T16028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 958.486324][ T291] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 958.545409][T16028] EXT4-fs (loop2): 1 truncate cleaned up [ 958.551271][T16028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 958.634484][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.318244][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.346373][T16026] syz.3.3329: attempt to access beyond end of device [ 959.346373][T16026] loop3: rw=2049, sector=256, nr_sectors = 64 limit=256 [ 959.363537][T16026] syz.3.3329: attempt to access beyond end of device [ 959.363537][T16026] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 959.378847][T16026] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 959.427082][ T4073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.439640][ T4073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.441731][ T291] usb 1-1: not running at top speed; connect to a high speed hub [ 959.544040][T16028] overlayfs: './file1' not a directory [ 959.560392][ T291] usb 1-1: config 11 has an invalid interface number: 184 but max is 3 [ 959.569072][ T291] usb 1-1: config 11 has an invalid interface number: 226 but max is 3 [ 959.578364][ T291] usb 1-1: config 11 has an invalid interface number: 29 but max is 3 [ 959.586996][ T291] usb 1-1: config 11 has an invalid interface number: 10 but max is 3 [ 959.595615][ T291] usb 1-1: config 11 has an invalid interface number: 149 but max is 3 [ 959.604512][ T291] usb 1-1: config 11 has an invalid interface number: 103 but max is 3 [ 959.613576][ T291] usb 1-1: config 11 has 6 interfaces, different from the descriptor's value: 4 [ 959.623501][ T291] usb 1-1: config 11 has no interface number 0 [ 959.650976][ T291] usb 1-1: config 11 has no interface number 1 [ 959.905812][ T291] usb 1-1: config 11 has no interface number 2 [ 959.919978][ T291] usb 1-1: config 11 has no interface number 3 [ 959.933088][ T291] usb 1-1: config 11 has no interface number 4 [ 959.943931][ T291] usb 1-1: config 11 has no interface number 5 [ 959.987338][T16040] loop4: detected capacity change from 0 to 256 [ 959.993804][ T291] usb 1-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 960.031170][ T291] usb 1-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 960.043080][T16040] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 960.059937][ T291] usb 1-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 960.096246][ T291] usb 1-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 960.119515][ T291] usb 1-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 960.142748][ T291] usb 1-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 960.167118][ T291] usb 1-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 960.194733][ T291] usb 1-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 960.198291][ T4073] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 960.215073][ T4073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.219143][T15439] EXT4-fs (loop2): unmounting filesystem. [ 960.226417][ T4073] usb 5-1: config 0 descriptor?? [ 960.234430][ T4073] usb 5-1: can't set config #0, error -71 [ 960.241412][ T4073] usb 5-1: USB disconnect, device number 96 [ 960.266191][ T291] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 960.357913][ T291] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 960.366877][ T3017] usbhid 2-1:0.0: can't add hid device: -71 [ 960.369908][ T291] usb 1-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 960.386242][ T291] usb 1-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 960.398577][ T3017] usbhid: probe of 2-1:0.0 failed with error -71 [ 960.402616][ T291] usb 1-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 960.417944][ T291] usb 1-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 960.429071][ T3017] usb 2-1: USB disconnect, device number 86 [ 960.434514][ T291] usb 1-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 960.449040][ T291] usb 1-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 960.475574][ T291] usb 1-1: config 11 interface 149 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 960.491187][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 960.491498][ T28] audit: type=1400 audit(2000000564.998:1220): avc: denied { read write } for pid=16045 comm="syz.3.3335" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 960.521244][ T28] audit: type=1400 audit(2000000564.998:1221): avc: denied { open } for pid=16045 comm="syz.3.3335" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 960.555452][ T28] audit: type=1400 audit(2000000564.998:1222): avc: denied { mounton } for pid=16045 comm="syz.3.3335" path="/86/file0" dev="tmpfs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 960.603318][ T28] audit: type=1400 audit(2000000565.008:1223): avc: denied { mount } for pid=16045 comm="syz.3.3335" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 960.619391][ T291] usb 1-1: too many endpoints for config 11 interface 103 altsetting 89: 69, using maximum allowed: 30 [ 960.636476][ T291] usb 1-1: config 11 interface 103 altsetting 89 has an invalid endpoint with address 0x4C, skipping [ 960.668746][ T291] usb 1-1: config 11 interface 103 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 960.679734][ T291] usb 1-1: config 11 interface 103 altsetting 89 has 2 endpoint descriptors, different from the interface descriptor's value: 69 [ 960.693080][ T291] usb 1-1: config 11 interface 184 has no altsetting 0 [ 960.700005][ T291] usb 1-1: config 11 interface 226 has no altsetting 0 [ 960.707431][ T291] usb 1-1: config 11 interface 29 has no altsetting 0 [ 960.716270][ T291] usb 1-1: config 11 interface 10 has no altsetting 0 [ 960.723290][T16054] loop2: detected capacity change from 0 to 512 [ 960.729791][ T291] usb 1-1: config 11 interface 149 has no altsetting 0 [ 960.742473][ T291] usb 1-1: config 11 interface 103 has no altsetting 0 [ 960.754684][ T291] usb 1-1: string descriptor 0 read error: -71 [ 960.760990][T16054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 960.772743][ T291] usb 1-1: Dual-Role OTG device on HNP port [ 960.790890][T16054] EXT4-fs (loop2): 1 truncate cleaned up [ 960.795781][ T291] usb 1-1: can't set HNP mode: -71 [ 960.813525][T16054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 960.823094][ T28] audit: type=1400 audit(2000000565.348:1224): avc: denied { unmount } for pid=10554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 960.844884][T16048] 9pnet_fd: Insufficient options for proto=fd [ 960.897205][ T28] audit: type=1400 audit(2000000565.368:1225): avc: denied { mounton } for pid=16039 comm="syz.4.3332" path="/107/file0/file0" dev="loop4" ino=1048757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 961.050665][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3337'. [ 961.180851][ T28] audit: type=1400 audit(2000000565.578:1226): avc: denied { read write } for pid=16053 comm="syz.2.3337" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 961.259642][T16068] loop4: detected capacity change from 0 to 512 [ 961.262289][ T28] audit: type=1400 audit(2000000565.578:1227): avc: denied { open } for pid=16053 comm="syz.2.3337" path="/38/file2/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 961.282995][T16068] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 961.306993][T16068] EXT4-fs (loop4): 1 truncate cleaned up [ 961.312777][T16068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 961.405435][ T3017] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 961.527881][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3340'. [ 961.715598][ T28] audit: type=1400 audit(2000000566.068:1228): avc: denied { module_request } for pid=16067 comm="syz.4.3340" kmod="rtnl-link-ve" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 961.776597][T15439] EXT4-fs (loop2): unmounting filesystem. [ 961.836644][ T3017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.847613][ T3017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.857586][ T3017] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 961.922016][ T3017] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 961.928236][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 961.931651][ T3017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.951624][ T3017] usb 4-1: config 0 descriptor?? [ 962.175213][ T291] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 962.255193][ T39] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 962.285144][ T28] audit: type=1400 audit(2000000566.798:1229): avc: denied { watch } for pid=16090 comm="syz.1.3347" path="/57/control" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 962.285262][T16091] FAULT_INJECTION: forcing a failure. [ 962.285262][T16091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.321054][T16091] CPU: 1 PID: 16091 Comm: syz.1.3347 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 962.330999][T16091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.341087][T16091] Call Trace: [ 962.344403][T16091] [ 962.347371][T16091] __dump_stack+0x21/0x24 [ 962.351761][T16091] dump_stack_lvl+0xee/0x150 [ 962.356493][T16091] ? __cfi_dump_stack_lvl+0x8/0x8 [ 962.360626][ T3017] plantronics 0003:047F:FFFF.00B2: unbalanced collection at end of report description [ 962.361573][T16091] dump_stack+0x15/0x24 [ 962.375270][T16091] should_fail_ex+0x3d4/0x520 [ 962.379991][T16091] should_fail+0xb/0x10 [ 962.380179][ T3017] plantronics 0003:047F:FFFF.00B2: parse failed [ 962.384161][T16091] should_fail_usercopy+0x1a/0x20 [ 962.384188][T16091] _copy_to_user+0x1e/0x90 [ 962.384210][T16091] simple_read_from_buffer+0xe9/0x160 [ 962.400820][ T3017] plantronics: probe of 0003:047F:FFFF.00B2 failed with error -22 [ 962.405347][T16091] proc_fail_nth_read+0x19a/0x210 [ 962.405387][T16091] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 962.423767][T16091] ? security_file_permission+0x94/0xb0 [ 962.429353][T16091] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 962.434940][T16091] vfs_read+0x26e/0x8c0 [ 962.439152][T16091] ? __cfi_vfs_read+0x10/0x10 [ 962.443877][T16091] ? __kasan_check_write+0x14/0x20 [ 962.449028][T16091] ? mutex_lock+0x8d/0x1a0 [ 962.453483][T16091] ? __cfi_mutex_lock+0x10/0x10 [ 962.458379][T16091] ? __fdget_pos+0x2cd/0x380 [ 962.463034][T16091] ? ksys_read+0x71/0x240 [ 962.467406][T16091] ksys_read+0x140/0x240 [ 962.471781][T16091] ? __cfi_ksys_read+0x10/0x10 [ 962.476589][T16091] ? fpregs_restore_userregs+0x128/0x260 [ 962.482261][T16091] __x64_sys_read+0x7b/0x90 [ 962.486809][T16091] x64_sys_call+0x2f/0x9a0 [ 962.491265][T16091] do_syscall_64+0x4c/0xa0 [ 962.495712][T16091] ? clear_bhb_loop+0x30/0x80 [ 962.500431][T16091] ? clear_bhb_loop+0x30/0x80 [ 962.505236][T16091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.511190][T16091] RIP: 0033:0x7f2636d8d33c [ 962.515639][T16091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 962.535283][T16091] RSP: 002b:00007f2636bff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.543742][T16091] RAX: ffffffffffffffda RBX: 00007f2636fb5fa0 RCX: 00007f2636d8d33c [ 962.551759][T16091] RDX: 000000000000000f RSI: 00007f2636bff0a0 RDI: 0000000000000004 [ 962.559765][T16091] RBP: 00007f2636bff090 R08: 0000000000000000 R09: 0000000000000000 [ 962.567757][T16091] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 962.575744][T16091] R13: 0000000000000000 R14: 00007f2636fb5fa0 R15: 00007ffe8a81cb08 [ 962.583734][T16091] [ 962.613277][T22397] usb 4-1: USB disconnect, device number 93 [ 962.621128][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.641838][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.654888][ T291] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 962.664885][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.673997][ T291] usb 1-1: config 0 descriptor?? [ 962.679951][T16094] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 962.686402][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.700472][T16094] SELinux: failed to load policy [ 962.705919][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.715970][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 962.729440][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 962.738984][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.795657][ T39] usb 5-1: config 0 descriptor?? [ 963.003783][T16089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.041110][T16089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.249403][T16110] loop1: detected capacity change from 0 to 512 [ 964.262544][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.286030][T16112] loop3: detected capacity change from 0 to 16 [ 964.292379][T16110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 964.315472][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.324394][T16112] erofs: (device loop3): mounted with root inode @ nid 36. [ 964.352169][T16110] EXT4-fs (loop1): 1 truncate cleaned up [ 964.358177][T16110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 964.382698][T16118] loop2: detected capacity change from 0 to 512 [ 964.411580][T16120] loop4: detected capacity change from 0 to 256 [ 964.427674][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 964.433689][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 964.454407][T16118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 964.471375][ T39] usb 5-1: USB disconnect, device number 97 [ 964.565684][T16124] syz.3.3353: attempt to access beyond end of device [ 964.565684][T16124] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 964.583812][T16124] syz.3.3353: attempt to access beyond end of device [ 964.583812][T16124] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 964.601777][T16124] syz.3.3353: attempt to access beyond end of device [ 964.601777][T16124] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 964.619492][T16124] syz.3.3353: attempt to access beyond end of device [ 964.619492][T16124] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 964.651244][T16124] syz.3.3353: attempt to access beyond end of device [ 964.651244][T16124] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 964.669356][T16124] syz.3.3353: attempt to access beyond end of device [ 964.669356][T16124] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 964.694644][T16118] EXT4-fs (loop2): 1 truncate cleaned up [ 964.700390][T16118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 964.702433][ T291] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00B3/input/input410 [ 964.723108][T16120] FAT-fs (loop4): Directory bread(block 64) failed [ 964.729855][ T291] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00B3/input/input411 [ 964.738025][T16120] FAT-fs (loop4): Directory bread(block 65) failed [ 964.744255][ T291] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00B3/input/input412 [ 964.755274][T16120] FAT-fs (loop4): Directory bread(block 66) failed [ 964.762455][ T291] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00B3/input/input413 [ 964.780019][T16120] FAT-fs (loop4): Directory bread(block 67) failed [ 964.790861][T16120] FAT-fs (loop4): Directory bread(block 68) failed [ 