last executing test programs: 2m5.78484582s ago: executing program 0 (id=103): r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d1) process_madvise(r0, &(0x7f0000002140)=[{&(0x7f0000000c40)="95129d8897a3c86e1493d161ab9abc1e384aa6308edba885a4f659a79d896bd4db420922c60c", 0x26}, {&(0x7f0000000c80)="2bf14fbf2cdef1dd2f0d19eccaed31a4c7b72261d60197d590271f299c75d8d7c87f9bd1f68a2602c9b76d12d26cb4916308ebb3cbd64c7dc42d11e5ddd2937ad243616823eb2b58e9e5905e88e89ece97", 0x51}, {&(0x7f0000000d00)="4d2d33d200eaa428fa59dcf03298020fb6c27e4884a2dc8a27be218fb068402317b787895f33891dd7d759a83c981e939b56528e9beb79d16b115607747181e4fb08162c83e4e3f583288de170b83d976efad9213a40b6e1c8b62f", 0x5b}, {&(0x7f0000000f80)="a9f2f4cbba3344fc2f99c64120fefb8848762c438eb52e9ab4a4c498f09fd526d04034b117236fc0250456f3343de13cfaad68ceede1ff5daf6b1b68027efcb9046f9eede9eb6c34ce5a95c270b96d46311c128cb512e3a82292559b1515e86f8479721f17862e96076da022b38fbfde0b13758c1f0dee15166e98e280e8ae4e6481d84426928243d8ecc917ff5d214a722332bb79310f09a3a6a1abc335ac559c75827ef40db261", 0xa8}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000e80)="bdbf80075669f78694843bd1858c3f9b7081ace3", 0x14}, {&(0x7f0000002040)="fe89bfb60383fd1a283d06094382c9320c5f08b6e3b05b76eefd0ff2008a82bc9304b19fe206a88ef0b8e6b7e2aef7ff6a7ad6f069857b4c15adc3730561e97206a6d5c4dbc961b6d35961fa5405a305bda26b16a1bbc1649684", 0x5a}, {&(0x7f00000020c0)="dde1250ad45e619ca77a4834f3c2b3ddade8fc09a360e5e3c9dd722a24b0967fcd6da21de59079bf0eab50c431000fc223e79f39511b096705736be4aa298c8ba75f5d28a9d88277fa0f1852fa18e1bd9dae588d1d58093f73b252adc5d065dd7ec169db18019d", 0x67}], 0x8, 0xd, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="4002040000006c803d692e8b39585c2c60e1b4bc86f61ece3419e2b95ad2cff7cf8f163b0265ab932decdfd8ddec2465603afc6220dd8ed6a52d2b90ac8edf4dbb00"/78], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0xee01, 0xee01) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6901d000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x8040600) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$uac1(r2, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x40, 0xb, 0xbc, {0xbc, 0x7, "bad14f3064c0c95359e3dc2661259bc5969cf2b435db9ef59a4a51b8286bcb086018f2ef59118e0686999eedfe8f92f7e7e069e288a2e5629c087565474be3ee02c2c25394e70b91bb0b38a2e4deb37b3dfb129cbc56d4edbd4f0ab9a40f1ff8114c3b52138ab01401f4fc0ed2d607dbc14575aa4226ebb3136098c91299ca2b715b97a2f77a22ff650b3226eb2440d3b455573f2f1439762a5395c8a8c267273a899a0ef1726dd62bd84c0d4143e537064132263fcf5e096f65"}}, &(0x7f0000000180)={0x0, 0x3, 0x70, @string={0x70, 0x3, "c7b72a5ef4d3ff5d20f2d44d97aed8ea4919f6c6dde4196141e4e6b35d50a00f1665ffd46b33058b70c4162cdeab4f5540f52a0d2e87fe42d8eec46c09f7d8b4afb7d25ed14af9925702d1f2a477632ed30d577b4d93d0ad9f3ddfc8313c827e8d1e765139f685b399fee328e671"}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x40, 0xb, 0xcb, "94a8830b1f93f83dbdbc25ba87ff5be1504a4dcd0ef4883eb7b5e876c7a0729b62cb5a172bc36ed84427ae5e7425cf8616c261178a63e6638659174fe0b41f7506bb6ac2576ddab50f09046d402be98e8aa81d5e32edd2172227430dbb6be92096fc309b54bfd615560759b52aee48b1a91559c6be48e262542d8df764e26fdf6916d97c041648ee5c152f7778593f6a21882521d26f7a667a2aca372cd5534d9598ba794fb870d2c69589dd3fac79cd8f97b4be76896bc60ec598bf7b7e7837e26a2113c6ad7f3e7dec2b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000000cd39a994d5806e0000"], &(0x7f0000000580)={0x20, 0x82, 0x1, "8d"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "a359e9"}, &(0x7f0000000600)={0x20, 0x84, 0x1, "cc"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "039c8a"}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000200)) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac2(0x5, 0xaf, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x1, 0x88, 0x1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x2, 0x20, 0x52}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6b5, 0x0, 0x9, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x5, 0x6, 0x81}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8c6, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x5, 0xfd, "df71ad51"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x0, 0x7f, "b356"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x55, 0x2, 0x2, 0x9, "", '\f'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x81, 0x8, 0xb, {0x8, 0x25, 0x1, 0x82, 0xc, 0xd, 0x45}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x8, 0xff, {0x8, 0x25, 0x1, 0x0, 0xc, 0x8, 0x101}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x81, 0x3, 0x5, 0x40, 0x7}, 0x8, &(0x7f0000000840)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x414}}, {0xdc, &(0x7f0000000900)=@string={0xdc, 0x3, "49f277c1c4b16001f1bb13bf352394d1fe1b5ffcf2d038d1e23e6e9f1c14ece2c4ec8fa118897da4da6553621f6dfbd20f59e3165d0a6d0c9007b4bb0d21458e4003d4872baa649e85a17f118920e8577ec9b0f064ee1345b5c42c5136bc723f1f96519194782c121304d3fa9c547c57ff5232daea149c719481900423dbe3096a3ffa3c9f3a2d8df1e77fe1edca5e5eca33b62e6c5a8b02980afc65312198529dbe74787631822137feb588009b955b246a08de1ea2a79da1ca66cc5610694db0d20ad146f7ef4ac7d58f2e463c011d8c0f1ca43e9096f4de8f"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x406}}]}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x9, 0x8, 0xfffffffffffffb3a, 0xff, 0x0, 0x4}, {0xffffff6b, 0x1000, 0x8, 0x100000001, 0x23, 0xfa5}], ['\x00']}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000700)='wg0\x00', 0x4) 2m1.794696035s ago: executing program 0 (id=113): syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.780938823s ago: executing program 0 (id=123): r0 = socket$inet6(0xa, 0x5, 0xffffd02e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x0, 0xbe16, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x10, 0x2, 0xe}}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@remote, 0x4e21, 0x8, 0x4e21, 0x6, 0x2, 0xa0, 0x20, 0x84, r1, r2}, {0x0, 0x800, 0x0, 0x0, 0x40, 0x1, 0x7, 0x1}, {0x3, 0x8, 0x9, 0x7}, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@remote, 0x4d3, 0xcd}, 0xa, @in=@remote, 0x3506, 0x1, 0x0, 0x34, 0x3, 0xf24c, 0x5}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0xffffffffffffffcd) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB="07b0"], 0x0) 1m56.969450672s ago: executing program 0 (id=130): ptrace$setregs(0xd, 0x0, 0xfffffffffffffffc, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x48000, 0xc1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") unshare(0x400) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x2) 1m56.217190139s ago: executing program 0 (id=134): syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m55.411823518s ago: executing program 0 (id=137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000400)='syzkaller\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000803178135f92a4832f5023342b8466bcbaee456d1beb38056561f6f9bb3fb5d7ac9ce1db304f5cd19c89c363fb164cdb8ee44232a255ef72195359dbd411c0969906b735280423cc220ccae4f86c6a320d78226486485f01bf1a40e3691e2af5ac5828479cd0cf2b781a0ff8ccb798964ac545d473db3031b8d0af770486544073a1c46f6d5b93d391f9446d483329a494b1c4f9e948efd4ec0df79305007b7602763b1e8e2a3f1df5e43cf8b50c7f462034a75e534bc9fcff56d4f19369392ea6402f82b764f448f87046a5a396725d033010b7c61fff7c2cf0678189bcdf2de9050e6bfcf1df2bc1c78e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401, 0x2, 0xff, 0xd, 0x4101}, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x200, 0x21) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) io_setup(0xe, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 1m55.409580238s ago: executing program 32 (id=137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000400)='syzkaller\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000803178135f92a4832f5023342b8466bcbaee456d1beb38056561f6f9bb3fb5d7ac9ce1db304f5cd19c89c363fb164cdb8ee44232a255ef72195359dbd411c0969906b735280423cc220ccae4f86c6a320d78226486485f01bf1a40e3691e2af5ac5828479cd0cf2b781a0ff8ccb798964ac545d473db3031b8d0af770486544073a1c46f6d5b93d391f9446d483329a494b1c4f9e948efd4ec0df79305007b7602763b1e8e2a3f1df5e43cf8b50c7f462034a75e534bc9fcff56d4f19369392ea6402f82b764f448f87046a5a396725d033010b7c61fff7c2cf0678189bcdf2de9050e6bfcf1df2bc1c78e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401, 0x2, 0xff, 0xd, 0x4101}, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x200, 0x21) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) io_setup(0xe, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 9.147442652s ago: executing program 2 (id=948): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000005200180005bd70000400000002000000"], 0x14}}, 0x800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffd, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000001840)={0x40, 0x7, 0xea, {0xea, 0x6, "25fa389429499ba9084aa32057923cc9f03f5095ebaa02906af2e1207ea0683b151faa9a160eace7efbd1a567f38bd6784e09aeea9102b92de179e6044e450ba40f62d153cdcdf4b75db5d9c5ee68681f176a9b44a65a2292c2b6dd2d4dd75f47747157e3dc3006e9a4e55706c036a1149daeb67f70746f5cb0f4661561875a73e84be741810d66c520438d4d63b64da68de0067ce5b018be14fc433eca12d74611108c369cab71a3bc9b162da9977c0af954e382e586ef129c5310a96a5e96298ff695979b258c7645508db64eeb37b7e2f241b8e2cdf6425efc059f7bfbcdf99d0dd82666b9495"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="0000b20000006e41d1f7c041bdf30c4fdb1ddf98e75b30d868172f50b92b4ee66dc4cca67f98af3632b2eba54c997d1646c7293df8539288ab799f584e7427e09c85a843fe145a4d7250f1ee793ec7142b26b410992920cf9e1feb6ac693df7d8ab49d89776d5f617627ac0a7b989a3d86a2aacd9de508a41d42419013f560b15e446e47ffb40b7a4abee34f7a0de02e06381605bcbe59548131d764f52f728a7be2aea619da6377f5004cfa546a7b10760e7c368e4b0b0c041cdcb05622ecb3b4122d7ef1"], &(0x7f0000001a00)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001a80)={0x20, 0x80, 0x1c, {0x76, 0x1b, 0xd77, 0x401, 0xc000, 0x1, 0x4, 0x7f, 0x7, 0x7871, 0x0, 0x9}}, &(0x7f0000001ac0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000001b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001b40)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000001b80)={0x20, 0x89, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0xb, &(0x7f0000001940)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600)) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x1e7, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="01", 0x1}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x8) 7.735982771s ago: executing program 2 (id=959): sched_setscheduler(0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000005000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f0000000400)={0x0, 0x46b4, 0x80, 0x80000, 0x1b8}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r4, 0x369a, 0x0, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000000)={0x10, @short={0x2, 0x0, 0xaaa0}}, 0x14) write(r5, &(0x7f0000000080)='H', 0x1) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) capset(0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x50000, 0x201000}) close(0xffffffffffffffff) 6.52088601s ago: executing program 2 (id=972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") userfaultfd(0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000000)) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="050f5100014c10022418d64799c8e1c6d86c1dcda56b1ad7dd82e3a5c2e7398df82740edd5a4d0de4a42abab8d758e181361cc19803d6986d8b354d3df22dd7a8376cef7a6bbd8b1fcf3df4d0a062f158f3944f63a5e1ce8caa5a5ac79c4c66fbbabec39e2b712fc3175e1658af053a9ec3a69c3a8a7b386cd145fdcf036558f2610128f90f576f7b6743c5d1c25896ece8a70c4e9a82cef0bd1885579d2861400d8a3a4cae2783a7fe9288679ed768763801c"]}) 5.325647249s ago: executing program 3 (id=985): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x108843, 0x98) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0"], 0x0) 4.354336166s ago: executing program 4 (id=994): r0 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r0, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 4.26779085s ago: executing program 4 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0xf, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x4}, 0x20) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x10000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r7, 0x1, 0x62, 0x6, @broadcast}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fd2000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r8, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002d306c10ce0aff2001010102030109022400010000000009040000029e02380009050d0000000000000905a875"], 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newchain={0x43c, 0x1e, 0x1, 0x20, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0x1ab16c48, 0xfffffff9, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0x8, 0x10001, 0x820c, 0x1ff, 0x8000, 0xfffffe00, 0x5, 0x6, 0xfffffffb, 0x2, 0x0, 0x399, 0x3ff, 0x3, 0x2, 0xfffffffb, 0x6, 0x7, 0x61bc, 0x8, 0x3, 0xe6fc, 0x8, 0x200, 0x80, 0x40, 0x6, 0x96e, 0xffffffff, 0xfffffffe, 0x4, 0x1, 0xd3, 0x2, 0xffff, 0x1, 0x6, 0x200, 0x10, 0x4, 0x9, 0x8cd, 0x4ab6, 0x4, 0x9, 0xf2a, 0x9, 0xb, 0x100, 0x80000001, 0x6, 0x186d3c43, 0x8, 0x7f, 0xef5, 0xfffffbe8, 0x23bacf02, 0x80000000, 0x8, 0x4, 0xfad, 0x101, 0x1, 0x47, 0x1, 0x2d800, 0x3, 0x1, 0x7fff, 0xff, 0x2, 0x4, 0x0, 0x80, 0xffff3f47, 0xa319, 0x9, 0x3, 0x1128d0f7, 0x8, 0x8, 0x8, 0x10000, 0x4, 0x0, 0x80000000, 0x0, 0xd940, 0x1, 0x3, 0x4, 0x2, 0x7fffffff, 0x9, 0xfff, 0x4, 0xe4d, 0xfffffff4, 0x7, 0x200, 0x5, 0x12, 0x401, 0x5, 0x80, 0x10000, 0x1, 0x0, 0x2, 0x6, 0xff, 0x1, 0x6, 0x6, 0x8001, 0x1000, 0x2, 0x6, 0x5, 0x37, 0x8, 0x6, 0x3, 0x514, 0x8, 0x0, 0x52, 0x2, 0x9, 0x7, 0x8001, 0x401, 0xa, 0x4, 0x29480, 0x9, 0x7ff, 0x3, 0x6, 0x6, 0xfffff8b4, 0x8, 0x9, 0xfffffffd, 0x1, 0x8, 0x1, 0x2, 0x8, 0x8001, 0x10001, 0x101, 0x5, 0x6, 0x7ff, 0x2000000, 0x10000, 0x8, 0x4, 0x0, 0x1, 0xd12, 0x8, 0x7252, 0x101, 0x4d, 0x5, 0x9, 0xffffcee7, 0x9, 0x8, 0x31338000, 0x0, 0x8, 0x7, 0x8, 0x6, 0x8, 0x40, 0x4, 0x3, 0xe6d, 0xda9, 0x4, 0x2, 0x7f, 0x2, 0x3c, 0x7, 0x0, 0x101, 0xdae, 0xa7, 0x1, 0x8001, 0x63e, 0x8, 0x8, 0x5, 0x5, 0x800, 0x3, 0x4, 0x4, 0x7, 0x3, 0xa90400, 0x6, 0x9, 0x1, 0x1, 0x0, 0x2, 0x8, 0x4000f129, 0x3ff, 0x8, 0x2, 0x80000000, 0x7fff, 0x6, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x1, 0xb0, 0x4, 0x3, 0x9, 0x9, 0x2, 0x7, 0x800000, 0xfffffca6, 0xfffffffc, 0x8, 0x5, 0x2, 0xc79c, 0x10, 0xd, 0xffff7f43, 0x1ff, 0x27, 0xd70]}]}]}}]}, 0x43c}}, 0x44004) 4.013690123s ago: executing program 3 (id=999): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.767296205s ago: executing program 5 (id=1001): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000100), 0x0, 0xe7c) 3.67451663s ago: executing program 5 (id=1002): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000002a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000400000000000000002020207b1af8ff00000000bfa100000000000007010000f8fff8ffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000004c40)={0x84, &(0x7f0000004800)={0x40, 0x12, 0x3, "27f497"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x40, 0x1a, 0x2, 0x2}, 0x0, &(0x7f0000004bc0)={0x40, 0x1e, 0x1, 0x1}, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) io_submit(0x0, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x406, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000295000/0x4000)=nil, 0x4000, 0x1a, 0x100010, 0xffffffffffffffff, 0x8000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200047f9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000500)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(0x0, r5) 3.47118044s ago: executing program 2 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xddec6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.375755694s ago: executing program 2 (id=1004): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="1201100100000010341a05f7000000000001090224000100005007090400020d0300070009210000000122290009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x9, {[@local, @main=@item_012={0x2, 0x0, 0xb, "0e9f"}, @main=@item_4={0x3, 0x0, 0xb, "c49a3b0e"}]}}, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.829168341s ago: executing program 4 (id=1005): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.814975822s ago: executing program 4 (id=1006): socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) open$dir(0x0, 0x207e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$set_timeout(0xf, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, &(0x7f00000003c0)) 2.682874798s ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x687f}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xc346, 0x0, 0x100, 0x0, 0x20800e0, r5}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000500)={0xfffffffffffffffa, 0x92cf00000000000, 0x9, 0x3, 0x5, 0x0, [{0x3, 0xbe, 0x71ac30f6, '\x00', 0x308d}, {0x2, 0xcd}, {0x60, 0xfffffffffffffff9, 0xfffffffffffffffc, '\x00', 0x1}, {0x7fff, 0x6, 0x4, '\x00', 0x2}, {0xdb3, 0x3, 0x867, '\x00', 0x4}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LABEL={0x14, 0x3, 