last executing test programs: 13m29.756506677s ago: executing program 1 (id=1657): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x402, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) waitid(0x2, r0, &(0x7f0000000000), 0x2, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1e3442, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file1\x00', 0x7fffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) getpgid(0x0) 13m27.725963546s ago: executing program 1 (id=1660): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13m25.45335102s ago: executing program 1 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0xffffffff}}) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x30b042) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) splice(r5, 0x0, r6, 0x0, 0x10000000000016, 0x0) 13m24.258073774s ago: executing program 1 (id=1672): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000340)={[{@utf8}, {@fat=@flush}, {@numtail}, {@rodir}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8}, {@rodir}, {@utf8no}, {@uni_xlateno}, {@fat=@tz_utc}]}, 0x1, 0x360, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000c80)=""/4079, 0xfef) 13m24.041471938s ago: executing program 1 (id=1674): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13m23.866640961s ago: executing program 1 (id=1676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getpgid(0x0) 13m23.737259544s ago: executing program 32 (id=1676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getpgid(0x0) 8m4.578202263s ago: executing program 2 (id=2954): getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000100)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000500)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x884714, &(0x7f0000000000)={[{@nobarrier}]}, 0x0, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='io_uring_req_failed\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x21) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file7'}}, {@upperdir={'upperdir', 0x3d, './file7'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdffffff0a0000000200000000000000010000cbe4fbdcc01e7c9d0000000000000000010500000020000000006100302e61615f610061"], 0x0, 0x58}, 0x28) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) 8m2.815695128s ago: executing program 2 (id=2961): r0 = socket(0x10, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000100)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000500)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x884714, &(0x7f0000000000)={[{@nobarrier}]}, 0x0, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x21) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file7'}}, {@upperdir={'upperdir', 0x3d, './file7'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85a"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdffffff0a0000000200000000000000010000cbe4fbdcc01e7c9d0000000000000000010500000020000000006100302e61615f610061"], 0x0, 0x58}, 0x28) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) 8m1.611938631s ago: executing program 2 (id=2971): getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000100)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000500)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x884714, &(0x7f0000000000)={[{@nobarrier}]}, 0x0, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='io_uring_req_failed\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") mkdirat(0xffffffffffffff9c, 0x0, 0x21) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file7'}}, {@upperdir={'upperdir', 0x3d, './file7'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdffffff0a0000000200000000000000010000cbe4fbdcc01e7c9d0000000000000000010500000020000000006100302e61615f610061"], 0x0, 0x58}, 0x28) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) 8m0.218870308s ago: executing program 2 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0xc, 0x2, 0x0, 0x4a, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffe, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, r2, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x2, &(0x7f0000000940)=[r0, r2, r2], &(0x7f0000000980)=[{0x2, 0x3, 0x2, 0x2}, {0x4, 0x1, 0xd, 0xc}], 0x10, 0xffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001c00)={r3, r4}, 0xc) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 8m0.14827293s ago: executing program 2 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0xffffffff}}) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x30b042) syz_emit_ethernet(0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) splice(r5, 0x0, r6, 0x0, 0x10000000000016, 0x0) ftruncate(0xffffffffffffffff, 0x3000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 8m0.038482712s ago: executing program 2 (id=2977): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m0.038232602s ago: executing program 33 (id=2977): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.112062474s ago: executing program 0 (id=4584): r0 = socket(0x1e, 0x805, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) fsetxattr(r4, &(0x7f0000000040)=@random={'osx.', '@\x00'}, &(0x7f0000000240)='GPL\x00', 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r9, 0x4b30, 0x7ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 10.871222009s ago: executing program 3 (id=4585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 10.79018719s ago: executing program 3 (id=4587): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES32], 0xfd, 0x1505, &(0x7f0000000880)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'vlan1\x00', &(0x7f0000000680)=@ethtool_wolinfo={0x5, 0x3, 0x1, "305497841aed"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) rt_tgsigqueueinfo(0x0, r1, 0x1a, &(0x7f0000000440)={0x30, 0x4, 0x4}) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)=@delchain={0x3f4, 0x65, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2}, {0xe, 0x7}, {0x6, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xfff3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7}, {0x394, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x22f1}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x8}}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_ACT={0x35c, 0x4, [@m_ct={0x108, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0xd6, 0x6, "89dbe0e2c788b9993c9313c902913c58b99011405696ae0dafd492dfa9b9c070c98235e3a07370a728fb6dcf3c0ec36de4b04678689cc8ae42b45189628935d0a0058003edfd1e4b0960063566c98bd8d6ecb6d29a19da60d833659c1eacb1478c2d20dea9b3a56116630242dbfacb83e11e93d099d091e0d08e080e162fa31dd9c22af49624a3c87196be04b3945699f4b3f9a2b67209bf01620109de358e36f28498772b57a5b45dea07c895beeb051c6de6714ebbfc447f6af90eab6dec8012f491004d7a6d3f909da3f22af6c1e976c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xb4, 0x17, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xffffffdb, 0x2, 0x10000, 0x20200000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x4}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x3}}]}, {0x56, 0x6, "7d532fac3af7df59a6dd22916f4c20528f215f407fdbec95fadf06aa86c0049e8b9cd5eadd09cb99ced161d1325992c4309c3474c3741b1cfccf1103bac83af5189d865e4401b13757616abfa5da82bb6db0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x78, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="e98cf28e0538"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x32, 0x6, "bafc8a0e8364190fd474b75a3b82c89630cbba4d3678568970bc53681b6e8ed1bd32391167293cab87a78f140d5e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x124, 0x6, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x6, 0xffffffffffffffff, 0x0, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xb6, 0x6, "559bb6946141c3f9d76ea391570c2596c6eb464789231903cfef777bd5b59788446024910a00f44ccca9b3eeb6d30f2b76f4676ddb8646a688c54d3c7d7bff1b781d8cfc050d19c6a3a35ea46d3333d924713d0e9fae9440103a5def9ddacecef5d8bd00752a9507db306783207b051f0dcb079d37ff2e1a258474447db369d20c238ab4ff736f20de7cfdfc6eee79d6da47561bbc3ff5e60ddd03db98dee37541dcb22fe5cf162ddf82750d740bb0814f7b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x3f4}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8006c00020300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) 10.696447202s ago: executing program 3 (id=4588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x6}}}}}}}, 0x0) userfaultfd(0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 9.818948369s ago: executing program 0 (id=4595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0xffffffff}}) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) ftruncate(0xffffffffffffffff, 0x3000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 9.743905321s ago: executing program 3 (id=4597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) pwritev(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x2, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x803, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x80, 'vcan0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast1, @empty, 0x1, 0x1}}}, {{@arp={@local, @local, 0xffffff00, 0xffffffff, 0x4, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6be, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 6.609070322s ago: executing program 3 (id=4599): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000140)=0xe0000) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000012001300040000000204000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rxrpc_peer\x00', r8, 0x0, 0xfffffffffffffff6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) 6.589829392s ago: executing program 0 (id=4601): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c1c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x89, 0x29b, &(0x7f0000000180)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r0 = socket(0x1e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(&(0x7f0000000440)='openpromfs\x00', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000005f599c1113b0df66c991d000008000014002fd575a001bfa41ef67481025e3f089c465e"], 0x34}}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 6.258412738s ago: executing program 5 (id=4603): r0 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(&(0x7f0000000440)='openpromfs\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet(0x2, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000005f599c1113b0df66c991d000008000014002fd575a001bfa41ef67481025e3f089c465e"], 0x34}}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 5.765546728s ago: executing program 6 (id=4604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='veth1_virt_wifi\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x6}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 5.595783861s ago: executing program 6 (id=4605): r0 = socket(0x1e, 0x805, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) fsetxattr(r4, &(0x7f0000000040)=@random={'osx.', '@\x00'}, &(0x7f0000000240)='GPL\x00', 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r9, 0x4b30, 0x7ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.959136924s ago: executing program 4 (id=4608): r0 = socket(0x1a, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x70bd26, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0x4, 0xfff8}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16=r8], 0x20}}, 0x0) 4.191271699s ago: executing program 6 (id=4609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) pwritev(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x2, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x803, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x80, 'vcan0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast1, @empty, 0x1, 0x1}}}, {{@arp={@local, @local, 0xffffff00, 0xffffffff, 0x4, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6be, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4.069058051s ago: executing program 0 (id=4610): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) 4.047137051s ago: executing program 4 (id=4611): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.015712912s ago: executing program 4 (id=4612): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0xffffffff}}) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) ftruncate(0xffffffffffffffff, 0x3000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.658820369s ago: executing program 5 (id=4613): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddcffff, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x0, 0xd000, 0xf, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xce}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x8, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xd646e6a5f4c08fb3, 0x3000, 0x10, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x7f, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x2000, 0x1000, 0x4, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x8000000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x2, 0x2}, {0x5000, 0x9}, 0x40010000, 0x0, 0xf000, 0x302, 0x8, 0x0, 0xe6e70c00, [0x3, 0x601, 0x1, 0xc5]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000005000000020000007bd2000000000000216c507d6dd37a522d85f8906a7663bae69bb1c77cfe3b939eaaca69ad3e445ba0338c335a479ce3b55ce510071e2996f38fd18ca4e5a92d94175ec89d4cda6c2ddfd979dfbbbbc42d247fabdd47e4287683b09f7b80eda9f10a5c89635d3c417f2521aa0c76aef510590f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x24082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_procfs(r3, &(0x7f0000000040)='stack\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.120343929s ago: executing program 6 (id=4614): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 3.11396993s ago: executing program 0 (id=4615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0xffffffff}}) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x30b042) syz_emit_ethernet(0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) splice(r5, 0x0, r6, 0x0, 0x10000000000016, 0x0) ftruncate(0xffffffffffffffff, 0x3000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.107070809s ago: executing program 4 (id=4616): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2369a02, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = dup(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff0000000000000000000007020000f8ffffffcf03000008000000b704000000000000850000000300001d9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.051117781s ago: executing program 6 (id=4617): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x1010401, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0xffffffa3) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="26000000220047010500", 0xa) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20000000000002fb, &(0x7f00000006c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) socket(0xa, 0x2400000001, 0x0) bind$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0xfffe, @any, 0x13}, 0xe) 2.930390663s ago: executing program 3 (id=4618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2a0, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d63703836302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d637039353046716e695f786c6174653d302c696f636861727365743d69736f384911f71ae4811ada6f6465706167653d3933362c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) 2.760201246s ago: executing program 5 (id=4619): r0 = socket(0x1e, 0x805, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) fsetxattr(r4, &(0x7f0000000040)=@random={'osx.', '@\x00'}, &(0x7f0000000240)='GPL\x00', 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r9, 0x4b30, 0x7ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.291877495s ago: executing program 0 (id=4620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2a0, &(0x7f00000001c0)="$eJzs3T9rA2UYAPDnkjSNOqSIiyJ4oINTaV1dGqWC2EmJoA4abAuShEILASsYO/UTOPo9/AguLn4DwVVwa4fKyeXumtSmf2hjCvb3m57ee8/zPrkX0inPffX6sL97kMTJ2e/RaiVR24qtOE9iLWpR+SEaAQD8f5xnWfyVPSSzUVt8NwDAMhT//wtP3QsAsByffPb5R52dne2P07QVr7ZPR90kIoano26x3tmPb2IQe7ER7biIyC4V8Qcf7mxHI82txVvD8aibZw6//LWs3/kzYpK/Ge1Ym5+/mRYu81+sukujs79S/dGOV+bnv/Pv/BiOo9uMt9+c6X892vHb13EQg9iNPHea//1mmr6f/Xj23Rf5Nnl+Uovu6uS+qay+pCMBAAAAAAAAAAAAAAAAAAAAAOAZWE/TpBjfM5nfk1+azM8ZdesXk/X1tDI732dczQdKqkLFfKAsyhE94yx+qubrbKRpmpU3TvMb8VrDiwUAAAAAAAAAAAAAAAAAAAAgd/Ttcb83GOwdLiSopgFUP+t/aJ2tmStvxHG/V7+54Or995qdNpD3euvN0WjEgh7LXcELeT8Lr7w6PdxPowiqg1noXi+/VxQ97vfScql6yP1ectderergfp5dasYjG2uWHWRXz7R12erVrOaCnkbzpblLf2dZdr867/5RnFF5JZmM2Ljf7itlMPcD5kHr+ln8cnPBG78y6o/+0gEAAAAAAAAAAAAAAAAAAOaa/uh3zuLJram1/6wpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiy6fv/q6AVEVevXAvGZfJt95RBMw6PnvgjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Az8EwAA//9I2EsX") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d63703836302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d637039353046716e695f786c6174653d302c696f636861727365743d69736f384911f71ae4811ada6f6465706167653d3933362c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x362, &(0x7f0000000900)="$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") syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) 2.204354137s ago: executing program 6 (id=4621): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c1c, &(0x7f0000000780)=ANY=[@ANYBLOB="64656275672c696f636861727365743d69736f383835392d392c757466383d302c726f6469722c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c696f636861727365743d6d6163677265656b2c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c74696d655f6f66667365743d3078303030303030303030303030303065342c73686f72746e616d653d77696e39352c00c13a6eeb66c6eaa9b563ef82a8579996a916b07cc2683baf995a44f1fcac16e4ef6365cf9fa242083a84932e85ea394a4256bab4da48022a711f11d9c5dd24fc00f90547a1003b324a068ba6"], 0x89, 0x29b, &(0x7f0000000180)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r0 = socket(0x1e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(&(0x7f0000000440)='openpromfs\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000005f599c1113b0df66c991d000008000014002fd575a001bfa41ef67481025e3f089c465e"], 0x34}}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 1.886744684s ago: executing program 4 (id=4622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_binder_transaction\x00') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000000c0)=""/16, &(0x7f0000000240)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x16, 'B4\x00'}) r8 = syz_open_pts(r7, 0x80000) splice(r8, 0x0, r6, 0x0, 0x3, 0xb) openat(r6, &(0x7f0000000400)='./file0\x00', 0x410400, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000780)) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x0, 0x0, 0x100}, 0x20) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) 1.641645368s ago: executing program 5 (id=4623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 870.011923ms ago: executing program 4 (id=4624): r0 = socket(0x1e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(&(0x7f0000000440)='openpromfs\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000004c0)={0x0, {{0xa, 0x4e23, 0x4, @mcast2, 0x53d}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}]}, 0x110) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x66, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000005f599c1113b0df66c991d000008000014002fd575a001bfa41ef67481025e3f089c465e"], 0x34}}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 436.767752ms ago: executing program 5 (id=4625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) pwritev(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x2, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x803, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x80, 'vcan0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast1, @empty, 0x1, 0x1}}}, {{@arp={@local, @local, 0xffffff00, 0xffffffff, 0x4, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6be, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 0s ago: executing program 5 (id=4626): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) kernel console output (not intermixed with test programs): und/card1/controlC1/../uevent} for writing: No such file or directory [ 781.893565][ T1488] udevd[1488]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 782.005647][T11527] EXT4-fs (loop6): unmounting filesystem. [ 783.417554][T12125] 9pnet_fd: Insufficient options for proto=fd [ 783.476176][T12125] 9pnet_fd: Insufficient options for proto=fd [ 784.378894][T12135] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3131'. [ 784.509178][T12133] loop3: detected capacity change from 0 to 40427 [ 784.516728][T12133] F2FS-fs (loop3): fault_injection options not supported [ 784.524686][T12133] F2FS-fs (loop3): Image doesn't support compression [ 784.532192][T12133] F2FS-fs (loop3): Image doesn't support compression [ 784.540082][T12133] F2FS-fs (loop3): invalid crc value [ 784.572975][T12133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 784.616965][T12133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 784.699921][T12133] syz.3.3133: attempt to access beyond end of device [ 784.699921][T12133] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 784.717514][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3133'. [ 784.727680][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'. [ 784.782919][T12140] loop5: detected capacity change from 0 to 40427 [ 784.799258][T12140] F2FS-fs (loop5): fault_injection options not supported [ 784.815099][T12140] F2FS-fs (loop5): Image doesn't support compression [ 784.823462][T12140] F2FS-fs (loop5): Image doesn't support compression [ 784.831209][T12140] F2FS-fs (loop5): invalid crc value [ 784.838919][T12140] F2FS-fs (loop5): Found nat_bits in checkpoint [ 784.880346][T12140] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 785.012853][T12140] syz.5.3135: attempt to access beyond end of device [ 785.012853][T12140] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 785.049385][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3135'. [ 785.066654][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3135'. [ 786.160587][T12160] loop6: detected capacity change from 0 to 4096 [ 786.167342][T12160] EXT4-fs: Ignoring removed mblk_io_submit option [ 786.243040][T12160] EXT4-fs (loop6): Test dummy encryption mode