965.258941][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3352'. [ 965.281326][ T291] uclogic 0003:256C:006D.00B3: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 965.295621][T16120] FAT-fs (loop4): Directory bread(block 69) failed [ 965.310943][T16120] FAT-fs (loop4): Directory bread(block 70) failed [ 965.318944][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.350535][T16120] FAT-fs (loop4): Directory bread(block 71) failed [ 965.357579][T16120] FAT-fs (loop4): Directory bread(block 72) failed [ 965.364644][T16120] FAT-fs (loop4): Directory bread(block 73) failed [ 965.651921][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3355'. [ 965.754547][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.851981][T15133] EXT4-fs (loop1): unmounting filesystem. [ 965.874501][ T291] usb 1-1: reset high-speed USB device number 90 using dummy_hcd [ 966.014634][T16136] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 966.024482][T16136] SELinux: failed to load policy [ 966.031793][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 966.031891][ T28] audit: type=1400 audit(2000000570.509:1241): avc: denied { ioctl } for pid=16119 comm="syz.4.3356" path="socket:[95869]" dev="sockfs" ino=95869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 966.089217][T15439] EXT4-fs (loop2): unmounting filesystem. [ 966.119935][T16135] loop1: detected capacity change from 0 to 512 [ 966.205078][T16135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 966.264029][T16135] EXT4-fs (loop1): 1 truncate cleaned up [ 966.270726][T16135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 966.831771][ T3017] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 966.840026][ T39] usb 1-1: USB disconnect, device number 90 [ 966.862236][T15133] EXT4-fs (loop1): unmounting filesystem. [ 966.893275][T16153] loop1: detected capacity change from 0 to 512 [ 966.966890][T16154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3361'. [ 967.041479][T16153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 967.232133][T16153] EXT4-fs (loop1): 1 truncate cleaned up [ 967.244845][T16153] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 967.278991][ T28] audit: type=1400 audit(2000000571.799:1242): avc: denied { bpf } for pid=16156 comm="syz.3.3363" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 967.314582][ T28] audit: type=1400 audit(2000000571.829:1243): avc: denied { map_create } for pid=16156 comm="syz.3.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.337031][ T28] audit: type=1400 audit(2000000571.829:1244): avc: denied { map_read map_write } for pid=16156 comm="syz.3.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.357679][ T28] audit: type=1400 audit(2000000571.829:1245): avc: denied { prog_load } for pid=16156 comm="syz.3.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.378750][ T28] audit: type=1400 audit(2000000571.829:1246): avc: denied { perfmon } for pid=16156 comm="syz.3.3363" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 967.400115][ T28] audit: type=1400 audit(2000000571.829:1247): avc: denied { read write } for pid=10554 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 967.406460][T16160] loop3: detected capacity change from 0 to 512 [ 967.424553][ T28] audit: type=1400 audit(2000000571.829:1248): avc: denied { open } for pid=10554 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 967.473182][T16160] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 967.540108][T16162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3362'. [ 967.734730][ T28] audit: type=1400 audit(2000000571.829:1249): avc: denied { ioctl } for pid=10554 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 967.764376][ T3017] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 967.773113][T16160] EXT4-fs (loop3): 1 truncate cleaned up [ 967.782319][ T28] audit: type=1400 audit(2000000571.899:1250): avc: denied { ioctl } for pid=16137 comm="syz.2.3359" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 967.806469][T16160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 967.810530][ T3017] usb 3-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 967.826630][ T3017] usb 3-1: config 0 has no interface number 0 [ 967.832778][ T3017] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 967.844264][ T3017] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 967.854347][ T3017] usb 3-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.887651][ T3017] usb 3-1: New USB device found, idVendor=0403, idProduct=dd20, bcdDevice= b.7d [ 967.928650][ T3017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 967.945217][ T3017] usb 3-1: Product: syz [ 967.949526][ T3017] usb 3-1: Manufacturer: syz [ 967.975481][ T3017] usb 3-1: config 0 descriptor?? [ 967.979918][T15133] EXT4-fs (loop1): unmounting filesystem. [ 967.984390][ T3017] ftdi_sio 3-1:0.128: FTDI USB Serial Device converter detected [ 967.994908][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 967.996235][ T3017] ftdi_sio ttyUSB0: unknown device type: 0xb7d [ 968.297404][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3364'. [ 969.262720][T16178] loop1: detected capacity change from 0 to 512 [ 969.279922][T16178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 969.297882][ T39] usb 3-1: USB disconnect, device number 98 [ 969.306416][T10554] EXT4-fs (loop3): unmounting filesystem. [ 969.324769][ T39] ftdi_sio 3-1:0.128: device disconnected [ 969.334860][T16178] EXT4-fs (loop1): 1 truncate cleaned up [ 969.345296][T16178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 969.377602][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 969.433831][ T4075] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 969.495660][T16190] capability: warning: `syz.3.3370' uses deprecated v2 capabilities in a way that may be insecure [ 969.541133][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3368'. [ 969.625150][ T4075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.636267][ T4075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.646413][ T4075] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 969.659658][ T4075] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 969.668940][ T4075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.681552][ T4075] usb 5-1: config 0 descriptor?? [ 970.089591][ T4075] plantronics 0003:047F:FFFF.00B4: unbalanced collection at end of report description [ 970.099573][ T4075] plantronics 0003:047F:FFFF.00B4: parse failed [ 970.106261][ T4075] plantronics: probe of 0003:047F:FFFF.00B4 failed with error -22 [ 970.134033][T15133] EXT4-fs (loop1): unmounting filesystem. [ 970.185895][T16200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16200 comm=syz.1.3374 [ 970.257656][T16202] loop3: detected capacity change from 0 to 8192 [ 970.268801][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3374'. [ 970.293990][T22397] usb 5-1: USB disconnect, device number 98 [ 970.306306][T16206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16206 comm=syz.1.3374 [ 970.323339][T16206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16206 comm=syz.1.3374 [ 970.345959][T16202] loop3: p1 p2 p3 p4[EZD] [ 970.351018][T16202] loop3: p1 size 16128 extends beyond EOD, truncated [ 970.359450][T16202] loop3: p3 start 458783 is beyond EOD, truncated [ 970.366244][T16202] loop3: p4 size 65536 extends beyond EOD, truncated [ 970.704100][T16219] loop2: detected capacity change from 0 to 128 [ 970.833584][ T4075] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 971.044678][ T4075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.071164][ T4075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.083343][ T4075] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 971.099652][ T4075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.112936][ T4075] usb 4-1: config 0 descriptor?? [ 971.155586][T16222] loop4: detected capacity change from 0 to 512 [ 971.166940][T16222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 971.220174][T16222] EXT4-fs (loop4): 1 truncate cleaned up [ 971.230137][T16222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 971.312584][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 971.312600][ T28] audit: type=1400 audit(2000000575.830:1292): avc: denied { unmount } for pid=15439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 971.380901][T16231] syz.2.3383[16231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.381033][T16231] syz.2.3383[16231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.411962][T16231] loop2: detected capacity change from 0 to 1024 [ 971.440144][T16231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 971.457456][T16231] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 971.464222][T16231] EXT4-fs (loop2): mount failed [ 971.912401][ T28] audit: type=1400 audit(2000000576.110:1293): avc: denied { create } for pid=16224 comm="syz.1.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 972.008103][T16237] loop2: detected capacity change from 0 to 512 [ 972.036568][T16237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 972.059845][T16237] EXT4-fs (loop2): 1 truncate cleaned up [ 972.068751][T16237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 972.783535][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3385'. [ 972.914925][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.923567][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.005452][T16244] kvm: pic: non byte write [ 973.024921][T16244] kvm: pic: non byte write [ 973.063861][T15439] EXT4-fs (loop2): unmounting filesystem. [ 973.145335][ T4075] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00B5/input/input414 [ 973.167812][ T28] audit: type=1400 audit(2000000577.690:1294): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=6941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 973.192298][ T4075] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00B5/input/input415 [ 973.214983][ T4075] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00B5/input/input416 [ 973.231596][T16250] loop2: detected capacity change from 0 to 8192 [ 973.238225][ T28] audit: type=1400 audit(2000000577.690:1295): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=6941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 973.273676][ T4075] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00B5/input/input417 [ 973.293075][ T4075] uclogic 0003:256C:006D.00B5: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 973.303386][ T28] audit: type=1400 audit(2000000577.760:1296): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=6941 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 973.336705][T16250] loop2: p1 p2 p3 p4[EZD] [ 973.341556][T16250] loop2: p1 size 16128 extends beyond EOD, truncated [ 973.373452][T16217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.383656][T16250] loop2: p3 start 458783 is beyond EOD, truncated [ 973.390120][T16250] loop2: p4 size 65536 extends beyond EOD, truncated [ 973.403662][T16217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.459635][ T4075] usb 4-1: USB disconnect, device number 94 [ 973.624101][T16265] FAULT_INJECTION: forcing a failure. [ 973.624101][T16265] name failslab, interval 1, probability 0, space 0, times 0 [ 973.636808][T16265] CPU: 1 PID: 16265 Comm: syz.1.3390 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 973.646734][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.656805][T16265] Call Trace: [ 973.660100][T16265] [ 973.663044][T16265] __dump_stack+0x21/0x24 [ 973.667405][T16265] dump_stack_lvl+0xee/0x150 [ 973.672024][T16265] ? __cfi_dump_stack_lvl+0x8/0x8 [ 973.677073][T16265] ? __kasan_check_read+0x11/0x20 [ 973.682124][T16265] ? preempt_schedule_irq+0xbb/0x110 [ 973.687432][T16265] dump_stack+0x15/0x24 [ 973.691624][T16265] should_fail_ex+0x3d4/0x520 [ 973.696325][T16265] __should_failslab+0xac/0xf0 [ 973.701122][T16265] ? tcp_sendmsg_fastopen+0x1d3/0x600 [ 973.706521][T16265] should_failslab+0x9/0x20 [ 973.711054][T16265] __kmem_cache_alloc_node+0x3d/0x2c0 [ 973.716448][T16265] ? tcp_sendmsg_fastopen+0x1d3/0x600 [ 973.721834][T16265] kmalloc_trace+0x29/0xb0 [ 973.726276][T16265] tcp_sendmsg_fastopen+0x1d3/0x600 [ 973.731493][T16265] tcp_sendmsg_locked+0x3819/0x3d90 [ 973.736711][T16265] ? __schedule+0xb8f/0x14e0 [ 973.741332][T16265] ? release_firmware_map_entry+0x194/0x194 [ 973.747263][T16265] ? __kasan_check_write+0x14/0x20 [ 973.748448][ T7838] udevd[7838]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 973.752412][T16265] ? _raw_spin_lock_bh+0x8e/0xe0 [ 973.764256][T30497] udevd[30497]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 973.767069][T16265] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 973.767107][T16265] ? __kasan_check_read+0x11/0x20 [ 973.787400][T16265] ? __local_bh_enable_ip+0x58/0x80 [ 973.792632][T16265] ? _raw_spin_unlock_bh+0x50/0x60 [ 973.797788][T16265] ? lock_sock_nested+0x1ec/0x280 [ 973.802846][T16265] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 973.806279][T31545] udevd[31545]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 973.808413][T16265] ? irqentry_exit+0x37/0x40 [ 973.808447][T16265] ? __cfi_inet6_sendmsg+0x10/0x10 [ 973.827978][T16265] tcp_sendmsg+0x2f/0x50 [ 973.832256][T16265] inet6_sendmsg+0xb6/0xd0 [ 973.836708][T16265] __sys_sendto+0x464/0x5e0 [ 973.841242][T16265] ? __this_cpu_preempt_check+0x13/0x20 [ 973.846825][T16265] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 973.853541][T16265] ? __cfi___sys_sendto+0x10/0x10 [ 973.858608][T16265] ? release_firmware_map_entry+0x194/0x194 [ 973.864545][T16265] ? ksys_write+0x1eb/0x240 [ 973.869088][T16265] ? __kasan_check_write+0x14/0x20 [ 973.874268][T16265] __x64_sys_sendto+0xe5/0x100 [ 973.879046][T16265] x64_sys_call+0x83/0x9a0 [ 973.883484][T16265] do_syscall_64+0x4c/0xa0 [ 973.887912][T16265] ? clear_bhb_loop+0x30/0x80 [ 973.892602][T16265] ? clear_bhb_loop+0x30/0x80 [ 973.897287][T16265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.903193][T16265] RIP: 0033:0x7f2636d8e929 [ 973.907615][T16265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.927314][T16265] RSP: 002b:00007f2636bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 973.935742][T16265] RAX: ffffffffffffffda RBX: 00007f2636fb6160 RCX: 00007f2636d8e929 [ 973.943724][T16265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 973.951721][T16265] RBP: 00007f2636bbd090 R08: 0000200000b63fe4 R09: 000000000000001c [ 973.959703][T16265] R10: 0000000020000841 R11: 0000000000000246 R12: 0000000000000001 [ 973.967684][T16265] R13: 0000000000000000 R14: 00007f2636fb6160 R15: 00007ffe8a81cb08 [ 973.975675][T16265] [ 974.100635][ T28] audit: type=1400 audit(2000000578.590:1297): avc: denied { map } for pid=16263 comm="syz.2.3391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 974.115242][T16270] loop2: detected capacity change from 0 to 1024 [ 974.139612][ T28] audit: type=1400 audit(2000000578.590:1298): avc: denied { read write } for pid=16263 comm="syz.2.3391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 974.153552][T16270] EXT4-fs: test_dummy_encryption requires encrypt feature [ 974.223751][T16274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3392'. [ 