'netpci0\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x44}}, 0x0) 2.6596274s ago: executing program 1 (id=1010): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) 2.658945749s ago: executing program 1 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xbdee, 0x1000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet(0x2, 0x800, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="80000000679b6f03b044e0adcc1ebaf0a7f866b97b87cf0b06d5735bb192f318ffd372cc4a", @ANYRES16=r1, @ANYBLOB="21032ebd7000fedbdf25010000006800028024000180080001000800000008000100050000000800010008000000080001000500000014000180080001000600000008000100020000002c0001800800010008000000080001000000000008000100040000000800010007000000080001000700000004000300"], 0x80}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) 2.606045662s ago: executing program 1 (id=1012): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, r2, 0xe}, 0x14) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) 2.601759062s ago: executing program 1 (id=1013): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x90, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x90}}, 0x20000080) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, &(0x7f0000002580)={[{}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x41000, 0x8, 0xc, 0x3, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0xd, 0x7}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x5, 0x3, 0x1}, {0x4000, 0xeeee0000, 0xe, 0xe3, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x10000, 0x3, 0x5c, 0x4, 0x42, 0x9, 0x2, 0x6, 0xa, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0x7, 0xb1, 0xb, 0x1, 0x9d, 0x80, 0xf, 0x1}, {0x40000, 0x8080000, 0x4, 0x5, 0x7, 0x2, 0x5, 0x0, 0x3, 0x82, 0xff, 0x70}, {0xd000, 0x1000, 0x8, 0x13, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x2e}, {0x10000, 0x86}, 0x80000038, 0x0, 0x8000000, 0x42024, 0xb, 0x0, 0xf000, [0x6840000000000000, 0xd, 0x5e, 0xff]}) 2.423496681s ago: executing program 1 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") userfaultfd(0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000000)) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="050f5100014c10022418d64799c8e1c6d86c1dcda56b1ad7dd82e3a5c2e7398df82740edd5a4d0de4a42abab8d758e181361cc19803d6986d8b354d3df22dd7a8376cef7a6bbd8b1fcf3df4d0a062f158f3944f63a5e1ce8caa5a5ac79c4c66fbbabec39e2b712fc3175e1658af053a9ec3a69c3a8a7b386cd145fdcf036558f2610128f90f576f7b6743c5d1c25896ece8a70c4e9a82cef0bd1885579d2861400d8a3a4cae2783a7fe9288679ed768763801c"]}) 2.099963027s ago: executing program 2 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") userfaultfd(0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000000)) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="050f5100014c10022418d64799c8e1c6d86c1dcda56b1ad7dd82e3a5c2e7398df82740edd5a4d0de4a42abab8d758e181361cc19803d6986d8b354d3df22dd7a8376cef7a6bbd8b1fcf3df4d0a062f158f3944f63a5e1ce8caa5a5ac79c4c66fbbabec39e2b712fc3175e1658af053a9ec3a69c3a8a7b386cd145fdcf036558f2610128f90f576f7b6743c5d1c25896ece8a70c4e9a82cef0bd1885579d2861400d8a3a4cae2783a7fe9288679ed768763801c"]}) 1.690622686s ago: executing program 4 (id=1016): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0xffffffffffffffcd) r1 = dup(r0) write$FUSE_BMAP(r1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB="07b0"], 0x0) 955.896663ms ago: executing program 3 (id=1017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x4d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, 0x100) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1000002, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) setresuid(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000001c0)) 503.716935ms ago: executing program 5 (id=1018): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x6}}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x2, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xebd, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff5, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x2, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0xd, 0xb50, 0x0, 0x800, 0x3, 0x1, 0x80007, 0xfffffffe, 0x5, 0x6, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x80, 0x20000000, 0x7f, 0x8, 0x2d5, 0x14b, 0x1], [0x4b1a3e4b, 0xfffffffd, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x15b6, 0x2, 0x0, 0x2007, 0x6, 0x8001, 0x9, 0x8, 0x1000002, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x10, 0x10000, 0x9, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x5, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x5, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0xc7, 0x6, 0x0, 0x400, 0xd0, 0x9, 0x6e, 0x8000, 0xb060, 0x3, 0x6, 0x6, 0x3, 0x800, 0x2, 0x3, 0x0, 0x3, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x8, 0x9, 0x800, 0x80004, 0xfffffff7, 0x4, 0xe, 0x4, 0x2, 0x3e7, 0x7ff, 0x1fc, 0x6, 0x87ff, 0x0, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x802, 0x4, 0x7, 0x46, 0x0, 0xfffffffd, 0xfffffff8, 0xb, 0x4, 0x1, 0x103, 0x1006, 0xcc, 0x6, 0x4000400, 0xfffffffc, 0xfffffffb, 0x3d, 0x80000000, 0x9, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000000, 0x80000005, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xc, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x3, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1) 172.095611ms ago: executing program 5 (id=1019): preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000200)=""/79, 0x4f}], 0x1, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) sendmsg$unix(r0, &(0x7f0000002c80)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001380)="56b520427f1ac120ddef77ba8b60dd643d0abb9d4969e8e39a810d91a9201322a4dc4e6f7ec3", 0x26}], 0x1, &(0x7f0000002b40)=[@rights={{0x10}}], 0x10, 0xfc2ccf08d2927bc0}, 0x4008040) 120.307004ms ago: executing program 3 (id=1020): unshare(0x22020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close(r5) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000380)=0x360, 0x4) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) splice(r3, 0x0, r6, 0x0, 0xcc0, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xf}, {0x1}}}, 0x24}}, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x18) 120.009514ms ago: executing program 5 (id=1021): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 84.069605ms ago: executing program 3 (id=1022): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x40c4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)="8065d4148236ce0000000c0000000000000a63ff00007f13ee972fdff35b06643d7058fa9219156d0b2e35ad2df3a0620d2a4f397ebef2150fbc4cdef65fd6f599af743ba9fe9bbe5891cf0f87382208007d896b57a5438539ae1613a4e4926d6c", 0xffffffffffffff77) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3010080, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES8=r3, @ANYRES64, @ANYRESOCT=r1], 0xfd, 0x1504, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00001fe000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa73e7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) socket$igmp6(0xa, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000000180)=0x6, 0x4) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x8) 83.727156ms ago: executing program 5 (id=1023): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup2(r0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (fail_nth: 4) 51.179387ms ago: executing program 4 (id=1024): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x90, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x90}}, 0x20000080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x41000, 0x8, 0xc, 0x3, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0xd, 0x7}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x5, 0x3, 0x1}, {0x4000, 0xeeee0000, 0xe, 0xe3, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x10000, 0x3, 0x5c, 0x4, 0x42, 0x9, 0x2, 0x6, 0xa, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0x7, 0xb1, 0xb, 0x1, 0x9d, 0x80, 0xf, 0x1}, {0x40000, 0x8080000, 0x4, 0x5, 0x7, 0x2, 0x5, 0x0, 0x3, 0x82, 0xff, 0x70}, {0xd000, 0x1000, 0x8, 0x13, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x2e}, {0x10000, 0x86}, 0x80000038, 0x0, 0x8000000, 0x42024, 0xb, 0x0, 0xf000, [0x6840000000000000, 0xd, 0x5e, 0xff]}) 0s ago: executing program 3 (id=1025): keyctl$reject(0x13, 0x0, 0xfffffffffffffffc, 0x7acb, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x14044004) r2 = dup(0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x0) eventfd(0x200207) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @rand_addr=0x64010102}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x9, {{0x2, 0x4e22, @remote}}}, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff037}]}, 0x10) close_range(r7, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002219000000c35fd57224ab7080561b87d959f94db933e3aa4ca5bf9407e6"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 3838][ T416] usb 4-1: Using ep0 maxpacket: 16 [ 124.929093][ T416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.015886][ T2471] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.032292][ T2471] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 125.037693][ T416] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.047176][ T2471] System zones: 0-5 [ 125.064269][ T2471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.075756][ T416] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.097900][ T416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.112964][ T416] usb 4-1: Product: syz [ 125.117273][ T416] usb 4-1: Manufacturer: syz [ 125.144765][ T416] usb 4-1: SerialNumber: syz [ 125.355467][ T416] usb 4-1: 0:2 : does not exist [ 125.365036][ T416] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 125.386471][ T416] usb 4-1: USB disconnect, device number 28 [ 125.406455][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.454531][ T287] EXT4-fs (loop4): unmounting filesystem. [ 125.552849][ T6] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 125.602877][ T526] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 125.686866][ T28] audit: type=1400 audit(1773891501.000:379): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.721788][ T2487] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 125.732969][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 125.744463][ T893] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 125.753936][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.764792][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.783920][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.786465][ T526] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.793363][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.804329][ T526] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.814374][ T6] usb 2-1: Product: syz [ 125.822041][ T526] usb 6-1: config 1 has no interface number 0 [ 125.826494][ T6] usb 2-1: Manufacturer: syz [ 125.832398][ T526] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.837717][ T6] usb 2-1: SerialNumber: syz [ 125.861796][ T526] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.866310][ T2495] loop2: detected capacity change from 0 to 128 [ 125.879301][ T526] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 125.891775][ T526] usb 6-1: Product: syz [ 125.893619][ T2495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.898391][ T526] usb 6-1: SerialNumber: syz [ 125.909524][ T2498] loop3: detected capacity change from 0 to 512 [ 125.916067][ T526] usb 6-1: selecting invalid altsetting 1 [ 125.917568][ T2498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.922217][ T2495] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.942868][ T893] usb 5-1: Using ep0 maxpacket: 16 [ 125.958971][ T2498] EXT4-fs (loop3): 1 truncate cleaned up [ 125.959034][ T893] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 125.972897][ T2498] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.993787][ T893] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 126.004720][ T893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.013669][ T893] usb 5-1: Product: syz [ 126.018038][ T893] usb 5-1: Manufacturer: syz [ 126.022759][ T893] usb 5-1: SerialNumber: syz [ 126.034637][ T285] EXT4-fs (loop2): unmounting filesystem. [ 126.043756][ T893] r8152-cfgselector 5-1: config 0 descriptor?? [ 126.059121][ T6] usb 2-1: 0:2 : does not exist [ 126.072206][ T6] usb 2-1: USB disconnect, device number 30 [ 126.081995][ T2502] tmpfs: Unknown parameter '00000000000000000000003' [ 126.325914][ T2481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.381009][ T2481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.408949][ T893] r8152-cfgselector 5-1: Unknown version 0x0000 [ 126.410794][ T526] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 126.421445][ T526] cdc_ncm 6-1:1.1: bind() failure [ 126.429084][ T526] usb 6-1: USB disconnect, device number 20 [ 126.435162][ T416] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 126.480352][ T2507] set_capacity_and_notify: 1 callbacks suppressed [ 126.480377][ T2507] loop2: detected capacity change from 0 to 4096 [ 126.495310][ T893] r8152-cfgselector 5-1: Unknown version 0x0000 [ 126.502731][ T2507] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.510625][ T893] r8152-cfgselector 5-1: bad CDC descriptors [ 126.522031][ T2507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 126.527469][ T893] r8152-cfgselector 5-1: Unknown version 0x0000 [ 126.534520][ T2507] System zones: 0-5 [ 126.542535][ T893] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 126.546578][ T2507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.563758][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.632865][ T416] usb 4-1: Using ep0 maxpacket: 16 [ 126.639531][ T416] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.650583][ T416] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.660748][ T416] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 126.674161][ T416] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.680976][ T416] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 126.690085][ T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.713103][ T416] usb 4-1: config 0 descriptor?? [ 126.745968][ T285] EXT4-fs (loop2): unmounting filesystem. [ 126.767091][ T2510] loop2: detected capacity change from 0 to 256 [ 126.777290][ T2510] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 126.794688][ T2510] xt_hashlimit: size too large, truncated to 1048576 [ 127.037228][ T2527] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 127.045798][ T2527] overlayfs: overlapping lowerdir path [ 127.096599][ T2531] loop4: detected capacity change from 0 to 128 [ 127.134583][ T2531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.147531][ T28] audit: type=1400 audit(1773891502.460:380): avc: denied { setopt } for pid=2517 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.149834][ T2518] device ip6erspan0 entered promiscuous mode [ 127.175902][ T2531] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.223679][ T287] EXT4-fs (loop4): unmounting filesystem. [ 127.225978][ T2534] loop5: detected capacity change from 0 to 4096 [ 127.256377][ T2534] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.282382][ T2534] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 127.304278][ T2534] System zones: 0-5 [ 127.308592][ T2541] 9pnet: Could not find request transport: f»ðî‚X„½|4’ÛZ5hd [ 127.320013][ T2534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 127.329089][ T28] audit: type=1400 audit(1773891502.630:381): avc: denied { ioctl } for pid=2538 comm="syz.4.587" path="socket:[28165]" dev="sockfs" ino=28165 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.440419][ T2550] loop4: detected capacity change from 0 to 256 [ 127.457589][ T2548] netlink: 'syz.1.592': attribute type 12 has an invalid length. [ 127.484674][ T2550] FAT-fs (loop4): Directory bread(block 64) failed [ 127.492932][ T2548] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 127.497747][ T2550] FAT-fs (loop4): Directory bread(block 65) failed [ 127.500866][ T2548] netlink: 148 bytes leftover after parsing attributes in process `syz.1.592'. [ 127.500893][ T2548] netlink: 'syz.1.592': attribute type 2 has an invalid length. [ 127.508381][ T2550] FAT-fs (loop4): Directory bread(block 66) failed [ 127.533172][ T2550] FAT-fs (loop4): Directory bread(block 67) failed [ 127.540440][ T2550] FAT-fs (loop4): Directory bread(block 68) failed [ 127.547159][ T2550] FAT-fs (loop4): Directory bread(block 69) failed [ 127.547748][ T2548] netlink: 'syz.1.592': attribute type 3 has an invalid length. [ 127.553975][ T526] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 127.570349][ T2550] FAT-fs (loop4): Directory bread(block 70) failed [ 127.577111][ T2550] FAT-fs (loop4): Directory bread(block 71) failed [ 127.582196][ T2548] netlink: 15 bytes leftover after parsing attributes in process `syz.1.592'. [ 