enabled [ 786.371235][T12160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 786.982818][T12168] loop0: detected capacity change from 0 to 256 [ 787.061854][T12168] exfat: Deprecated parameter 'utf8' [ 787.082805][T12168] exfat: Unknown parameter 'errors' [ 787.138834][T11527] EXT4-fs (loop6): unmounting filesystem. [ 787.196904][T12173] loop6: detected capacity change from 0 to 2048 [ 787.250558][T12173] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 787.271059][T11527] EXT4-fs (loop6): unmounting filesystem. [ 787.280201][T12182] loop5: detected capacity change from 0 to 512 [ 787.288640][T12182] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 787.304855][ T39] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 787.369209][T12183] loop0: detected capacity change from 0 to 256 [ 787.491981][T12183] exFAT-fs (loop0): bogus data start sector [ 787.498039][T12183] exFAT-fs (loop0): failed to read boot sector [ 787.504304][T12183] exFAT-fs (loop0): failed to recognize exfat type [ 787.518400][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.572812][T12182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 787.580936][T12182] System zones: 1-12 [ 787.585729][T12182] EXT4-fs (loop5): orphan cleanup on readonly fs [ 787.606291][T12182] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3142: bg 0: block 361: padding at end of block bitmap is not set [ 787.620959][T12182] EXT4-fs (loop5): Remounting filesystem read-only [ 787.627747][T12182] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 787.630057][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.637058][T12182] EXT4-fs (loop5): Remounting filesystem read-only [ 787.653354][T12182] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3142: invalid indirect mapped block 12 (level 1) [ 787.656681][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.666992][T12182] EXT4-fs (loop5): Remounting filesystem read-only [ 787.686236][T12182] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3142: invalid indirect mapped block 2 (level 2) [ 787.686316][ T39] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 787.699733][T12182] EXT4-fs (loop5): Remounting filesystem read-only [ 787.715335][T12182] EXT4-fs (loop5): 1 truncate cleaned up [ 787.721054][T12182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 787.733166][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.747940][ T39] usb 5-1: config 0 descriptor?? [ 787.908936][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 787.915724][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 788.025792][T12192] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3147'. [ 788.048235][ T39] usb 5-1: USB disconnect, device number 56 [ 788.309062][ T6598] EXT4-fs (loop5): unmounting filesystem. [ 788.332794][T12195] FAULT_INJECTION: forcing a failure. [ 788.332794][T12195] name failslab, interval 1, probability 0, space 0, times 0 [ 788.346159][T12195] CPU: 1 PID: 12195 Comm: syz.3.3148 Not tainted syzkaller #0 [ 788.353709][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.363869][T12195] Call Trace: [ 788.367157][T12195] [ 788.370097][T12195] __dump_stack+0x21/0x24 [ 788.374460][T12195] dump_stack_lvl+0xee/0x150 [ 788.379054][T12195] ? __cfi_dump_stack_lvl+0x8/0x8 [ 788.384099][T12195] ? __local_bh_enable_ip+0x58/0x80 [ 788.389310][T12195] ? release_sock+0x169/0x1c0 [ 788.394006][T12195] dump_stack+0x15/0x24 [ 788.398173][T12195] should_fail_ex+0x3d4/0x520 [ 788.402895][T12195] __should_failslab+0xac/0xf0 [ 788.407673][T12195] should_failslab+0x9/0x20 [ 788.412185][T12195] kmem_cache_alloc_node+0x42/0x340 [ 788.417392][T12195] ? __alloc_skb+0xea/0x4b0 [ 788.421923][T12195] __alloc_skb+0xea/0x4b0 [ 788.426284][T12195] ? netlink_autobind+0x168/0x1a0 [ 788.431332][T12195] netlink_sendmsg+0x626/0xbc0 [ 788.436116][T12195] ? __cfi_netlink_sendmsg+0x10/0x10 [ 788.441417][T12195] ? security_socket_sendmsg+0x93/0xb0 [ 788.446884][T12195] ? __cfi_netlink_sendmsg+0x10/0x10 [ 788.452192][T12195] ____sys_sendmsg+0x5a9/0x990 [ 788.456964][T12195] ? __sys_sendmsg_sock+0x40/0x40 [ 788.461998][T12195] ? import_iovec+0x7c/0xb0 [ 788.466513][T12195] ___sys_sendmsg+0x21c/0x290 [ 788.471227][T12195] ? __sys_sendmsg+0x270/0x270 [ 788.476002][T12195] ? __kasan_check_write+0x14/0x20 [ 788.481133][T12195] ? proc_fail_nth_write+0x17a/0x1f0 [ 788.486433][T12195] ? vfs_write+0x9d6/0xca0 [ 788.490869][T12195] ? __fdget+0x19c/0x220 [ 788.495118][T12195] __x64_sys_sendmsg+0x1f0/0x2c0 [ 788.500086][T12195] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 788.505557][T12195] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 788.511638][T12195] x64_sys_call+0x171/0x9a0 [ 788.516151][T12195] do_syscall_64+0x4c/0xa0 [ 788.520583][T12195] ? clear_bhb_loop+0x30/0x80 [ 788.525267][T12195] ? clear_bhb_loop+0x30/0x80 [ 788.529954][T12195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.535946][T12195] RIP: 0033:0x7f4bca18eba9 [ 788.540367][T12195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.559982][T12195] RSP: 002b:00007f4bcaf9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.568403][T12195] RAX: ffffffffffffffda RBX: 00007f4bca3d5fa0 RCX: 00007f4bca18eba9 [ 788.576384][T12195] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 788.584391][T12195] RBP: 00007f4bcaf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 788.592389][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.600369][T12195] R13: 00007f4bca3d6038 R14: 00007f4bca3d5fa0 R15: 00007ffd4e2f2a18 [ 788.608357][T12195] [ 788.704289][ T9005] tipc: Disabling bearer [ 788.709650][ T9005] tipc: Left network mode [ 789.214731][T12218] loop3: detected capacity change from 0 to 4096 [ 789.222535][T12218] EXT4-fs: Ignoring removed mblk_io_submit option [ 789.234947][T12218] EXT4-fs (loop3): Test dummy encryption mode enabled [ 789.344677][T12218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 789.828635][T12206] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.863465][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.886679][T12206] device bridge_slave_0 entered promiscuous mode [ 789.932444][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.942467][T12206] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.950090][T12206] device bridge_slave_1 entered promiscuous mode [ 790.016389][T12229] loop6: detected capacity change from 0 to 1024 [ 790.026386][T12229] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 790.036100][T12229] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 790.111313][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 790.119355][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 790.131884][T12240] 9pnet_fd: Insufficient options for proto=fd [ 790.150344][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 790.166598][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 790.184818][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.191936][ T8560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.211321][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 790.220241][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 790.223973][T11918] EXT4-fs (loop3): unmounting filesystem. [ 790.228810][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.241109][ T8560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.249007][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 790.305781][T12244] serio: Serial port ptm0 [ 790.318509][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 790.336506][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 790.352210][T12246] FAULT_INJECTION: forcing a failure. [ 790.352210][T12246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.357637][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 790.366750][T12246] CPU: 0 PID: 12246 Comm: syz.3.3161 Not tainted syzkaller #0 [ 790.380847][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 790.390928][T12246] Call Trace: [ 790.394219][T12246] [ 790.397145][T12246] __dump_stack+0x21/0x24 [ 790.401473][T12246] dump_stack_lvl+0xee/0x150 [ 790.406072][T12246] ? __cfi_dump_stack_lvl+0x8/0x8 [ 790.411129][T12246] dump_stack+0x15/0x24 [ 790.415309][T12246] should_fail_ex+0x3d4/0x520 [ 790.420023][T12246] should_fail+0xb/0x10 [ 790.424219][T12246] should_fail_usercopy+0x1a/0x20 [ 790.429280][T12246] _copy_to_user+0x1e/0x90 [ 790.433727][T12246] simple_read_from_buffer+0xe9/0x160 [ 790.439133][T12246] proc_fail_nth_read+0x19a/0x210 [ 790.444186][T12246] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 790.449769][T12246] ? security_file_permission+0x94/0xb0 [ 790.455350][T12246] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 790.460923][T12246] vfs_read+0x26e/0x8c0 [ 790.465127][T12246] ? __cfi_vfs_read+0x10/0x10 [ 790.469971][T12246] ? __kasan_check_write+0x14/0x20 [ 790.475141][T12246] ? mutex_lock+0x8d/0x1a0 [ 790.479594][T12246] ? __cfi_mutex_lock+0x10/0x10 [ 790.484472][T12246] ? __fdget_pos+0x2cd/0x380 [ 790.489086][T12246] ? ksys_read+0x71/0x240 [ 790.493456][T12246] ksys_read+0x140/0x240 [ 790.497732][T12246] ? __cfi_ksys_read+0x10/0x10 [ 790.502533][T12246] ? debug_smp_processor_id+0x17/0x20 [ 790.507945][T12246] __x64_sys_read+0x7b/0x90 [ 790.512491][T12246] x64_sys_call+0x2f/0x9a0 [ 790.516938][T12246] do_syscall_64+0x4c/0xa0 [ 790.521377][T12246] ? clear_bhb_loop+0x30/0x80 [ 790.526084][T12246] ? clear_bhb_loop+0x30/0x80 [ 790.530789][T12246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.536710][T12246] RIP: 0033:0x7f4bca18d5bc [ 790.541153][T12246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 790.560782][T12246] RSP: 002b:00007f4bcaf7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 790.569221][T12246] RAX: ffffffffffffffda RBX: 00007f4bca3d6090 RCX: 00007f4bca18d5bc [ 790.577214][T12246] RDX: 000000000000000f RSI: 00007f4bcaf7b0a0 RDI: 000000000000000c [ 790.585207][T12246] RBP: 00007f4bcaf7b090 R08: 0000000000000000 R09: 0000000000000000 [ 790.593196][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.601190][T12246] R13: 00007f4bca3d6128 R14: 00007f4bca3d6090 R15: 00007ffd4e2f2a18 [ 790.609283][T12246] [ 790.618915][T12206] device veth0_vlan entered promiscuous mode [ 790.652969][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 790.665410][T12254] loop6: detected capacity change from 0 to 512 [ 790.667186][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 790.710454][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 790.728964][T12254] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 790.743372][ T9005] device veth1_macvtap left promiscuous mode [ 790.750420][ T9005] device veth0_vlan left promiscuous mode [ 790.787386][T12260] overlayfs: failed to resolve './file1': -2 [ 790.794540][T12254] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 790.810245][T12261] loop4: detected capacity change from 0 to 16 [ 790.817541][T12261] erofs: (device loop4): mounted with root inode @ nid 36. [ 790.826964][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 790.838196][T12261] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 790.850148][T12261] x_tables: duplicate underflow at hook 1 [ 791.057559][T12206] device veth1_macvtap entered promiscuous mode [ 791.065152][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 791.078334][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 791.094608][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 791.114514][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 791.131514][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 791.201522][T12264] loop5: detected capacity change from 0 to 512 [ 791.258123][T12269] loop0: detected capacity change from 0 to 256 [ 791.450632][T12272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3168'. [ 792.396780][T12276] loop5: detected capacity change from 0 to 2048 [ 793.152277][T12280] loop4: detected capacity change from 0 to 4096 [ 793.168885][T12280] EXT4-fs: Ignoring removed mblk_io_submit option [ 793.325329][T12280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 794.658727][T12276] EXT4-fs: error -4 creating inode table initialization thread [ 794.666506][T12276] EXT4-fs (loop5): mount failed [ 794.870847][T12280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 795.579493][T12289] loop0: detected capacity change from 0 to 4096 [ 795.586444][T12289] EXT4-fs: Ignoring removed mblk_io_submit option [ 795.595544][T12289] EXT4-fs (loop0): Test dummy encryption mode enabled [ 795.644710][T11564] EXT4-fs (loop4): unmounting filesystem. [ 795.707549][T12289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 796.271551][T12281] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 796.380965][T12206] EXT4-fs (loop0): unmounting filesystem. [ 796.459472][T12303] loop4: detected capacity change from 0 to 256 [ 796.467102][T12281] usb 4-1: Using ep0 maxpacket: 16 [ 796.473322][T12281] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.498707][T12281] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.518934][T12281] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.538098][T12281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.556213][T12281] usb 4-1: Product: syz [ 796.569521][T12281] usb 4-1: Manufacturer: syz [ 796.616609][T12281] usb 4-1: SerialNumber: syz [ 796.912805][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3172'. [ 799.697181][T12281] usb 4-1: can't set config #1, error -71 [ 799.714476][T12281] usb 4-1: USB disconnect, device number 51 [ 799.773746][T12321] loop3: detected capacity change from 0 to 256 [ 799.787413][T12322] loop0: detected capacity change from 0 to 16 [ 799.795112][T12322] erofs: (device loop0): mounted with root inode @ nid 36. [ 799.804475][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 799.816338][T12322] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 799.828415][T12322] x_tables: duplicate underflow at hook 1 [ 799.920901][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3181'. [ 799.931150][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3181'. [ 799.989054][T12329] loop6: detected capacity change from 0 to 256 [ 800.160872][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3179'. [ 800.257485][T12332] 9pnet_fd: Insufficient options for proto=fd [ 800.314275][T12332] 9pnet_fd: Insufficient options for proto=fd [ 802.621403][T12337] loop5: detected capacity change from 0 to 1024 [ 802.646541][T12337] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 802.656955][T12337] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 802.904461][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3183'. [ 804.174738][T12344] loop4: detected capacity change from 0 to 4096 [ 804.182122][T12344] EXT4-fs: Ignoring removed mblk_io_submit option [ 804.195251][T12344] EXT4-fs (loop4): Test dummy encryption mode enabled [ 804.324462][T12344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 805.064741][T12353] loop5: detected capacity change from 0 to 512 [ 805.111964][T12353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 805.140262][T12353] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 805.245829][T11564] EXT4-fs (loop4): unmounting filesystem. [ 805.395411][ T19] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 805.620481][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 805.620557][ T28] audit: type=1326 audit(1757596255.988:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.739492][ T28] audit: type=1326 audit(1757596255.999:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.777748][ T28] audit: type=1326 audit(1757596255.999:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.801733][ T28] audit: type=1326 audit(1757596255.999:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.827000][ T28] audit: type=1326 audit(1757596255.999:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.862524][ T28] audit: type=1326 audit(1757596255.999:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.899343][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 805.905724][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.919757][ T28] audit: type=1326 audit(1757596255.999:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 805.944434][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 805.976707][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.998675][ T28] audit: type=1326 audit(1757596255.999:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 806.006266][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.078459][ T28] audit: type=1326 audit(1757596255.999:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 806.081625][ T19] usb 1-1: Product: syz [ 806.155603][ T28] audit: type=1326 audit(1757596255.999:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 806.157227][ T19] usb 1-1: Manufacturer: syz [ 806.233989][ T19] usb 1-1: SerialNumber: syz [ 806.436696][ T19] usb 1-1: 0:2 : does not exist [ 806.451959][ T19] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 806.477670][ T19] usb 1-1: USB disconnect, device number 54 [ 806.543725][T12380] overlayfs: failed to resolve './file1': -2 [ 806.629546][T12386] loop4: detected capacity change from 0 to 16 [ 806.637255][T12386] erofs: (device loop4): mounted with root inode @ nid 36. [ 806.646318][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 806.657497][T12386] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 806.669562][T12386] x_tables: duplicate underflow at hook 1 [ 806.793958][T12350] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 806.961694][ T343] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 806.971131][T12350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.987703][T12350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.997937][T12350] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.011038][T12350] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 807.020269][T12350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.029590][T12350] usb 4-1: config 0 descriptor?? [ 807.131008][ T343] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.139624][ T343] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 80 [ 807.149986][ T343] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 807.159976][ T343] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.173136][ T343] usb 6-1: config 1 interface 0 has no altsetting 0 [ 807.182101][ T343] usb 6-1: string descriptor 0 read error: -22 [ 807.188402][ T343] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.197528][ T343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.206998][T12388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 807.214332][T12388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 807.325873][ T39] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 807.419809][T12350] usbhid 4-1:0.0: can't add hid device: -71 [ 807.426457][T12350] usbhid: probe of 4-1:0.0 failed with error -71 [ 807.429104][T12388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 807.435161][T12350] usb 4-1: USB disconnect, device number 52 [ 807.447087][T12388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 807.782744][T12400] loop4: detected capacity change from 0 to 16 [ 807.790514][T12400] erofs: (device loop4): mounted with root inode @ nid 36. [ 807.847126][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 807.872498][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 807.938296][ T343] cdc_ether: probe of 6-1:1.0 failed with error -32 [ 808.007306][ T343] usb 6-1: USB disconnect, device number 34 [ 808.026877][ T39] usb 1-1: config 11 has an invalid interface number: 57 but max is 0 [ 808.124090][ T39] usb 1-1: config 11 has no interface number 0 [ 808.135625][ T39] usb 1-1: config 11 interface 57 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 808.147142][ T39] usb 1-1: config 11 interface 57 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 808.158112][ T39] usb 1-1: config 11 interface 57 altsetting 5 has an invalid endpoint descriptor of length 4, skipping [ 808.169874][ T39] usb 1-1: config 11 interface 57 altsetting 5 endpoint 0x6 has an invalid bInterval 127, changing to 10 [ 808.195421][ T39] usb 1-1: config 11 interface 57 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 808.212091][ T39] usb 1-1: config 11 interface 57 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.225432][ T39] usb 1-1: config 11 interface 57 has no altsetting 0 [ 808.234543][ T39] usb 1-1: New USB device found, idVendor=1b3d, idProduct=012f, bcdDevice=50.ec [ 808.243721][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.251838][ T39] usb 1-1: Product: syz [ 808.256180][ T39] usb 1-1: Manufacturer: syz [ 808.261123][ T39] usb 1-1: SerialNumber: syz [ 808.396985][T12408] loop4: detected capacity change from 0 to 4096 [ 808.404793][T12408] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.441202][T12408] EXT4-fs (loop4): Test dummy encryption mode enabled [ 808.521186][T12408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 809.638390][T12422] 9pnet_fd: Insufficient options for proto=fd [ 810.405273][ T39] ftdi_sio 1-1:11.57: FTDI USB Serial Device converter detected [ 810.423716][ T39] ftdi_sio ttyUSB0: unknown device type: 0x50ec [ 810.458189][ T39] usb 1-1: USB disconnect, device number 55 [ 810.494767][ T39] ftdi_sio 1-1:11.57: device disconnected [ 810.633511][T11564] EXT4-fs (loop4): unmounting filesystem. [ 810.652738][ T343] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 810.904387][T12402] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 810.934843][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.982362][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.109633][T12434] loop0: detected capacity change from 0 to 512 [ 811.149745][T12402] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 811.165755][ T343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.168866][ T336] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.179034][T12402] usb 6-1: config 0 has no interface number 0 [ 811.259073][ T343] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 811.278058][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.287487][T12402] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 