974.314356][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 974.319843][T16279] loop1: detected capacity change from 0 to 512 [ 974.336491][T16279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 974.381313][T16279] EXT4-fs (loop1): 1 truncate cleaned up [ 974.471585][T16279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 974.553161][ T4075] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 974.617141][T16286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3397'. [ 975.014174][ T4075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.049503][T16286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16286 comm=syz.4.3397 [ 975.063363][ T4075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.073350][ T4075] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 975.101387][ T4075] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.116828][ T28] audit: type=1400 audit(2000000579.640:1299): avc: denied { read } for pid=16290 comm="syz.3.3398" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 975.117636][ T4075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.150678][ T4075] usb 3-1: config 0 descriptor?? [ 975.157609][ T28] audit: type=1400 audit(2000000579.640:1300): avc: denied { open } for pid=16290 comm="syz.3.3398" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 975.189673][ T28] audit: type=1400 audit(2000000579.710:1301): avc: denied { ioctl } for pid=16290 comm="syz.3.3398" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 975.226200][T15133] EXT4-fs (loop1): unmounting filesystem. [ 975.440416][T16300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 976.307894][T16304] loop3: detected capacity change from 0 to 512 [ 976.505394][T16306] loop1: detected capacity change from 0 to 512 [ 978.620319][T16308] loop4: detected capacity change from 0 to 512 [ 978.632270][T16306] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 978.648357][T16308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 978.785100][T16308] EXT4-fs (loop4): 1 truncate cleaned up [ 978.791009][T16308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 978.821436][T16306] EXT4-fs (loop1): 1 truncate cleaned up [ 978.827255][T16306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 979.501975][T15133] EXT4-fs (loop1): unmounting filesystem. [ 979.609832][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 979.628605][ T4075] usbhid 3-1:0.0: can't add hid device: -71 [ 979.634643][ T4075] usbhid: probe of 3-1:0.0 failed with error -71 [ 979.656927][ T4075] usb 3-1: USB disconnect, device number 99 [ 979.873039][T16329] loop4: detected capacity change from 0 to 512 [ 980.149786][T16331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16331 comm=syz.0.3407 [ 980.190284][T16329] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 980.283978][T16329] EXT4-fs (loop4): 1 truncate cleaned up [ 980.289774][T16329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 980.364322][ T4073] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 980.842566][ T28] audit: type=1400 audit(2000000585.311:1302): avc: denied { create } for pid=16337 comm="syz.3.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.882575][ T28] audit: type=1400 audit(2000000585.311:1303): avc: denied { setopt } for pid=16337 comm="syz.3.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 981.009578][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 981.061640][T16345] loop4: detected capacity change from 0 to 512 [ 981.073610][T16341] 9pnet_fd: Insufficient options for proto=fd [ 981.079824][T16345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 981.101541][T16345] EXT4-fs (loop4): 1 truncate cleaned up [ 981.107360][T16345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 981.117413][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.130028][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.140154][ T4073] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 981.149287][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.158846][ T4073] usb 2-1: config 0 descriptor?? [ 981.321717][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3412'. [ 981.669718][T16350] loop3: detected capacity change from 0 to 2048 [ 981.707706][T16350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 981.716521][T16350] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.315431][T16320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.329217][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 982.333194][T16320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.386977][T16359] kvm: pic: single mode not supported [ 982.387013][T16359] kvm: pic: level sensitive irq not supported [ 982.535542][T10554] EXT4-fs (loop3): unmounting filesystem. [ 982.569287][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input418 [ 982.604846][ T28] audit: type=1400 audit(2000000587.131:1304): avc: denied { ioctl } for pid=16362 comm="syz.3.3416" path="socket:[97295]" dev="sockfs" ino=97295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 982.607490][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input419 [ 982.648280][T16364] 9pnet_fd: Insufficient options for proto=fd [ 982.668258][T16363] loop3: detected capacity change from 0 to 512 [ 982.680076][ T28] audit: type=1400 audit(2000000587.161:1305): avc: denied { create } for pid=16362 comm="syz.3.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 982.710633][ T4073] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input420 [ 982.743830][T16363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 982.754961][ T4073] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input421 [ 982.767877][T16320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.777513][T16363] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 982.782790][T16320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.790011][ T4073] uclogic 0003:256C:006D.00B6: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 982.830691][ T28] audit: type=1400 audit(2000000587.351:1306): avc: denied { read append open } for pid=16362 comm="syz.3.3416" path="/102/bus/pids.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 982.857527][ T4073] usb 2-1: USB disconnect, device number 87 [ 982.913481][T16367] fido_id[16367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 982.913669][ T28] audit: type=1400 audit(2000000587.391:1307): avc: denied { write } for pid=16362 comm="syz.3.3416" path="/102/bus/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 982.974326][T10554] EXT4-fs (loop3): unmounting filesystem. [ 983.007123][ T28] audit: type=1400 audit(2000000587.411:1308): avc: denied { ioctl } for pid=16362 comm="syz.3.3416" path="/102/bus/pids.current" dev="loop3" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 983.246400][T16372] loop3: detected capacity change from 0 to 512 [ 983.303135][T16372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 983.405830][T16372] EXT4-fs (loop3): 1 truncate cleaned up [ 983.411615][T16372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 984.427882][T16380] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3420'. [ 984.437118][T16380] 0кX╣жD: renamed from gretap0 [ 984.444934][T16380] A link change request failed with some changes committed already. Interface 30кX╣жD may have been left with an inconsistent configuration, please check. [ 984.471322][T16380] loop4: detected capacity change from 0 to 2048 [ 984.479659][T10554] EXT4-fs (loop3): unmounting filesystem. [ 984.557373][T16380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 984.566551][T16380] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.062385][ T39] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 985.912629][ T4073] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 985.923057][ T9661] EXT4-fs (loop4): unmounting filesystem. [ 985.926854][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.992241][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.002115][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.020279][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.042202][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.050900][ T39] usb 4-1: config 0 descriptor?? [ 986.376347][ T28] audit: type=1400 audit(2000000590.060:1309): avc: denied { bpf } for pid=16392 comm="syz.2.3423" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 986.402129][T16384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.411608][T16384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.432499][ T28] audit: type=1400 audit(2000000590.070:1310): avc: denied { prog_load } for pid=16392 comm="syz.2.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 986.452270][ T28] audit: type=1400 audit(2000000590.090:1311): avc: denied { perfmon } for pid=16392 comm="syz.2.3423" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 986.453343][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.473794][ T28] audit: type=1400 audit(2000000590.320:1312): avc: denied { prog_run } for pid=16383 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 986.484322][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.513485][ T4073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.526604][ T28] audit: type=1400 audit(2000000590.320:1313): avc: denied { read write } for pid=16383 comm="syz.3.3421" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.550411][ T4073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.560140][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.571019][ T4073] usb 2-1: config 0 descriptor?? [ 986.576550][ T28] audit: type=1400 audit(2000000590.320:1314): avc: denied { open } for pid=16383 comm="syz.3.3421" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.600980][ T28] audit: type=1400 audit(2000000590.320:1315): avc: denied { ioctl } for pid=16383 comm="syz.3.3421" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.627241][ T28] audit: type=1400 audit(2000000590.340:1316): avc: denied { mount } for pid=16383 comm="syz.3.3421" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 986.655172][T16404] 9pnet_fd: Insufficient options for proto=fd [ 986.656804][ T28] audit: type=1400 audit(2000000590.440:1317): avc: denied { map_create } for pid=16393 comm="syz.0.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 986.682878][ T28] audit: type=1400 audit(2000000590.440:1318): avc: denied { map_read map_write } for pid=16393 comm="syz.0.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 987.286851][ T291] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 987.536243][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.594001][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.647001][ T291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 988.161185][ T4073] plantronics 0003:047F:FFFF.00B7: unbalanced collection at end of report description [ 988.179901][ T4073] plantronics 0003:047F:FFFF.00B7: parse failed [ 988.180845][ T291] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 988.203163][ T4073] plantronics: probe of 0003:047F:FFFF.00B7 failed with error -22 [ 988.230459][T16414] loop4: detected capacity change from 0 to 8192 [ 988.244372][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.252502][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 988.258469][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 988.267168][ T291] usb 1-1: config 0 descriptor?? [ 988.278716][ T39] usb 4-1: USB disconnect, device number 95 [ 988.294390][ T4075] usb 2-1: USB disconnect, device number 88 [ 988.363214][T16414] loop4: p1 p2 p3 p4[EZD] [ 988.368039][T16414] loop4: p1 size 16128 extends beyond EOD, truncated [ 988.376252][T16414] loop4: p3 start 458783 is beyond EOD, truncated [ 988.383349][T16414] loop4: p4 size 65536 extends beyond EOD, truncated [ 988.615216][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.643600][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.670783][T31545] udevd[31545]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 988.671444][T31546] udevd[31546]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 988.695192][ T7838] udevd[7838]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 988.762290][ T39] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 988.953790][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.964849][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.974775][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 988.983963][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.995059][ T39] usb 4-1: config 0 descriptor?? [ 989.366197][ T291] usbhid 1-1:0.0: can't add hid device: -71 [ 989.373363][ T291] usbhid: probe of 1-1:0.0 failed with error -71 [ 989.450883][T16449] 9pnet_fd: Insufficient options for proto=fd [ 989.510705][ T291] usb 1-1: USB disconnect, device number 91 [ 989.894342][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'. [ 990.312808][T16416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.342444][T16416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.942552][T16456] FAULT_INJECTION: forcing a failure. [ 990.942552][T16456] name failslab, interval 1, probability 0, space 0, times 0 [ 990.955225][T16456] CPU: 0 PID: 16456 Comm: syz.2.3445 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 990.965142][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.975232][T16456] Call Trace: [ 990.978535][T16456] [ 990.981480][T16456] __dump_stack+0x21/0x24 [ 990.985852][T16456] dump_stack_lvl+0xee/0x150 [ 990.990478][T16456] ? __cfi_dump_stack_lvl+0x8/0x8 [ 990.995538][T16456] dump_stack+0x15/0x24 [ 990.999727][T16456] should_fail_ex+0x3d4/0x520 [ 991.004434][T16456] __should_failslab+0xac/0xf0 [ 991.009224][T16456] ? __se_sys_mount+0x153/0x380 [ 991.014107][T16456] should_failslab+0x9/0x20 [ 991.018647][T16456] __kmem_cache_alloc_node+0x3d/0x2c0 [ 991.024065][T16456] ? __se_sys_mount+0x153/0x380 [ 991.028950][T16456] kmalloc_trace+0x29/0xb0 [ 991.033409][T16456] __se_sys_mount+0x153/0x380 [ 991.038135][T16456] ? fput+0x154/0x1a0 [ 991.042144][T16456] ? __x64_sys_mount+0xd0/0xd0 [ 991.046943][T16456] ? __cfi_ksys_write+0x10/0x10 [ 991.051836][T16456] __x64_sys_mount+0xbf/0xd0 [ 991.056452][T16456] x64_sys_call+0x65d/0x9a0 [ 991.061085][T16456] do_syscall_64+0x4c/0xa0 [ 991.065521][T16456] ? clear_bhb_loop+0x30/0x80 [ 991.070221][T16456] ? clear_bhb_loop+0x30/0x80 [ 991.074921][T16456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.080830][T16456] RIP: 0033:0x7ff88818e929 [ 991.085260][T16456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.104872][T16456] RSP: 002b:00007ff888fc0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.113403][T16456] RAX: ffffffffffffffda RBX: 00007ff8883b6080 RCX: 00007ff88818e929 [ 991.121380][T16456] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 991.129356][T16456] RBP: 00007ff888fc0090 R08: 0000200000000580 R09: 0000000000000000 [ 991.137357][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.145334][T16456] R13: 0000000000000000 R14: 00007ff8883b6080 R15: 00007fff6f848888 [ 991.153319][T16456] [ 993.412576][ T39] uclogic 0003:256C:006D.00B8: failed retrieving string descriptor #200: -71 [ 993.461826][T16475] loop3: detected capacity change from 0 to 512 [ 993.492239][ T39] uclogic 0003:256C:006D.00B8: failed retrieving pen parameters: -71 [ 993.500435][ T39] uclogic 0003:256C:006D.00B8: failed probing pen v2 parameters: -71 [ 993.513093][T16475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 993.515280][ T39] uclogic 0003:256C:006D.00B8: failed probing parameters: -71 [ 993.540645][ T39] uclogic: probe of 0003:256C:006D.00B8 failed with error -71 [ 993.574485][ T39] usb 4-1: USB disconnect, device number 96 [ 993.625937][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 993.625993][ T28] audit: type=1400 audit(2000000597.540:1352): avc: denied { create } for pid=16468 comm="syz.2.