127.595351][ T2550] FAT-fs (loop4): Directory bread(block 72) failed [ 127.602283][ T2550] FAT-fs (loop4): Directory bread(block 73) failed [ 127.646349][ T2545] syz.4.591: attempt to access beyond end of device [ 127.646349][ T2545] loop4: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 127.661087][ T2545] syz.4.591: attempt to access beyond end of device [ 127.661087][ T2545] loop4: rw=34817, sector=1224, nr_sectors = 32 limit=256 [ 127.760867][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 127.773179][ T526] usb 3-1: Using ep0 maxpacket: 16 [ 127.779827][ T526] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.813006][ T526] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.824948][ T526] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.834309][ T526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.842417][ T526] usb 3-1: Product: syz [ 127.847704][ T526] usb 3-1: Manufacturer: syz [ 127.853751][ T526] usb 3-1: SerialNumber: syz [ 127.963512][ T2565] loop5: detected capacity change from 0 to 128 [ 127.988683][ T2565] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 127.998858][ T2565] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.040106][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 128.102118][ T526] usb 3-1: 0:2 : does not exist [ 128.170550][ T526] usb 3-1: USB disconnect, device number 24 [ 128.174823][ T2572] netlink: 'syz.5.601': attribute type 4 has an invalid length. [ 128.441159][ T28] audit: type=1400 audit(1773891503.750:382): avc: denied { ioctl } for pid=2577 comm="syz.5.603" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.469334][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.472269][ T2576] loop4: detected capacity change from 0 to 256 [ 128.531297][ T2576] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 128.620182][ T2576] xt_hashlimit: size too large, truncated to 1048576 [ 128.669464][ T2578] Illegal XDP return value 26943488 on prog (id 118) dev syz_tun, expect packet loss! [ 128.710381][ T2583] loop1: detected capacity change from 0 to 256 [ 128.868394][ T2592] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 128.877588][ T2592] overlayfs: overlapping lowerdir path [ 128.929227][ T416] usbhid 4-1:0.0: can't add hid device: -71 [ 128.937068][ T286] EXT4-fs (loop3): unmounting filesystem. [ 128.944695][ T416] usbhid: probe of 4-1:0.0 failed with error -71 [ 128.945712][ T2594] loop2: detected capacity change from 0 to 128 [ 128.952515][ T416] usb 4-1: USB disconnect, device number 29 [ 128.990643][ T2598] loop3: detected capacity change from 0 to 128 [ 128.999077][ T2594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 129.009771][ T2594] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.045693][ T2598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.063585][ T2598] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.075301][ T6] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 129.084019][ T285] EXT4-fs (loop2): unmounting filesystem. [ 129.108369][ T286] EXT4-fs (loop3): unmounting filesystem. [ 129.131769][ T28] audit: type=1400 audit(1773891504.440:383): avc: denied { nlmsg_write } for pid=2607 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 129.159820][ T28] audit: type=1400 audit(1773891504.450:384): avc: denied { audit_write } for pid=2607 comm="syz.3.612" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.179582][ T2608] tipc: Trying to set illegal importance in message [ 129.188449][ T28] audit: type=1107 audit(1773891504.450:385): pid=2607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 129.210033][ T2601] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.610: inode has both inline data and extents flags [ 129.264181][ T2608] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.287928][ T2601] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.610: couldn't read orphan inode 15 (err -117) [ 129.288661][ T2608] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 129.318012][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 129.325062][ T2601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 129.336516][ T6] usb 6-1: config 0 has no interfaces? [ 129.342194][ T6] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 129.352084][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.360387][ T2608] System zones: 0-5 [ 129.386135][ T2608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.394902][ T6] usb 6-1: config 0 descriptor?? [ 129.500678][ T28] audit: type=1400 audit(1773891504.810:386): avc: denied { append } for pid=2600 comm="syz.1.610" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.578133][ T28] audit: type=1400 audit(1773891504.810:387): avc: denied { getopt } for pid=2600 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.620439][ T286] EXT4-fs (loop3): unmounting filesystem. [ 129.662300][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.691220][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.707182][ T28] audit: type=1400 audit(1773891504.890:388): avc: denied { append } for pid=2607 comm="syz.3.612" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.931678][ T2625] netlink: 'syz.2.618': attribute type 4 has an invalid length. [ 129.978674][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.993328][ T353] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 129.996506][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.096141][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.123060][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.133546][ T2627] netlink: 'syz.2.619': attribute type 4 has an invalid length. [ 130.143751][ T19] usb 6-1: USB disconnect, device number 21 [ 130.248590][ T2631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.258285][ T2631] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.292926][ T353] usb 4-1: Using ep0 maxpacket: 16 [ 130.310072][ T353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.325389][ T287] EXT4-fs (loop4): unmounting filesystem. [ 130.333268][ T353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.356847][ T353] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.371977][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.385251][ T353] usb 4-1: Product: syz [ 130.389479][ T353] usb 4-1: Manufacturer: syz [ 130.395532][ T353] usb 4-1: SerialNumber: syz [ 130.401650][ T2636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.418752][ T284] EXT4-fs (loop1): unmounting filesystem. [ 130.425207][ T2636] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.465380][ T287] EXT4-fs (loop4): unmounting filesystem. [ 130.612379][ T353] usb 4-1: 0:2 : does not exist [ 130.620760][ T353] usb 4-1: USB disconnect, device number 30 [ 130.780305][ T2653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.630'. [ 130.791796][ T2653] EXT4-fs: Ignoring removed nobh option [ 130.793101][ T19] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 130.798072][ T2653] journal_path: Lookup failure for './file1' [ 130.812342][ T2653] EXT4-fs: error: could not find journal device path [ 130.852877][ T288] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 130.880084][ T2653] ext4: Unknown parameter 'smackfsroot' [ 130.982944][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 130.989479][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.000433][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.012025][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.021545][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.029782][ T19] usb 5-1: Product: syz [ 131.034316][ T288] usb 3-1: Using ep0 maxpacket: 16 [ 131.039867][ T19] usb 5-1: Manufacturer: syz [ 131.044835][ T19] usb 5-1: SerialNumber: syz [ 131.050337][ T288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.061335][ T288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.072821][ T288] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.082153][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.090320][ T288] usb 3-1: Product: syz [ 131.094584][ T288] usb 3-1: Manufacturer: syz [ 131.099410][ T288] usb 3-1: SerialNumber: syz [ 131.528339][ T2670] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.535807][ T2670] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.016965][ T2662] set_capacity_and_notify: 7 callbacks suppressed [ 132.016993][ T2662] loop5: detected capacity change from 0 to 128 [ 132.292873][ T416] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 132.401097][ T1978] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.412690][ T19] usb 5-1: 0:2 : does not exist [ 132.420638][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 132.434196][ T19] usb 5-1: USB disconnect, device number 34 [ 132.452322][ T2675] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 132.461218][ T2675] overlayfs: overlapping lowerdir path [ 132.502948][ T416] usb 2-1: Using ep0 maxpacket: 32 [ 132.509738][ T416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.527733][ T416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.537949][ T416] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.547214][ T416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.556790][ T416] usb 2-1: config 0 descriptor?? [ 132.613867][ T288] usb 3-1: 0:2 : does not exist [ 132.623201][ T288] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 132.637605][ T288] usb 3-1: USB disconnect, device number 25 [ 132.680564][ T2684] loop5: detected capacity change from 0 to 4096 [ 132.691879][ T2684] EXT4-fs (loop5): Test dummy encryption mode enabled [ 132.699668][ T2684] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 132.708105][ T2684] System zones: 0-5 [ 132.713620][ T2684] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 132.843388][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.853542][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 132.892863][ T39] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 132.948070][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 132.966797][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 132.974289][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 132.982120][ T416] usbhid 2-1:0.0: can't add hid device: -71 [ 132.988641][ T416] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.996429][ T416] usb 2-1: USB disconnect, device number 31 [ 133.072919][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 133.079627][ T39] usb 4-1: config 0 has no interfaces? [ 133.085251][ T39] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 133.094723][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.103952][ T39] usb 4-1: config 0 descriptor?? [ 133.222917][ T526] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 133.232916][ T288] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 133.316226][ T2682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.331439][ T2682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.412828][ T288] usb 6-1: Using ep0 maxpacket: 16 [ 133.414044][ T526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 133.419306][ T288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.429671][ T526] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.449362][ T526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.452849][ T288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.470690][ T526] usb 5-1: config 0 descriptor?? [ 133.474080][ T288] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.476418][ T2689] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.484878][ T288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.500159][ T288] usb 6-1: Product: syz [ 133.505088][ T288] usb 6-1: Manufacturer: syz [ 133.509750][ T288] usb 6-1: SerialNumber: syz [ 133.513565][ T526] hub 5-1:0.0: USB hub found [ 133.535638][ T2704] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 133.543960][ T2704] overlayfs: overlapping lowerdir path [ 133.550327][ T2682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.559247][ T2682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.574289][ T2682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.584284][ T2682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.595007][ T6] usb 4-1: USB disconnect, device number 31 [ 133.605552][ T2706] loop1: detected capacity change from 0 to 8192 [ 133.709485][ T526] hub 5-1:0.0: 1 port detected [ 133.738321][ T288] usb 6-1: 0:2 : does not exist [ 133.746546][ T288] usb 6-1: USB disconnect, device number 22 [ 133.918378][ T526] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 133.931292][ T526] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 133.983587][ T526] usbhid 5-1:0.0: can't add hid device: -71 [ 133.989990][ T526] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.083875][ T526] usb 5-1: USB disconnect, device number 35 [ 134.143293][ T2712] loop2: detected capacity change from 0 to 256 [ 134.155797][ T2712] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 134.181842][ T2712] xt_hashlimit: size too large, truncated to 1048576 [ 134.202936][ T416] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 134.211509][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.365243][ T2720] loop2: detected capacity change from 0 to 4096 [ 134.374459][ T2720] EXT4-fs (loop2): Test dummy encryption mode enabled [ 134.381943][ T2720] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 134.398906][ T2720] System zones: 0-5 [ 134.402991][ T416] usb 2-1: Using ep0 maxpacket: 8 [ 134.410224][ T2720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.422018][ T416] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.432176][ T416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.442440][ T416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.451722][ T353] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 134.460378][ T416] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.480230][ T416] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.489666][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.497735][ T416] usb 2-1: Product: syz [ 134.498796][ T285] EXT4-fs (loop2): unmounting filesystem. [ 134.501999][ T416] usb 2-1: Manufacturer: syz [ 134.512619][ T416] usb 2-1: SerialNumber: syz [ 134.537529][ T2730] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 134.545955][ T2730] overlayfs: overlapping lowerdir path [ 134.619739][ T2742] loop2: detected capacity change from 0 to 256 [ 134.635975][ T2742] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 134.652886][ T353] usb 4-1: Using ep0 maxpacket: 16 [ 134.655358][ T2742] xt_hashlimit: size too large, truncated to 1048576 [ 134.661392][ T353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.681057][ T353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.692283][ T353] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.701477][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.710044][ T353] usb 4-1: Product: syz [ 134.714431][ T353] usb 4-1: Manufacturer: syz [ 134.719102][ T353] usb 4-1: SerialNumber: syz [ 134.765872][ T288] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 134.934559][ T353] usb 4-1: 0:2 : does not exist [ 134.942871][ T353] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 134.952867][ T288] usb 5-1: Using ep0 maxpacket: 32 [ 134.961395][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.963768][ T353] usb 4-1: USB disconnect, device number 32 [ 134.999316][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.027735][ T288] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 135.045343][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.076877][ T288] usb 5-1: config 0 descriptor?? [ 135.166038][ T2749] kvm: pic: non byte write [ 135.492066][ T288] usbhid 5-1:0.0: can't add hid device: -71 [ 135.498873][ T288] usbhid: probe of 5-1:0.0 failed with error -71 [ 135.510455][ T288] usb 5-1: USB disconnect, device number 36 [ 135.558159][ T2762] loop3: detected capacity change from 0 to 128 [ 135.757423][ T28] audit: type=1400 audit(1773891511.050:389): avc: denied { read } for pid=2761 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.792971][ T526] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 135.994268][ T526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 136.006937][ T2768] loop4: detected capacity change from 0 to 128 [ 136.008316][ T526] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.027889][ T2768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 136.047605][ T526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.057620][ T2770] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 136.065923][ T2770] overlayfs: overlapping lowerdir path [ 136.143787][ T526] usb 6-1: config 0 descriptor?? [ 136.149576][ T2758] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 136.158418][ T526] hub 6-1:0.0: USB hub found [ 136.360487][ T526] hub 6-1:0.0: 1 port detected [ 136.362849][ T288] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 