811.305620][T12402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.313926][T12402] usb 6-1: Product: syz [ 811.321645][ T343] usb 4-1: config 0 descriptor?? [ 811.352135][T12402] usb 6-1: Manufacturer: syz [ 811.356917][T12402] usb 6-1: SerialNumber: syz [ 811.436898][T12442] loop0: detected capacity change from 0 to 2048 [ 811.594852][T12446] loop4: detected capacity change from 0 to 256 [ 811.606001][T12402] usb 6-1: config 0 descriptor?? [ 811.709755][T12442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 811.719090][T12442] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.746470][T12442] overlayfs: failed to resolve './file7': -2 [ 811.762837][T12442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12442 comm=syz.0.3209 [ 811.793835][ T343] usbhid 4-1:0.0: can't add hid device: -71 [ 811.818478][ T343] usbhid: probe of 4-1:0.0 failed with error -71 [ 811.843566][T12402] ftdi_sio 6-1:0.117: FTDI USB Serial Device converter detected [ 812.667533][ T343] usb 4-1: USB disconnect, device number 53 [ 812.674169][T12402] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 812.791697][T12453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3213'. [ 812.897447][T12206] EXT4-fs (loop0): unmounting filesystem. [ 813.530431][T12402] usb 6-1: USB disconnect, device number 35 [ 813.645027][T12402] ftdi_sio 6-1:0.117: device disconnected [ 814.488805][T12456] 9pnet_fd: Insufficient options for proto=fd [ 815.091577][T12475] loop5: detected capacity change from 0 to 256 [ 815.098715][T12444] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 815.984771][T12444] usb 1-1: device descriptor read/64, error -71 [ 816.818979][T12444] usb 1-1: device descriptor read/64, error -71 [ 816.910247][T12488] loop6: detected capacity change from 0 to 256 [ 817.083907][T12444] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 817.186679][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3226'. [ 817.363609][T12444] usb 1-1: device descriptor read/64, error -71 [ 817.438357][ T39] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 817.633803][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 817.641192][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.133669][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.165871][ T39] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.191329][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.217434][ T39] usb 6-1: Product: syz [ 818.230294][ T39] usb 6-1: Manufacturer: syz [ 818.244432][ T39] usb 6-1: SerialNumber: syz [ 818.345886][T12502] loop4: detected capacity change from 0 to 256 [ 818.361713][T12502] FAT-fs (loop4): Unrecognized mount option "nnumtail=0" or missing value [ 818.474422][ T39] usb 6-1: 0:2 : does not exist [ 818.493685][ T39] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 818.514438][ T39] usb 6-1: USB disconnect, device number 36 [ 818.549591][T12402] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 818.631582][T12507] 9pnet_fd: Insufficient options for proto=fd [ 818.746092][T12402] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.800744][T12402] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.818623][T12402] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.831686][T12402] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 818.841017][T12402] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.852879][T12402] usb 7-1: config 0 descriptor?? [ 818.944036][T12516] loop0: detected capacity change from 0 to 512 [ 818.967163][ T336] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 819.152343][T12523] loop0: detected capacity change from 0 to 2048 [ 819.242971][T12402] usbhid 7-1:0.0: can't add hid device: -71 [ 819.254614][T12402] usbhid: probe of 7-1:0.0 failed with error -71 [ 819.267734][T12523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 819.273842][T12402] usb 7-1: USB disconnect, device number 4 [ 819.284909][T12523] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.305698][T12528] 9pnet_fd: Insufficient options for proto=fd [ 819.322330][T12523] overlayfs: failed to resolve './file7': -2 [ 819.382960][T12523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12523 comm=syz.0.3234 [ 819.535250][ T39] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 819.721466][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 819.728987][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.739680][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.758195][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.767695][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.775788][ T39] usb 4-1: Product: syz [ 819.780204][ T39] usb 4-1: Manufacturer: syz [ 819.784886][ T39] usb 4-1: SerialNumber: syz [ 819.981587][T12539] loop4: detected capacity change from 0 to 4096 [ 819.988484][T12539] EXT4-fs: Ignoring removed mblk_io_submit option [ 819.996350][T12539] EXT4-fs (loop4): Test dummy encryption mode enabled [ 820.066526][T12464] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 820.144282][T12539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 820.264710][T12464] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.315021][T12464] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.394228][T12464] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 820.456587][T12464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.523698][T12464] usb 7-1: config 0 descriptor?? [ 820.926452][T12464] pyra 0003:1E7D:2CF6.0057: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 820.947879][T12206] EXT4-fs (loop0): unmounting filesystem. [ 821.005669][ T39] usb 4-1: 0:2 : does not exist [ 821.009853][T11564] EXT4-fs (loop4): unmounting filesystem. [ 821.018402][ T39] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 821.038244][ T39] usb 4-1: USB disconnect, device number 54 [ 821.043789][T12546] overlayfs: failed to resolve './file1': -2 [ 821.142983][T12551] loop4: detected capacity change from 0 to 16 [ 821.152635][T12551] erofs: (device loop4): mounted with root inode @ nid 36. [ 821.381575][T12464] pyra 0003:1E7D:2CF6.0057: couldn't init struct pyra_device [ 821.389223][T12464] pyra 0003:1E7D:2CF6.0057: couldn't install mouse [ 821.397136][T12464] pyra: probe of 0003:1E7D:2CF6.0057 failed with error -5 [ 821.415916][ T39] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 821.557635][ T39] usb 4-1: device descriptor read/64, error -71 [ 821.809324][ T39] usb 4-1: device descriptor read/64, error -71 [ 822.357803][T12575] 9pnet_fd: Insufficient options for proto=fd [ 822.369453][ T39] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 822.385279][T12573] loop6: detected capacity change from 0 to 256 [ 822.535319][T12568] loop5: detected capacity change from 0 to 8192 [ 822.536923][ T39] usb 4-1: device descriptor read/64, error -71 [ 822.549363][T12574] device veth0 entered promiscuous mode [ 822.570943][T12568] loop5: p1 p2 p4 < > [ 822.582481][T12568] loop5: partition table partially beyond EOD, truncated [ 822.590959][T12568] loop5: p1 start 16777216 is beyond EOD, truncated [ 822.597704][T12568] loop5: p2 size 515840 extends beyond EOD, truncated [ 822.606755][T12568] loop5: p4 start 16777216 is beyond EOD, truncated [ 822.618677][T12567] device veth0 left promiscuous mode [ 823.412927][T12587] loop4: detected capacity change from 0 to 16 [ 823.776988][T12587] erofs: (device loop4): mounted with root inode @ nid 36. [ 823.831910][ T39] usb 4-1: device descriptor read/64, error -71 [ 823.975348][ T336] udevd[336]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 824.003214][T12589] loop0: detected capacity change from 0 to 512 [ 824.047959][T12594] 9pnet_fd: Insufficient options for proto=fd [ 824.187044][T12599] loop5: detected capacity change from 0 to 4096 [ 824.194231][T12599] EXT4-fs: Ignoring removed mblk_io_submit option [ 824.204355][T12599] EXT4-fs (loop5): Test dummy encryption mode enabled [ 824.218686][ T39] usb usb4-port1: attempt power cycle [ 824.945431][T12599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 825.308941][T12596] loop4: detected capacity change from 0 to 40427 [ 825.323522][T12596] F2FS-fs (loop4): fault_injection options not supported [ 825.340120][T12596] F2FS-fs (loop4): Image doesn't support compression [ 825.347448][T12596] F2FS-fs (loop4): Image doesn't support compression [ 825.355273][T12596] F2FS-fs (loop4): invalid crc value [ 825.362694][T12596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 825.402920][T12596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 825.482144][T12596] syz.4.3256: attempt to access beyond end of device [ 825.482144][T12596] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 825.499617][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3256'. [ 825.515240][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3256'. [ 825.592081][T12402] usb 7-1: USB disconnect, device number 5 [ 825.593579][ T6598] EXT4-fs (loop5): unmounting filesystem. [ 825.605232][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 825.605247][ T28] audit: type=1326 audit(1757596277.468:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.3256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 826.087967][T12618] loop6: detected capacity change from 0 to 512 [ 826.325918][T12623] 9pnet_fd: Insufficient options for proto=fd [ 826.332865][T12623] 9pnet_fd: Insufficient options for proto=fd [ 826.347244][T12624] loop0: detected capacity change from 0 to 2048 [ 826.375894][T12624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 826.395537][ T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 826.424504][T12624] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.488316][T12628] loop6: detected capacity change from 0 to 2048 [ 826.562054][T12628] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 826.584800][T12589] overlayfs: failed to resolve './file7': -2 [ 826.611639][T12589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12589 comm=syz.0.3252 [ 826.627126][T12628] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.657744][T12628] overlayfs: failed to resolve './file7': -2 [ 826.681554][T12628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12628 comm=syz.6.3261 [ 827.327049][ T1008] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 827.457100][T12643] loop5: detected capacity change from 0 to 40427 [ 827.528142][T12643] F2FS-fs (loop5): fault_injection options not supported [ 827.535277][ T1008] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 827.535308][ T1008] usb 5-1: config 0 has no interface number 0 [ 827.536778][ T1008] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 827.544073][T12643] F2FS-fs (loop5): Image doesn't support compression [ 827.565772][ T1008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.567492][T12643] F2FS-fs (loop5): Image doesn't support compression [ 827.593312][ T1008] usb 5-1: Product: syz [ 827.606921][ T1008] usb 5-1: Manufacturer: syz [ 827.621676][ T1008] usb 5-1: SerialNumber: syz [ 827.641753][ T1008] usb 5-1: config 0 descriptor?? [ 827.661651][ T1008] ftdi_sio 5-1:0.117: FTDI USB Serial Device converter detected [ 827.670026][T12643] F2FS-fs (loop5): invalid crc value [ 827.680282][ T1008] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 827.701293][T12643] F2FS-fs (loop5): Found nat_bits in checkpoint [ 827.769336][T12643] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 827.948877][T12206] EXT4-fs (loop0): unmounting filesystem. [ 828.015071][ T39] usb 5-1: USB disconnect, device number 57 [ 828.031389][ T39] ftdi_sio 5-1:0.117: device disconnected [ 828.035651][T12651] syz.5.3265: attempt to access beyond end of device [ 828.035651][T12651] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 828.146312][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3265'. [ 828.205630][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3265'. [ 828.234113][ T28] audit: type=1326 audit(1757596280.290:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.5.3265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344498eba9 code=0x0 [ 828.278110][T12402] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 828.360027][T11527] EXT4-fs (loop6): unmounting filesystem. [ 828.437947][T12655] tipc: Started in network mode [ 828.447269][T12655] tipc: Node identity 2007ff, cluster identity 4711 [ 828.453967][T12655] tipc: Node number set to 2099199 [ 828.459412][T12402] usb 1-1: Using ep0 maxpacket: 16 [ 828.468159][T12402] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.481679][T12402] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.500956][T12402] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 828.520755][T12402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.576628][T12402] usb 1-1: Product: syz [ 828.586059][T12402] usb 1-1: Manufacturer: syz [ 828.704913][T12659] loop3: detected capacity change from 0 to 4096 [ 828.711706][T12659] EXT4-fs: Ignoring removed mblk_io_submit option [ 828.726679][T12659] EXT4-fs (loop3): Test dummy encryption mode enabled [ 828.850916][T12659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 829.515242][T12668] loop4: detected capacity change from 0 to 40427 [ 829.530328][T12668] F2FS-fs (loop4): fault_injection options not supported [ 829.545897][T12668] F2FS-fs (loop4): Image doesn't support compression [ 829.553276][T12668] F2FS-fs (loop4): Image doesn't support compression [ 829.561216][T12668] F2FS-fs (loop4): invalid crc value [ 829.568122][T12668] F2FS-fs (loop4): Found nat_bits in checkpoint [ 829.609075][T12668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 829.629435][ T1008] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 829.635783][T12402] usb 1-1: SerialNumber: syz [ 829.645827][T11918] EXT4-fs (loop3): unmounting filesystem. [ 829.705756][T12668] syz.4.3271: attempt to access beyond end of device [ 829.705756][T12668] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 829.723484][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3271'. [ 829.737966][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3271'. [ 829.747766][ T28] audit: type=1326 audit(1757596281.910:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.4.3271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 829.787648][ T39] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 829.817061][ T1008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.828279][ T1008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.838239][ T1008] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 829.840866][T12402] usb 1-1: 0:2 : does not exist [ 829.849348][ T1008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.856571][T12402] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 829.866016][ T1008] usb 6-1: config 0 descriptor?? [ 829.877741][T12402] usb 1-1: USB disconnect, device number 58 [ 829.955410][T10855] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 829.956576][ T39] usb 7-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 829.973138][ T39] usb 7-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 829.983398][ T39] usb 7-1: config 1 interface 0 has no altsetting 0 [ 829.992142][ T39] usb 7-1: string descriptor 0 read error: -22 [ 829.998508][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 830.007609][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.016966][T12655] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 830.024271][T12655] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 830.077565][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 830.132693][T10855] usb 4-1: Using ep0 maxpacket: 16 [ 830.138816][T10855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.149397][T10855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.162224][T10855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.171517][T10855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.179724][T10855] usb 4-1: Product: syz [ 830.183915][T10855] usb 4-1: Manufacturer: syz [ 830.188763][T10855] usb 4-1: SerialNumber: syz [ 830.226983][T12402] usb 7-1: USB disconnect, device number 6 [ 830.249436][ T1008] pyra 0003:1E7D:2CF6.0058: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 830.383523][T10855] usb 4-1: 0:2 : does not exist [ 830.391176][T10855] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 830.403385][T10855] usb 4-1: USB disconnect, device number 58 [ 830.434145][ T1008] pyra 0003:1E7D:2CF6.0058: couldn't init struct pyra_device [ 830.441743][ T1008] pyra 0003:1E7D:2CF6.0058: couldn't install mouse [ 830.448635][ T1008] pyra: probe of 0003:1E7D:2CF6.0058 failed with error -5 [ 830.481930][T12682] 9pnet_fd: Insufficient options for proto=fd [ 830.489145][T12682] 9pnet_fd: Insufficient options for proto=fd [ 830.599353][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 830.717964][T12685] loop6: detected capacity change from 0 to 512 [ 830.895023][T12689] loop6: detected capacity change from 0 to 2048 [ 830.939075][T12689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 830.952809][T12689] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.975493][T12689] overlayfs: failed to resolve './file7': -2 [ 830.982631][T12689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12689 comm=syz.6.3277 [ 831.089235][T12696] loop4: detected capacity change from 0 to 512 [ 831.278016][T12700] loop5: detected capacity change from 0 to 256 [ 831.366188][T12701] loop4: detected capacity change from 0 to 2048 [ 831.441465][T12701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 831.527422][T12701] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.545241][T12698] loop0: detected capacity change from 0 to 40427 [ 831.569838][T12698] F2FS-fs (loop0): fault_injection options not supported [ 831.576980][T12698] F2FS-fs (loop0): Image doesn't support compression [ 831.593545][T12701] overlayfs: failed to resolve './file7': -2 [ 831.599902][T12698] F2FS-fs (loop0): Image doesn't support compression [ 831.607915][T12701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12701 comm=syz.4.3279 [ 831.621942][T12698] F2FS-fs (loop0): invalid crc value [ 831.683770][T12698] F2FS-fs (loop0): Found nat_bits in checkpoint [ 831.820896][T12698] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 832.194100][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3280'. [ 832.356093][T12709] syz.0.3280: attempt to access beyond end of device [ 832.356093][T12709] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 832.450490][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3280'. [ 832.518717][ T28] audit: type=1326 audit(1757596284.828:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.0.3280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1258eba9 code=0x0 [ 832.664001][T11527] EXT4-fs (loop6): unmounting filesystem. [ 832.803830][T12724] loop6: detected capacity change from 0 to 16 [ 832.811533][T12724] erofs: (device loop6): mounted with root inode @ nid 36. [ 832.820596][ T46] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 832.832216][T12724] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 832.844524][T12724] x_tables: duplicate underflow at hook 1 [ 832.845788][T12725] loop0: detected capacity change from 0 to 16 [ 832.857277][T12725] erofs: (device loop0): mounted with root inode @ nid 36. [ 832.866200][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 832.877395][T12725] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 832.889683][T12725] x_tables: duplicate underflow at hook 1 [ 833.057474][T11564] EXT4-fs (loop4): unmounting filesystem. [ 833.275300][ T39] usb 6-1: USB disconnect, device number 37 [ 833.640993][ T28] audit: type=1326 audit(1757596286.094:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 833.727675][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3288'. [ 833.828705][ T28] audit: type=1326 audit(1757596286.094:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 833.974413][ T28] audit: type=1326 audit(1757596286.094:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 834.000080][ T28] audit: type=1326 audit(1757596286.094:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f086498ebe3 code=0x7ffc0000 [ 834.985905][T12756] 9pnet_fd: Insufficient options for proto=fd [ 835.200511][T12763] loop4: detected capacity change from 0 to 512 [ 835.209619][ T28] audit: type=1326 audit(1757596287.768:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f086498d65f code=0x7ffc0000 [ 835.361269][ T28] audit: type=1326 audit(1757596287.929:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f086498ec37 code=0x7ffc0000 [ 835.363378][T12738] loop6: detected capacity change from 0 to 40427 [ 835.431843][ T28] audit: type=1326 audit(1757596287.939:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f086498d510 code=0x7ffc0000 [ 835.487200][T12769] loop4: detected capacity change from 0 to 2048 [ 835.493837][ T1008] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 835.526286][ T28] audit: type=1326 audit(1757596287.939:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f086498e7ab code=0x7ffc0000 [ 835.584747][T12769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 835.593555][ T28] audit: type=1326 audit(1757596287.993:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.6.