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 993.766191][T16475] EXT4-fs (loop3): 1 truncate cleaned up [ 993.782418][T16475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 993.818119][ T28] audit: type=1400 audit(2000000597.610:1353): avc: denied { write } for pid=16468 comm="syz.2.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 994.173570][ T28] audit: type=1400 audit(2000000597.810:1354): avc: denied { mount } for pid=16474 comm="syz.3.3448" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 994.566870][ T28] audit: type=1400 audit(2000000598.450:1355): avc: denied { write } for pid=16474 comm="syz.3.3448" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 995.626969][T10554] EXT4-fs (loop3): unmounting filesystem. [ 995.627821][ T28] audit: type=1400 audit(2000000598.450:1356): avc: denied { add_name } for pid=16474 comm="syz.3.3448" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 995.653694][ T28] audit: type=1400 audit(2000000598.450:1357): avc: denied { create } for pid=16474 comm="syz.3.3448" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 995.674648][ T28] audit: type=1400 audit(2000000598.450:1358): avc: denied { read write } for pid=16474 comm="syz.3.3448" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 995.697616][ T28] audit: type=1400 audit(2000000598.450:1359): avc: denied { open } for pid=16474 comm="syz.3.3448" path="/106/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 995.720914][ T28] audit: type=1400 audit(2000000599.530:1360): avc: denied { unmount } for pid=10554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 995.740737][ T28] audit: type=1400 audit(2000000599.540:1361): avc: denied { module_request } for pid=16495 comm="syz.2.3452" kmod="net-pf-16-proto-16-family-batadv" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 995.824988][T16498] kvm: pic: single mode not supported [ 995.825006][T16498] kvm: pic: level sensitive irq not supported [ 995.894632][T16508] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 997.188658][ T958] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 997.491433][T16531] loop3: detected capacity change from 0 to 512 [ 997.519119][T16531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 997.531273][T16531] EXT4-fs (loop3): 1 truncate cleaned up [ 997.537417][ T958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.537809][T16531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 997.558659][ T958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.630945][ T958] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 997.657180][ T958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.683558][ T958] usb 3-1: config 0 descriptor?? [ 997.891143][T16543] fuse: Bad value for 'fd' [ 997.966158][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 998.508257][T10554] EXT4-fs (loop3): unmounting filesystem. [ 998.661048][T16519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.669755][T16519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.466393][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 999.466460][ T28] audit: type=1400 audit(2000000603.060:1373): avc: denied { lock } for pid=16553 comm="syz.1.3471" path="socket:[98701]" dev="sockfs" ino=98701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 999.565689][ T28] audit: type=1400 audit(2000000603.060:1374): avc: denied { write } for pid=16553 comm="syz.1.3471" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 999.636298][T16568] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3476'. [ 999.672241][ T28] audit: type=1400 audit(2000000603.570:1375): avc: denied { name_bind } for pid=16567 comm="syz.3.3476" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 999.698714][ T28] audit: type=1400 audit(2000000603.620:1376): avc: denied { read } for pid=16569 comm="syz.3.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 999.754063][ T28] audit: type=1400 audit(2000000603.680:1377): avc: denied { read write } for pid=16569 comm="syz.3.3477" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 999.779010][ T28] audit: type=1400 audit(2000000603.680:1378): avc: denied { open } for pid=16569 comm="syz.3.3477" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 999.888165][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3474'. [ 1000.091914][ T958] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B9/input/input422 [ 1000.104357][ T28] audit: type=1400 audit(2000000603.680:1379): avc: denied { ioctl } for pid=16569 comm="syz.3.3477" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1000.207650][ T28] audit: type=1326 audit(2000000604.120:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.0.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63ff8e929 code=0x7ffc0000 [ 1000.209696][T16572] loop3: detected capacity change from 0 to 1024 [ 1000.255325][ T28] audit: type=1326 audit(2000000604.120:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.0.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63ff8e929 code=0x7ffc0000 [ 1000.282529][ T958] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B9/input/input423 [ 1000.300315][ T28] audit: type=1326 audit(2000000604.120:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.0.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc63ff8e929 code=0x7ffc0000 [ 1000.327913][T16519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.344244][T16572] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1000.384061][T16519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.418258][ T958] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B9/input/input424 [ 1000.543877][ T958] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B9/input/input425 [ 1000.560767][ T958] uclogic 0003:256C:006D.00B9: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1000.641482][ T958] usb 3-1: USB disconnect, device number 100 [ 1000.698959][T16588] fido_id[16588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1001.174495][T16593] netlink: 'syz.3.3481': attribute type 4 has an invalid length. [ 1001.967152][T16604] loop3: detected capacity change from 0 to 512 [ 1001.985572][T16604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1002.063941][T16604] EXT4-fs (loop3): 1 truncate cleaned up [ 1002.088089][T16604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1002.425198][T16614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3486'. [ 1002.870466][T10554] EXT4-fs (loop3): unmounting filesystem. [ 1002.975931][T16625] loop3: detected capacity change from 0 to 16 [ 1003.012349][T16625] erofs: (device loop3): mounted with root inode @ nid 36. [ 1003.061897][T16625] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 1004.652263][ T958] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1004.905917][T16683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1005.076928][ T958] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 1005.110785][ T958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1005.181189][ T958] usb 3-1: SerialNumber: syz [ 1005.234825][ T958] usb 3-1: config 0 descriptor?? [ 1005.385409][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1005.385429][ T28] audit: type=1400 audit(2000000609.310:1409): avc: denied { create } for pid=16684 comm="syz.0.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1005.428588][ T28] audit: type=1400 audit(2000000609.330:1410): avc: denied { create } for pid=16684 comm="syz.0.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1005.448355][ T4073] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1005.458488][T16688] FAULT_INJECTION: forcing a failure. [ 1005.458488][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.471421][T16688] CPU: 1 PID: 16688 Comm: syz.0.3514 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 1005.471479][ T28] audit: type=1400 audit(2000000609.340:1411): avc: denied { setopt } for pid=16684 comm="syz.0.3513" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1005.481336][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.481350][T16688] Call Trace: [ 1005.481356][T16688] [ 1005.481364][T16688] __dump_stack+0x21/0x24 [ 1005.481400][T16688] dump_stack_lvl+0xee/0x150 [ 1005.481429][T16688] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1005.531949][T16688] ? avc_has_perm+0x158/0x240 [ 1005.536680][T16688] dump_stack+0x15/0x24 [ 1005.540870][T16688] should_fail_ex+0x3d4/0x520 [ 1005.545571][T16688] __should_failslab+0xac/0xf0 [ 1005.550356][T16688] ? __get_vm_area_node+0x12c/0x360 [ 1005.555579][T16688] should_failslab+0x9/0x20 [ 1005.560088][T16688] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1005.565462][T16688] ? __get_vm_area_node+0x12c/0x360 [ 1005.570690][T16688] kmalloc_node_trace+0x26/0xb0 [ 1005.575570][T16688] __get_vm_area_node+0x12c/0x360 [ 1005.580604][T16688] __vmalloc_node_range+0x326/0x13d0 [ 1005.585894][T16688] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.591436][T16688] ? arch_stack_walk+0xfc/0x150 [ 1005.596289][T16688] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1005.602029][T16688] ? stack_trace_save+0x98/0xe0 [ 1005.606884][T16688] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1005.612612][T16688] ? __cfi_selinux_capable+0x10/0x10 [ 1005.617911][T16688] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.623461][T16688] __vmalloc+0x79/0x90 [ 1005.627552][T16688] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.633102][T16688] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.638480][T16688] bpf_prog_alloc+0x22/0x1c0 [ 1005.643074][T16688] bpf_prog_load+0x7c6/0x15a0 [ 1005.647754][T16688] ? map_freeze+0x390/0x390 [ 1005.652259][T16688] ? selinux_bpf+0xc7/0xf0 [ 1005.656690][T16688] ? security_bpf+0x93/0xb0 [ 1005.661194][T16688] __sys_bpf+0x504/0x780 [ 1005.665450][T16688] ? bpf_link_show_fdinfo+0x320/0x320 [ 1005.670837][T16688] ? __cfi_ksys_write+0x10/0x10 [ 1005.675695][T16688] ? debug_smp_processor_id+0x17/0x20 [ 1005.681075][T16688] __x64_sys_bpf+0x7c/0x90 [ 1005.685588][T16688] x64_sys_call+0x488/0x9a0 [ 1005.690099][T16688] do_syscall_64+0x4c/0xa0 [ 1005.694518][T16688] ? clear_bhb_loop+0x30/0x80 [ 1005.699198][T16688] ? clear_bhb_loop+0x30/0x80 [ 1005.703965][T16688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1005.709861][T16688] RIP: 0033:0x7fc63ff8e929 [ 1005.714279][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.733887][T16688] RSP: 002b:00007fc640edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1005.742302][T16688] RAX: ffffffffffffffda RBX: 00007fc6401b5fa0 RCX: 00007fc63ff8e929 [ 1005.750293][T16688] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1005.758274][T16688] RBP: 00007fc640edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.766261][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.774244][T16688] R13: 0000000000000000 R14: 00007fc6401b5fa0 R15: 00007ffcd05defc8 [ 1005.782230][T16688] [ 1005.785901][T16688] syz.0.3514: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 1005.803848][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.815413][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.825591][T16688] CPU: 0 PID: 16688 Comm: syz.0.3514 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 1005.835515][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.845595][T16688] Call Trace: [ 1005.848898][T16688] [ 1005.851841][T16688] __dump_stack+0x21/0x24 [ 1005.856199][T16688] dump_stack_lvl+0xee/0x150 [ 1005.860820][T16688] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1005.865871][T16688] ? pr_cont_kernfs_name+0x133/0x160 [ 1005.871185][T16688] dump_stack+0x15/0x24 [ 1005.875387][T16688] warn_alloc+0x1b0/0x1d0 [ 1005.879770][T16688] ? should_failslab+0x9/0x20 [ 1005.884482][T16688] ? __cfi_warn_alloc+0x10/0x10 [ 1005.889358][T16688] ? kmalloc_node_trace+0x3d/0xb0 [ 1005.894411][T16688] ? __get_vm_area_node+0x353/0x360 [ 1005.899646][T16688] __vmalloc_node_range+0x34b/0x13d0 [ 1005.904964][T16688] ? arch_stack_walk+0xfc/0x150 [ 1005.909856][T16688] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1005.915599][T16688] ? stack_trace_save+0x98/0xe0 [ 1005.920473][T16688] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1005.926221][T16688] ? __cfi_selinux_capable+0x10/0x10 [ 1005.931534][T16688] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.937100][T16688] __vmalloc+0x79/0x90 [ 1005.941199][T16688] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.946772][T16688] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 1005.952173][T16688] bpf_prog_alloc+0x22/0x1c0 [ 1005.956800][T16688] bpf_prog_load+0x7c6/0x15a0 [ 1005.961513][T16688] ? map_freeze+0x390/0x390 [ 1005.966055][T16688] ? selinux_bpf+0xc7/0xf0 [ 1005.970511][T16688] ? security_bpf+0x93/0xb0 [ 1005.975055][T16688] __sys_bpf+0x504/0x780 [ 1005.979332][T16688] ? bpf_link_show_fdinfo+0x320/0x320 [ 1005.982225][ T28] audit: type=1400 audit(2000000609.860:1412): avc: denied { create } for pid=16691 comm="syz.4.3516" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1005.984737][T16688] ? __cfi_ksys_write+0x10/0x10 [ 1006.031354][T16688] ? debug_smp_processor_id+0x17/0x20 [ 1006.036741][T16688] __x64_sys_bpf+0x7c/0x90 [ 1006.041175][T16688] x64_sys_call+0x488/0x9a0 [ 1006.045679][T16688] do_syscall_64+0x4c/0xa0 [ 1006.050089][T16688] ? clear_bhb_loop+0x30/0x80 [ 1006.054763][T16688] ? clear_bhb_loop+0x30/0x80 [ 1006.059451][T16688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.065342][T16688] RIP: 0033:0x7fc63ff8e929 [ 1006.069755][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.089360][T16688] RSP: 002b:00007fc640edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.097779][T16688] RAX: ffffffffffffffda RBX: 00007fc6401b5fa0 RCX: 00007fc63ff8e929 [ 1006.105756][T16688] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1006.113728][T16688] RBP: 00007fc640edf090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.121713][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.129681][T16688] R13: 0000000000000000 R14: 00007fc6401b5fa0 R15: 00007ffcd05defc8 [ 1006.137669][T16688] [ 1006.140879][ T4073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1006.142076][T16688] Mem-Info: [ 1006.154135][ T4073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1006.161177][ T958] usb 3-1: USB disconnect, device number 101 [ 1006.166339][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.172761][T16688] active_anon:11291 inactive_anon:1 isolated_anon:0 [ 1006.172761][T16688] active_file:19561 inactive_file:2565 isolated_file:0 [ 1006.172761][T16688] unevictable:0 dirty:604 writeback:0 [ 1006.172761][T16688] slab_reclaimable:9356 slab_unreclaimable:74667 [ 1006.172761][T16688] mapped:30564 shmem:195 pagetables:943 [ 1006.172761][T16688] sec_pagetables:5 bounce:0 [ 1006.172761][T16688] kernel_misc_reclaimable:0 [ 1006.172761][T16688] free:1506698 free_pcp:4309 free_cma:0 [ 1006.225163][T16688] Node 0 active_anon:45208kB inactive_anon:4kB active_file:78244kB inactive_file:10260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122276kB dirty:2464kB writeback:0kB shmem:828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5064kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no [ 1006.257663][ T4073] usb 2-1: config 0 descriptor?? [ 1006.258701][T16688] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974256kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5664kB free_cma:0kB [ 1006.291194][T16688] lowmem_reserve[]: 0 3932 3932 3932 [ 1006.296669][T16688] Normal free:3058260kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:45208kB inactive_anon:4kB active_file:78244kB inactive_file:10260kB unevictable:0kB writepending:2464kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:12108kB local_pcp:8120kB free_cma:0kB [ 1006.326609][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1006.326762][T16688] lowmem_reserve[]: 0 0 0 0 [ 1006.340532][T16688] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 1006.356243][T16688] Normal: 1919*4kB (ME) 1239*8kB (UME) 696*16kB (UM) 815*32kB (UME) 436*64kB (UME) 222*128kB (UME) 39*256kB (UME) 19*512kB (UM) 21*1024kB (UME) 9*2048kB (UM) 705*4096kB (UME) = 3058452kB [ 1006.374897][T16688] 22334 total pagecache pages [ 1006.379668][T16688] 1 pages in swap cache [ 1006.383917][T16688] Free swap = 124704kB [ 1006.388176][T16688] Total swap = 124996kB [ 1006.392438][T16688] 2097051 pages RAM [ 1006.396275][T16688] 0 pages HighMem/MovableOnly [ 1006.401060][T16688] 346823 pages reserved [ 1006.405258][T16688] 0 pages cma reserved [ 1006.495352][ T28] audit: type=1400 audit(2000000610.420:1413): avc: denied { unlink } for pid=9661 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1007.208408][ T4073] plantronics 0003:047F:FFFF.00BA: unbalanced collection at end of report description [ 1007.740986][ T4073] plantronics 0003:047F:FFFF.00BA: parse failed [ 1007.747371][ T4073] plantronics: probe of 0003:047F:FFFF.00BA failed with error -22 [ 1007.790217][ T4073] usb 2-1: USB disconnect, device number 89 [ 1008.911358][ T291] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1009.103410][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.114497][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.132236][ T291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1009.158944][ T291] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.177575][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.202615][ T291] usb 3-1: config 0 descriptor?? [ 1009.342199][ T958] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1009.430432][T16734] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1009.450946][ T28] audit: type=1400 audit(2000000613.370:1414): avc: denied { create } for pid=16733 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1009.473356][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1009.492542][ T28] audit: type=1400 audit(2000000613.400:1415): avc: denied { write } for pid=16733 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1009.542224][ T958] usb 4-1: Using ep0 maxpacket: 16 [ 1009.548203][ T28] audit: type=1400 audit(2000000613.400:1416): avc: denied { nlmsg_write } for pid=16733 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1009.575005][ T958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.592985][ T958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.603712][ T958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1009.612750][ T291] plantronics 0003:047F:FFFF.00BB: unbalanced collection at end of report description [ 1009.628492][ T958] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1009.637894][ T291] plantronics 0003:047F:FFFF.00BB: parse failed [ 1009.644279][ T291] plantronics: probe of 0003:047F:FFFF.00BB failed with error -22 [ 1009.652504][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.677714][ T958] usb 4-1: config 0 descriptor?? [ 1010.425271][ T4073] usb 3-1: USB disconnect, device number 102 [ 1011.303930][ T958] usb 4-1: USB disconnect, device number 97 [ 1012.564621][ T28] audit: type=1400 audit(2000000616.460:1417): avc: denied { bind } for pid=16768 comm="syz.2.3539" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1012.857029][T16782] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 1012.992399][ T28] audit: type=1400 audit(2000000616.460:1418): avc: denied { name_bind } for pid=16768 comm="syz.2.3539" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1013.022234][ T28] audit: type=1400 audit(2000000616.460:1419): avc: denied { node_bind } for pid=16768 comm="syz.2.3539" saddr=2001:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1013.049597][ T28] audit: type=1400 audit(2000000616.460:1420): avc: denied { write } for pid=16768 comm="syz.2.3539" name="udplite6" dev="proc" ino=4026532609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1013.625691][ T28] audit: type=1400 audit(2000000617.530:1421): avc: denied { bind } for pid=16790 comm="syz.1.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1013.904348][ T28] audit: type=1400 audit(2000000617.830:1422): avc: denied { sqpoll } for pid=16792 comm="syz.4.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1014.049289][T16822] FAULT_INJECTION: forcing a failure. [ 1014.049289][T16822] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.085129][T16822] CPU: 1 PID: 16822 Comm: syz.1.3553 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 1014.095096][T16822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1014.105183][T16822] Call Trace: [ 1014.108493][T16822] [ 1014.111454][T16822] __dump_stack+0x21/0x24 [ 1014.115827][T16822] dump_stack_lvl+0xee/0x150 [ 1014.120472][T16822] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1014.125550][T16822] dump_stack+0x15/0x24 [ 1014.129748][T16822] should_fail_ex+0x3d4/0x520 [ 1014.134463][T16822] ? sk_prot_alloc+0x5f/0x320 [ 1014.139173][T16822] __should_failslab+0xac/0xf0 [ 1014.143982][T16822] should_failslab+0x9/0x20 [ 1014.148520][T16822] kmem_cache_alloc+0x3b/0x330 [ 1014.153316][T16822] sk_prot_alloc+0x5f/0x320 [ 1014.157857][T16822] sk_alloc+0x3b/0x460 [ 1014.161938][T16822] ? __kasan_slab_alloc+0x72/0x80 [ 1014.166969][T16822] tipc_sk_create+0xe6/0x1e60 [ 1014.171664][T16822] ? security_inode_alloc+0x33/0x120 [ 1014.176969][T16822] ? __kasan_check_write+0x14/0x20 [ 1014.182091][T16822] ? _raw_spin_lock+0x8e/0xe0 [ 1014.186784][T16822] ? __cfi__raw_spin_lock+0x10/0x10 [ 1014.191999][T16822] ? security_inode_alloc+0xd1/0x120 [ 1014.197302][T16822] ? inode_init_always+0x714/0x960 [ 1014.202444][T16822] __sock_create+0x39e/0x7c0 [ 1014.207077][T16822] __sys_socketpair+0x1a1/0x5b0 [ 1014.211959][T16822] __x64_sys_socketpair+0x9b/0xb0 [ 1014.216998][T16822] x64_sys_call+0x6e/0x9a0 [ 1014.221442][T16822] do_syscall_64+0x4c/0xa0 [ 1014.225878][T16822] ? clear_bhb_loop+0x30/0x80 [ 1014.230569][T16822] ? clear_bhb_loop+0x30/0x80 [ 1014.235260][T16822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.241341][T16822] RIP: 0033:0x7f2636d8e929 [ 1014.245762][T16822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.265466][T16822] RSP: 002b:00007f2636bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1014.273888][T16822] RAX: ffffffffffffffda RBX: 00007f2636fb5fa0 RCX: 00007f2636d8e929 [ 1014.281863][T16822] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1014.289835][T16822] RBP: 00007f2636bff090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.297810][T16822] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 1014.305783][T16822] R13: 0000000000000000 R14: 00007f2636fb5fa0 R15: 00007ffe8a81cb08 [ 1014.313762][T16822] [ 1014.493146][T16842] 9pnet_fd: Insufficient options for proto=fd [ 1015.472297][T16859] device wg2 entered promiscuous mode [ 1015.532707][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 1015.973620][ T958] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1016.054251][T16879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'. [ 1016.414394][ T958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.431960][ T958] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 129, using maximum allowed: 30 [ 1016.451116][ T958] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1016.550757][T16883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1017.241744][ T958] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1017.251831][ T958] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1017.261300][ T958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.273035][ T958] usb 3-1: config 0 descriptor?? [ 1017.414362][ T28] audit: type=1400 audit(2000000621.330:1423): avc: denied { create } for pid=16886 comm="syz.1.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1017.530436][T16895] Illegal XDP return value 4294967274 on prog (id 1714) dev N/A, expect packet loss! [ 1017.612362][ T28] audit: type=1400 audit(2000000621.530:1424): avc: denied { append } for pid=16899 comm="syz.1.3579" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1017.723838][ T28] audit: type=1400 audit(2000000621.610:1425): avc: denied { write } for pid=16866 comm="syz.2.3569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1017.781341][ T28] audit: type=1400 audit(2000000621.700:1426): avc: denied { connect } for pid=16906 comm="syz.3.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1017.801764][ T28] audit: type=1400 audit(2000000621.720:1427): avc: denied { connect } for pid=16896 comm="syz.4.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1017.821971][ T28] audit: type=1400 audit(2000000621.720:1428): avc: denied { ioctl } for pid=16906 comm="syz.3.3581" path="socket:[99470]" dev="sockfs" ino=99470 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1017.862509][ T958] usb 3-1: string descriptor 0 read error: -71 [ 1017.869180][ T958] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1017.878205][ T958] usb 3-1: USB disconnect, device number 103 [ 1018.487371][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1018.665597][ T28] audit: type=1400 audit(2000000622.590:1429): avc: denied { getopt } for pid=16929 comm="syz.0.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1018.807361][ T28] audit: type=1400 audit(2000000622.730:1430): avc: denied { read } for pid=16932 comm="syz.1.3589" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1019.699482][T16935] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1019.966852][ T28] audit: type=1400 audit(2000000622.730:1431): avc: denied { open } for pid=16932 comm="syz.1.3589" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1020.071711][ T28] audit: type=1400 audit(2000000623.990:1432): avc: denied { view } for pid=16940 comm="syz.0.3592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1020.101327][T16941] netlink: 'syz.0.3592': attribute type 28 has an invalid length. [ 1020.114093][ T28] audit: type=1400 audit(2000000624.010:1433): avc: denied { accept } for pid=16932 comm="syz.1.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1022.152236][ T3017] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1022.643544][ T3017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.654710][ T3017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.665437][ T3017] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1022.678716][ T3017] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.688144][ T3017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.690628][T16980] 9pnet_fd: Insufficient options for proto=fd [ 1022.697570][ T3017] usb 4-1: config 0 descriptor?? [ 1022.852228][ T291] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1023.615622][ T3017] usbhid 4-1:0.0: can't add hid device: -71 [ 1023.621651][ T3017] usbhid: probe of 4-1:0.0 failed with error -71 [ 1023.663461][ T3017] usb 4-1: USB disconnect, device number 98 [ 1023.747692][ T291] usb 3-1: not running at top speed; connect to a high speed hub [ 1023.757436][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 1023.769425][ T291] usb 3-1: config 11 has an invalid interface number: 184 but max is 3 [ 1023.778221][ T291] usb 3-1: config 11 has an invalid interface number: 226 but max is 3 [ 1023.786763][ T291] usb 3-1: config 11 has an invalid interface number: 29 but max is 3 [ 1023.795349][ T291] usb 3-1: config 11 has an invalid interface number: 10 but max is 3 [ 1024.270235][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1024.270256][ T28] audit: type=1400 audit(2000000627.740:1438): avc: denied { append } for pid=16995 comm="syz.1.3609" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1024.303179][ T291] usb 3-1: config 11 has an invalid interface number: 149 but max is 3 [ 1024.311782][ T291] usb 3-1: config 11 has 5 interfaces, different from the descriptor's value: 4 [ 1024.322474][ T291] usb 3-1: config 11 has no interface number 0 [ 1024.328718][ T291] usb 3-1: config 11 has no interface number 1 [ 1024.338584][ T291] usb 3-1: config 11 has no interface number 2 [ 1024.344843][ T291] usb 3-1: config 11 has no interface number 3 [ 1024.351172][ T291] usb 3-1: config 11 has no interface number 4 [ 1024.409871][ T291] usb 3-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1024.420970][ T291] usb 3-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1024.432054][ T291] usb 3-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1024.445412][ T291] usb 3-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 1024.542890][ T291] usb 3-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1024.554223][ T291] usb 3-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1024.566658][ T291] usb 3-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 1024.926658][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3611'. [ 1025.423815][ T291] usb 3-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 1025.435728][ T291] usb 3-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 1025.446811][ T291] usb 3-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 1025.457882][ T291] usb 3-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 1025.468953][ T291] usb 3-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 1025.580007][ T291] usb 3-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 1025.591349][ T291] usb 3-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 1025.604752][ T291] usb 3-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 1025.630561][ T291] usb 3-1: config 11 interface 149 altsetting 150 has an invalid endpoint with address 0x4C, skipping [ 1025.643102][ T28] audit: type=1400 audit(2000000629.570:1439): avc: denied { getopt } for pid=17018 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1025.671493][ T291] usb 3-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 1025.971688][ T291] usb 3-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x5, skipping [ 1026.141929][ T291] usb 3-1: config 11 interface 184 has no altsetting 0 [ 1026.247922][ T291] usb 3-1: config 11 interface 226 has no altsetting 0 [ 1026.845376][ T291] usb 3-1: config 11 interface 29 has no altsetting 0 [ 1026.855526][ T291] usb 3-1: config 11 interface 10 has no altsetting 0 [ 1026.862641][ T291] usb 3-1: config 11 interface 149 has no altsetting 0 [ 1026.901787][ T291] usb 3-1: string descriptor 0 read error: -71 [ 1026.928116][ T291] usb 3-1: Dual-Role OTG device on HNP port [ 1027.031136][ T291] usb 3-1: can't set HNP mode: -71 [ 1027.805295][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3632'. [ 1028.614046][T17087] fuse: Bad value for 'fd' [ 1028.818632][ T28] audit: type=1400 audit(2000000632.740:1440): avc: denied { unmount } for pid=15439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1028.962279][ T3017] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1029.176543][ T4073] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1029.213453][ T3017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.269314][ T3017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.279501][ T3017] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1029.288872][ T3017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.301510][ T3017] usb 2-1: config 0 descriptor?? [ 1029.307017][ T28] audit: type=1400 audit(2000000633.190:1441): avc: denied { write } for pid=17111 comm="syz.4.