136.471510][ T2782] netlink: 'syz.3.677': attribute type 4 has an invalid length. [ 136.554353][ T288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.563085][ T526] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 136.566455][ T288] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.572456][ T526] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 136.582670][ T288] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 136.591585][ T526] usbhid 6-1:0.0: can't add hid device: -71 [ 136.605738][ T526] usbhid: probe of 6-1:0.0 failed with error -71 [ 136.613202][ T416] cdc_ncm 2-1:1.0: skipping garbage [ 136.618923][ T416] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 136.629346][ T416] cdc_ncm 2-1:1.0: bind() failure [ 136.633536][ T288] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.638570][ T416] usb 2-1: USB disconnect, device number 32 [ 136.650788][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.664456][ T526] usb 6-1: USB disconnect, device number 23 [ 136.668586][ T288] usb 5-1: Product: syz [ 136.679471][ T2790] loop3: detected capacity change from 0 to 128 [ 136.686612][ T288] usb 5-1: Manufacturer: syz [ 136.691392][ T288] usb 5-1: SerialNumber: syz [ 136.698461][ T2790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.710599][ T2790] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.728768][ T286] EXT4-fs (loop3): unmounting filesystem. [ 136.834627][ T28] audit: type=1326 audit(1773891512.150:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2798 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3ef9c799 code=0x7ffc0000 [ 136.858307][ T28] audit: type=1326 audit(1773891512.150:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2798 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3ef9c799 code=0x7ffc0000 [ 136.882710][ T28] audit: type=1400 audit(1773891512.160:392): avc: denied { bind } for pid=2798 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.906003][ T2778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.914790][ T2778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.923520][ T2778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.933805][ T2778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.106945][ T416] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 137.145318][ T288] cdc_ncm 5-1:1.0: bind() failure [ 137.151454][ T288] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 137.158255][ T2822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 137.161969][ T288] cdc_ncm 5-1:1.1: bind() failure [ 137.180502][ T288] usb 5-1: USB disconnect, device number 37 [ 137.292866][ T416] usb 2-1: Using ep0 maxpacket: 32 [ 137.303373][ T416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.324225][ T416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.342934][ T416] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 137.352980][ T416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.376218][ T416] usb 2-1: config 0 descriptor?? [ 137.522870][ T893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 137.584668][ T2841] loop3: detected capacity change from 0 to 256 [ 137.712850][ T893] usb 3-1: Using ep0 maxpacket: 16 [ 137.720270][ T893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.741763][ T893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.762267][ T893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.779188][ T893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.791934][ T893] usb 3-1: Product: syz [ 137.792549][ T416] usbhid 2-1:0.0: can't add hid device: -71 [ 137.796436][ T893] usb 3-1: Manufacturer: syz [ 137.807298][ T893] usb 3-1: SerialNumber: syz [ 137.807443][ T416] usbhid: probe of 2-1:0.0 failed with error -71 [ 137.843403][ T416] usb 2-1: USB disconnect, device number 33 [ 137.854198][ T2848] loop3: detected capacity change from 0 to 256 [ 137.875410][ T2848] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 137.911087][ T2848] xt_hashlimit: size too large, truncated to 1048576 [ 138.002889][ T526] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 138.028219][ T893] usb 3-1: 0:2 : does not exist [ 138.044816][ T893] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 138.067423][ T893] usb 3-1: USB disconnect, device number 26 [ 138.128108][ T28] audit: type=1400 audit(1773891513.440:393): avc: denied { write } for pid=2850 comm="syz.3.703" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.214867][ T526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 138.225823][ T526] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.252875][ T526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.265607][ T526] usb 5-1: config 0 descriptor?? [ 138.271149][ T2846] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 138.279962][ T526] hub 5-1:0.0: USB hub found [ 138.293774][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.360803][ T2861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 138.487948][ T526] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 138.504281][ T526] usbhid 5-1:0.0: can't add hid device: -71 [ 138.510274][ T526] usbhid: probe of 5-1:0.0 failed with error -71 [ 138.554655][ T526] usb 5-1: USB disconnect, device number 38 [ 138.614174][ T28] audit: type=1400 audit(1773891513.930:394): avc: denied { map } for pid=2882 comm="syz.1.716" path="socket:[31658]" dev="sockfs" ino=31658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.792947][ T893] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 138.898610][ T2890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 138.909489][ T2890] loop3: detected capacity change from 0 to 512 [ 138.916183][ T2890] EXT4-fs: Ignoring removed nobh option [ 138.921965][ T2890] journal_path: Lookup failure for './file1' [ 138.922863][ T416] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 138.928154][ T2890] EXT4-fs: error: could not find journal device path [ 138.963831][ T381] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.968248][ T2890] loop3: detected capacity change from 0 to 128 [ 138.973840][ T288] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 138.980719][ T2890] ext4: Unknown parameter 'smackfsroot' [ 139.003093][ T893] usb 6-1: Using ep0 maxpacket: 16 [ 139.013246][ T893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.023634][ T893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.039257][ T381] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.053635][ T893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.069881][ T893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.078720][ T893] usb 6-1: Product: syz [ 139.083132][ T893] usb 6-1: Manufacturer: syz [ 139.087823][ T893] usb 6-1: SerialNumber: syz [ 139.115477][ T2900] loop3: detected capacity change from 0 to 256 [ 139.123048][ T416] usb 2-1: Using ep0 maxpacket: 16 [ 139.132741][ T416] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.157822][ T416] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.167875][ T416] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 139.180490][ T2905] 9pnet_fd: Insufficient options for proto=fd [ 139.186085][ T416] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.187450][ T288] usb 3-1: Using ep0 maxpacket: 32 [ 139.194225][ T416] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 139.209523][ T416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.219931][ T416] usb 2-1: config 0 descriptor?? [ 139.223769][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.237195][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.247279][ T288] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 139.256519][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.265726][ T288] usb 3-1: config 0 descriptor?? [ 139.297556][ T893] usb 6-1: 0:2 : does not exist [ 139.315882][ T893] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 139.331368][ T893] usb 6-1: USB disconnect, device number 24 [ 139.442142][ T2910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 139.454698][ T2910] loop3: detected capacity change from 0 to 512 [ 139.461440][ T2910] EXT4-fs: Ignoring removed nobh option [ 139.467322][ T2910] journal_path: Lookup failure for './file1' [ 139.474749][ T2910] EXT4-fs: error: could not find journal device path [ 139.492931][ T526] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 139.528500][ T2910] loop3: detected capacity change from 0 to 128 [ 139.535342][ T2910] ext4: Unknown parameter 'smackfsroot' [ 139.543534][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.573598][ T343] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.635777][ T416] usbhid 2-1:0.0: can't add hid device: -71 [ 139.641797][ T416] usbhid: probe of 2-1:0.0 failed with error -71 [ 139.652301][ T416] usb 2-1: USB disconnect, device number 34 [ 139.672907][ T526] usb 5-1: Using ep0 maxpacket: 16 [ 139.679417][ T526] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.685135][ T288] usbhid 3-1:0.0: can't add hid device: -71 [ 139.694378][ T526] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.706521][ T288] usbhid: probe of 3-1:0.0 failed with error -71 [ 139.713116][ T28] audit: type=1400 audit(1773891515.020:395): avc: denied { mounton } for pid=2914 comm="syz.3.729" path="/proc/393/task" dev="proc" ino=30555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 139.713946][ T526] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.738306][ T288] usb 3-1: USB disconnect, device number 27 [ 139.754683][ T2915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.729'. [ 139.763796][ T2915] netlink: 76 bytes leftover after parsing attributes in process `syz.3.729'. [ 139.772746][ T526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.773140][ T2915] tipc: Started in network mode [ 139.786404][ T526] usb 5-1: Product: syz [ 139.790678][ T526] usb 5-1: Manufacturer: syz [ 139.791156][ T2915] tipc: Node identity ffffffff, cluster identity 4711 [ 139.795792][ T526] usb 5-1: SerialNumber: syz [ 139.802843][ T2915] tipc: Node number set to 4294967295 [ 139.819422][ T28] audit: type=1400 audit(1773891515.130:396): avc: denied { shutdown } for pid=2914 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.023514][ T526] usb 5-1: 0:2 : does not exist [ 140.030521][ T526] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 140.045157][ T526] usb 5-1: USB disconnect, device number 39 [ 140.092947][ T39] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 140.202856][ T416] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 140.235555][ T2924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 140.248147][ T2924] loop1: detected capacity change from 0 to 512 [ 140.255167][ T2924] EXT4-fs: Ignoring removed nobh option [ 140.261023][ T2924] journal_path: Lookup failure for './file1' [ 140.268377][ T2924] EXT4-fs: error: could not find journal device path [ 140.282889][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 140.289228][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.299887][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.313736][ T39] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.323440][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.331608][ T39] usb 6-1: Product: syz [ 140.337141][ T39] usb 6-1: Manufacturer: syz [ 140.341793][ T39] usb 6-1: SerialNumber: syz [ 140.394475][ T416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 140.501719][ T416] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.558240][ T39] usb 6-1: 0:2 : does not exist [ 140.559949][ T2939] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 140.573308][ T39] usb 6-1: USB disconnect, device number 25 [ 140.579462][ T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.605755][ T416] usb 4-1: config 0 descriptor?? [ 140.611333][ T2922] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.612476][ T2941] loop1: detected capacity change from 0 to 4096 [ 140.626342][ T2941] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.627848][ T416] hub 4-1:0.0: USB hub found [ 140.634379][ T2941] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 140.647238][ T2941] System zones: 0-5 [ 140.656578][ T2941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.665932][ T2945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 140.677400][ T284] EXT4-fs (loop1): unmounting filesystem. [ 140.716148][ T2952] loop1: detected capacity change from 0 to 512 [ 140.723421][ T2952] EXT4-fs: Ignoring removed bh option [ 140.737005][ T2952] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 140.747277][ T2952] EXT4-fs (loop1): 1 truncate cleaned up [ 140.753344][ T2952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.826885][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 140.845337][ T416] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 140.855703][ T416] usbhid 4-1:0.0: can't add hid device: -71 [ 140.861752][ T416] usbhid: probe of 4-1:0.0 failed with error -71 [ 140.903350][ T416] usb 4-1: USB disconnect, device number 33 [ 140.990953][ T2958] overlayfs: upper fs needs to support d_type. [ 141.318694][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 141.330255][ T2968] EXT4-fs: Ignoring removed nobh option [ 141.336266][ T2968] journal_path: Lookup failure for './file1' [ 141.342558][ T2968] EXT4-fs: error: could not find journal device path [ 141.422279][ T2977] 9pnet_fd: Insufficient options for proto=fd [ 141.482959][ T288] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 141.552888][ T6] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 141.593154][ T284] EXT4-fs (loop1): unmounting filesystem. [ 141.620006][ T2981] exfat: Deprecated parameter 'utf8' [ 141.625567][ T2981] exfat: Deprecated parameter 'utf8' [ 141.631216][ T2981] exfat: Deprecated parameter 'utf8' [ 141.641052][ T2981] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 141.662841][ T288] usb 5-1: Using ep0 maxpacket: 16 [ 141.669235][ T288] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.678399][ T893] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 141.686326][ T288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.696989][ T288] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 141.708202][ T288] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.717390][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.725412][ T288] usb 5-1: Product: syz [ 141.729571][ T288] usb 5-1: Manufacturer: syz [ 141.732845][ T416] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 141.734370][ T288] usb 5-1: SerialNumber: syz [ 141.751434][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 141.760913][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.913429][ T416] usb 4-1: Using ep0 maxpacket: 16 [ 141.921113][ T416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.933151][ T416] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.945702][ T416] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.980776][ T416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.002417][ T6] usb 3-1: Product: syz [ 142.006726][ T6] usb 3-1: Manufacturer: syz [ 142.011536][ T6] usb 3-1: SerialNumber: syz [ 142.039183][ T416] usb 4-1: Product: syz [ 142.043540][ T416] usb 4-1: Manufacturer: syz [ 142.048309][ T416] usb 4-1: SerialNumber: syz [ 142.053744][ T39] usb 5-1: USB disconnect, device number 40 [ 142.094100][ T893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 142.105309][ T893] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.114521][ T893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.123937][ T893] usb 6-1: config 0 descriptor?? [ 142.129319][ T2975] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 142.138097][ T893] hub 6-1:0.0: USB hub found [ 142.264307][ T416] usb 4-1: 0:2 : does not exist [ 142.271822][ T416] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 142.286406][ T416] usb 4-1: USB disconnect, device number 34 [ 142.338954][ T893] hub 6-1:0.0: 1 port detected [ 142.493929][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.572687][ T893] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 142.587784][ T893] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 142.596789][ T893] usbhid 6-1:0.0: can't add hid device: -71 [ 142.602751][ T893] usbhid: probe of 6-1:0.0 failed with error -71 [ 142.932213][ T893] usb 6-1: USB disconnect, device number 26 [ 143.130661][ T2995] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 143.686265][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: 76:20:1d:9e:67:44 [ 143.752623][ T6] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 143.804351][ T2999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 143.894561][ T3001] set_capacity_and_notify: 2 callbacks suppressed [ 143.894622][ T3001] loop4: detected capacity change from 0 to 512 [ 143.897609][ T6] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 143.924080][ T3001] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.943528][ T3001] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 143.963635][ T3003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.762'. [ 143.992934][ T3001] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.010534][ T6] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 144.051184][ T3001] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 144.074086][ T3001] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.763: bad orphan inode 14 [ 144.094168][ T3001] EXT4-fs (loop4): Remounting filesystem read-only [ 144.102334][ T3001] ext4_test_bit(bit=13, block=18) = 1 [ 144.118532][ T3001] is_bad_inode(inode)=0 [ 144.129289][ T3001] NEXT_ORPHAN(inode)=0 [ 144.141282][ T3001] max_ino=32 [ 144.144974][ T3001] i_nlink=1 [ 144.150207][ T3001] EXT4-fs (loop4): 1 truncate cleaned up [ 144.157297][ T3001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.267806][ T141] usb 3-1: device reset failed [ 144.302833][ T6] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 144.472961][ T19] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 144.482980][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 144.493590][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.504001][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.522311][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.531940][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.540658][ T6] usb 6-1: Product: syz [ 144.545210][ T6] usb 6-1: Manufacturer: syz [ 144.549868][ T6] usb 6-1: SerialNumber: syz [ 144.653864][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 7 [ 144.665044][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25708, setting to 1024 [ 144.677940][ T19] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 144.687057][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.695170][ T19] usb 5-1: Product: syz [ 144.699442][ T19] usb 5-1: Manufacturer: syz [ 144.704183][ T19] usb 5-1: SerialNumber: syz [ 144.710140][ T19] usb 5-1: config 0 descriptor?? [ 144.716174][ T19] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 144.722569][ T19] usb 5-1: No valid video chain found. [ 144.763557][ T6] usb 6-1: 0:2 : does not exist [ 144.773616][ T6] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 144.795768][ T6] usb 6-1: USB disconnect, device number 27 [ 144.927521][ T19] usb 5-1: USB disconnect, device number 41 [ 145.022742][ T3035] loop3: detected capacity change from 0 to 4096 [ 145.029487][ C0] usb 3-1: Rx status -71 [ 145.029548][ C0] usb 3-1: eth1: intr status -71 [ 145.033880][ C0] usb 3-1: Rx status -71 [ 145.033917][ C0] usb 3-1: eth1: intr status -71 [ 145.038979][ C0] usb 3-1: Rx status -71 [ 145.039016][ C0] usb 3-1: eth1: intr status -71 [ 145.039150][ C0] usb 3-1: Rx status -71 [ 145.039183][ C0] usb 3-1: eth1: intr status -71 [ 145.043668][ C0] usb 3-1: Rx status -71 [ 145.043710][ C0] usb 3-1: eth1: intr status -71 [ 145.044730][ T416] usb 3-1: USB disconnect, device number 28 [ 145.048700][ C0] usb 3-1: Rx status -71 [ 145.062890][ T39] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 145.068063][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 145.089143][ T3035] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.120080][ T3035] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 145.132211][ T3035] System zones: 0-5 [ 145.137285][ T3035] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.174555][ T286] EXT4-fs (loop3): unmounting filesystem. [ 145.262887][ T39] usb 2-1: device descriptor read/64, error -71 [ 145.265546][ T3061] loop3: detected capacity change from 0 to 128 [ 145.292439][ T3064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 145.304789][ T3061] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.329853][ T3061] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.352309][ T3061] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.369177][ T28] audit: type=1400 audit(1773891520.680:397): avc: denied { create } for pid=3058 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.384071][ T3069] netlink: 32 bytes leftover after parsing attributes in process `syz.5.777'. [ 145.389637][ T3059] xt_hashlimit: size too large, truncated to 1048576 [ 145.410036][ T286] EXT4-fs (loop3): unmounting filesystem. [ 145.417949][ T3069] netlink: 76 bytes leftover after parsing attributes in process `syz.5.777'. [ 145.439837][ T3069] tipc: Started in network mode [ 145.447573][ T3069] tipc: Node identity ffffffff, cluster identity 4711 [ 145.457088][ T3069] tipc: Node number set to 4294967295 [ 145.495588][ T287] EXT4-fs (loop4): unmounting filesystem. [ 145.511858][ T3076] loop3: detected capacity change from 0 to 256 [ 145.551144][ T3076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 145.563350][ T39] usb 2-1: device descriptor read/64, error -71 [ 145.574422][ T3078] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 145.582707][ T3078] overlayfs: overlapping lowerdir path [ 145.606387][ T3076] xt_hashlimit: size too large, truncated to 1048576 [ 145.633359][ T3080] loop5: detected capacity change from 0 to 4096 [ 145.654476][ T3080] EXT4-fs (loop5): Test dummy encryption mode enabled [ 145.672696][ T3080] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 145.695673][ T3080] System zones: 0-5 [ 145.712492][ T3080] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 145.747932][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 145.832856][ T39] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 145.932592][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 145.992877][ T39] usb 2-1: device descriptor read/64, error -71 [ 146.172856][ T526] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 146.262877][ T39] usb 2-1: device descriptor read/64, error -71 [ 146.272895][ T416] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 146.333420][ T3107] loop5: detected capacity change from 0 to 512 [ 146.352835][ T526] usb 3-1: Using ep0 maxpacket: 16 [ 146.358872][ T3107] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.363599][ T526] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.369246][ T3110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.792'. [ 146.376457][ T526] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.385008][ T3107] Quota error (device loop5): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 146.393865][ T3110] netlink: 76 bytes leftover after parsing attributes in process `syz.4.792'. [ 146.404641][ T3107] EXT4-fs warning (device loop5): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.413651][ T39] usb usb2-port1: attempt power cycle [ 146.428536][ T3107] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 146.434026][ T3110] tipc: Started in network mode [ 146.445494][ T3107] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.791: bad orphan inode 14 [ 146.446120][ T3110] tipc: Node identity ffffffff, cluster identity 4711 [ 146.456278][ T3107] EXT4-fs (loop5): Remounting filesystem read-only [ 146.462730][ T3110] tipc: Node number set to 4294967295 [ 146.469458][ T3107] ext4_test_bit(bit=13, block=18) = 1 [ 146.474820][ T416] usb 4-1: Using ep0 maxpacket: 32 [ 146.480344][ T3107] is_bad_inode(inode)=0 [ 146.486321][ T526] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.489737][ T3107] NEXT_ORPHAN(inode)=0 [ 146.489753][ T3107] max_ino=32 [ 146.489762][ T3107] i_nlink=1 [ 146.499636][ T526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.503461][ T3107] EXT4-fs (loop5): 1 truncate cleaned up [ 146.509887][ T416] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 146.521769][ T3107] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 146.523963][ T526] usb 3-1: Product: syz [ 146.551409][ T416] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 146.560363][ T416] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 146.569506][ T526] usb 3-1: Manufacturer: syz [ 146.574394][ T416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.584543][ T526] usb 3-1: SerialNumber: syz [ 146.589552][ T416] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.599845][ T416] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.613049][ T416] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 146.623093][ T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.631905][ T416] usb 4-1: config 0 descriptor?? [ 146.775535][ T3115] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.791934][ T28] audit: type=1400 audit(1773891522.100:398): avc: denied { read } for pid=3114 comm="syz.4.794" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 146.816595][ T526] usb 3-1: 0:2 : does not exist [ 146.824162][ T526] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 146.832949][ T19] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 146.845392][ T416] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 146.858579][ T526] usb 3-1: USB disconnect, device number 29 [ 146.872950][ T39] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 146.903862][ T39] usb 2-1: device descriptor read/8, error -71 [ 147.024118][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 7 [ 147.035710][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25708, setting to 1024 [ 147.048895][ T19] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 147.058162][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.063905][ T39] usb 2-1: device descriptor read/8, error -71 [ 147.066231][ T19] usb 6-1: Product: syz [ 147.076673][ T19] usb 6-1: Manufacturer: syz [ 147.081548][ T19] usb 6-1: SerialNumber: syz [ 147.096937][ T19] usb 6-1: config 0 descriptor?? [ 147.110128][ T19] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 147.116823][ T19] usb 6-1: No valid video chain found. [ 147.307301][ T526] usb 6-1: USB disconnect, device number 28 [ 147.332832][ T39] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 147.373910][ T39] usb 2-1: device descriptor read/8, error -71 [ 147.419663][ T3129] loop4: detected capacity change from 0 to 256 [ 147.431776][ T3129] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 147.453561][ T3129] xt_hashlimit: size too large, truncated to 1048576 [ 147.486606][ T3131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 147.523858][ T39] usb 2-1: device descriptor read/8, error -71 [ 147.642958][ T39] usb usb2-port1: unable to enumerate USB device [ 147.815045][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 148.302870][ T526] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 148.442853][ T893] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 148.482827][ T526] usb 6-1: Using ep0 maxpacket: 16 [ 148.489327][ T526] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.499819][ T526] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.514393][ T526] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.524353][ T526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.532475][ T526] usb 6-1: Product: syz [ 148.536991][ T526] usb 6-1: Manufacturer: syz [ 148.541778][ T526] usb 6-1: SerialNumber: syz [ 148.623993][ T893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 148.635136][ T893] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.692745][ T893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.707326][ T893] usb 5-1: config 0 descriptor?? [ 148.723247][ T3140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.734094][ T893] hub 5-1:0.0: USB hub found [ 148.738166][ T3158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 148.748206][ T3158] netlink: 76 bytes leftover after parsing attributes in process `syz.1.810'. [ 148.752493][ T526] usb 6-1: 0:2 : does not exist [ 148.757760][ T3158] tipc: Started in network mode [ 148.764732][ T526] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 148.767617][ T3158] tipc: Node identity ffffffff, cluster identity 4711 [ 148.780283][ T526] usb 6-1: USB disconnect, device number 29 [ 148.793944][ T3158] tipc: Node number set to 4294967295 [ 148.798661][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.917752][ T3161] loop1: detected capacity change from 0 to 512 [ 148.928665][ T3161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.939978][ T893] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 148.943961][ T3161] EXT4-fs (loop1): 1 truncate cleaned up [ 148.950178][ T893] usbhid 5-1:0.0: can't add hid device: -71 [ 148.954139][ T3161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.960124][ T893] usbhid: probe of 5-1:0.0 failed with error -71 [ 149.003755][ T893] usb 5-1: USB disconnect, device number 42 [ 149.021987][ T6] usb 4-1: USB disconnect, device number 35 [ 149.033760][ T6] usblp0: removed [ 149.065184][ T3164] loop3: detected capacity change from 0 to 4096 [ 149.076593][ T3164] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.084251][ T3164] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 149.092666][ T3164] System zones: 0-5 [ 149.103050][ T3164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.422937][ T526] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 149.460919][ T286] EXT4-fs (loop3): unmounting filesystem. [ 149.532226][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 149.532247][ T28] audit: type=1326 audit(1773891524.840:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3172 comm="syz.2.814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x0 [ 149.578721][ T3178] loop4: detected capacity change from 0 to 512 [ 149.590442][ T3178] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.597401][ T3178] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 149.607968][ T3178] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.623131][ T3178] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 149.632318][ T3178] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.816: bad orphan inode 14 [ 149.644212][ T3178] EXT4-fs (loop4): Remounting filesystem read-only [ 149.651084][ T3178] ext4_test_bit(bit=13, block=18) = 1 [ 149.657519][ T3178] is_bad_inode(inode)=0 [ 149.661799][ T3178] NEXT_ORPHAN(inode)=0 [ 149.666616][ T3178] max_ino=32 [ 149.669990][ T3178] i_nlink=1 [ 149.701698][ T526] usb 2-1: Using ep0 maxpacket: 16 [ 149.708957][ T3178] EXT4-fs (loop4): 1 truncate cleaned up [ 149.715726][ T526] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.727851][ T3178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.737315][ T526] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.747594][ T526] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 149.789389][ T3181] loop2: detected capacity change from 0 to 1024 [ 149.819964][ T3181] EXT4-fs: Ignoring removed bh option [ 149.826775][ T526] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.837301][ T3181] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.878694][ T526] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 150.002896][ T526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.041985][ T3181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.067628][ T526] usb 2-1: config 0 descriptor?? [ 150.852455][ T39] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 150.869358][ T3181] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.814: Allocating blocks 497-513 which overlap fs metadata [ 150.883774][ T3181] EXT4-fs (loop2): pa ffff888116d9ff18: logic 256, phys. 385, len 8 [ 150.892018][ T3181] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 150.997082][ T3193] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 151.005371][ T3193] overlayfs: overlapping lowerdir path [ 151.054754][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 7 [ 151.066157][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25708, setting to 1024 [ 151.081620][ T39] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 151.090971][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.099339][ T39] usb 5-1: Product: syz [ 151.103749][ T39] usb 5-1: Manufacturer: syz [ 151.108695][ T39] usb 5-1: SerialNumber: syz [ 151.113362][ T288] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 151.114673][ T39] usb 5-1: config 0 descriptor?? [ 151.129758][ T39] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 151.136604][ T39] usb 5-1: No valid video chain found. [ 151.152857][ T6] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 151.302832][ T288] usb 3-1: Using ep0 maxpacket: 32 [ 151.313859][ T288] usb 3-1: config 0 has no interfaces? [ 151.324207][ T288] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 151.340350][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.352248][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.360537][ T6] usb 4-1: config 0 has no interfaces? [ 151.366259][ T288] usb 3-1: Product: syz [ 151.370448][ T288] usb 3-1: Manufacturer: syz [ 151.375392][ T288] usb 3-1: SerialNumber: syz [ 151.381088][ T19] usb 5-1: USB disconnect, device number 43 [ 151.387381][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 151.401042][ T288] usb 3-1: config 0 descriptor?? [ 151.407499][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 151.418852][ T6] usb 4-1: Product: syz [ 151.423146][ T6] usb 4-1: Manufacturer: syz [ 151.431674][ T6] usb 4-1: SerialNumber: syz [ 151.447102][ T6] usb 4-1: config 0 descriptor?? [ 151.861731][ T287] EXT4-fs (loop4): unmounting filesystem. [ 151.960372][ T526] usbhid 2-1:0.0: can't add hid device: -71 [ 151.960970][ T284] EXT4-fs (loop1): unmounting filesystem. [ 151.966451][ T526] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.985186][ T526] usb 2-1: USB disconnect, device number 39 [ 152.016307][ T3205] loop3: detected capacity change from 0 to 512 [ 152.031657][ T3208] loop5: detected capacity change from 0 to 4096 [ 152.035877][ T3205] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.045032][ T3205] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.052094][ T3205] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.062866][ T3205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.082141][ T3208] EXT4-fs (loop5): Test dummy encryption mode enabled [ 152.090797][ T3208] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 152.103195][ T3205] EXT4-fs (loop3): 1 truncate cleaned up [ 152.103541][ T3208] System zones: 0-5 [ 152.108881][ T3205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.121450][ T3208] [ 152.127390][ T3208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.152902][ T19] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 152.164137][ T3208] overlayfs: missing 'lowerdir' [ 152.177837][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 152.332812][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 152.339195][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.356129][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.377113][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.396695][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.410130][ T19] usb 5-1: Product: syz [ 152.417289][ T19] usb 5-1: Manufacturer: syz [ 152.421962][ T19] usb 5-1: SerialNumber: syz [ 152.638707][ T19] usb 5-1: 0:2 : does not exist [ 152.647134][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 152.665970][ T19] usb 5-1: USB disconnect, device number 44 [ 152.718780][ T515] usb 3-1: USB disconnect, device number 30 [ 152.770373][ T285] EXT4-fs (loop2): unmounting filesystem. [ 152.873521][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.961439][ T3223] 9pnet_fd: Insufficient options for proto=fd [ 153.077798][ T3228] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 153.086386][ T3228] overlayfs: overlapping lowerdir path [ 153.188509][ T3232] xt_hashlimit: size too large, truncated to 1048576 [ 153.192823][ T515] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 153.285420][ T526] usb 4-1: USB disconnect, device number 36 [ 153.293538][ T286] EXT4-fs (loop3): unmounting filesystem. [ 153.337970][ T3237] loop3: detected capacity change from 0 to 512 [ 153.366003][ T3237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.398246][ T3237] EXT4-fs (loop3): 1 truncate cleaned up [ 153.402836][ T515] usb 3-1: Using ep0 maxpacket: 32 [ 153.409565][ T3237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.419953][ T515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.431281][ T515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.432888][ T19] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 153.441427][ T515] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 153.514610][ T515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.523781][ T515] usb 3-1: config 0 descriptor?? [ 153.572261][ T3242] loop5: detected capacity change from 0 to 4096 [ 153.715447][ T3242] EXT4-fs (loop5): Test dummy encryption mode enabled [ 153.781532][ T3242] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 153.816403][ T3242] System zones: 0-5 [ 153.832580][ T3242] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.857013][ T3242] overlayfs: missing 'lowerdir' [ 153.874121][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 153.880728][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 153.884480][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.898101][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.908033][ T28] audit: type=1326 audit(1773891529.230:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 153.921696][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.931913][ T526] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 153.949363][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.966748][ T515] usbhid 3-1:0.0: can't add hid device: -71 [ 153.979126][ T28] audit: type=1326 audit(1773891529.230:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 153.979784][ T19] usb 5-1: Product: syz [ 154.003159][ T515] usbhid: probe of 3-1:0.0 failed with error -71 [ 154.007394][ T19] usb 5-1: Manufacturer: syz [ 154.025004][ T515] usb 3-1: USB disconnect, device number 31 [ 154.033104][ T28] audit: type=1326 audit(1773891529.230:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 154.056436][ T19] usb 5-1: SerialNumber: syz [ 154.091526][ T28] audit: type=1326 audit(1773891529.230:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 154.132813][ T28] audit: type=1326 audit(1773891529.230:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 154.156779][ T526] usb 4-1: Using ep0 maxpacket: 16 [ 154.163269][ T526] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.176018][ T28] audit: type=1326 audit(1773891529.230:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 154.184605][ T526] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.207893][ T28] audit: type=1326 audit(1773891529.230:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 154.232989][ T526] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 154.246261][ T28] audit: type=1326 audit(1773891529.230:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f559879c799 code=0x7ffc0000 [ 154.262832][ T526] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.273910][ T19] usb 5-1: 0:2 : does not exist [ 154.282747][ T19] usb 5-1: unit 6 not found! [ 154.287216][ T526] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 154.298215][ T526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.309030][ T526] usb 4-1: config 0 descriptor?? [ 154.312967][ T19] usb 5-1: USB disconnect, device number 45 [ 154.332521][ T3248] loop1: detected capacity change from 0 to 40427 [ 154.351480][ T3248] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 154.358456][ T3248] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.391089][ T3248] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.433277][ T3259] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 154.438968][ T3248] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.441626][ T3259] overlayfs: overlapping lowerdir path [ 154.449266][ T3248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.508638][ T3248] syz.1.840: attempt to access beyond end of device [ 154.508638][ T3248] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 154.535474][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.535596][ T284] syz-executor: attempt to access beyond end of device [ 154.535596][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.708378][ T3271] loop5: detected capacity change from 0 to 4096 [ 154.719085][ T3271] EXT4-fs (loop5): Test dummy encryption mode enabled [ 154.727636][ T3271] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 154.737187][ T3271] System zones: 0-5 [ 154.742161][ T3271] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 154.756678][ T3271] overlayfs: missing 'lowerdir' [ 154.775661][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 154.912842][ T288] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 155.103418][ T3286] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 155.104034][ T288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.111928][ T3286] overlayfs: overlapping lowerdir path [ 155.132202][ T288] usb 2-1: config 0 has no interfaces? [ 155.149329][ T288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 155.160157][ T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 155.169071][ T288] usb 2-1: Product: syz [ 155.173414][ T288] usb 2-1: Manufacturer: syz [ 155.178085][ T288] usb 2-1: SerialNumber: syz [ 155.197097][ T288] usb 2-1: config 0 descriptor?? [ 155.422881][ T515] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 155.596631][ T3297] loop2: detected capacity change from 0 to 4096 [ 155.613054][ T515] usb 6-1: Using ep0 maxpacket: 32 [ 155.620054][ T3297] EXT4-fs (loop2): Test dummy encryption mode enabled [ 155.620412][ T515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.638784][ T515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.643312][ T3297] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 155.649307][ T515] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.664427][ T3297] System zones: 0-5 [ 155.670881][ T3297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.684080][ T515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.704527][ T3297] overlayfs: missing 'lowerdir' [ 155.734712][ T515] usb 6-1: config 0 descriptor?? [ 155.752883][ T285] EXT4-fs (loop2): unmounting filesystem. [ 155.780253][ T3299] loop1: detected capacity change from 0 to 512 [ 155.795501][ T3299] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.810481][ T3299] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.834183][ T3299] EXT4-fs (loop1): Test dummy encryption mode enabled [ 155.851715][ T3299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.878781][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 155.878802][ T28] audit: type=1326 audit(1773891531.190:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 155.909533][ T3299] EXT4-fs (loop1): 1 truncate cleaned up [ 155.915348][ T3299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.984156][ T28] audit: type=1326 audit(1773891531.190:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.039384][ T28] audit: type=1326 audit(1773891531.190:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.052080][ T3305] loop2: detected capacity change from 0 to 40427 [ 156.071110][ T3305] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 156.077948][ T3305] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.103694][ T3305] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.141167][ T28] audit: type=1326 audit(1773891531.190:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.165307][ T515] usbhid 6-1:0.0: can't add hid device: -71 [ 156.168142][ T28] audit: type=1326 audit(1773891531.190:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.174418][ T3305] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 156.195426][ T28] audit: type=1326 audit(1773891531.190:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.203676][ T515] usbhid: probe of 6-1:0.0 failed with error -71 [ 156.226074][ T28] audit: type=1326 audit(1773891531.190:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.248067][ T3305] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 156.256397][ T28] audit: type=1326 audit(1773891531.190:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.275566][ T515] usb 6-1: USB disconnect, device number 30 [ 156.318373][ T28] audit: type=1326 audit(1773891531.200:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.365876][ T3305] syz.2.861: attempt to access beyond end of device [ 156.365876][ T3305] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 156.381101][ T526] usbhid 4-1:0.0: can't add hid device: -71 [ 156.382024][ T286] EXT4-fs (loop3): unmounting filesystem. [ 156.392836][ T28] audit: type=1326 audit(1773891531.200:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4d79c799 code=0x7ffc0000 [ 156.417100][ T526] usbhid: probe of 4-1:0.0 failed with error -71 [ 156.426038][ T526] usb 4-1: USB disconnect, device number 37 [ 156.446213][ T285] syz-executor: attempt to access beyond end of device [ 156.446213][ T285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.608145][ T3322] loop2: detected capacity change from 0 to 4096 [ 156.620594][ T3322] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.629091][ T3322] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 156.639047][ T3322] System zones: 0-5 [ 156.660422][ T3322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.710605][ T285] EXT4-fs (loop2): unmounting filesystem. [ 156.755788][ T3329] loop5: detected capacity change from 0 to 1024 [ 156.785651][ T3329] EXT4-fs: Ignoring removed oldalloc option [ 156.802305][ T3329] EXT4-fs: Ignoring removed bh option [ 156.816325][ T3329] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.992076][ T3333] loop2: detected capacity change from 0 to 8192 [ 157.220964][ T3329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 157.292089][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 157.309479][ T3339] loop4: detected capacity change from 0 to 4096 [ 157.342263][ T3339] EXT4-fs (loop4): Test dummy encryption mode enabled [ 157.360811][ T3339] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 157.371060][ T3339] System zones: 0-5 [ 157.376518][ T3339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.401840][ T3339] overlayfs: missing 'lowerdir' [ 157.443838][ T287] EXT4-fs (loop4): unmounting filesystem. [ 157.473149][ T3348] loop4: detected capacity change from 0 to 512 [ 157.480886][ T3348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.497641][ T3348] EXT4-fs (loop4): 1 truncate cleaned up [ 157.505250][ T3348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.012935][ T515] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 158.136007][ T284] EXT4-fs (loop1): unmounting filesystem. [ 158.142217][ T288] usb 2-1: USB disconnect, device number 40 [ 158.223373][ T515] usb 5-1: Using ep0 maxpacket: 16 [ 158.229861][ T515] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.251175][ T515] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.272103][ T515] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 158.299952][ T515] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.314430][ T515] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 158.325769][ T515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.335453][ T515] usb 5-1: config 0 descriptor?? [ 158.440180][ T3381] exfat: Bad value for 'gid' [ 158.683736][ T3389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 158.707060][ T3389] IPv6: Can't replace route, no match found [ 158.827996][ T3393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.842504][ T3393] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.110117][ T3402] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #2: comm syz.2.890: corrupted inode contents [ 159.150164][ T3402] EXT4-fs error (device loop2): ext4_dirty_inode:6139: inode #2: comm syz.2.890: mark_inode_dirty error [ 159.170884][ T3402] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #2: comm syz.2.890: corrupted inode contents [ 159.187340][ T3402] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.890: mark_inode_dirty error [ 159.378201][ T6] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 159.488160][ T3408] set_capacity_and_notify: 2 callbacks suppressed [ 159.488197][ T3408] loop1: detected capacity change from 0 to 8192 [ 159.827970][ T3411] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 159.836462][ T3411] overlayfs: overlapping lowerdir path [ 159.913939][ T3413] loop3: detected capacity change from 0 to 256 [ 159.949171][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.959655][ T3413] exfat: Bad value for 'gid' [ 159.968271][ T6] usb 6-1: config 0 has no interfaces? [ 159.995941][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 160.014776][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 160.025349][ T6] usb 6-1: Product: syz [ 160.030211][ T6] usb 6-1: Manufacturer: syz [ 160.035248][ T6] usb 6-1: SerialNumber: syz [ 160.041929][ T285] EXT4-fs (loop2): unmounting filesystem. [ 160.055730][ T6] usb 6-1: config 0 descriptor?? [ 160.078736][ T3417] loop3: detected capacity change from 0 to 512 [ 160.088489][ T3417] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.899: inode has both inline data and extents flags [ 160.102312][ T3417] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.899: couldn't read orphan inode 15 (err -117) [ 160.114875][ T3417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.249791][ T286] EXT4-fs (loop3): unmounting filesystem. [ 160.489974][ T515] usbhid 5-1:0.0: can't add hid device: -71 [ 160.490725][ T287] EXT4-fs (loop4): unmounting filesystem. [ 160.496866][ T515] usbhid: probe of 5-1:0.0 failed with error -71 [ 160.515958][ T515] usb 5-1: USB disconnect, device number 46 [ 160.552973][ T526] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 160.572875][ T19] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 161.333932][ T3441] loop4: detected capacity change from 0 to 8192 [ 161.419660][ T3440] loop5: detected capacity change from 0 to 512 [ 161.448620][ T3440] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.472956][ T3440] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.480153][ T3440] EXT4-fs (loop5): Test dummy encryption mode enabled [ 161.487160][ T526] usb 4-1: Using ep0 maxpacket: 16 [ 161.492912][ T3440] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.505850][ T526] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.517172][ T526] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.526909][ T3440] EXT4-fs (loop5): 1 truncate cleaned up [ 161.532596][ T3440] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 161.556536][ T526] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.576561][ T526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.599003][ T526] usb 4-1: Product: syz [ 161.602915][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 161.608659][ T526] usb 4-1: Manufacturer: syz [ 161.614346][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.624975][ T526] usb 4-1: SerialNumber: syz [ 161.632830][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.644949][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.662838][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.671182][ T19] usb 3-1: Product: syz [ 161.675557][ T19] usb 3-1: Manufacturer: syz [ 161.680206][ T19] usb 3-1: SerialNumber: syz [ 161.843745][ T526] usb 4-1: 0:2 : does not exist [ 161.849629][ T526] usb 4-1: unit 6 not found! [ 161.863291][ T526] usb 4-1: USB disconnect, device number 38 [ 161.897798][ T19] usb 3-1: 0:2 : does not exist [ 161.905850][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 161.923003][ T19] usb 3-1: USB disconnect, device number 32 [ 162.104514][ T3455] loop4: detected capacity change from 0 to 256 [ 162.118922][ T3455] exfat: Bad value for 'gid' [ 162.135621][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 162.476144][ T19] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 162.603682][ T3467] loop3: detected capacity change from 0 to 8192 [ 162.896943][ T3469] loop1: detected capacity change from 0 to 512 [ 162.909636][ T3469] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.915: inode has both inline data and extents flags [ 162.923397][ T3469] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.915: couldn't read orphan inode 15 (err -117) [ 162.935449][ T3469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.025492][ T19] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 163.034706][ T515] usb 6-1: USB disconnect, device number 31 [ 163.060605][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 163.225498][ T3477] loop2: detected capacity change from 0 to 8192 [ 163.355559][ T284] EXT4-fs (loop1): unmounting filesystem. [ 163.423761][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.432036][ T19] usb 5-1: Product: syz [ 163.436320][ T19] usb 5-1: Manufacturer: syz [ 163.440948][ T19] usb 5-1: SerialNumber: syz [ 163.478717][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 163.478750][ T28] audit: type=1400 audit(1773891538.790:538): avc: denied { bind } for pid=3478 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.505122][ T28] audit: type=1400 audit(1773891538.790:539): avc: denied { setopt } for pid=3478 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.540125][ T3483] loop5: detected capacity change from 0 to 256 [ 163.552519][ T3483] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 164.332849][ T6] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 164.399920][ T3491] syz.5.921: attempt to access beyond end of device [ 164.399920][ T3491] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 164.413464][ T3491] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 164.527367][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 164.541068][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.567854][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.591309][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.611205][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.629079][ T6] usb 4-1: Product: syz [ 164.638833][ T6] usb 4-1: Manufacturer: syz [ 164.649097][ T6] usb 4-1: SerialNumber: syz [ 164.760995][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 164.869636][ T6] usb 4-1: 0:2 : does not exist [ 164.878107][ T6] usb 4-1: unit 6 not found! [ 164.892872][ T3507] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 164.898915][ T6] usb 4-1: USB disconnect, device number 39 [ 164.901290][ T3507] overlayfs: overlapping lowerdir path [ 164.976325][ T3513] set_capacity_and_notify: 2 callbacks suppressed [ 164.976352][ T3513] loop1: detected capacity change from 0 to 256 [ 165.013988][ T3513] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 165.017792][ T3515] loop2: detected capacity change from 0 to 128 [ 165.032991][ T19] (unnamed net_device) (uninitialized): Assigned a random MAC address: c2:3f:df:75:6b:46 [ 165.060502][ T19] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 165.143986][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.177566][ T3522] loop5: detected capacity change from 0 to 512 [ 165.217910][ T3515] syz.2.933: attempt to access beyond end of device [ 165.217910][ T3515] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 165.226566][ T3522] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.232298][ T3515] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 165.288514][ T3522] EXT4-fs (loop5): 1 truncate cleaned up [ 165.307239][ T3522] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.453217][ T3541] loop3: detected capacity change from 0 to 256 [ 165.587550][ T3541] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d) [ 165.833738][ T416] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 165.845649][ T6] usb 5-1: USB disconnect, device number 47 [ 165.937486][ T3551] loop4: detected capacity change from 0 to 1024 [ 165.950980][ T3551] EXT4-fs: Ignoring removed oldalloc option [ 165.960485][ T3551] EXT4-fs: Ignoring removed bh option [ 165.966587][ T3551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.001924][ T3551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.022978][ T416] usb 6-1: Using ep0 maxpacket: 16 [ 166.037348][ T416] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.057679][ T287] EXT4-fs (loop4): unmounting filesystem. [ 166.067938][ T416] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.096714][ T416] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 166.120285][ T416] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.132406][ T416] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.153491][ T416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.174472][ T416] usb 6-1: config 0 descriptor?? [ 166.265769][ T3575] loop2: detected capacity change from 0 to 256 [ 166.290376][ T3575] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 166.777116][ T3585] loop2: detected capacity change from 0 to 8192 [ 167.103585][ T3587] loop4: detected capacity change from 0 to 128 [ 167.226360][ T3587] syz.4.949: attempt to access beyond end of device [ 167.226360][ T3587] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 167.252822][ T3587] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 167.366570][ T3594] loop4: detected capacity change from 0 to 1024 [ 167.433411][ T3594] EXT4-fs: Ignoring removed oldalloc option [ 167.439374][ T3594] EXT4-fs: Ignoring removed bh option [ 167.453223][ T3594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.511610][ T3594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.549513][ T287] EXT4-fs (loop4): unmounting filesystem. [ 167.832014][ T3603] loop1: detected capacity change from 0 to 256 [ 167.851969][ T3603] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 168.167757][ T416] usbhid 6-1:0.0: can't add hid device: -71 [ 168.169128][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 168.174997][ T416] usbhid: probe of 6-1:0.0 failed with error -71 [ 168.199651][ T416] usb 6-1: USB disconnect, device number 32 [ 168.244338][ T3619] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 168.252745][ T3619] overlayfs: overlapping lowerdir path [ 168.259663][ T526] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 168.302806][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.962'. [ 168.354850][ T3623] EXT4-fs: Ignoring removed oldalloc option [ 168.360917][ T3623] EXT4-fs: Ignoring removed bh option [ 168.394602][ T3623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.425813][ T3623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 168.452838][ T526] usb 2-1: Using ep0 maxpacket: 16 [ 168.463894][ T526] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.474374][ T526] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.483972][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 168.514434][ T526] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.528083][ T3627] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.964: inode has both inline data and extents flags [ 168.559694][ T3627] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.964: couldn't read orphan inode 15 (err -117) [ 168.560226][ T526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.581570][ T3632] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 168.587383][ T3627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.661394][ T526] usb 2-1: Product: syz [ 168.685525][ T526] usb 2-1: Manufacturer: syz [ 168.698646][ T3639] EXT4-fs: Ignoring removed i_version option [ 168.711775][ T526] usb 2-1: SerialNumber: syz [ 168.740205][ T3639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.795356][ T3639] overlayfs: './file2' not a directory [ 168.818196][ T28] audit: type=1400 audit(1773891544.130:540): avc: denied { remount } for pid=3638 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 168.867321][ T286] EXT4-fs (loop3): unmounting filesystem. [ 168.874223][ T28] audit: type=1400 audit(1773891544.150:541): avc: denied { ioctl } for pid=3638 comm="syz.3.969" path="/193/file1/cpuacct.usage_percpu" dev="loop3" ino=20 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.901516][ T28] audit: type=1400 audit(1773891544.150:542): avc: denied { write } for pid=3638 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.932533][ T526] usb 2-1: 0:2 : does not exist [ 168.936854][ T3647] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.945758][ T526] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 168.950597][ T3647] EXT4-fs: journaled quota format not specified [ 168.977514][ T526] usb 2-1: USB disconnect, device number 41 [ 169.162139][ T39] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 169.206876][ T3650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.372878][ T39] usb 6-1: device descriptor read/64, error -71 [ 169.500734][ T3650] EXT4-fs (loop2): 1 truncate cleaned up [ 169.513296][ T3650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 169.597896][ T3655] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 169.606964][ T3655] overlayfs: overlapping lowerdir path [ 169.631472][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 169.662953][ T39] usb 6-1: device descriptor read/64, error -71 [ 169.992943][ T39] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 169.992983][ T526] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 170.003621][ T3663] set_capacity_and_notify: 6 callbacks suppressed [ 170.003644][ T3663] loop3: detected capacity change from 0 to 1024 [ 170.019581][ T3663] EXT4-fs: Ignoring removed oldalloc option [ 170.028481][ T3663] EXT4-fs: Ignoring removed bh option [ 170.034662][ T3663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.046542][ T287] EXT4-fs (loop4): unmounting filesystem. [ 170.059742][ T3663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.092448][ T286] EXT4-fs (loop3): unmounting filesystem. [ 170.109065][ T3671] loop4: detected capacity change from 0 to 256 [ 170.118402][ T3671] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 170.192848][ T39] usb 6-1: device descriptor read/64, error -71 [ 170.222864][ T526] usb 3-1: Using ep0 maxpacket: 16 [ 170.229386][ T526] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.256425][ T526] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.267003][ T526] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 170.280587][ T526] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.288478][ T526] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 170.299766][ T526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.317076][ T526] usb 3-1: config 0 descriptor?? [ 170.472849][ T39] usb 6-1: device descriptor read/64, error -71 [ 170.518165][ T3686] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 170.526651][ T3686] overlayfs: overlapping lowerdir path [ 170.603005][ T39] usb usb6-port1: attempt power cycle [ 170.632847][ T19] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 170.822835][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 170.833652][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.844044][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.864175][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.882803][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.890925][ T19] usb 4-1: Product: syz [ 170.902805][ T19] usb 4-1: Manufacturer: syz [ 170.907457][ T19] usb 4-1: SerialNumber: syz [ 171.012826][ T39] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 171.047608][ T39] usb 6-1: device descriptor read/8, error -71 [ 171.112071][ T3697] loop4: detected capacity change from 0 to 1024 [ 171.122464][ T3697] EXT4-fs: Ignoring removed oldalloc option [ 171.130093][ T19] usb 4-1: 0:2 : does not exist [ 171.132457][ T3697] EXT4-fs: Ignoring removed bh option [ 171.142327][ T3697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.143234][ T19] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 171.165389][ T3697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.182908][ T19] usb 4-1: USB disconnect, device number 40 [ 171.205958][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.206535][ T39] usb 6-1: device descriptor read/8, error -71 [ 171.230678][ T287] EXT4-fs (loop4): unmounting filesystem. [ 171.329945][ T3708] loop4: detected capacity change from 0 to 256 [ 171.342448][ T3708] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 171.502864][ T39] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 171.533834][ T39] usb 6-1: device descriptor read/8, error -71 [ 171.611564][ T3715] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 171.620111][ T3715] overlayfs: overlapping lowerdir path [ 171.684083][ T39] usb 6-1: device descriptor read/8, error -71 [ 171.702892][ T416] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 171.802968][ T39] usb usb6-port1: unable to enumerate USB device [ 171.889213][ T3724] loop5: detected capacity change from 0 to 1024 [ 171.896191][ T3724] EXT4-fs: Ignoring removed oldalloc option [ 171.902230][ T3724] EXT4-fs: Ignoring removed bh option [ 171.903967][ T416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 171.918088][ T893] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 171.919073][ T416] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA8, skipping [ 171.931811][ T3724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.947138][ T416] usb 5-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 171.948232][ T19] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 171.957540][ T416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.973530][ T416] usb 5-1: Product: syz [ 171.974623][ T3724] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.977993][ T416] usb 5-1: Manufacturer: syz [ 172.001734][ T416] usb 5-1: SerialNumber: syz [ 172.003645][ T1019] EXT4-fs (loop5): unmounting filesystem. [ 172.012103][ T416] usb 5-1: config 0 descriptor?? [ 172.028333][ T416] usb-storage 5-1:0.0: USB Mass Storage device detected [ 172.036744][ T416] usb-storage 5-1:0.0: device ignored [ 172.102860][ T893] usb 2-1: Using ep0 maxpacket: 16 [ 172.109301][ T893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.119968][ T19] usb 4-1: device descriptor read/64, error -71 [ 172.126360][ T893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.137279][ T893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.146387][ T893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.154657][ T893] usb 2-1: Product: syz [ 172.158929][ T893] usb 2-1: Manufacturer: syz [ 172.163616][ T893] usb 2-1: SerialNumber: syz [ 172.204276][ T526] usbhid 3-1:0.0: can't add hid device: -71 [ 172.205210][ T285] EXT4-fs (loop2): unmounting filesystem. [ 172.210453][ T526] usbhid: probe of 3-1:0.0 failed with error -71 [ 172.234631][ T526] usb 3-1: USB disconnect, device number 33 [ 172.257149][ T3710] xt_CT: No such helper "syz0" [ 172.303408][ T39] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 172.371108][ T28] audit: type=1400 audit(1773891547.680:543): avc: denied { create } for pid=3716 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.391692][ T893] usb 2-1: 0:2 : does not exist [ 172.398964][ T893] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 172.406437][ T19] usb 4-1: device descriptor read/64, error -71 [ 172.418006][ T893] usb 2-1: USB disconnect, device number 42 [ 172.426387][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.486068][ T39] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 172.495661][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.503993][ T39] usb 6-1: Product: syz [ 172.508544][ T39] usb 6-1: Manufacturer: syz [ 172.513496][ T39] usb 6-1: SerialNumber: syz [ 172.652830][ T526] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 172.682887][ T19] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 172.794985][ T353] usb 5-1: USB disconnect, device number 48 [ 172.833450][ T19] usb 4-1: device descriptor read/64, error -71 [ 172.833720][ T526] usb 3-1: Using ep0 maxpacket: 16 [ 172.853724][ T526] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.867689][ T526] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.892924][ T526] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 172.912818][ T526] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.919623][ T526] usb 3-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 172.942886][ T526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.957974][ T526] usb 3-1: config 0 descriptor?? [ 173.122900][ T19] usb 4-1: device descriptor read/64, error -71 [ 173.177127][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.209685][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.219946][ T3758] loop1: detected capacity change from 0 to 512 [ 173.241609][ T3758] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.252516][ T19] usb usb4-port1: attempt power cycle [ 173.441236][ T3758] EXT4-fs (loop1): 1 truncate cleaned up [ 173.453825][ T3758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.579843][ T526] usbhid 3-1:0.0: can't add hid device: -71 [ 173.585960][ T526] usbhid: probe of 3-1:0.0 failed with error -71 [ 173.591117][ T3764] loop2: detected capacity change from 0 to 512 [ 173.594752][ T526] usb 3-1: USB disconnect, device number 34 [ 173.602261][ T3764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.617140][ T3764] EXT4-fs (loop2): 1 truncate cleaned up [ 173.623556][ T3764] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 173.925703][ T19] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 173.962825][ T353] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 173.993923][ T19] usb 4-1: device descriptor read/8, error -71 [ 174.068072][ T39] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:d0:c9:86:cd:8c [ 174.079985][ T39] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 174.174941][ T353] usb 2-1: Using ep0 maxpacket: 16 [ 174.194165][ T19] usb 4-1: device descriptor read/8, error -71 [ 174.198218][ T353] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.215109][ T353] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.225489][ T353] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 174.238922][ T353] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.245695][ T353] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 174.259871][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.289819][ T353] usb 2-1: config 0 descriptor?? [ 174.362832][ T6] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 174.444127][ T141] usb 6-1: device reset failed [ 174.462842][ T39] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 174.492838][ T19] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 174.524025][ T19] usb 4-1: device descriptor read/8, error -71 [ 174.542828][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 174.549280][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.559591][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.570207][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.579557][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.587734][ T6] usb 5-1: Product: syz [ 174.592123][ T6] usb 5-1: Manufacturer: syz [ 174.596782][ T6] usb 5-1: SerialNumber: syz [ 174.642835][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 174.649475][ T39] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.660594][ T39] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.670513][ T39] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 174.687334][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.693435][ T19] usb 4-1: device descriptor read/8, error -71 [ 174.694216][ T39] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 174.709732][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.719010][ T39] usb 3-1: config 0 descriptor?? [ 174.804825][ T6] usb 5-1: 0:2 : does not exist [ 174.812644][ T6] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 174.820176][ T19] usb usb4-port1: unable to enumerate USB device [ 174.834010][ T6] usb 5-1: USB disconnect, device number 49 [ 175.040811][ C1] usb 6-1: Rx status -71 [ 175.043799][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.045132][ C1] usb 6-1: eth1: intr status -71 [ 175.072817][ C1] usb 6-1: Rx status -71 [ 175.077282][ C1] usb 6-1: eth1: intr status -71 [ 175.082433][ C1] usb 6-1: Rx status -71 [ 175.086682][ C1] usb 6-1: eth1: intr status -71 [ 175.092791][ C1] usb 6-1: Rx status -71 [ 175.097132][ C1] usb 6-1: eth1: intr status -71 [ 175.102263][ C1] usb 6-1: Rx status -71 [ 175.106555][ C1] usb 6-1: eth1: intr status -71 [ 175.112799][ C1] usb 6-1: Rx status -71 [ 175.117206][ C1] usb 6-1: eth1: intr status -71 [ 175.122871][ C1] usb 6-1: Rx status -71 [ 175.127164][ C1] usb 6-1: eth1: intr status -71 [ 175.132496][ C1] usb 6-1: Rx status -71 [ 175.136911][ C1] usb 6-1: eth1: intr status -71 [ 175.142797][ C1] usb 6-1: Rx status -71 [ 175.147058][ C1] usb 6-1: eth1: intr status -71 [ 175.152801][ C1] usb 6-1: Rx status -71 [ 175.157077][ C1] usb 6-1: eth1: intr status -71 [ 175.162122][ C1] usb 6-1: eth1: intr status -71 [ 175.171510][ C1] usb 6-1: eth1: intr status -71 [ 175.177752][ C1] usb 6-1: eth1: intr status -71 [ 175.182554][ T3788] FAULT_INJECTION: forcing a failure. [ 175.182554][ T3788] name failslab, interval 1, probability 0, space 0, times 0 [ 175.182885][ C1] usb 6-1: eth1: intr status -71 [ 175.197628][ T3788] CPU: 0 PID: 3788 Comm: syz.5.1018 Not tainted syzkaller #0 [ 175.201027][ C1] usb 6-1: eth1: intr status -71 [ 175.208064][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.213566][ C1] usb 6-1: eth1: intr status -71 [ 175.223286][ T3788] Call Trace: [ 175.223303][ T3788] [ 175.228847][ C1] usb 6-1: eth1: intr status -71 [ 175.231654][ T3788] __dump_stack+0x21/0x24 [ 175.234830][ C1] usb 6-1: eth1: intr status -71 [ 175.239623][ T3788] dump_stack_lvl+0x110/0x170 [ 175.244153][ C1] usb 6-1: eth1: intr status -71 [ 175.248909][ T3788] ? __cfi_dump_stack_lvl+0x8/0x8 [ 175.253884][ C1] usb 6-1: eth1: intr status -71 [ 175.258614][ T3788] ? __asan_set_shadow_00+0xe/0x10 [ 175.263862][ C1] usb 6-1: eth1: intr status -71 [ 175.268697][ T3788] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 175.274042][ C1] usb 6-1: eth1: intr status -71 [ 175.278827][ T3788] dump_stack+0x15/0x24 [ 175.283913][ C1] usb 6-1: eth1: intr status -71 [ 175.288951][ T3788] should_fail_ex+0x3d4/0x520 [ 175.293239][ C1] usb 6-1: eth1: intr status -71 [ 175.298125][ T3788] __should_failslab+0xac/0xf0 [ 175.303007][ C1] usb 6-1: eth1: intr status -71 [ 175.307834][ T3788] ? input_mt_init_slots+0xf1/0xa60 [ 175.312727][ T416] usb 6-1: USB disconnect, device number 37 [ 175.317557][ T3788] should_failslab+0x9/0x20 [ 175.317583][ T3788] __kmem_cache_alloc_node+0x3d/0x2c0 [ 175.317608][ T3788] ? input_mt_init_slots+0xf1/0xa60 [ 175.317619][ C1] usb 6-1: eth1: intr status -71 [ 175.317633][ T3788] __kmalloc+0xa1/0x1e0 [ 175.317650][ T3788] input_mt_init_slots+0xf1/0xa60 [ 175.358643][ T3788] uinput_create_device+0x290/0x660 [ 175.363866][ T3788] uinput_ioctl_handler+0x75a/0x12c0 [ 175.369285][ T3788] ? uinput_release+0x50/0x50 [ 175.374018][ T3788] uinput_ioctl+0x28/0x30 [ 175.378624][ T3788] ? __cfi_uinput_ioctl+0x10/0x10 [ 175.383672][ T3788] __se_sys_ioctl+0x12f/0x1b0 [ 175.388401][ T3788] __x64_sys_ioctl+0x7b/0x90 [ 175.393106][ T3788] x64_sys_call+0x58b/0x9a0 [ 175.397654][ T3788] do_syscall_64+0x4c/0xa0 [ 175.402099][ T3788] ? clear_bhb_loop+0x30/0x80 [ 175.406906][ T3788] ? clear_bhb_loop+0x30/0x80 [ 175.411771][ T3788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.417867][ T3788] RIP: 0033:0x7fe3ed99c799 [ 175.422306][ T3788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.441915][ T3788] RSP: 002b:00007fe3ee86f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.450590][ T3788] RAX: ffffffffffffffda RBX: 00007fe3edc15fa0 RCX: 00007fe3ed99c799 [ 175.458654][ T3788] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 175.466836][ T3788] RBP: 00007fe3ee86f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.475420][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.483501][ T3788] R13: 00007fe3edc16038 R14: 00007fe3edc15fa0 R15: 00007ffd163424e8 [ 175.491486][ T3788] [ 175.584749][ T3802] loop3: detected capacity change from 0 to 256 [ 175.594469][ T3802] exfat: Unknown parameter '184467440737095516150x0000000000000004ÿÿ0x0000000000000004ÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777' [ 175.607181][ T3806] FAULT_INJECTION: forcing a failure. [ 175.607181][ T3806] name failslab, interval 1, probability 0, space 0, times 0 [ 175.642941][ T3806] CPU: 1 PID: 3806 Comm: syz.5.1023 Not tainted syzkaller #0 [ 175.649277][ T3810] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 175.650472][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.650487][ T3806] Call Trace: [ 175.671727][ T3806] [ 175.674687][ T3806] __dump_stack+0x21/0x24 [ 175.679050][ T3806] dump_stack_lvl+0x110/0x170 [ 175.683760][ T3806] ? __cfi_dump_stack_lvl+0x8/0x8 [ 175.688917][ T3806] ? get_page_from_freelist+0x2d12/0x2d80 [ 175.694763][ T3806] dump_stack+0x15/0x24 [ 175.699113][ T3806] should_fail_ex+0x3d4/0x520 [ 175.703819][ T3806] ? mas_alloc_nodes+0x2d8/0x850 [ 175.708773][ T3806] __should_failslab+0xac/0xf0 [ 175.713559][ T3806] should_failslab+0x9/0x20 [ 175.718123][ T3806] kmem_cache_alloc+0x3b/0x330 [ 175.722912][ T3806] mas_alloc_nodes+0x2d8/0x850 [ 175.727684][ T3806] mas_preallocate+0xe13/0x1440 [ 175.732540][ T3806] ? __cfi_mas_preallocate+0x10/0x10 [ 175.737945][ T3806] ? rwsem_write_trylock+0x136/0x300 [ 175.743241][ T3806] vma_expand+0x3b7/0xa10 [ 175.747573][ T3806] mmap_region+0xf61/0x21e0 [ 175.752392][ T3806] ? __cfi_mmap_region+0x10/0x10 [ 175.757345][ T3806] ? cap_mmap_addr+0x165/0x2e0 [ 175.762141][ T3806] ? get_unmapped_area+0x313/0x380 [ 175.767270][ T3806] do_mmap+0x856/0xdd0 [ 175.771348][ T3806] ? __count_memcg_events+0x8f/0xe0 [ 175.776577][ T3806] ? __cfi_do_mmap+0x10/0x10 [ 175.781275][ T3806] vm_mmap_pgoff+0x224/0x410 [ 175.785960][ T3806] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 175.791157][ T3806] ? up_read+0x56/0x1d0 [ 175.795341][ T3806] ksys_mmap_pgoff+0xf6/0x1d0 [ 175.800111][ T3806] __x64_sys_mmap+0xfa/0x110 [ 175.804798][ T3806] x64_sys_call+0x8fd/0x9a0 [ 175.809309][ T3806] do_syscall_64+0x4c/0xa0 [ 175.813739][ T3806] ? clear_bhb_loop+0x30/0x80 [ 175.818683][ T3806] ? clear_bhb_loop+0x30/0x80 [ 175.823386][ T3806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.829290][ T3806] RIP: 0033:0x7fe3ed99c502 [ 175.833710][ T3806] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 175.853411][ T3806] RSP: 002b:00007fe3ee86dd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.862008][ T3806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe3ed99c502 [ 175.870427][ T3806] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 175.878407][ T3806] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 175.886479][ T3806] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 175.894564][ T3806] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fe3eda501e1 [ 175.902546][ T3806] [ 175.915254][ T3806] ------------[ cut here ]------------ [ 175.920836][ T3806] kernel BUG at mm/mmap.c:2854! [ 175.931874][ T3806] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 175.938081][ T3806] CPU: 0 PID: 3806 Comm: syz.5.1023 Not tainted syzkaller #0 [ 175.945560][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.955650][ T3806] RIP: 0010:mmap_region+0x2093/0x21e0 [ 175.961154][ T3806] Code: 80 c1 03 38 c1 0f 8c 01 fa ff ff 4c 89 ff 49 89 d5 e8 91 37 09 00 4c 89 ea e9 ee f9 ff ff e8 04 fb c3 ff 0f 0b e8 fd fa c3 ff <0f> 0b 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e6 e6 ff ff 4c 89 e7 [ 175.981051][ T3806] RSP: 0018:ffffc900069b7a40 EFLAGS: 00010293 [ 175.987153][ T3806] RAX: ffffffff81ad70e3 RBX: 00007fe3ec3f8000 RCX: ffff88811a5f9440 [ 175.995208][ T3806] RDX: 0000000000000000 RSI: 00007fe3ec3f7fff RDI: 00007fe3ec3f8000 [ 176.003251][ T3806] RBP: ffffc900069b7c30 R08: ffff88811a5f9440 R09: 0000000000000003 [ 176.011419][ T3806] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000d36f60 [ 176.019411][ T3806] R13: 0000000000000070 R14: 00007fe3ec3f8000 R15: 00007fe3ec3f7fff [ 176.027413][ T3806] FS: 00007fe3ee86f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 176.036542][ T3806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.043231][ T3806] CR2: 000055674862d300 CR3: 000000011c7d5000 CR4: 00000000003526b0 [ 176.051507][ T3806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.059488][ T3806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.067470][ T3806] Call Trace: [ 176.070770][ T3806] [ 176.073716][ T3806] ? __cfi_mmap_region+0x10/0x10 [ 176.078776][ T3806] ? cap_mmap_addr+0x165/0x2e0 [ 176.083592][ T3806] ? get_unmapped_area+0x313/0x380 [ 176.088740][ T3806] do_mmap+0x856/0xdd0 [ 176.092854][ T3806] ? __count_memcg_events+0x8f/0xe0 [ 176.098061][ T3806] ? __cfi_do_mmap+0x10/0x10 [ 176.102764][ T3806] vm_mmap_pgoff+0x224/0x410 [ 176.107580][ T3806] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 176.112808][ T3806] ? up_read+0x56/0x1d0 [ 176.116985][ T3806] ksys_mmap_pgoff+0xf6/0x1d0 [ 176.121677][ T3806] __x64_sys_mmap+0xfa/0x110 [ 176.126312][ T3806] x64_sys_call+0x8fd/0x9a0 [ 176.130962][ T3806] do_syscall_64+0x4c/0xa0 [ 176.135991][ T3806] ? clear_bhb_loop+0x30/0x80 [ 176.140695][ T3806] ? clear_bhb_loop+0x30/0x80 [ 176.145497][ T3806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.151595][ T3806] RIP: 0033:0x7fe3ed99c502 [ 176.156138][ T3806] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 176.176026][ T3806] RSP: 002b:00007fe3ee86dd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 176.184649][ T3806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe3ed99c502 [ 176.192838][ T3806] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 176.200914][ T3806] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 176.208897][ T3806] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 176.217066][ T3806] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fe3eda501e1 [ 176.225406][ T3806] [ 176.228458][ T3806] Modules linked in: [ 176.236245][ T3806] ---[ end trace 0000000000000000 ]--- [ 176.241851][ T3806] RIP: 0010:mmap_region+0x2093/0x21e0 [ 176.247469][ T3806] Code: 80 c1 03 38 c1 0f 8c 01 fa ff ff 4c 89 ff 49 89 d5 e8 91 37 09 00 4c 89 ea e9 ee f9 ff ff e8 04 fb c3 ff 0f 0b e8 fd fa c3 ff <0f> 0b 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e6 e6 ff ff 4c 89 e7 [ 176.267951][ T3806] RSP: 0018:ffffc900069b7a40 EFLAGS: 00010293 [ 176.274189][ T353] usbhid 2-1:0.0: can't add hid device: -71 [ 176.274894][ T3806] RAX: ffffffff81ad70e3 RBX: 00007fe3ec3f8000 RCX: ffff88811a5f9440 [ 176.285908][ T353] usbhid: probe of 2-1:0.0 failed with error -71 [ 176.288894][ T3806] RDX: 0000000000000000 RSI: 00007fe3ec3f7fff RDI: 00007fe3ec3f8000 [ 176.300438][ T353] usb 2-1: USB disconnect, device number 43 [ 176.303594][ T19] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 176.314999][ T3806] RBP: ffffc900069b7c30 R08: ffff88811a5f9440 R09: 0000000000000003 [ 176.325596][ T3806] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000d36f60 [ 176.325645][ T284] EXT4-fs (loop1): unmounting filesystem. [ 176.333877][ T3806] R13: 0000000000000070 R14: 00007fe3ec3f8000 R15: 00007fe3ec3f7fff [ 176.347691][ T3806] FS: 00007fe3ee86f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 176.357612][ T3806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.364731][ T3806] CR2: 000055557061e908 CR3: 000000011c7d5000 CR4: 00000000003526a0 [ 176.372980][ T3806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.381287][ T3806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.389648][ T3806] Kernel panic - not syncing: Fatal exception [ 176.396215][ T3806] Kernel Offset: disabled [ 176.400642][ T3806] Rebooting in 86400 seconds..