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f086498d80a code=0x7ffc0000 [ 835.613549][T12769] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.688857][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.701188][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.711072][ T1008] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.717684][T12769] overlayfs: failed to resolve './file7': -2 [ 835.724137][ T1008] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 835.740859][ T1008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.750750][ T1008] usb 4-1: config 0 descriptor?? [ 835.807104][T12769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12769 comm=syz.4.3296 [ 835.876779][T12779] loop0: detected capacity change from 0 to 16 [ 835.885745][T12779] erofs: (device loop0): mounted with root inode @ nid 36. [ 836.208985][ T1008] usbhid 4-1:0.0: can't add hid device: -71 [ 836.215124][ T1008] usbhid: probe of 4-1:0.0 failed with error -71 [ 836.225959][ T1008] usb 4-1: USB disconnect, device number 59 [ 836.274851][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 836.462891][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.480185][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.499138][ T60] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 836.517724][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.537207][ T60] usb 7-1: config 0 descriptor?? [ 836.863942][T11564] EXT4-fs (loop4): unmounting filesystem. [ 836.906979][T12793] loop4: detected capacity change from 0 to 256 [ 836.919586][ T60] pyra 0003:1E7D:2CF6.0059: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 837.151935][T12795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3304'. [ 837.549677][T12801] FAULT_INJECTION: forcing a failure. [ 837.549677][T12801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 837.588369][T12801] CPU: 1 PID: 12801 Comm: syz.0.3306 Not tainted syzkaller #0 [ 837.595900][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.605976][T12801] Call Trace: [ 837.609281][T12801] [ 837.612230][T12801] __dump_stack+0x21/0x24 [ 837.616587][T12801] dump_stack_lvl+0xee/0x150 [ 837.621192][T12801] ? __cfi_dump_stack_lvl+0x8/0x8 [ 837.626238][T12801] dump_stack+0x15/0x24 [ 837.630414][T12801] should_fail_ex+0x3d4/0x520 [ 837.635117][T12801] should_fail_alloc_page+0x61/0x90 [ 837.640345][T12801] prepare_alloc_pages+0x148/0x5f0 [ 837.645483][T12801] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 837.650704][T12801] ? finish_task_switch+0x16b/0x7b0 [ 837.655928][T12801] ? __switch_to_asm+0x3a/0x60 [ 837.660718][T12801] __alloc_pages+0x124/0x450 [ 837.665334][T12801] ? __cfi___alloc_pages+0x10/0x10 [ 837.670479][T12801] ? __schedule+0xb8f/0x14e0 [ 837.675089][T12801] __kmalloc_large_node+0xa1/0x1c0 [ 837.680410][T12801] ? release_firmware_map_entry+0x194/0x194 [ 837.686322][T12801] ? vfs_set_acl_prepare+0x112/0x730 [ 837.691638][T12801] __kmalloc+0xe0/0x1e0 [ 837.695822][T12801] vfs_set_acl_prepare+0x112/0x730 [ 837.700966][T12801] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 837.706663][T12801] posix_acl_xattr_set+0x93/0x400 [ 837.711718][T12801] ? __cfi_posix_acl_xattr_set+0x10/0x10 [ 837.717385][T12801] __vfs_setxattr+0x3f2/0x440 [ 837.722094][T12801] __vfs_setxattr_noperm+0x12a/0x5e0 [ 837.727508][T12801] __vfs_setxattr_locked+0x212/0x230 [ 837.732835][T12801] vfs_setxattr+0x168/0x2f0 [ 837.737375][T12801] ? __cfi_vfs_setxattr+0x10/0x10 [ 837.742538][T12801] ? copy_user_enhanced_fast_string+0xa/0x40 [ 837.748555][T12801] ? posix_acl_fix_xattr_from_user+0x94/0xa0 [ 837.754569][T12801] setxattr+0x2b2/0x2d0 [ 837.758762][T12801] ? path_setxattr+0x280/0x280 [ 837.763564][T12801] ? mnt_want_write_file+0x258/0x470 [ 837.768873][T12801] __se_sys_fsetxattr+0x168/0x1e0 [ 837.773930][T12801] __x64_sys_fsetxattr+0xbf/0xd0 [ 837.778898][T12801] x64_sys_call+0x1c5/0x9a0 [ 837.783430][T12801] do_syscall_64+0x4c/0xa0 [ 837.787874][T12801] ? clear_bhb_loop+0x30/0x80 [ 837.792578][T12801] ? clear_bhb_loop+0x30/0x80 [ 837.797286][T12801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.803211][T12801] RIP: 0033:0x7f5e1258eba9 [ 837.807739][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.827455][T12801] RSP: 002b:00007f5e1343d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 837.836161][T12801] RAX: ffffffffffffffda RBX: 00007f5e127d5fa0 RCX: 00007f5e1258eba9 [ 837.844161][T12801] RDX: 00002000000002c0 RSI: 0000200000000000 RDI: 0000000000000005 [ 837.852162][T12801] RBP: 00007f5e1343d090 R08: 0000000000000000 R09: 0000000000000000 [ 837.860176][T12801] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001 [ 837.868168][T12801] R13: 00007f5e127d6038 R14: 00007f5e127d5fa0 R15: 00007ffeaab20f58 [ 837.876174][T12801] [ 838.093085][ T60] pyra 0003:1E7D:2CF6.0059: couldn't init struct pyra_device [ 838.100815][ T60] pyra 0003:1E7D:2CF6.0059: couldn't install mouse [ 838.124550][T12802] loop6: detected capacity change from 0 to 256 [ 838.134818][ T60] pyra: probe of 0003:1E7D:2CF6.0059 failed with error -32 [ 838.188614][ T60] usb 7-1: USB disconnect, device number 7 [ 839.091419][T12815] fido_id[12815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 839.195262][T12828] loop3: detected capacity change from 0 to 16 [ 839.232905][T12828] erofs: (device loop3): mounted with root inode @ nid 36. [ 839.948950][T12833] loop4: detected capacity change from 0 to 40427 [ 839.959410][T12833] F2FS-fs (loop4): fault_injection options not supported [ 839.966655][T12833] F2FS-fs (loop4): Image doesn't support compression [ 839.973485][T12833] F2FS-fs (loop4): Image doesn't support compression [ 839.981444][T12833] F2FS-fs (loop4): invalid crc value [ 839.989254][T12833] F2FS-fs (loop4): Found nat_bits in checkpoint [ 840.034008][T12833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 840.191514][T12851] loop0: detected capacity change from 0 to 4096 [ 840.199719][T12851] EXT4-fs: Ignoring removed mblk_io_submit option [ 840.209990][T12851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 840.300682][T12851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 840.396936][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3315'. [ 840.612013][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 840.612039][ T28] audit: type=1326 audit(1757596293.572:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12832 comm="syz.4.3315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 840.656287][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 840.893857][T12861] FAULT_INJECTION: forcing a failure. [ 840.893857][T12861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.913671][T12853] syz.4.3315: attempt to access beyond end of device [ 840.913671][T12853] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 840.927847][T12861] CPU: 0 PID: 12861 Comm: syz.5.3320 Not tainted syzkaller #0 [ 840.935343][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 840.945594][T12861] Call Trace: [ 840.948974][T12861] [ 840.951960][T12861] __dump_stack+0x21/0x24 [ 840.956309][T12861] dump_stack_lvl+0xee/0x150 [ 840.960919][T12861] ? __cfi_dump_stack_lvl+0x8/0x8 [ 840.965965][T12861] dump_stack+0x15/0x24 [ 840.970221][T12861] should_fail_ex+0x3d4/0x520 [ 840.974927][T12861] should_fail+0xb/0x10 [ 840.979633][T12861] should_fail_usercopy+0x1a/0x20 [ 840.984680][T12861] _copy_to_user+0x1e/0x90 [ 840.989132][T12861] simple_read_from_buffer+0xe9/0x160 [ 840.994540][T12861] proc_fail_nth_read+0x19a/0x210 [ 840.999627][T12861] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 841.005379][T12861] ? security_file_permission+0x94/0xb0 [ 841.010964][T12861] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 841.016534][T12861] vfs_read+0x26e/0x8c0 [ 841.020720][T12861] ? __cfi_vfs_read+0x10/0x10 [ 841.025432][T12861] ? __kasan_check_write+0x14/0x20 [ 841.030588][T12861] ? mutex_lock+0x8d/0x1a0 [ 841.035041][T12861] ? __cfi_mutex_lock+0x10/0x10 [ 841.040025][T12861] ? __fdget_pos+0x2cd/0x380 [ 841.044642][T12861] ? ksys_read+0x71/0x240 [ 841.049010][T12861] ksys_read+0x140/0x240 [ 841.053289][T12861] ? __cfi_ksys_read+0x10/0x10 [ 841.058172][T12861] ? debug_smp_processor_id+0x17/0x20 [ 841.064123][T12861] __x64_sys_read+0x7b/0x90 [ 841.068667][T12861] x64_sys_call+0x2f/0x9a0 [ 841.073109][T12861] do_syscall_64+0x4c/0xa0 [ 841.077540][T12861] ? clear_bhb_loop+0x30/0x80 [ 841.082246][T12861] ? clear_bhb_loop+0x30/0x80 [ 841.086945][T12861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.092864][T12861] RIP: 0033:0x7f344498d5bc [ 841.097299][T12861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 841.117360][T12861] RSP: 002b:00007f34457f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 841.125818][T12861] RAX: ffffffffffffffda RBX: 00007f3444bd5fa0 RCX: 00007f344498d5bc [ 841.133820][T12861] RDX: 000000000000000f RSI: 00007f34457f50a0 RDI: 0000000000000003 [ 841.141816][T12861] RBP: 00007f34457f5090 R08: 0000000000000000 R09: 0000000000000000 [ 841.150941][T12861] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 841.158974][T12861] R13: 00007f3444bd6038 R14: 00007f3444bd5fa0 R15: 00007ffdc58c4c68 [ 841.166983][T12861] [ 841.208204][ T1398] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 841.219633][T12206] EXT4-fs (loop0): unmounting filesystem. [ 841.431495][ T1398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.492021][ T1398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.573765][ T1398] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.692335][ T1398] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 841.718321][ T1398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.748881][ T1398] usb 4-1: config 0 descriptor?? [ 842.011216][T12882] loop4: detected capacity change from 0 to 4096 [ 842.018093][T12882] EXT4-fs: Ignoring removed mblk_io_submit option [ 842.044207][T12882] EXT4-fs (loop4): Test dummy encryption mode enabled [ 842.908006][T12882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 843.125781][ T1398] usbhid 4-1:0.0: can't add hid device: -71 [ 843.131788][ T1398] usbhid: probe of 4-1:0.0 failed with error -71 [ 843.145242][ T1398] usb 4-1: USB disconnect, device number 60 [ 843.216898][T12897] loop6: detected capacity change from 0 to 16 [ 843.224216][T12897] erofs: (device loop6): mounted with root inode @ nid 36. [ 843.257242][T12899] 9pnet_fd: Insufficient options for proto=fd [ 843.742318][T12903] loop0: detected capacity change from 0 to 256 [ 843.803520][T11564] EXT4-fs (loop4): unmounting filesystem. [ 843.850776][T12906] loop4: detected capacity change from 0 to 512 [ 843.899902][ T336] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 844.169546][ T39] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 844.376266][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.452789][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.947866][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.972995][ T39] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 844.992979][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.012147][ T39] usb 7-1: config 0 descriptor?? [ 845.122001][T12916] loop4: detected capacity change from 0 to 2048 [ 845.162849][T12916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 845.171588][T12916] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.183294][T12916] overlayfs: failed to resolve './file7': -2 [ 845.190460][T12916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12916 comm=syz.4.3333 [ 845.398227][ T39] usbhid 7-1:0.0: can't add hid device: -71 [ 845.405313][ T39] usbhid: probe of 7-1:0.0 failed with error -71 [ 845.740336][ T39] usb 7-1: USB disconnect, device number 8 [ 846.062998][ T19] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 846.256426][T12937] loop3: detected capacity change from 0 to 4096 [ 846.267078][T12937] EXT4-fs: Ignoring removed mblk_io_submit option [ 846.315225][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.326352][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.336348][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.351429][T12937] EXT4-fs (loop3): Test dummy encryption mode enabled [ 846.423917][ T19] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 846.453615][T12937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 846.647991][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.690964][T12940] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3343'. [ 846.755399][ T19] usb 1-1: config 0 descriptor?? [ 847.298316][T12945] netlink: 'syz.6.3345': attribute type 3 has an invalid length. [ 847.312588][T11918] EXT4-fs (loop3): unmounting filesystem. [ 847.337689][T12942] 9pnet_fd: Insufficient options for proto=fd [ 847.355103][T12947] loop6: detected capacity change from 0 to 256 [ 847.374103][T12947] exfat: Deprecated parameter 'utf8' [ 847.385258][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 847.402984][T12947] exfat: Deprecated parameter 'namecase' [ 847.453492][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 847.460717][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 847.467832][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3346'. [ 847.468694][T12947] exfat: Unknown parameter 'fmask' [ 847.491987][ T19] usb 1-1: USB disconnect, device number 59 [ 847.763972][T12945] mmap: syz.6.3345 (12945): VmData 167620608 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 847.906044][T12953] overlayfs: missing 'lowerdir' [ 848.153115][T11564] EXT4-fs (loop4): unmounting filesystem. [ 848.162580][T12958] loop5: detected capacity change from 0 to 256 [ 848.198315][ T28] audit: type=1326 audit(1757596301.705:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 848.227732][T12962] loop4: detected capacity change from 0 to 512 [ 848.235381][T12962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 848.247346][ T28] audit: type=1326 audit(1757596301.726:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 848.287927][ T28] audit: type=1326 audit(1757596301.726:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 848.311971][ T28] audit: type=1326 audit(1757596301.726:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 848.337449][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3350'. [ 848.365803][ T28] audit: type=1326 audit(1757596301.726:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 848.406123][ T28] audit: type=1326 audit(1757596301.726:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 848.425161][T12962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 848.703990][T12962] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.890865][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3348'. [ 849.016848][ T28] audit: type=1326 audit(1757596301.737:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99e298ebe3 code=0x7ffc0000 [ 849.087875][T12963] netlink: 'syz.4.3349': attribute type 27 has an invalid length. [ 849.109743][ T28] audit: type=1326 audit(1757596301.737:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99e298d65f code=0x7ffc0000 [ 849.172454][ T28] audit: type=1326 audit(1757596301.737:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99e298ec37 code=0x7ffc0000 [ 849.199268][T12963] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.206535][T12963] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.222397][ T28] audit: type=1326 audit(1757596301.737:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99e298d510 code=0x7ffc0000 [ 849.272290][T11564] EXT4-fs (loop4): unmounting filesystem. [ 849.808205][ T39] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 850.021683][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.038192][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.057772][ T19] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 850.072050][ T39] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 850.082053][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.095167][ T39] usb 6-1: config 0 descriptor?? [ 850.238269][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.251852][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.261933][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.293008][ T19] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 850.304467][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.322659][ T19] usb 4-1: config 0 descriptor?? [ 850.325543][T13000] loop0: detected capacity change from 0 to 512 [ 850.482389][ T39] pyra 0003:1E7D:2CF6.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 850.545508][T13002] loop0: detected capacity change from 0 to 2048 [ 850.612124][T13002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 850.620897][T13002] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.632834][T13002] overlayfs: failed to resolve './file7': -2 [ 850.641144][T13002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13002 comm=syz.0.3360 [ 850.747239][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 850.757295][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 850.782302][ T19] usb 4-1: USB disconnect, device number 61 [ 851.119725][T12989] loop5: detected capacity change from 0 to 256 [ 851.126324][ T39] pyra 0003:1E7D:2CF6.005A: couldn't init struct pyra_device [ 851.141646][ T39] pyra 0003:1E7D:2CF6.005A: couldn't install mouse [ 851.441701][T13008] loop4: detected capacity change from 0 to 256 [ 851.664198][ T39] pyra: probe of 0003:1E7D:2CF6.005A failed with error -32 [ 851.697639][T13008] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 851.778829][T12206] EXT4-fs (loop0): unmounting filesystem. [ 852.086321][ T39] usb 6-1: USB disconnect, device number 38 [ 854.132444][T13017] fido_id[13017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 854.241482][T13025] loop6: detected capacity change from 0 to 256 [ 855.137291][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3366'. [ 855.449848][T13041] incfs: Options parsing error. -22 [ 855.466802][T13041] incfs: mount failed -22 [ 855.486611][T13041] loop3: detected capacity change from 0 to 1024 [ 855.507682][T13042] x_tables: duplicate underflow at hook 1 [ 855.541939][T13041] EXT4-fs: Ignoring removed nobh option [ 855.563262][T13041] EXT4-fs: Ignoring removed bh option [ 855.584323][T13041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 855.691524][T13041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 855.700669][T13026] loop0: detected capacity change from 0 to 40427 [ 855.735452][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 855.735469][ T28] audit: type=1400 audit(1757596309.794:866): avc: denied { link } for pid=13040 comm="syz.3.3371" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 855.764713][T13026] F2FS-fs (loop0): fault_injection options not supported [ 855.800414][T13026] F2FS-fs (loop0): Image doesn't support compression [ 855.825840][T13026] F2FS-fs (loop0): Image doesn't support compression [ 855.833131][T11918] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 15: block 417:freeing already freed block (bit 26); block bitmap corrupt. [ 855.856110][T13026] F2FS-fs (loop0): invalid crc value [ 855.874554][T11918] EXT4-fs (loop3): unmounting filesystem. [ 855.885454][T13026] F2FS-fs (loop0): Found nat_bits in checkpoint [ 855.964027][T13054] loop3: detected capacity change from 0 to 512 [ 856.063706][T13026] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 856.201998][T13059] loop3: detected capacity change from 0 to 2048 [ 856.603478][ T39] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 856.612356][T13059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 856.621015][T13059] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.635144][T13059] overlayfs: failed to resolve './file7': -2 [ 856.643166][T13059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13059 comm=syz.3.3372 [ 856.940222][T13067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3362'. [ 857.038760][T13066] syz.0.3362: attempt to access beyond end of device [ 857.038760][T13066] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 857.219970][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3362'. [ 857.267397][ T28] audit: type=1326 audit(1757596311.414:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13023 comm="syz.0.3362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1258eba9 code=0x0 [ 857.291452][T11918] EXT4-fs (loop3): unmounting filesystem. [ 857.295717][T13069] loop5: detected capacity change from 0 to 40427 [ 857.308634][T13069] F2FS-fs (loop5): fault_injection options not supported [ 857.317126][T13069] F2FS-fs (loop5): Image doesn't support compression [ 857.331126][T13069] F2FS-fs (loop5): Image doesn't support compression [ 857.336253][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.352440][T13069] F2FS-fs (loop5): invalid crc value [ 857.355797][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.371585][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.460211][ T39] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 857.470047][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.478845][ T39] usb 7-1: config 0 descriptor?? [ 857.490174][T13069] F2FS-fs (loop5): Found nat_bits in checkpoint [ 857.629579][T13069] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 857.865113][T13081] 9pnet_fd: Insufficient options for proto=fd [ 857.872065][T13081] 9pnet_fd: Insufficient options for proto=fd [ 857.924368][T13084] syz.5.3376: attempt to access beyond end of device [ 857.924368][T13084] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 857.968366][ T39] usbhid 7-1:0.0: can't add hid device: -71 [ 857.974431][ T39] usbhid: probe of 7-1:0.0 failed with error -71 [ 857.981905][ T39] usb 7-1: USB disconnect, device number 9 [ 859.520265][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3376'. [ 859.596090][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3376'. [ 859.610134][T13090] loop0: detected capacity change from 0 to 16 [ 859.620050][T13090] erofs: (device loop0): mounted with root inode @ nid 36. [ 859.665112][ T28] audit: type=1326 audit(1757596314.011:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.5.3376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344498eba9 code=0x0 [ 860.106106][T13109] loop0: detected capacity change from 0 to 16 [ 860.116757][T13109] erofs: (device loop0): mounted with root inode @ nid 36. [ 860.125645][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 860.136760][T13109] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 860.148455][T13109] x_tables: duplicate underflow at hook 1 [ 860.307162][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3386'. [ 860.318947][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3386'. [ 861.145207][T13130] 9pnet_fd: Insufficient options for proto=fd [ 861.152270][T13130] 9pnet_fd: Insufficient options for proto=fd [ 861.418784][ T1008] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 861.533795][ T19] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 861.767551][ T1008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.775843][ T1398] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 861.778618][ T1008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.795995][ T1008] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.808897][ T1008] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 861.818122][ T1008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.827013][ T1008] usb 7-1: config 0 descriptor?? [ 861.916495][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.927568][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.937477][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 861.946705][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.955717][ T19] usb 1-1: config 0 descriptor?? [ 861.962345][ T1398] usb 6-1: Using ep0 maxpacket: 16 [ 861.969158][ T1398] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.979728][ T1398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 861.990519][ T1398] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 861.999813][ T1398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.007898][ T1398] usb 6-1: Product: syz [ 862.012292][ T1398] usb 6-1: Manufacturer: syz [ 862.016978][ T1398] usb 6-1: SerialNumber: syz [ 862.211541][ T1398] usb 6-1: 0:2 : does not exist [ 862.220304][ T1398] usb 6-1: USB disconnect, device number 39 [ 862.564176][ T1008] usbhid 7-1:0.0: can't add hid device: -71 [ 862.571357][ T1008] usbhid: probe of 7-1:0.0 failed with error -71 [ 862.577936][ T19] pyra 0003:1E7D:2CF6.005B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 862.590064][ T1008] usb 7-1: USB disconnect, device number 10 [ 862.596751][ T19] pyra 0003:1E7D:2CF6.005B: couldn't init struct pyra_device [ 862.604191][ T19] pyra 0003:1E7D:2CF6.005B: couldn't install mouse [ 862.616774][ T19] pyra: probe of 0003:1E7D:2CF6.005B failed with error -5 [ 862.699352][ T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 863.823425][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 863.850041][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3399'. [ 864.242640][T10855] usb 1-1: USB disconnect, device number 60 [ 864.325608][T13173] loop5: detected capacity change from 0 to 256 [ 864.333509][T13174] 9pnet_fd: Insufficient options for proto=fd [ 864.340412][T13174] 9pnet_fd: Insufficient options for proto=fd [ 864.535540][ T1008] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 864.703561][ T1008] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.714584][ T1008] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.724609][ T1008] usb 7-1: config 0 interface 0 has no altsetting 0 [ 864.731424][ T1008] usb 7-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 864.740678][ T1008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.749803][ T1008] usb 7-1: config 0 descriptor?? [ 864.767663][T12283] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 864.937270][T12283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.953257][T12283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.964790][T12283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.978983][T12283] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 864.989466][T12283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.017365][T12283] usb 4-1: config 0 descriptor?? [ 865.225220][T13188] loop0: detected capacity change from 0 to 16 [ 865.232398][T13188] erofs: (device loop0): mounted with root inode @ nid 36. [ 865.306647][ T1008] wacom 0003:056A:0018.005C: unknown main item tag 0x2 [ 865.326905][ T28] audit: type=1400 audit(1757596320.083:869): avc: denied { map } for pid=13189 comm="syz.4.3410" path="socket:[61467]" dev="sockfs" ino=61467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 865.370928][ T1008] wacom 0003:056A:0018.005C: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 865.391433][ T1008] wacom 0003:056A:0018.005C: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.6-1/input0 [ 865.416641][ T1008] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0018.005C/input/input17 [ 865.430620][T12283] usbhid 4-1:0.0: can't add hid device: -71 [ 865.436680][T12283] usbhid: probe of 4-1:0.0 failed with error -71 [ 865.453635][T12283] usb 4-1: USB disconnect, device number 62 [ 865.504283][ T19] usb 7-1: USB disconnect, device number 11 [ 865.718762][ T1008] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 865.839488][ T1398] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 865.895385][ T1008] usb 5-1: Using ep0 maxpacket: 16 [ 865.907767][ T1008] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.918256][ T1008] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.939407][ T1008] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 865.949753][ T1008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.949762][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3413'. [ 865.949783][ T1008] usb 5-1: Product: syz [ 865.958505][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3413'. [ 865.967222][ T1008] usb 5-1: Manufacturer: syz [ 865.985204][ T1008] usb 5-1: SerialNumber: syz [ 865.992527][T13202] loop0: detected capacity change from 0 to 16 [ 865.999555][T13202] erofs: (device loop0): mounted with root inode @ nid 36. [ 866.008180][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 866.019806][T13202] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 866.021434][ T1398] usb 6-1: Using ep0 maxpacket: 16 [ 866.036588][T13202] x_tables: duplicate underflow at hook 1 [ 866.141250][ T1398] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.151797][ T1398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 866.162649][ T1398] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.171971][ T1398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.180306][ T1398] usb 6-1: Product: syz [ 866.184831][ T1398] usb 6-1: Manufacturer: syz [ 866.219569][ T1398] usb 6-1: SerialNumber: syz [ 866.728359][ T1008] usb 5-1: 0:2 : does not exist [ 866.743338][ T1008] usb 5-1: USB disconnect, device number 58 [ 866.745578][ T1398] usb 6-1: 0:2 : does not exist [ 866.816758][ T1398] usb 6-1: USB disconnect, device number 40 [ 866.912532][T13224] 9pnet_fd: Insufficient options for proto=fd [ 866.926284][T13224] 9pnet_fd: Insufficient options for proto=fd [ 866.941700][T13226] loop6: detected capacity change from 0 to 256 [ 867.162148][T13228] loop3: detected capacity change from 0 to 4096 [ 867.170277][T13228] EXT4-fs: Ignoring removed mblk_io_submit option [ 867.182451][T13228] EXT4-fs (loop3): Test dummy encryption mode enabled [ 867.197029][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 867.417085][ T1488] udevd[1488]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 867.471420][T13228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 869.259856][T11918] EXT4-fs (loop3): unmounting filesystem. [ 869.446736][ T1008] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 869.518360][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3428'. [ 869.554271][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3426'. [ 869.637080][T13254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3428'. [ 869.801257][T13260] loop5: detected capacity change from 0 to 16 [ 869.808953][T13260] erofs: (device loop5): mounted with root inode @ nid 36. [ 869.818429][ T46] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 869.830126][T13260] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 869.841800][T13260] x_tables: duplicate underflow at hook 1 [ 869.895032][ T1008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.906722][ T1008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.199387][ T1008] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.212714][ T1008] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 870.221866][ T1008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.232169][ T1008] usb 7-1: config 0 descriptor?? [ 870.696976][ T1008] usbhid 7-1:0.0: can't add hid device: -71 [ 870.711608][ T1008] usbhid: probe of 7-1:0.0 failed with error -71 [ 870.721879][ T1008] usb 7-1: USB disconnect, device number 12 [ 870.829455][T13271] loop0: detected capacity change from 0 to 40427 [ 870.845883][T13271] F2FS-fs (loop0): fault_injection options not supported [ 870.853499][T13271] F2FS-fs (loop0): Image doesn't support compression [ 870.860801][T13271] F2FS-fs (loop0): Image doesn't support compression [ 870.868507][T13271] F2FS-fs (loop0): invalid crc value [ 870.875526][T13271] F2FS-fs (loop0): Found nat_bits in checkpoint [ 870.905827][T13271] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 870.975113][ T39] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 870.988844][T13271] syz.0.3435: attempt to access beyond end of device [ 870.988844][T13271] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 871.016458][T13271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3435'. [ 871.034856][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 871.044709][ T28] audit: type=1326 audit(1757596326.220:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.0.3435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1258eba9 code=0x0 [ 871.161522][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 871.222237][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.233321][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.338505][T13286] loop6: detected capacity change from 0 to 4096 [ 871.346286][T13286] EXT4-fs: Ignoring removed mblk_io_submit option [ 871.354845][T13286] EXT4-fs (loop6): Test dummy encryption mode enabled [ 871.484906][T13286] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 871.649707][T13290] 9pnet_fd: Insufficient options for proto=fd [ 871.850653][T13291] 9pnet_fd: Insufficient options for proto=fd [ 873.874587][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.884138][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.892246][ T39] usb 5-1: Product: syz [ 873.896502][ T39] usb 5-1: Manufacturer: syz [ 873.901123][ T39] usb 5-1: SerialNumber: syz [ 873.924239][ T39] usb 5-1: can't set config #1, error -71 [ 873.946879][ T39] usb 5-1: USB disconnect, device number 59 [ 873.954553][T13299] FAULT_INJECTION: forcing a failure. [ 873.954553][T13299] name failslab, interval 1, probability 0, space 0, times 0 [ 873.972948][T11527] EXT4-fs (loop6): unmounting filesystem. [ 873.988250][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3442'. [ 873.991199][T13299] CPU: 0 PID: 13299 Comm: syz.4.3441 Not tainted syzkaller #0 [ 874.004614][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.012157][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3442'. [ 874.014727][T13299] Call Trace: [ 874.014737][T13299] [ 874.014746][T13299] __dump_stack+0x21/0x24 [ 874.014772][T13299] dump_stack_lvl+0xee/0x150 [ 874.038948][T13299] ? __cfi_dump_stack_lvl+0x8/0x8 [ 874.044006][T13299] dump_stack+0x15/0x24 [ 874.048187][T13299] should_fail_ex+0x3d4/0x520 [ 874.052896][T13299] __should_failslab+0xac/0xf0 [ 874.057686][T13299] ? bpf_prog_test_run_skb+0x24f/0x1290 [ 874.063275][T13299] should_failslab+0x9/0x20 [ 874.067824][T13299] __kmem_cache_alloc_node+0x3d/0x2c0 [ 874.073242][T13299] ? bpf_prog_test_run_skb+0x24f/0x1290 [ 874.078817][T13299] __kmalloc+0xa1/0x1e0 [ 874.083015][T13299] bpf_prog_test_run_skb+0x24f/0x1290 [ 874.088521][T13299] ? __fget_files+0x2d5/0x330 [ 874.093264][T13299] ? __kasan_check_write+0x14/0x20 [ 874.098411][T13299] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 874.104257][T13299] bpf_prog_test_run+0x3e3/0x630 [ 874.109227][T13299] ? slab_free_freelist_hook+0xc2/0x190 [ 874.114898][T13299] ? bpf_prog_query+0x270/0x270 [ 874.119777][T13299] ? selinux_bpf+0xce/0xf0 [ 874.124217][T13299] ? security_bpf+0x93/0xb0 [ 874.128745][T13299] __sys_bpf+0x56d/0x780 [ 874.133020][T13299] ? bpf_link_show_fdinfo+0x320/0x320 [ 874.138422][T13299] ? __cfi_ksys_write+0x10/0x10 [ 874.143312][T13299] ? debug_smp_processor_id+0x17/0x20 [ 874.148727][T13299] __x64_sys_bpf+0x7c/0x90 [ 874.153186][T13299] x64_sys_call+0x488/0x9a0 [ 874.157724][T13299] do_syscall_64+0x4c/0xa0 [ 874.162344][T13299] ? clear_bhb_loop+0x30/0x80 [ 874.167062][T13299] ? clear_bhb_loop+0x30/0x80 [ 874.171887][T13299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.177823][T13299] RIP: 0033:0x7f99e298eba9 [ 874.182448][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.202105][T13299] RSP: 002b:00007f99e13f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.210645][T13299] RAX: ffffffffffffffda RBX: 00007f99e2bd5fa0 RCX: 00007f99e298eba9 [ 874.218659][T13299] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 874.226661][T13299] RBP: 00007f99e13f7090 R08: 0000000000000000 R09: 0000000000000000 [ 874.234649][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.242943][T13299] R13: 00007f99e2bd6038 R14: 00007f99e2bd5fa0 R15: 00007fffb33a77f8 [ 874.251021][T13299] [ 874.298406][T13311] loop6: detected capacity change from 0 to 256 [ 874.311027][T13312] loop3: detected capacity change from 0 to 16 [ 874.320824][T13312] erofs: (device loop3): mounted with root inode @ nid 36. [ 874.331977][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 874.343136][T13312] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 874.354782][T13312] x_tables: duplicate underflow at hook 1 [ 874.419383][T13318] FAULT_INJECTION: forcing a failure. [ 874.419383][T13318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.432710][T13318] CPU: 0 PID: 13318 Comm: syz.0.3448 Not tainted syzkaller #0 [ 874.440207][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.443031][T13308] 9pnet_fd: Insufficient options for proto=fd [ 874.450293][T13318] Call Trace: [ 874.450306][T13318] [ 874.462599][T13318] __dump_stack+0x21/0x24 [ 874.466936][T13318] dump_stack_lvl+0xee/0x150 [ 874.471524][T13318] ? __cfi_dump_stack_lvl+0x8/0x8 [ 874.476549][T13318] ? kstrtoull+0x137/0x1d0 [ 874.480979][T13318] dump_stack+0x15/0x24 [ 874.485165][T13318] should_fail_ex+0x3d4/0x520 [ 874.489874][T13318] should_fail+0xb/0x10 [ 874.494051][T13318] should_fail_usercopy+0x1a/0x20 [ 874.499092][T13318] _copy_from_user+0x1e/0xc0 [ 874.503688][T13318] core_sys_select+0x45c/0x650 [ 874.508454][T13318] ? __cfi_core_sys_select+0x10/0x10 [ 874.513750][T13318] ? __cfi_set_user_sigmask+0x10/0x10 [ 874.519149][T13318] ? __kasan_check_write+0x14/0x20 [ 874.524282][T13318] ? mutex_unlock+0x89/0x220 [ 874.528892][T13318] __se_sys_pselect6+0x287/0x310 [ 874.534126][T13318] ? __x64_sys_pselect6+0x100/0x100 [ 874.539331][T13318] ? ksys_write+0x1eb/0x240 [ 874.543870][T13318] ? __cfi_ksys_write+0x10/0x10 [ 874.548730][T13318] __x64_sys_pselect6+0xe5/0x100 [ 874.553870][T13318] x64_sys_call+0x1b0/0x9a0 [ 874.558401][T13318] do_syscall_64+0x4c/0xa0 [ 874.562816][T13318] ? clear_bhb_loop+0x30/0x80 [ 874.567507][T13318] ? clear_bhb_loop+0x30/0x80 [ 874.572190][T13318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.573485][T12283] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 874.578174][T13318] RIP: 0033:0x7f5e1258eba9 [ 874.590154][T13318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.610028][T13318] RSP: 002b:00007f5e1343d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 874.618451][T13318] RAX: ffffffffffffffda RBX: 00007f5e127d5fa0 RCX: 00007f5e1258eba9 [ 874.626609][T13318] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 874.634584][T13318] RBP: 00007f5e1343d090 R08: 0000000000000000 R09: 0000000000000000 [ 874.642556][T13318] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 874.650617][T13318] R13: 00007f5e127d6038 R14: 00007f5e127d5fa0 R15: 00007ffeaab20f58 [ 874.658687][T13318] [ 874.799006][T12283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.810925][T12283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.673179][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3443'. [ 876.054019][T12283] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.068290][T12283] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 876.077545][T12283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.454318][T12283] usb 6-1: config 0 descriptor?? [ 876.847071][T12283] usbhid 6-1:0.0: can't add hid device: -71 [ 876.855129][T12283] usbhid: probe of 6-1:0.0 failed with error -71 [ 876.868680][T12283] usb 6-1: USB disconnect, device number 41 [ 877.258987][T13375] kvm: MWAIT instruction emulated as NOP! [ 877.265478][T13375] kvm: emulating exchange as write [ 877.349620][T13384] tap0: tun_chr_ioctl cmd 1074025677 [ 877.360967][T13384] tap0: linktype set to 825 [ 877.369648][T13384] tap0: tun_chr_ioctl cmd 35111 [ 877.465146][T13395] loop0: detected capacity change from 0 to 256 [ 877.503564][T13388] syz.0.3472: attempt to access beyond end of device [ 877.503564][T13388] loop0: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 877.523379][T13388] syz.0.3472: attempt to access beyond end of device [ 877.523379][T13388] loop0: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 877.583450][ T28] audit: type=1400 audit(1757596333.237:871): avc: denied { read } for pid=13398 comm="syz.5.3475" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 877.606389][ T28] audit: type=1400 audit(1757596333.237:872): avc: denied { open } for pid=13398 comm="syz.5.3475" path="/364/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 877.738883][T13421] netlink: 'syz.0.3483': attribute type 3 has an invalid length. [ 878.017121][T13451] loop5: detected capacity change from 0 to 128 [ 878.224883][T13459] loop5: detected capacity change from 0 to 128 [ 878.355075][T13461] xt_hashlimit: max too large, truncated to 1048576 [ 878.650329][T13480] kvm [13479]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x600000ff [ 878.660373][T13480] kvm [13479]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x60000001 [ 878.674062][T13480] kvm [13479]: vcpu0, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x600000ff [ 878.686679][T13480] kvm [13479]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x186 data 0x600000ff [ 878.697170][T13480] kvm [13479]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x187 data 0x60000001 [ 878.710139][T13480] kvm [13479]: vcpu0, guest rIP: 0x9131 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x600000ff, nop [ 878.778188][T13485] 9p: Unknown Cache mode f [ 878.839877][ T28] audit: type=1400 audit(1757596334.578:873): avc: denied { nlmsg_tty_audit } for pid=13487 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 878.918695][T13492] xt_hashlimit: size too large, truncated to 1048576 [ 879.367730][T13512] kvm: pic: non byte write [ 879.496783][T13531] xt_hashlimit: size too large, truncated to 1048576 [ 879.498829][T13532] 9p: Unknown Cache mode readahead [ 879.528574][T13534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3528'. [ 879.546261][T13534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 879.553571][T13534] IPv6: NLM_F_CREATE should be set when creating new route [ 879.561704][T13534] IPv6: NLM_F_CREATE should be set when creating new route [ 879.753557][ T28] audit: type=1400 audit(1757596335.555:874): avc: denied { link } for pid=13540 comm="syz.5.3531" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 879.795162][T13559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 879.805494][T13559] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 879.850924][T13565] devpts: called with bogus options [ 879.856227][ T28] audit: type=1400 audit(1757596335.673:875): avc: denied { remount } for pid=13564 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 880.016039][T13589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.023409][T13589] IPv6: NLM_F_CREATE should be set when creating new route [ 880.031659][T13589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.062197][ T28] audit: type=1326 audit(1757596335.887:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 880.096824][T13593] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.109839][ T28] audit: type=1326 audit(1757596335.887:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 880.137690][ T28] audit: type=1326 audit(1757596335.887:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 880.143768][T13599] all: renamed from veth0_to_team [ 880.169878][ T28] audit: type=1326 audit(1757596335.887:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 880.194406][ T28] audit: type=1326 audit(1757596335.887:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086498eba9 code=0x7ffc0000 [ 880.246680][T13606] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 880.270631][T13606] overlayfs: missing 'lowerdir' [ 880.280415][T13609] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.781149][T13659] kvm [13658]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x600000ff [ 880.796917][T13659] kvm [13658]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x60000001 [ 880.824824][T13659] kvm [13658]: vcpu0, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x600000ff [ 880.838314][T13659] kvm [13658]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x186 data 0x600000ff [ 880.843914][T13665] kvm [13664]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x600000ff [ 880.848208][T13659] kvm [13658]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x187 data 0x60000001 [ 880.869791][T13665] kvm [13664]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x60000001 [ 880.879972][T13659] kvm [13658]: vcpu0, guest rIP: 0x9131 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x600000ff, nop [ 880.888467][T13665] kvm [13664]: vcpu0, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x600000ff [ 880.935431][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 880.943245][T13665] kvm [13664]: vcpu0, guest rIP: 0x9131 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x600000ff, nop [ 880.954479][T13678] device bridge_slave_1 left promiscuous mode [ 880.967052][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.990641][T13678] device bridge_slave_0 left promiscuous mode [ 881.006571][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.205992][T13693] xt_hashlimit: max too large, truncated to 1048576 [ 881.280899][T13700] loop6: detected capacity change from 0 to 256 [ 881.300452][T13700] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 881.329416][T13700] FAT-fs (loop6): Filesystem has been set read-only [ 881.344223][T13700] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 881.356001][T13700] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 881.768264][ T1008] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 881.946492][ T1008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.967030][ T1008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.995965][ T1008] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 882.022244][ T1008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.048832][ T1008] usb 6-1: config 0 descriptor?? [ 882.388911][T13741] overlayfs: failed to resolve './file7': -2 [ 882.409050][T13741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13741 comm=syz.4.3608 [ 882.447281][ T1008] pyra 0003:1E7D:2CF6.005D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 882.526960][T13750] loop6: detected capacity change from 0 to 256 [ 883.098164][T13754] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3612'. [ 883.505591][T13758] loop0: detected capacity change from 0 to 256 [ 883.966496][T13764] loop5: detected capacity change from 0 to 256 [ 884.769510][T10855] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 885.065606][T13777] loop6: detected capacity change from 0 to 16 [ 885.073452][T13777] erofs: (device loop6): mounted with root inode @ nid 36. [ 885.285465][T10855] usb 4-1: Using ep0 maxpacket: 16 [ 885.309430][T10855] usb 4-1: device descriptor read/all, error -71 [ 885.742008][ T1008] pyra 0003:1E7D:2CF6.005D: couldn't init struct pyra_device [ 885.754659][ T1008] pyra 0003:1E7D:2CF6.005D: couldn't install mouse [ 885.778130][ T1008] pyra: probe of 0003:1E7D:2CF6.005D failed with error -71 [ 885.809215][ T1008] usb 6-1: USB disconnect, device number 42 [ 885.923644][T13786] fido_id[13786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 886.081459][T13782] loop3: detected capacity change from 0 to 40427 [ 886.121640][T13782] F2FS-fs (loop3): fault_injection options not supported [ 886.128884][T13782] F2FS-fs (loop3): Image doesn't support compression [ 886.135742][T13782] F2FS-fs (loop3): Image doesn't support compression [ 886.149305][T13782] F2FS-fs (loop3): invalid crc value [ 886.187857][T13782] F2FS-fs (loop3): Found nat_bits in checkpoint [ 886.319763][T13782] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 886.555413][T13801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3620'. [ 886.600004][T13800] syz.3.3620: attempt to access beyond end of device [ 886.600004][T13800] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 886.864427][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'. [ 886.885213][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 886.885229][ T28] audit: type=1326 audit(1757596344.213:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.3.3620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bca18eba9 code=0x0 [ 886.968980][T13807] loop0: detected capacity change from 0 to 256 [ 887.017403][T13807] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 887.453607][T13809] loop5: detected capacity change from 0 to 256 [ 888.890855][T13813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3626'. [ 890.969817][T13820] loop5: detected capacity change from 0 to 1024 [ 890.977184][T13820] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 890.986887][T13820] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 891.107955][ T336] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 892.856847][T13843] loop3: detected capacity change from 0 to 4096 [ 892.863644][T13843] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.402802][T13843] EXT4-fs (loop3): Test dummy encryption mode enabled [ 893.487264][T13845] loop6: detected capacity change from 0 to 512 [ 893.527520][T13843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 893.653166][T13840] loop5: detected capacity change from 0 to 512 [ 894.204439][T13845] loop6: detected capacity change from 0 to 2048 [ 894.220828][T13840] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 894.328782][T13845] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 894.337413][T13845] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.338662][T13840] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 894.358441][T13845] overlayfs: failed to resolve './file7': -2 [ 894.368331][T13845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13845 comm=syz.6.3634 [ 894.385865][T11918] EXT4-fs (loop3): unmounting filesystem. [ 894.423277][T11527] EXT4-fs (loop6): unmounting filesystem. [ 895.765820][T13873] loop6: detected capacity change from 0 to 256 [ 895.839970][T13873] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 896.107342][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3640'. [ 898.679293][T13901] loop3: detected capacity change from 0 to 512 [ 898.784496][T13901] loop3: detected capacity change from 0 to 2048 [ 898.815400][T13901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 898.824004][T13901] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.835955][T13901] overlayfs: failed to resolve './file7': -2 [ 898.842995][T13901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13901 comm=syz.3.3647 [ 898.892762][T11918] EXT4-fs (loop3): unmounting filesystem. [ 899.056671][T13912] overlayfs: missing 'lowerdir' [ 899.114324][T13909] 9pnet_fd: Insufficient options for proto=fd [ 900.763564][ T1398] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 901.237650][ T1398] usb 5-1: Using ep0 maxpacket: 16 [ 901.248931][ T1398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.260874][ T1398] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.279657][T13939] 9pnet_fd: Insufficient options for proto=fd [ 901.343939][T13942] loop3: detected capacity change from 0 to 512 [ 901.351591][ T1398] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.392506][ T1398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.401294][ T1398] usb 5-1: Product: syz [ 901.405499][ T1398] usb 5-1: Manufacturer: syz [ 901.411118][ T1398] usb 5-1: SerialNumber: syz [ 902.143877][T13942] loop3: detected capacity change from 0 to 2048 [ 902.372245][ T1398] usb 5-1: 0:2 : does not exist [ 902.395650][T13942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 902.404822][T13942] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.416687][T13942] overlayfs: failed to resolve './file7': -2 [ 902.424269][T13942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13942 comm=syz.3.3659 [ 902.441394][ T1398] usb 5-1: USB disconnect, device number 60 [ 902.507840][T11918] EXT4-fs (loop3): unmounting filesystem. [ 902.638874][T13959] loop3: detected capacity change from 0 to 4096 [ 902.645713][T13959] EXT4-fs: Ignoring removed mblk_io_submit option [ 902.688959][T13959] EXT4-fs (loop3): Test dummy encryption mode enabled [ 902.703134][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 902.720293][T13959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 903.775603][T11918] EXT4-fs (loop3): unmounting filesystem. [ 904.066717][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3664'. [ 904.139304][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3664'. [ 905.436420][T13979] loop3: detected capacity change from 0 to 256 [ 907.516269][T13992] loop5: detected capacity change from 0 to 512 [ 907.754511][T13996] loop5: detected capacity change from 0 to 2048 [ 909.110301][T13996] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 909.118922][T13996] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.136954][T13995] overlayfs: failed to resolve './file7': -2 [ 909.144241][T13995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13995 comm=syz.5.3672 [ 909.230962][T14008] overlayfs: failed to resolve './file7': -2 [ 909.246055][T14008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14008 comm=syz.4.3671 [ 909.311336][ T6598] EXT4-fs (loop5): unmounting filesystem. [ 909.366972][T10855] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 909.553283][T10855] usb 1-1: Using ep0 maxpacket: 16 [ 909.560001][T10855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.589929][T10855] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.602707][T10855] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.621781][T10855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.636774][T12283] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 909.638485][T10855] usb 1-1: Product: syz [ 909.659482][T10855] usb 1-1: Manufacturer: syz [ 909.668410][T10855] usb 1-1: SerialNumber: syz [ 909.814277][T12283] usb 6-1: Using ep0 maxpacket: 16 [ 909.820917][T12283] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.841274][T12283] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.862383][T12283] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.870138][T10855] usb 1-1: 0:2 : does not exist [ 909.882729][T12283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.896369][T10855] usb 1-1: USB disconnect, device number 61 [ 909.901923][T12283] usb 6-1: Product: syz [ 909.906501][T12283] usb 6-1: Manufacturer: syz [ 909.924509][T12283] usb 6-1: SerialNumber: syz [ 910.103538][T14017] 9pnet_fd: Insufficient options for proto=fd [ 910.180622][T12283] usb 6-1: 0:2 : does not exist [ 910.196579][T12283] usb 6-1: USB disconnect, device number 43 [ 911.449586][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 915.381429][T14064] loop3: detected capacity change from 0 to 256 [ 915.673011][T14069] 9pnet_fd: Insufficient options for proto=fd [ 917.168522][T14072] overlayfs: failed to resolve './file7': -2 [ 917.439530][T14066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14066 comm=syz.4.3686 [ 917.551417][T14079] loop3: detected capacity change from 0 to 256 [ 917.660841][T12283] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 917.717559][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3696'. [ 918.027077][T12283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.994113][T12283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.005403][T12283] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 921.016649][T12283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.100468][T12283] usb 1-1: config 0 descriptor?? [ 921.115393][T12283] usb 1-1: can't set config #0, error -71 [ 921.123016][T12283] usb 1-1: USB disconnect, device number 62 [ 921.427082][ T19] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 921.604266][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 921.610865][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.621167][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.631625][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.640869][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.648980][ T19] usb 4-1: Product: syz [ 921.653222][ T19] usb 4-1: Manufacturer: syz [ 921.657943][ T19] usb 4-1: SerialNumber: syz [ 921.887791][ T19] usb 4-1: 0:2 : does not exist [ 921.936611][T14119] loop5: detected capacity change from 0 to 512 [ 921.950093][ T19] usb 4-1: USB disconnect, device number 65 [ 921.965934][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 923.954302][ T1488] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 924.766182][T14126] loop5: detected capacity change from 0 to 2048 [ 926.497742][ T343] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 926.522131][T14126] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 927.612751][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3714'. [ 931.235256][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 931.259709][T14198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3727'. [ 931.289892][T14204] loop3: detected capacity change from 0 to 256 [ 931.578416][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3730'. [ 932.614814][T14224] loop3: detected capacity change from 0 to 16 [ 932.658467][T14224] erofs: (device loop3): mounted with root inode @ nid 36. [ 933.248258][T14229] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3734'. [ 934.529259][T14245] loop3: detected capacity change from 0 to 256 [ 934.617802][T12444] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 934.739657][T14248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3741'. [ 934.824650][T12444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.047945][T12444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.183830][T12444] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 935.418765][T12444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.449376][T12444] usb 1-1: config 0 descriptor?? [ 935.777979][T14260] loop3: detected capacity change from 0 to 16 [ 935.785780][T14260] erofs: (device loop3): mounted with root inode @ nid 36. [ 935.940438][T12444] pyra 0003:1E7D:2CF6.005E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 936.107286][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3745'. [ 936.146834][T14264] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3745'. [ 936.146936][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3746'. [ 936.251511][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3746'. [ 936.490878][T12444] pyra 0003:1E7D:2CF6.005E: couldn't init struct pyra_device [ 936.508461][T12444] pyra 0003:1E7D:2CF6.005E: couldn't install mouse [ 936.532044][T12444] pyra: probe of 0003:1E7D:2CF6.005E failed with error -32 [ 936.629575][T12444] usb 1-1: USB disconnect, device number 64 [ 936.713083][T14279] fido_id[14279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 936.931170][T14288] 9pnet_fd: Insufficient options for proto=fd [ 938.418769][T14293] loop3: detected capacity change from 0 to 256 [ 938.733162][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3754'. [ 939.804442][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3753'. [ 940.437551][T14315] loop5: detected capacity change from 0 to 256 [ 940.499362][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 940.508921][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3757'. [ 941.325284][T14320] overlayfs: failed to resolve './file7': -2 [ 941.340088][T14320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14320 comm=syz.6.3760 [ 942.554579][T14347] x_tables: duplicate underflow at hook 1 [ 942.686983][T12444] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 942.854990][T12444] usb 4-1: Using ep0 maxpacket: 16 [ 942.861487][T12444] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.871695][T12444] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.880680][T12444] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 942.895233][T12444] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 942.904412][T12444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.912518][T12444] usb 4-1: Product: syz [ 942.916736][T12444] usb 4-1: Manufacturer: syz [ 942.921425][T12444] usb 4-1: SerialNumber: syz [ 943.116145][T12444] usb 4-1: 0:2 : does not exist [ 943.121219][T12444] usb 4-1: unit 6 not found! [ 943.127814][T12444] usb 4-1: USB disconnect, device number 66 [ 943.375121][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 943.415788][T14362] loop5: detected capacity change from 0 to 256 [ 943.471617][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3770'. [ 943.751876][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3773'. [ 944.958333][T14374] loop5: detected capacity change from 0 to 256 [ 945.852207][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 946.736035][T14379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 947.908560][T12444] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 948.289326][T12444] usb 6-1: Using ep0 maxpacket: 16 [ 948.295706][T12444] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.365235][T12444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.380571][T12444] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 948.395031][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 948.405748][T12444] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.420543][T12444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.430048][T12444] usb 6-1: Product: syz [ 948.434504][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'. [ 948.434554][T12444] usb 6-1: Manufacturer: syz [ 948.448480][T12444] usb 6-1: SerialNumber: syz [ 948.454737][ T28] audit: type=1326 audit(1757596410.272:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1258eba9 code=0x0 [ 948.546369][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3784'. [ 948.691112][T12444] usb 6-1: 0:2 : does not exist [ 948.729866][T12444] usb 6-1: unit 6 not found! [ 948.832528][T12444] usb 6-1: USB disconnect, device number 44 [ 949.757379][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 949.808080][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3785'. [ 949.967072][ T1398] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 950.750131][ T1398] usb 7-1: Using ep0 maxpacket: 16 [ 950.756600][ T1398] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.823138][ T1398] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 950.860852][ T1398] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 950.877083][T14425] loop5: detected capacity change from 0 to 16 [ 950.879410][T14419] 9pnet_fd: Insufficient options for proto=fd [ 950.884903][T14425] erofs: (device loop5): mounted with root inode @ nid 36. [ 950.897303][ T1398] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.898966][ T46] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 950.919536][T14425] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 950.931022][T14425] x_tables: duplicate underflow at hook 1 [ 950.958993][ T1398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.967318][ T1398] usb 7-1: Product: syz [ 950.971560][ T1398] usb 7-1: Manufacturer: syz [ 950.976309][ T1398] usb 7-1: SerialNumber: syz [ 951.173204][ T1398] usb 7-1: 0:2 : does not exist [ 951.198886][ T1398] usb 7-1: unit 6 not found! [ 951.279197][ T1398] usb 7-1: USB disconnect, device number 13 [ 951.595285][T14437] loop5: detected capacity change from 0 to 256 [ 952.874342][T14452] loop3: detected capacity change from 0 to 16 [ 952.917788][T14452] erofs: (device loop3): mounted with root inode @ nid 36. [ 953.230330][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3795'. [ 953.256290][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3795'. [ 953.303416][ T28] audit: type=1326 audit(1757596415.443:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.4.3795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 953.588140][T14468] loop3: detected capacity change from 0 to 256 [ 953.655523][T10855] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 953.759481][T14469] loop5: detected capacity change from 0 to 256 [ 953.829734][T14474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3803'. [ 953.854736][T14469] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 954.653952][T14478] 9pnet_fd: Insufficient options for proto=fd [ 954.748283][T10855] usb 7-1: Using ep0 maxpacket: 16 [ 954.754729][T10855] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.765735][T10855] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 954.782389][T10855] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 954.799626][T10855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.812253][T10855] usb 7-1: Product: syz [ 954.824676][T10855] usb 7-1: Manufacturer: syz [ 954.837856][T10855] usb 7-1: SerialNumber: syz [ 954.859834][ T19] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 955.191870][T10855] usb 7-1: 0:2 : does not exist [ 955.196964][T10855] usb 7-1: unit 6 not found! [ 955.208840][T10855] usb 7-1: USB disconnect, device number 14 [ 955.269958][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 955.277121][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.287336][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 955.304918][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.314091][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.322272][ T19] usb 1-1: Product: syz [ 955.326531][ T19] usb 1-1: Manufacturer: syz [ 955.331201][ T19] usb 1-1: SerialNumber: syz [ 955.428788][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 955.525881][ T19] usb 1-1: 0:2 : does not exist [ 955.535713][ T19] usb 1-1: unit 6 not found! [ 955.546129][ T19] usb 1-1: USB disconnect, device number 65 [ 956.499017][T10855] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 956.856874][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 956.979832][T10855] usb 6-1: Using ep0 maxpacket: 16 [ 956.986517][T10855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.876110][T14502] loop3: detected capacity change from 0 to 40427 [ 957.897569][T14502] F2FS-fs (loop3): fault_injection options not supported [ 957.904957][ T1398] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 957.931586][T14502] F2FS-fs (loop3): Image doesn't support compression [ 957.945656][T14502] F2FS-fs (loop3): Image doesn't support compression [ 957.963218][T14502] F2FS-fs (loop3): invalid crc value [ 957.982606][T14502] F2FS-fs (loop3): Found nat_bits in checkpoint [ 958.058645][T14502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 958.123350][ T1398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.144093][ T1398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.170233][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3812'. [ 958.187811][ T1398] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 958.208646][ T1398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.236254][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3812'. [ 958.245798][ T1398] usb 1-1: config 0 descriptor?? [ 958.280521][ T28] audit: type=1326 audit(1757596420.797:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14501 comm="syz.3.3812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bca18eba9 code=0x0 [ 958.430351][T11918] syz-executor: attempt to access beyond end of device [ 958.430351][T11918] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 958.651352][T14521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3816'. [ 958.679398][ T1398] pyra 0003:1E7D:2CF6.005F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 959.263783][ T1398] pyra 0003:1E7D:2CF6.005F: couldn't init