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1029.396740][ T4073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.407754][ T4073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.417622][ T4073] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1029.426730][ T4073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.435805][ T4073] usb 3-1: config 0 descriptor?? [ 1029.838690][ T28] audit: type=1400 audit(2000000633.760:1442): avc: denied { mount } for pid=17119 comm="syz.0.3653" name="/" dev="ramfs" ino=99834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1029.953749][ T28] audit: type=1400 audit(2000000633.880:1443): avc: denied { create } for pid=17119 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1029.992293][ T28] audit: type=1400 audit(2000000633.910:1444): avc: denied { create } for pid=17126 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1030.153176][ T28] audit: type=1400 audit(2000000634.080:1445): avc: denied { execute } for pid=17137 comm="syz.3.3658" dev="tmpfs" ino=4110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1030.175502][T17094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.184154][ T28] audit: type=1400 audit(2000000634.080:1446): avc: denied { execute_no_trans } for pid=17137 comm="syz.3.3658" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=4110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1030.187832][T17094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.262340][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.271981][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.601996][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00BE/input/input426 [ 1030.614235][ T3017] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00BD/input/input430 [ 1030.628815][ T3017] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00BD/input/input431 [ 1030.640961][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00BE/input/input427 [ 1030.655396][ T4073] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00BE/input/input428 [ 1030.668601][ T3017] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00BD/input/input432 [ 1030.683844][ T3017] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00BD/input/input433 [ 1030.697060][ T4073] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00BE/input/input429 [ 1030.713379][ T4073] uclogic 0003:256C:006D.00BE: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1030.726621][ T3017] uclogic 0003:256C:006D.00BD: input,hiddev97,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1030.773711][ T958] usb 3-1: USB disconnect, device number 106 [ 1030.832699][ T291] usb 2-1: USB disconnect, device number 90 [ 1030.851260][T17150] fido_id[17150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1030.887892][T17148] fuse: Bad value for 'fd' [ 1031.000118][T17148] 9pnet_fd: Insufficient options for proto=fd [ 1031.360581][ T28] audit: type=1400 audit(2000000635.280:1447): avc: denied { read write } for pid=17159 comm="syz.1.3664" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1031.362644][ T4073] hid-generic 0003:0004:0000.00BF: unknown main item tag 0x0 [ 1031.385280][ T28] audit: type=1400 audit(2000000635.280:1448): avc: denied { open } for pid=17159 comm="syz.1.3664" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1031.395262][ T4073] hid-generic 0003:0004:0000.00BF: unknown main item tag 0x0 [ 1031.422861][ T4073] hid-generic 0003:0004:0000.00BF: unknown main item tag 0x0 [ 1031.430836][ T4073] hid-generic 0003:0004:0000.00BF: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1031.448043][ T4073] hid-generic 0003:0000:0000.00C0: unknown main item tag 0x0 [ 1031.456931][ T4073] hid-generic 0003:0000:0000.00C0: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 1031.483803][T17163] fido_id[17163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1031.669517][ T28] audit: type=1400 audit(2000000635.590:1449): avc: denied { read } for pid=17166 comm="syz.0.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1032.307059][T17186] FAULT_INJECTION: forcing a failure. [ 1032.307059][T17186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.320217][T17186] CPU: 1 PID: 17186 Comm: syz.2.3669 Not tainted 6.1.141-syzkaller-00028-g147721011eea #0 [ 1032.330135][T17186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.340207][T17186] Call Trace: [ 1032.343507][T17186] [ 1032.346452][T17186] __dump_stack+0x21/0x24 [ 1032.350810][T17186] dump_stack_lvl+0xee/0x150 [ 1032.355422][T17186] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1032.360476][T17186] ? release_firmware_map_entry+0x194/0x194 [ 1032.366394][T17186] ? proc_fail_nth_write+0x17a/0x1f0 [ 1032.371708][T17186] dump_stack+0x15/0x24 [ 1032.375888][T17186] should_fail_ex+0x3d4/0x520 [ 1032.380596][T17186] should_fail+0xb/0x10 [ 1032.384857][T17186] should_fail_usercopy+0x1a/0x20 [ 1032.389899][T17186] strncpy_from_user+0x24/0x2d0 [ 1032.394772][T17186] ? getname_flags+0xb9/0x500 [ 1032.399481][T17186] getname_flags+0xf4/0x500 [ 1032.404012][T17186] getname+0x19/0x20 [ 1032.407929][T17186] do_sys_openat2+0xcb/0x7e0 [ 1032.412539][T17186] ? fput+0x28/0x1a0 [ 1032.416458][T17186] ? do_sys_open+0xe0/0xe0 [ 1032.420889][T17186] ? ksys_write+0x1eb/0x240 [ 1032.425401][T17186] __x64_sys_openat+0x136/0x160 [ 1032.430252][T17186] x64_sys_call+0x783/0x9a0 [ 1032.434754][T17186] do_syscall_64+0x4c/0xa0 [ 1032.439164][T17186] ? clear_bhb_loop+0x30/0x80 [ 1032.443839][T17186] ? clear_bhb_loop+0x30/0x80 [ 1032.448513][T17186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1032.454429][T17186] RIP: 0033:0x7ff88818e929 [ 1032.458840][T17186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.478442][T17186] RSP: 002b:00007ff888f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1032.486856][T17186] RAX: ffffffffffffffda RBX: 00007ff8883b6160 RCX: 00007ff88818e929 [ 1032.494826][T17186] RDX: 0000000000149a82 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1032.502794][T17186] RBP: 00007ff888f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.510760][T17186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.518726][T17186] R13: 0000000000000000 R14: 00007ff8883b6160 R15: 00007fff6f848888 [ 1032.526729][T17186] [ 1032.760778][T17200] 9pnet_fd: Insufficient options for proto=fd [ 1032.853060][T17201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3676'. [ 1033.141971][ T28] audit: type=1400 audit(2000000637.060:1450): avc: denied { read } for pid=17202 comm="syz.2.3677" path="socket:[99945]" dev="sockfs" ino=99945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1033.432286][ T4073] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1033.590490][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1033.613847][ T4073] usb 2-1: not running at top speed; connect to a high speed hub [ 1033.622913][ T4073] usb 2-1: config 11 has an invalid interface number: 184 but max is 3 [ 1033.631223][ T4073] usb 2-1: config 11 has an invalid interface number: 226 but max is 3 [ 1033.640842][ T4073] usb 2-1: config 11 has an invalid interface number: 29 but max is 3 [ 1033.649300][ T4073] usb 2-1: config 11 has an invalid interface number: 10 but max is 3 [ 1033.657771][ T4073] usb 2-1: config 11 has an invalid interface number: 149 but max is 3 [ 1033.666296][ T4073] usb 2-1: config 11 has an invalid interface descriptor of length 2, skipping [ 1033.675536][ T4073] usb 2-1: config 11 has 5 interfaces, different from the descriptor's value: 4 [ 1033.684813][ T4073] usb 2-1: config 11 has no interface number 0 [ 1033.697599][ T4073] usb 2-1: config 11 has no interface number 1 [ 1033.704017][ T4073] usb 2-1: config 11 has no interface number 2 [ 1033.710274][ T4073] usb 2-1: config 11 has no interface number 3 [ 1033.716730][ T4073] usb 2-1: config 11 has no interface number 4 [ 1033.723219][ T4073] usb 2-1: config 11 interface 184 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1033.734563][ T4073] usb 2-1: config 11 interface 184 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1033.748588][ T4073] usb 2-1: config 11 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1033.762486][ T4073] usb 2-1: too many endpoints for config 11 interface 226 altsetting 32: 181, using maximum allowed: 30 [ 1033.774282][ T4073] usb 2-1: config 11 interface 226 altsetting 32 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1033.791863][ T4073] usb 2-1: config 11 interface 226 altsetting 32 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1033.803137][ T4073] usb 2-1: config 11 interface 226 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 181 [ 1033.816656][ T4073] usb 2-1: too many endpoints for config 11 interface 29 altsetting 247: 125, using maximum allowed: 30 [ 1033.827834][ T4073] usb 2-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 1033.838752][ T4073] usb 2-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 1033.849760][ T4073] usb 2-1: config 11 interface 29 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 1033.860753][ T4073] usb 2-1: config 11 interface 29 altsetting 247 has 5 endpoint descriptors, different from the interface descriptor's value: 125 [ 1033.874380][ T4073] usb 2-1: config 11 interface 10 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 1033.885271][ T4073] usb 2-1: config 11 interface 10 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 0 [ 1033.898638][ T4073] usb 2-1: config 11 interface 149 altsetting 150 endpoint 0x1 has invalid maxpacket 439, setting to 64 [ 1033.909957][ T4073] usb 2-1: config 11 interface 149 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 1033.921087][ T4073] usb 2-1: config 11 interface 149 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1033.934610][ T4073] usb 2-1: config 11 interface 184 has no altsetting 0 [ 1033.941595][ T4073] usb 2-1: config 11 interface 226 has no altsetting 0 [ 1033.948617][ T4073] usb 2-1: config 11 interface 29 has no altsetting 0 [ 1033.955446][ T4073] usb 2-1: config 11 interface 10 has no altsetting 0 [ 1033.962256][ T4073] usb 2-1: config 11 interface 149 has no altsetting 0 [ 1033.972447][ T4073] usb 2-1: Dual-Role OTG device on HNP port [ 1033.978620][ T4073] usb 2-1: New USB device found, idVendor=1410, idProduct=b001, bcdDevice=83.d0 [ 1033.988437][ T4073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.996666][ T4073] usb 2-1: Product: syz [ 1034.000939][ T4073] usb 2-1: Manufacturer: раз [ 1034.005663][ T4073] usb 2-1: SerialNumber: syz [ 1036.091710][ T4073] usb 2-1: USB disconnect, device number 91 [ 1036.100378][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1036.666999][T17271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1037.177489][ T4073] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1037.413315][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.450264][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.470669][ T4073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1037.531011][T17289] xt_hashlimit: size too large, truncated to 1048576 [ 1037.700312][T17295] fuse: Bad value for 'fd' [ 1037.776655][ T4073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1037.786128][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.798225][ T4073] usb 2-1: config 0 descriptor?? [ 1037.803595][T17295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3709'. [ 1038.008747][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.026249][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.523045][ T4073] usbhid 2-1:0.0: can't add hid device: -71 [ 1039.529262][ T4073] usbhid: probe of 2-1:0.0 failed with error -71 [ 1039.552496][ T4073] usb 2-1: USB disconnect, device number 92 [ 1039.961921][T17342] syz.2.3724[17342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1039.962384][T17342] syz.2.3724[17342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1042.066512][ T958] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1042.123827][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1042.123845][ T28] audit: type=1400 audit(2000000646.050:1453): avc: denied { mount } for pid=17367 comm="syz.3.3736" name="/" dev="configfs" ino=14127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1042.172321][ T28] audit: type=1400 audit(2000000646.090:1454): avc: denied { search } for pid=17367 comm="syz.3.3736" name="/" dev="configfs" ino=14127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1042.323982][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.345425][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.355315][ T958] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1042.364536][ T958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.378162][ T958] usb 2-1: config 0 descriptor?? [ 1043.069536][T17382] syz.2.3740[17382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1043.071237][T17382] syz.2.3740[17382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1044.632939][T17360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.685242][T17360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.706807][ T958] usbhid 2-1:0.0: can't add hid device: -32 [ 1044.714264][T17360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.232336][T17360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.359296][ T958] usbhid: probe of 2-1:0.0 failed with error -32 [ 1045.370568][ T958] usb 2-1: USB disconnect, device number 93 [ 1045.555247][ T28] audit: type=1400 audit(2000000649.480:1455): avc: denied { getopt } for pid=17414 comm="syz.0.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1045.593854][ T28] audit: type=1400 audit(2000000649.510:1456): avc: denied { listen } for pid=17414 comm="syz.0.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1045.624661][ T28] audit: type=1400 audit(2000000649.510:1457): avc: denied { write } for pid=17414 comm="syz.0.