struct pyra_device [ 959.362399][T10855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 959.371595][ T1398] pyra 0003:1E7D:2CF6.005F: couldn't install mouse [ 959.379929][T10855] usb 6-1: string descriptor 0 read error: -71 [ 959.423288][T10855] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 959.432519][T10855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.448414][T10855] usb 6-1: can't set config #1, error -71 [ 959.465582][T10855] usb 6-1: USB disconnect, device number 45 [ 959.559267][ T1398] pyra: probe of 0003:1E7D:2CF6.005F failed with error -32 [ 959.567161][T14531] 9pnet_fd: Insufficient options for proto=fd [ 959.591826][ T1398] usb 1-1: USB disconnect, device number 66 [ 959.659811][T14532] fido_id[14532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 961.071757][T14549] loop3: detected capacity change from 0 to 256 [ 961.094513][T14549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 962.161853][ T19] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 963.379956][T14577] 9pnet_fd: Insufficient options for proto=fd [ 964.043832][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'. [ 964.053495][T14571] 9pnet_fd: Insufficient options for proto=fd [ 964.070298][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3831'. [ 964.259842][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 964.274512][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.292939][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.305902][T14589] 9pnet_fd: Insufficient options for proto=fd [ 964.336572][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.345794][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.353918][ T19] usb 5-1: Product: syz [ 964.358160][ T19] usb 5-1: Manufacturer: syz [ 964.362838][ T19] usb 5-1: SerialNumber: syz [ 964.926058][ T19] usb 5-1: 0:2 : does not exist [ 964.926219][ T1398] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 964.975780][ T19] usb 5-1: unit 6 not found! [ 965.445867][ T1398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.457694][ T1398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.467916][ T1398] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 965.477442][ T1398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.873235][ T1398] usb 4-1: config 0 descriptor?? [ 965.885649][ T19] usb 5-1: USB disconnect, device number 61 [ 966.324732][ T1398] pyra 0003:1E7D:2CF6.0060: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 966.365015][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 966.688140][ T19] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 966.877469][ T1398] pyra 0003:1E7D:2CF6.0060: couldn't init struct pyra_device [ 967.015134][ T1398] pyra 0003:1E7D:2CF6.0060: couldn't install mouse [ 967.231568][ T1398] pyra: probe of 0003:1E7D:2CF6.0060 failed with error -32 [ 967.408400][ T1398] usb 4-1: USB disconnect, device number 67 [ 967.653034][T14619] fido_id[14619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 967.883254][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3843'. [ 967.890579][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 967.905734][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.926865][ T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 967.928271][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3843'. [ 967.946254][ T19] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.964090][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.981178][ T19] usb 7-1: Product: syz [ 967.989976][ T19] usb 7-1: Manufacturer: syz [ 967.999116][ T19] usb 7-1: SerialNumber: syz [ 968.534840][ T19] usb 7-1: 0:2 : does not exist [ 968.539830][ T19] usb 7-1: unit 6 not found! [ 968.601510][ T19] usb 7-1: USB disconnect, device number 15 [ 968.765598][T14633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3846'. [ 970.964505][T14642] overlayfs: failed to resolve './file7': -2 [ 971.009077][T14642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14642 comm=syz.6.3849 [ 971.169144][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 972.337475][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3855'. [ 972.403787][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3855'. [ 972.457143][ T60] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 973.408702][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 973.430886][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.458617][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.478383][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 973.500590][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.542667][ T60] usb 1-1: Product: syz [ 973.546984][ T60] usb 1-1: Manufacturer: syz [ 973.551796][ T60] usb 1-1: SerialNumber: syz [ 973.648319][T14678] 9pnet_fd: Insufficient options for proto=fd [ 973.955412][ T60] usb 1-1: 0:2 : does not exist [ 973.960517][ T60] usb 1-1: unit 6 not found! [ 973.991445][ T60] usb 1-1: USB disconnect, device number 67 [ 974.339993][T14682] 9pnet_fd: Insufficient options for proto=fd [ 975.236740][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3860'. [ 975.417070][T14693] overlayfs: failed to resolve './file7': -2 [ 975.428324][T14693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14693 comm=syz.3.3863 [ 975.715984][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3860'. [ 975.735397][ T28] audit: type=1326 audit(1757596439.540:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.5.3860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344498eba9 code=0x0 [ 975.975947][ T39] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 976.539418][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 976.552012][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.644197][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.653396][ T39] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 976.671493][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.680665][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.483844][ T39] usb 1-1: Product: syz [ 977.488068][ T39] usb 1-1: Manufacturer: syz [ 977.493026][ T39] usb 1-1: SerialNumber: syz [ 977.799525][ T39] usb 1-1: 0:2 : does not exist [ 977.804751][ T39] usb 1-1: unit 6 not found! [ 977.842388][ T39] usb 1-1: USB disconnect, device number 68 [ 977.935717][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3869'. [ 978.054446][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 982.218017][T14758] overlayfs: failed to resolve './file7': -2 [ 982.299378][T14759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14759 comm=syz.5.3877 [ 984.377447][T14768] 9pnet_fd: Insufficient options for proto=fd [ 984.422161][T14768] 9pnet_fd: Insufficient options for proto=fd [ 984.695909][ T19] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 985.638238][ T19] usb 7-1: device not accepting address 16, error -71 [ 985.926724][T14792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3887'. [ 991.157216][T14820] overlayfs: failed to resolve './file7': -2 [ 991.170423][T14820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14820 comm=syz.3.3895 [ 991.321769][ T19] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 991.500017][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.511071][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.527372][ T19] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 991.537353][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.560367][ T19] usb 7-1: config 0 descriptor?? [ 991.586192][T14827] 9pnet_fd: Insufficient options for proto=fd [ 991.637684][T14827] 9pnet_fd: Insufficient options for proto=fd [ 991.825002][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3898'. [ 992.758023][ T19] pyra 0003:1E7D:2CF6.0061: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 992.870595][ T19] pyra 0003:1E7D:2CF6.0061: couldn't init struct pyra_device [ 992.883947][T14841] x_tables: duplicate underflow at hook 1 [ 992.893328][ T19] pyra 0003:1E7D:2CF6.0061: couldn't install mouse [ 992.900745][ T19] pyra: probe of 0003:1E7D:2CF6.0061 failed with error -32 [ 994.108145][ T19] usb 7-1: USB disconnect, device number 17 [ 1000.215605][T14882] 9pnet_fd: Insufficient options for proto=fd [ 1000.570571][T14890] 9pnet_fd: Insufficient options for proto=fd [ 1000.656811][T14893] x_tables: duplicate underflow at hook 1 [ 1000.746327][T14890] 9pnet_fd: Insufficient options for proto=fd [ 1003.195861][T14908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1005.532864][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1008.602452][T14933] overlayfs: failed to resolve './file7': -2 [ 1008.614491][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3919'. [ 1008.666837][T14934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14934 comm=syz.5.3921 [ 1008.687240][ T28] audit: type=1326 audit(1757596474.903:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.0.3919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1258eba9 code=0x0 [ 1008.912721][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1008.940469][T14941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1009.880671][T14949] overlayfs: failed to resolve './file7': -2 [ 1009.889127][T14949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14949 comm=syz.0.3924 [ 1010.680681][T14958] x_tables: duplicate underflow at hook 1 [ 1011.035016][T14967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3928'. [ 1012.052511][T14980] 9pnet_fd: Insufficient options for proto=fd [ 1012.174753][T14983] 9pnet_fd: Insufficient options for proto=fd [ 1013.353320][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1013.362667][T14991] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1014.707037][T15001] overlayfs: failed to resolve './file7': -2 [ 1014.718373][T15001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15001 comm=syz.0.3939 [ 1016.296955][T15007] x_tables: duplicate underflow at hook 1 [ 1017.592930][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1017.602697][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1021.240751][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3952'. [ 1021.262594][ T28] audit: type=1326 audit(1757596488.390:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.3952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086498eba9 code=0x0 [ 1021.299913][T15061] overlayfs: failed to resolve './file7': -2 [ 1021.320892][T15061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15061 comm=syz.4.3955 [ 1021.502702][T15071] x_tables: duplicate underflow at hook 1 [ 1022.029391][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1022.038752][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1022.984496][T15082] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1025.291904][T15085] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3962'. [ 1030.527405][T15117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1030.559278][ T28] audit: type=1326 audit(1757596498.357:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15116 comm="syz.6.3970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086498eba9 code=0x0 [ 1030.895594][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1030.906752][T15135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1030.920855][T15136] x_tables: duplicate underflow at hook 1 [ 1033.189180][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1033.202097][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1033.232547][T15154] x_tables: duplicate underflow at hook 1 [ 1033.373787][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1033.383688][ T28] audit: type=1326 audit(1757596501.393:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 1033.455644][T15161] overlayfs: failed to resolve './file7': -2 [ 1033.469087][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.3.3982 [ 1034.279044][T15177] x_tables: duplicate underflow at hook 1 [ 1035.310327][T15187] overlayfs: failed to resolve './file7': -2 [ 1035.329702][T15187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15187 comm=syz.6.4000 [ 1036.246463][T15214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1036.556915][T15216] 9pnet_fd: Insufficient options for proto=fd [ 1037.379917][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4002'. [ 1037.399573][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4002'. [ 1039.431180][T15259] overlayfs: failed to resolve './file7': -2 [ 1039.462400][T15259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15259 comm=syz.6.4009 [ 1040.428327][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1041.000241][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1041.457916][ T28] audit: type=1326 audit(1757596510.062:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.3.4010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bca18eba9 code=0x0 [ 1042.299946][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4017'. [ 1042.407273][ T28] audit: type=1326 audit(1757596511.060:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.4017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bca18eba9 code=0x0 [ 1042.516547][T15288] x_tables: duplicate underflow at hook 1 [ 1047.696638][T15358] x_tables: duplicate underflow at hook 1 [ 1047.810080][T15367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1049.036214][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1049.053530][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1055.447126][ T343] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1056.650409][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.669024][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.143360][ T343] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1057.152652][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.246794][ T343] usb 5-1: config 0 descriptor?? [ 1057.250413][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4066'. [ 1057.261963][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4066'. [ 1057.657413][ T343] pyra 0003:1E7D:2CF6.0062: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1057.767828][ T60] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1057.937249][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.948263][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.958100][ T60] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1057.967236][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.976201][ T60] usb 4-1: config 0 descriptor?? [ 1058.049943][T15473] 9pnet_fd: Insufficient options for proto=fd [ 1058.204799][ T343] pyra 0003:1E7D:2CF6.0062: couldn't init struct pyra_device [ 1058.238329][ T343] pyra 0003:1E7D:2CF6.0062: couldn't install mouse [ 1058.415871][ T343] pyra: probe of 0003:1E7D:2CF6.0062 failed with error -32 [ 1058.493362][ T343] usb 5-1: USB disconnect, device number 62 [ 1058.552810][ T60] pyra 0003:1E7D:2CF6.0063: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1058.588113][T15482] fido_id[15482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1060.433353][T15502] x_tables: duplicate underflow at hook 1 [ 1060.562190][ T60] pyra 0003:1E7D:2CF6.0063: couldn't init struct pyra_device [ 1060.572145][ T60] pyra 0003:1E7D:2CF6.0063: couldn't install mouse [ 1060.580122][ T60] pyra: probe of 0003:1E7D:2CF6.0063 failed with error -32 [ 1060.588890][ T60] usb 4-1: USB disconnect, device number 68 [ 1061.384098][T15511] fido_id[15511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1062.387852][T15508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4077'. [ 1062.462118][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4077'. [ 1062.583078][ T28] audit: type=1326 audit(1757596532.722:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15507 comm="syz.0.4077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1258eba9 code=0x0 [ 1063.281985][T15531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4081'. [ 1064.470797][T15537] fuse: Bad value for 'fd' [ 1065.818288][T15558] overlayfs: failed to resolve './file7': -2 [ 1065.848765][T15558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15558 comm=syz.5.4088 [ 1067.639364][T15566] overlayfs: failed to resolve './file7': -2 [ 1068.021044][T15567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15567 comm=syz.6.4090 [ 1069.744471][T15574] overlayfs: failed to resolve './file7': -2 [ 1069.806290][T15574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15574 comm=syz.5.4093 [ 1072.000572][ T1029] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1072.366655][T15598] overlayfs: failed to resolve './file7': -2 [ 1072.387202][T15598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15598 comm=syz.0.4099 [ 1072.440256][ T1029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.044166][ T1029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.081842][ T1029] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1073.306448][ T1029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.626169][ T1029] usb 6-1: config 0 descriptor?? [ 1073.632060][T15606] 9pnet_fd: Insufficient options for proto=fd [ 1074.190759][ T1029] usbhid 6-1:0.0: can't add hid device: -71 [ 1074.210266][ T1029] usbhid: probe of 6-1:0.0 failed with error -71 [ 1074.307544][ T1029] usb 6-1: USB disconnect, device number 46 [ 1074.731219][ T1398] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1075.262606][T15631] overlayfs: failed to resolve './file7': -2 [ 1075.357071][T15631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15631 comm=syz.5.4104 [ 1076.502551][ T1398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.701032][ T1398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.822598][ T1398] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1076.897901][ T1398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.937365][ T1398] usb 7-1: config 0 descriptor?? [ 1077.044694][ T1398] usbhid 7-1:0.0: can't add hid device: -71 [ 1077.183801][T15650] 9pnet_fd: Insufficient options for proto=fd [ 1077.223371][T15658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1077.286588][ T1398] usbhid: probe of 7-1:0.0 failed with error -71 [ 1077.294314][ T1398] usb 7-1: USB disconnect, device number 18 [ 1078.611674][T15662] overlayfs: failed to resolve './file7': -2 [ 1078.629296][T15662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15662 comm=syz.6.4114 [ 1079.159922][ T1029] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1079.383564][ T1029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.394752][ T1029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.405693][ T1029] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1079.503530][ T1029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.513394][ T1029] usb 6-1: config 0 descriptor?? [ 1079.913363][ T1029] pyra 0003:1E7D:2CF6.0064: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1080.562219][T15695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1081.224696][ T1029] pyra 0003:1E7D:2CF6.0064: couldn't init struct pyra_device [ 1081.489146][ T1029] pyra 0003:1E7D:2CF6.0064: couldn't install mouse [ 1082.318841][ T1029] pyra: probe of 0003:1E7D:2CF6.0064 failed with error -32 [ 1082.335099][ T1029] usb 6-1: USB disconnect, device number 47 [ 1082.660569][T15714] fido_id[15714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1083.354838][ T60] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1084.173117][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.189661][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.201678][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1084.211116][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.244391][ T60] usb 1-1: config 0 descriptor?? [ 1084.752865][ T60] pyra 0003:1E7D:2CF6.0065: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1085.441710][T15758] overlayfs: failed to resolve './file7': -2 [ 1085.455810][T15758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15758 comm=syz.5.4140 [ 1086.385861][ T60] pyra 0003:1E7D:2CF6.0065: couldn't init struct pyra_device [ 1086.396360][ T60] pyra 0003:1E7D:2CF6.0065: couldn't install mouse [ 1087.069159][ T60] pyra: probe of 0003:1E7D:2CF6.0065 failed with error -32 [ 1087.086992][ T60] usb 1-1: USB disconnect, device number 69 [ 1087.236431][T15769] fido_id[15769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1087.315134][T15775] 9pnet_fd: Insufficient options for proto=fd [ 1088.804535][T15786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4142'. [ 1089.886966][ T60] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1090.642811][T15797] overlayfs: failed to resolve './file7': -2 [ 1090.658395][T15797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15797 comm=syz.6.4149 [ 1090.900377][T15799] 9pnet_fd: Insufficient options for proto=fd [ 1090.944031][T15802] x_tables: duplicate underflow at hook 1 [ 1091.030515][T15804] 9pnet_fd: Insufficient options for proto=fd [ 1091.297343][T15807] 9pnet_fd: Insufficient options for proto=fd [ 1091.359673][ T60] usb 1-1: device descriptor read/all, error -71 [ 1091.382589][T15807] 9pnet_fd: Insufficient options for proto=fd [ 1091.444833][T15812] x_tables: duplicate underflow at hook 1 [ 1092.587051][T15816] overlayfs: failed to resolve './file7': -2 [ 1092.606177][T15816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15816 comm=syz.3.4153 [ 1095.758716][T15843] 9pnet_fd: Insufficient options for proto=fd [ 1096.239625][T15853] overlayfs: failed to resolve './file7': -2 [ 1096.257053][T15853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15853 comm=syz.6.4164 [ 1096.569469][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1096.734029][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1097.103814][T15866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4166'. [ 1097.196490][T15869] x_tables: duplicate underflow at hook 1 [ 1097.818498][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1098.072086][ T28] audit: type=1400 audit(1757596570.799:943): avc: denied { write } for pid=15890 comm="syz.0.4174" name="file0" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1098.116429][ T28] audit: type=1400 audit(1757596570.821:944): avc: denied { open } for pid=15890 