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1047.141322][ T28] audit: type=1400 audit(2000000651.060:1458): avc: denied { bind } for pid=17458 comm="syz.3.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1047.162221][T17451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3764'. [ 1047.872611][T17462] netlink: 'syz.4.3766': attribute type 4 has an invalid length. [ 1051.503337][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1051.622733][ T28] audit: type=1400 audit(2000000655.550:1459): avc: denied { create } for pid=17511 comm="syz.3.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1051.651224][T17512] fuse: blksize only supported for fuseblk [ 1051.719257][ T28] audit: type=1400 audit(2000000655.570:1460): avc: denied { getopt } for pid=17511 comm="syz.3.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1051.759397][ T28] audit: type=1400 audit(2000000655.680:1461): avc: denied { create } for pid=17511 comm="syz.3.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1053.005326][T17545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3798'. [ 1053.494036][ T28] audit: type=1400 audit(2000000657.420:1462): avc: denied { write } for pid=17556 comm="syz.1.3802" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1056.547166][ T28] audit: type=1326 audit(2000000659.290:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.573639][ T28] audit: type=1326 audit(2000000659.290:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.597667][ T28] audit: type=1326 audit(2000000659.290:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.621587][ T28] audit: type=1326 audit(2000000659.290:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.652384][ T28] audit: type=1326 audit(2000000659.290:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.676148][ T28] audit: type=1326 audit(2000000659.290:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.699783][ T28] audit: type=1326 audit(2000000659.290:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.724283][ T28] audit: type=1326 audit(2000000659.290:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1056.748171][ T28] audit: type=1326 audit(2000000659.290:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17556 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f2636d8e929 code=0x7ffc0000 [ 1057.052237][ T4075] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 1057.198477][T17605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3816'. [ 1057.530869][T17593] 9pnet_fd: Insufficient options for proto=fd [ 1057.592499][ T4075] usb 2-1: device descriptor read/64, error -71 [ 1058.485998][ T4075] usb 2-1: device descriptor read/64, error -71 [ 1058.895245][T17632] netlink: 'syz.0.3821': attribute type 4 has an invalid length. [ 1058.995092][ T4075] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1059.324560][ T4075] usb 2-1: device descriptor read/64, error -71 [ 1061.052392][ T4075] usb usb2-port1: attempt power cycle [ 1061.076739][T17663] 9pnet_fd: Insufficient options for proto=fd [ 1063.675583][ T4075] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1064.826040][ T4075] usb 2-1: device not accepting address 96, error -71 [ 1066.613487][T17759] IPv6: NLM_F_CREATE should be specified when creating new route [ 1066.633042][T17759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1066.640362][T17759] IPv6: NLM_F_CREATE should be set when creating new route [ 1066.647650][T17759] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.896673][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1069.896691][ T28] audit: type=1400 audit(2000000673.820:1486): avc: denied { write } for pid=17821 comm="syz.1.3893" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1070.256795][T17833] 9pnet_fd: Insufficient options for proto=fd [ 1071.900410][T17869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1074.097008][T17909] syz.0.3922[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1074.097141][T17909] syz.0.3922[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.689688][ T4073] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1076.783490][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.794530][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.804647][ T4073] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1076.813809][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.969160][ T4073] usb 2-1: config 0 descriptor?? [ 1078.302224][ T4073] usbhid 2-1:0.0: can't add hid device: -71 [ 1078.309687][ T4073] usbhid: probe of 2-1:0.0 failed with error -71 [ 1078.364763][ T4073] usb 2-1: USB disconnect, device number 98 [ 1079.782043][T17979] 9pnet_fd: Insufficient options for proto=fd [ 1081.356791][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3962'. [ 1081.627710][T18028] syz.0.3960[18028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.627797][T18028] syz.0.3960[18028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.230431][T18065] syz.3.3973[18065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.242997][T18065] syz.3.3973[18065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.688674][T18068] syz.1.3975[18068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.701842][T18068] syz.1.3975[18068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.513483][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1091.621551][T18154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4003'. [ 1092.010750][T18153] 9pnet_fd: Insufficient options for proto=fd [ 1092.579174][T18184] syz.3.4016[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.579261][T18184] syz.3.4016[18184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.318664][T18260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1098.931308][T18278] syz.1.4050[18278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1098.932211][T18278] syz.1.4050[18278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1103.233402][ T6] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1103.433436][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.516786][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.526933][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1103.800388][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.817338][ T6] usb 2-1: config 0 descriptor?? [ 1106.372785][T18311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.381316][T18311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.925774][T18311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.937056][T18311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.947426][ T6] uclogic 0003:256C:006D.00C1: failed retrieving string descriptor #200: -71 [ 1106.960890][ T6] uclogic 0003:256C:006D.00C1: failed retrieving pen parameters: -71 [ 1106.970125][ T6] uclogic 0003:256C:006D.00C1: failed probing pen v2 parameters: -71 [ 1106.978675][ T6] uclogic 0003:256C:006D.00C1: failed probing parameters: -71 [ 1106.986697][ T6] uclogic: probe of 0003:256C:006D.00C1 failed with error -71 [ 1107.005442][ T6] usb 2-1: USB disconnect, device number 99 [ 1107.126170][T18395] 9pnet_fd: Insufficient options for proto=fd [ 1108.813239][T18412] syz.3.4096[18412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1108.813662][T18412] syz.3.4096[18412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1110.266693][T18436] 9pnet_fd: Insufficient options for proto=fd [ 1110.297150][T18437] 9pnet_fd: Insufficient options for proto=fd [ 1110.322711][T18438] 9pnet_fd: Insufficient options for proto=fd [ 1110.859358][T18453] 9pnet_fd: Insufficient options for proto=fd [ 1112.224918][T18481] syz.0.4118[18481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1112.225012][T18481] syz.0.4118[18481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1112.442834][T18483] syz.1.4119[18483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1112.454452][T18483] syz.1.4119[18483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1116.512775][T18506] syz.3.4125[18506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1116.524353][T18506] syz.3.4125[18506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1119.057061][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4141'. [ 1120.175319][T18558] syz.1.4143[18558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1120.175406][T18558] syz.1.4143[18558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.262238][T18626] syz.3.4162[18626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.274408][T18626] syz.3.4162[18626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.650612][T18648] 9pnet_fd: Insufficient options for proto=fd [ 1130.536410][T18657] syz.3.4174[18657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1130.537387][T18657] syz.3.4174[18657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1136.221539][T18712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=18712 comm=syz.2.4188 [ 1136.265229][T18712] netlink: 8668 bytes leftover after parsing attributes in process `syz.2.4188'. [ 1141.419522][T18760] syz.4.4204[18760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.421087][T18760] syz.4.4204[18760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1144.968381][T18771] syz.4.4207[18771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1144.980381][T18771] syz.4.4207[18771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.201841][T18787] syz.2.4211[18787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.213531][T18787] syz.2.4211[18787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.199770][T18810] syz.0.4216[18810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.211440][T18810] syz.0.4216[18810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.465480][T18828] syz.4.4220[18828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.477810][T18828] syz.4.4220[18828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1155.151072][ T291] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1155.634925][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.701784][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.772462][ T291] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1155.781531][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.799801][ T291] usb 2-1: config 0 descriptor?? [ 1155.878426][T18865] syz.0.4235[18865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1155.878862][T18865] syz.0.4235[18865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.700362][T18830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.773528][T18830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.009745][ T291] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C2/input/input434 [ 1157.043009][ T291] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C2/input/input435 [ 1157.149186][T18877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1157.384691][ T291] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C2/input/input436 [ 1157.413336][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.432540][ T291] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C2/input/input437 [ 1157.433480][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.492494][ T291] uclogic 0003:256C:006D.00C2: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1157.525918][ T291] usb 2-1: USB disconnect, device number 100 [ 1157.797983][T18892] fido_id[18892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1158.401324][T18888] 9pnet_fd: Insufficient options for proto=fd [ 1158.529330][T18906] syz.0.4246[18906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1158.529414][T18906] syz.0.4246[18906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1159.522505][T18914] syz.3.4248[18914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1159.534043][T18914] syz.3.4248[18914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.949048][T18932] 9pnet_fd: Insufficient options for proto=fd [ 1162.080717][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4254'. [ 1162.331847][T18950] syz.4.4259[18950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1162.332314][T18950] syz.4.4259[18950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1163.695017][T18959] syz.3.4261[18959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1163.706979][T18959] syz.3.4261[18959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1165.312188][ T39] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1167.153587][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.164676][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.174491][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1167.184141][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.200176][ T39] usb 2-1: config 0 descriptor?? [ 1168.014132][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 1168.020151][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 1168.044704][ T39] usb 2-1: USB disconnect, device number 101 [ 1169.250361][T19030] syz.2.4284[19030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.250447][T19030] syz.2.4284[19030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.271259][T19030] 9pnet_fd: Insufficient options for proto=fd [ 1170.698955][T19039] 9pnet_fd: Insufficient options for proto=fd [ 1171.263232][T19068] syz.1.4299[19068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1171.263791][T19068] syz.1.4299[19068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1172.763756][T19084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4304'. [ 1174.982702][T19105] syz.0.4312[19105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1174.983106][T19105] syz.0.4312[19105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.977311][T19107] 9pnet_fd: Insufficient options for proto=fd [ 1176.404411][T19121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1177.815968][T19146] syz.4.4324[19146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.816377][T19146] syz.4.4324[19146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.743788][T19169] 9pnet_fd: Insufficient options for proto=fd [ 1179.772477][T19173] 9pnet_fd: Insufficient options for proto=fd [ 1181.112183][ T4073] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1181.334157][T19210] netlink: 'syz.0.4347': attribute type 4 has an invalid length. [ 1181.555397][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.566718][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.576841][ T4073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1181.590081][ T4073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1181.599260][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.612250][ T4073] usb 2-1: config 0 descriptor?? [ 1183.135373][T19191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.156390][T19191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.833450][T19237] 9pnet_fd: Insufficient options for proto=fd [ 1184.212568][ T4073] usbhid 2-1:0.0: can't add hid device: -71 [ 1184.219842][ T4073] usbhid: probe of 2-1:0.0 failed with error -71 [ 1184.237781][ T4073] usb 2-1: USB disconnect, device number 102 [ 1186.142486][T19269] syz.1.4364[19269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.142574][T19269] syz.1.4364[19269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.254539][T19270] syz.3.4363[19270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.266232][T19270] syz.3.4363[19270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.351324][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4367'. [ 1191.042294][ T4073] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1191.233635][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.250633][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.261302][ T4073] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1191.271190][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.280742][ T4073] usb 2-1: config 0 descriptor?? [ 1191.619935][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1191.844265][ T28] audit: type=1400 audit(2000000795.770:1487): avc: denied { ioctl } for pid=19337 comm="syz.0.4391" path="socket:[105379]" dev="sockfs" ino=105379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1191.870121][ T28] audit: type=1400 audit(2000000795.790:1488): avc: denied { connect } for pid=19337 comm="syz.0.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1191.875793][T19339] device vlan1 entered promiscuous mode [ 1191.890647][ T28] audit: type=1400 audit(2000000795.790:1489): avc: denied { write } for pid=19337 comm="syz.0.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1191.992635][T19303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.001119][T19303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.010141][ T4073] usbhid 2-1:0.0: can't add hid device: -32 [ 1192.016124][ T4073] usbhid: probe of 2-1:0.0 failed with error -32 [ 1192.023410][ T4073] usb 2-1: USB disconnect, device number 103 [ 1192.243419][T19343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4392'. [ 1192.622559][T19337] device vlan1 left promiscuous mode [ 1193.416415][T19359] netlink: 'syz.0.4398': attribute type 4 has an invalid length. [ 1195.321560][ T28] audit: type=1400 audit(2000000799.240:1490): avc: denied { bind } for pid=19378 comm="syz.1.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1195.420349][ T28] audit: type=1400 audit(2000000799.340:1491): avc: denied { read } for pid=19378 comm="syz.1.4407" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1195.448719][ T28] audit: type=1400 audit(2000000799.340:1492): avc: denied { open } for pid=19378 comm="syz.1.4407" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1197.023816][T19416] syz.1.4417[19416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1197.023975][T19416] syz.1.4417[19416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1201.102872][ T28] audit: type=1400 audit(2000000805.030:1493): avc: denied { wake_alarm } for pid=19456 comm="syz.2.4433" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1201.812229][ T4073] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1202.045109][T19498] syz.4.4446[19498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.046476][T19498] syz.4.4446[19498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1203.349867][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.374446][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.384372][ T4073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1203.398139][ T4073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1203.430388][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.456350][ T4073] usb 2-1: config 0 descriptor?? [ 1204.683263][ T4073] usbhid 2-1:0.0: can't add hid device: -71 [ 1204.689313][ T4073] usbhid: probe of 2-1:0.0 failed with error -71 [ 1204.705033][ T4073] usb 2-1: USB disconnect, device number 104 [ 1205.842177][T19560] syz.0.4467[19560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1205.842604][T19560] syz.0.4467[19560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1206.673417][ T28] audit: type=1400 audit(2000000809.780:1494): avc: denied { create } for pid=19552 comm="syz.0.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1207.207987][T19571] syz.2.4471[19571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.208227][T19571] syz.2.4471[19571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.430106][T19572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1208.676768][ T28] audit: type=1400 audit(2000000812.600:1495): avc: denied { create } for pid=19573 comm="syz.1.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1208.755629][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4472'. [ 1214.529463][T19621] syz.2.4486[19621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1214.530994][T19621] syz.2.4486[19621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.654733][T19682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4501'. [ 1222.429013][T19731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4521'. [ 1223.328254][T19711] syz.0.4509 (19711) used greatest stack depth: 19648 bytes left [ 1224.303853][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1227.996908][T19796] syz.0.4541[19796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1227.997557][T19796] syz.0.4541[19796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.510564][T19837] syz.3.4553[19837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.523987][T19837] syz.3.4553[19837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.785899][T19837] 9pnet_fd: Insufficient options for proto=fd [ 1232.896012][T19844] syz.2.4557[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.896447][T19844] syz.2.4557[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.013006][T19901] syz.2.4572[19901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.024687][T19901] syz.2.4572[19901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1244.658465][T19998] syz.3.4604[19998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1244.671317][T19998] syz.3.4604[19998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1253.625964][T20128] syz.2.4650[20128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1253.637500][T20128] syz.2.4650[20128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1258.816494][T20199] syz.4.4670[20199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1258.828577][T20199] syz.4.4670[20199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1263.822477][T20236] syz.0.4679[20236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1263.834008][T20236] syz.0.4679[20236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1268.904369][ T6] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1270.023288][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.041939][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.062330][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1270.092198][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1270.111738][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.139683][ T6] usb 2-1: config 0 descriptor?? [ 1270.548338][ T6] plantronics 0003:047F:FFFF.00C3: unbalanced collection at end of report description [ 1270.558964][ T6] plantronics 0003:047F:FFFF.00C3: parse failed [ 1270.574454][ T6] plantronics: probe of 0003:047F:FFFF.00C3 failed with error -22 [ 1271.599998][ T6] usb 2-1: USB disconnect, device number 105 [ 1273.930772][ T4073] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1274.034401][T20357] syz.0.4716[20357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1274.034827][T20357] syz.0.4716[20357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1275.253333][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.276056][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.286195][ T4073] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1275.295337][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.325898][ T4073] usb 2-1: config 0 descriptor?? [ 1276.708338][T20340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.729302][T20340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.125758][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C4/input/input438 [ 1277.139178][ T4073] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C4/input/input439 [ 1277.152664][ T4073] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C4/input/input440 [ 1277.167119][ T4073] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C4/input/input441 [ 1279.208991][ T4073] uclogic 0003:256C:006D.00C4: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1279.232010][ T4073] usb 2-1: USB disconnect, device number 106 [ 1279.290912][T20398] syz.2.4728[20398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1279.291328][T20398] syz.2.4728[20398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1280.620897][T20406] fido_id[20406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1282.372466][T20424] syz.3.4733[20424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.372553][T20424] syz.3.4733[20424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1284.054322][T20435] syz.4.4741[20435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1284.066471][T20435] syz.4.4741[20435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1288.618126][T20481] syz.0.4750[20481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1288.629809][T20481] syz.0.4750[20481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1296.371117][T20542] netlink: 'syz.4.4772': attribute type 49 has an invalid length. [ 1297.570105][T20542] netlink: 'syz.4.4772': attribute type 24 has an invalid length. [ 1297.599525][T20542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4772'. [ 1298.326207][ T28] audit: type=1400 audit(2000000902.250:1496): avc: denied { ioctl } for pid=20556 comm="syz.0.4777" path="socket:[108851]" dev="sockfs" ino=108851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1306.040676][ T28] audit: type=1400 audit(2000000909.960:1497): avc: denied { read } for pid=20628 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1306.152065][T20636] syz.4.4797[20636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1306.153420][T20636] syz.4.4797[20636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1308.836761][T20653] syz.2.4799[20653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1308.849658][T20653] syz.2.4799[20653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1311.978780][ T4073] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1312.483376][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.494593][ T4073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.862404][ T4073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.886435][ T4073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.897708][ T4073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.915959][ T4073] usb 2-1: config 0 descriptor?? [ 1313.098076][ T28] audit: type=1400 audit(2000000917.020:1498): avc: denied { search } for pid=20701 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.136960][T20659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.153364][T20659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.368459][ T28] audit: type=1400 audit(2000000917.290:1499): avc: denied { read write } for pid=20715 comm="ip" path="/dev/console" dev="rootfs" ino=7308 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1313.396425][T20713] overlayfs: failed to clone lowerpath [ 1313.415771][ T28] audit: type=1400 audit(2000000917.290:1500): avc: denied { write } for pid=141 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.497950][ T28] audit: type=1400 audit(2000000917.290:1501): avc: denied { remove_name } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.887175][ T28] audit: type=1400 audit(2000000917.290:1502): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1313.912932][ T28] audit: type=1400 audit(2000000917.390:1503): avc: denied { unlink } for pid=141 comm="dhcpcd" name="pid" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1313.946253][ T4073] usbhid 2-1:0.0: can't add hid device: -71 [ 1313.957684][ T4073] usbhid: probe of 2-1:0.0 failed with error -71 [ 1313.985444][ T4073] usb 2-1: USB disconnect, device number 107 [ 1314.113401][ T28] audit: type=1400 audit(2000000918.020:1504): avc: denied { read write } for pid=20728 comm="iptables" path="/dev/console" dev="rootfs" ino=7308 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1314.754280][ T28] audit: type=1400 audit(2000000918.030:1505): avc: denied { search } for pid=20728 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.785077][ T28] audit: type=1400 audit(2000000918.030:1506): avc: denied { write } for pid=20728 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.848923][ T28] audit: type=1400 audit(2000000918.030:1507): avc: denied { add_name } for pid=20728 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1316.961144][ T102] printk: udevd: 234 output lines suppressed due to ratelimiting [ 1317.161703][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4831'. [ 1320.112515][T20818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4838'. [ 1321.212787][T20833] syz.1.4843[20833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! Connection to 10.128.0.15 closed by remote host. [ 1321.212862][T20833] syz.1.4843[20833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1322.342144][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1322.342164][ T28] audit: type=1400 audit(2000000926.230:1514): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[15367]" dev="pipefs" ino=15367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1323.122496][T16823] device bridge_slave_1 left promiscuous mode [ 1323.128620][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.136020][T16823] device bridge_slave_0 left promiscuous mode [ 1323.142152][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.013402][T16823] device bridge_slave_1 left promiscuous mode [ 1324.019526][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.026946][T16823] device bridge_slave_0 left promiscuous mode [ 1324.033064][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.040726][T16823] device bridge_slave_1 left promiscuous mode [ 1324.046862][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.054293][T16823] device bridge_slave_0 left promiscuous mode [ 1324.060386][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.068242][T16823] device bridge_slave_1 left promiscuous mode [ 1324.074398][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.081733][T16823] device bridge_slave_0 left promiscuous mode [ 1324.087867][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.095665][T16823] device bridge_slave_1 left promiscuous mode [ 1324.101761][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.109235][T16823] device bridge_slave_0 left promiscuous mode [ 1324.115397][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.123454][T16823] device veth1_macvtap left promiscuous mode [ 1324.129444][T16823] device veth0_vlan left promiscuous mode [ 1324.135674][T16823] device veth1_macvtap left promiscuous mode [ 1324.141683][T16823] device veth0_vlan left promiscuous mode [ 1324.426260][T20838] kvm: exiting hardware virtualization [ 1324.432514][T20838] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1324.439207][T20838] ACPI: PM: Preparing to enter system sleep state S5 [ 1324.447009][T20838] reboot: Power down serialport: VM disconnected.