comm="syz.0.4174" path="/205/file0" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1098.141316][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4173'. [ 1098.151660][ T28] audit: type=1400 audit(1757596570.821:945): avc: denied { ioctl } for pid=15890 comm="syz.0.4174" path="/205/file0" dev="tmpfs" ino=1213 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1098.179408][ T28] audit: type=1400 audit(1757596570.821:946): avc: denied { mounton } for pid=15890 comm="syz.0.4174" path="/205/file0" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1098.709932][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4176'. [ 1098.738816][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4176'. [ 1099.234013][T15907] overlayfs: failed to resolve './file7': -2 [ 1099.329999][T15908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15908 comm=syz.5.4177 [ 1099.647836][T15914] 9pnet_fd: Insufficient options for proto=fd [ 1100.088100][T15918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1100.095492][T15918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1100.123364][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1100.136958][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1100.162851][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1100.189299][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1100.218991][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1100.308064][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1100.335861][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1100.363886][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1100.437899][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1100.447958][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1100.460274][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1100.470773][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1100.480840][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1100.490106][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1100.498866][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1100.507700][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1100.516501][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1100.530631][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1100.548407][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1100.558110][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1100.573045][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1100.586963][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1100.601902][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1100.617898][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1100.632979][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1100.648702][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1100.664496][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 1100.691541][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1100.705079][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1100.734275][T15930] x_tables: duplicate underflow at hook 1 [ 1100.788631][ T28] audit: type=1400 audit(1757596573.707:947): avc: denied { lock } for pid=15933 comm="syz.5.4186" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1101.790334][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1101.890692][T15951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1102.278570][T15964] FAULT_INJECTION: forcing a failure. [ 1102.278570][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.291398][T15964] CPU: 1 PID: 15964 Comm: syz.0.4194 Not tainted syzkaller #0 [ 1102.298890][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1102.309145][T15964] Call Trace: [ 1102.312801][T15964] [ 1102.315890][T15964] __dump_stack+0x21/0x24 [ 1102.320331][T15964] dump_stack_lvl+0xee/0x150 [ 1102.325118][T15964] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1102.330337][T15964] ? release_firmware_map_entry+0x194/0x194 [ 1102.336257][T15964] dump_stack+0x15/0x24 [ 1102.340472][T15964] should_fail_ex+0x3d4/0x520 [ 1102.345413][T15964] __should_failslab+0xac/0xf0 [ 1102.350207][T15964] should_failslab+0x9/0x20 [ 1102.354737][T15964] slab_pre_alloc_hook+0x30/0x1e0 [ 1102.359840][T15964] kmem_cache_alloc_lru+0x49/0x280 [ 1102.365348][T15964] ? new_inode_pseudo+0x8f/0x1f0 [ 1102.370368][T15964] new_inode_pseudo+0x8f/0x1f0 [ 1102.375176][T15964] alloc_anon_inode+0x21/0x300 [ 1102.379980][T15964] __anon_inode_getfile+0x13a/0x340 [ 1102.385213][T15964] ? anon_inode_getfile+0x180/0x180 [ 1102.390482][T15964] anon_inode_getfd_secure+0x55/0xa0 [ 1102.395878][T15964] new_userfaultfd+0x1ec/0x350 [ 1102.400649][T15964] __x64_sys_userfaultfd+0x85/0xa0 [ 1102.405796][T15964] x64_sys_call+0x4d5/0x9a0 [ 1102.410317][T15964] do_syscall_64+0x4c/0xa0 [ 1102.414834][T15964] ? clear_bhb_loop+0x30/0x80 [ 1102.419525][T15964] ? clear_bhb_loop+0x30/0x80 [ 1102.424219][T15964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1102.430122][T15964] RIP: 0033:0x7f5e1258eba9 [ 1102.434542][T15964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.454152][T15964] RSP: 002b:00007f5e133fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1102.462573][T15964] RAX: ffffffffffffffda RBX: 00007f5e127d6180 RCX: 00007f5e1258eba9 [ 1102.470552][T15964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080801 [ 1102.478525][T15964] RBP: 00007f5e133fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.486502][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.494481][T15964] R13: 00007f5e127d6218 R14: 00007f5e127d6180 R15: 00007ffeaab20f58 [ 1102.502472][T15964] [ 1102.700605][T15969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4195'. [ 1102.799042][ T28] audit: type=1326 audit(1757596575.874:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1102.841912][ T28] audit: type=1326 audit(1757596575.874:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1102.882144][ T28] audit: type=1326 audit(1757596575.874:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1102.971960][ T28] audit: type=1326 audit(1757596575.874:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.021997][ T28] audit: type=1326 audit(1757596575.874:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.022698][T15988] x_tables: duplicate underflow at hook 1 [ 1103.055811][ T28] audit: type=1326 audit(1757596575.895:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.079807][ T28] audit: type=1326 audit(1757596575.895:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.109600][ T28] audit: type=1326 audit(1757596575.895:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.133629][ T28] audit: type=1326 audit(1757596575.895:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.162367][ T28] audit: type=1326 audit(1757596575.895:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.4.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e298eba9 code=0x7ffc0000 [ 1103.205521][T12464] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1103.837235][T12464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.124396][T12464] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1104.133705][T12464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.142540][T12464] usb 4-1: config 0 descriptor?? [ 1104.597523][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4207'. [ 1104.809510][T16016] xt_bpf: check failed: parse error [ 1104.825942][T12464] keytouch 0003:0926:3333.0066: fixing up Keytouch IEC report descriptor [ 1105.131958][T12464] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0066/input/input20 [ 1105.203004][T12464] keytouch 0003:0926:3333.0066: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1106.843122][T12464] usb 4-1: USB disconnect, device number 69 [ 1106.890169][T16039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4213'. [ 1106.943724][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4213'. [ 1107.215091][T16064] /dev/loop0: Can't open blockdev [ 1107.674408][T16077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4224'. [ 1109.074250][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4228'. [ 1109.104858][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4228'. [ 1109.310937][ T1029] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1109.478695][ T1029] usb 6-1: Using ep0 maxpacket: 32 [ 1109.485022][ T1029] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1109.502282][ T1029] usb 6-1: config 0 has no interface number 0 [ 1109.516416][ T1029] usb 6-1: config 0 interface 214 has no altsetting 0 [ 1109.533286][ T1029] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1109.555879][ T1029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.576880][ T1029] usb 6-1: Product: syz [ 1109.587998][ T1029] usb 6-1: Manufacturer: syz [ 1109.600386][ T1029] usb 6-1: SerialNumber: syz [ 1109.614437][ T1029] usb 6-1: config 0 descriptor?? [ 1109.629914][T16095] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4232'. [ 1109.649022][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4232'. [ 1109.668315][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1109.668332][ T28] audit: type=1326 audit(1757596583.234:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.6.4232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086498eba9 code=0x0 [ 1110.803065][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 1111.516688][T16131] 9pnet_fd: Insufficient options for proto=fd [ 1111.523760][T16131] 9pnet_fd: Insufficient options for proto=fd [ 1111.819158][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1111.831922][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1111.834085][T16133] fuseblk: Unknown parameter 'alluwother' [ 1111.843662][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1111.861186][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1111.876588][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1111.888267][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1111.899722][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1111.911182][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1111.932198][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1111.950354][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1111.968054][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1111.986959][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1112.009028][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1112.025045][ T28] audit: type=1400 audit(1757596585.766:1021): avc: denied { mount } for pid=16134 comm="syz.0.4245" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1112.025768][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1112.058798][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1112.077111][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1112.098032][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1112.140152][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1112.156626][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1112.333788][ T1029] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1112.551121][ T1029] ax88179_178a 6-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, a8:4f:70:ec:00:00 [ 1112.664833][ T1029] usb 6-1: USB disconnect, device number 48 [ 1112.684227][ T1029] ax88179_178a 6-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1112.733152][T16157] 9pnet_fd: Insufficient options for proto=fd [ 1113.547345][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'. [ 1114.765430][T16167] fuse: Bad value for 'group_id' [ 1115.027590][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4261'. [ 1117.802374][T16206] fuse: Bad value for 'group_id' [ 1119.110182][ T28] audit: type=1400 audit(1757596593.362:1022): avc: denied { mount } for pid=16215 comm="syz.3.4273" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1119.298756][T16226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1119.492208][T16228] 9pnet_fd: Insufficient options for proto=fd [ 1119.579702][T16228] 9pnet_fd: Insufficient options for proto=fd [ 1121.449607][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4274'. [ 1121.479367][ T28] audit: type=1326 audit(1757596595.905:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.5.4274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344498eba9 code=0x0 [ 1124.419530][ T19] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1124.606848][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1124.624352][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1124.669664][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.691929][ T19] usb 5-1: config 0 descriptor?? [ 1127.000892][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1127.022726][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1127.692472][T16298] overlayfs: failed to resolve './file7': -2 [ 1127.713982][T16298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16298 comm=syz.5.4293 [ 1127.750871][T16300] 9pnet_fd: Insufficient options for proto=fd [ 1127.774414][T16300] 9pnet_fd: Insufficient options for proto=fd [ 1127.796619][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 1127.804879][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 1127.864594][ T19] usb 5-1: USB disconnect, device number 63 [ 1128.584475][ T19] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1130.268034][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.290914][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.377810][T16322] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4299'. [ 1130.380391][ T19] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1130.438873][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.534313][ T19] usb 5-1: config 0 descriptor?? [ 1130.687649][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 1130.701469][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 1130.718571][ T19] usb 5-1: USB disconnect, device number 64 [ 1130.830754][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1130.925788][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1130.954168][T16336] overlayfs: failed to resolve './file7': -2 [ 1130.968789][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16336 comm=syz.0.4302 [ 1133.189944][T16358] 9pnet_fd: Insufficient options for proto=fd [ 1133.228290][T16358] 9pnet_fd: Insufficient options for proto=fd [ 1135.511720][T16376] overlayfs: failed to resolve './file7': -2 [ 1135.553150][T16376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16376 comm=syz.4.4315 [ 1136.228309][ T1029] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1136.517047][ T1029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.695244][ T1029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.940886][ T1029] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1137.521643][T16397] overlayfs: failed to resolve './file7': -2 [ 1137.528789][T16397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16397 comm=syz.4.4321 [ 1137.581005][ T1029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.662983][ T1029] usb 4-1: config 0 descriptor?? [ 1137.674335][T16402] fuse: Unknown parameter 'grou00000000000000000000' [ 1137.680661][ T1029] usb 4-1: can't set config #0, error -71 [ 1137.706760][ T1029] usb 4-1: USB disconnect, device number 70 [ 1138.356976][T16410] 9pnet_fd: Insufficient options for proto=fd [ 1138.921651][T12464] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1139.118081][T16425] 9pnet_fd: Insufficient options for proto=fd [ 1139.146427][T12464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.163342][T12464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.185169][T12464] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1139.203880][T12464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.263508][T12464] usb 6-1: config 0 descriptor?? [ 1139.480867][T12402] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1139.547589][T16437] fuse: Unknown parameter 'grou00000000000000000000' [ 1139.650840][T12464] pyra 0003:1E7D:2CF6.0067: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1139.696932][T12402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.707998][T12402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.718087][T12402] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1139.727242][T12402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.736099][T12402] usb 5-1: config 0 descriptor?? [ 1140.118426][T12402] pyra 0003:1E7D:2CF6.0068: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1140.210150][T12464] pyra 0003:1E7D:2CF6.0067: couldn't init struct pyra_device [ 1140.217817][T12464] pyra 0003:1E7D:2CF6.0067: couldn't install mouse [ 1140.232993][T12464] pyra: probe of 0003:1E7D:2CF6.0067 failed with error -32 [ 1140.249685][T12464] usb 6-1: USB disconnect, device number 49 [ 1140.277644][T16448] fido_id[16448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1140.703171][T12402] pyra 0003:1E7D:2CF6.0068: couldn't init struct pyra_device [ 1140.737971][T12402] pyra 0003:1E7D:2CF6.0068: couldn't install mouse [ 1140.779957][T12402] pyra: probe of 0003:1E7D:2CF6.0068 failed with error -32 [ 1140.839292][T12402] usb 5-1: USB disconnect, device number 65 [ 1140.950352][T16462] fido_id[16462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1141.004296][T16463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4340'. [ 1141.606468][T16470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4344'. [ 1142.668107][T16477] fuse: Unknown parameter 'grou00000000000000000000' [ 1143.849109][T16487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1144.019525][T16494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1144.039458][T16494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1144.112447][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1144.142548][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1144.180111][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1144.216640][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1144.245668][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1144.263454][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1144.271813][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1144.290869][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1145.348869][T16514] overlayfs: failed to resolve './file7': -2 [ 1145.375183][T16514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16514 comm=syz.5.4354 [ 1146.485283][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4358'. [ 1146.992141][T16535] x_tables: duplicate underflow at hook 1 [ 1147.487256][T12464] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1147.679024][T12464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.692407][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4365'. [ 1147.698196][T12464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.711833][T16545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4365'. [ 1147.758848][T12464] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1147.777575][T12464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.814745][T12464] usb 5-1: config 0 descriptor?? [ 1148.644306][T12464] pyra 0003:1E7D:2CF6.0069: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1150.183896][T12464] pyra 0003:1E7D:2CF6.0069: couldn't init struct pyra_device [ 1150.191474][T12464] pyra 0003:1E7D:2CF6.0069: couldn't install mouse [ 1150.198554][T12464] pyra: probe of 0003:1E7D:2CF6.0069 failed with error -32 [ 1150.219217][T12464] usb 5-1: USB disconnect, device number 66 [ 1150.249565][T16574] fido_id[16574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1150.574808][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4371'. [ 1151.176381][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4372'. [ 1151.207088][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'. [ 1151.262869][ T28] audit: type=1326 audit(1757596627.867:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.3.4372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bca18eba9 code=0x0 [ 1151.711750][T16588] overlayfs: failed to resolve './file7': -2 [ 1151.724304][T16588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16588 comm=syz.3.4375 [ 1152.190385][T16598] overlayfs: failed to resolve './file7': -2 [ 1152.230301][T16598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16598 comm=syz.0.4378 [ 1153.636558][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1155.016982][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4381'. [ 1155.438558][T16627] netlink: 'syz.6.4386': attribute type 9 has an invalid length. [ 1156.894471][ T28] audit: type=1400 audit(1757596633.907:1025): avc: denied { getopt } for pid=16649 comm="syz.0.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1157.150161][T16663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4396'. [ 1157.963002][T16672] fuse: Bad value for 'user_id' [ 1158.461188][T16687] 9pnet_fd: Insufficient options for proto=fd [ 1158.565912][T16689] 9pnet_fd: Insufficient options for proto=fd [ 1159.059824][T16697] overlayfs: failed to resolve './file0': -2 [ 1159.966837][T16703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1160.011003][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1160.046985][ T28] audit: type=1326 audit(1757596637.287:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16702 comm="syz.6.4407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086498eba9 code=0x0 [ 1160.784273][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4413'. [ 1161.738822][T16737] overlayfs: failed to resolve './file7': -2 [ 1161.756274][T16737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16737 comm=syz.5.4416 [ 1161.850309][T12283] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1161.850348][T12402] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1162.047717][T12402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.530746][T12402] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1162.575949][T12402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.624178][T12402] usb 4-1: config 0 descriptor?? [ 1162.708711][T12283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.725804][T12283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.748273][T12283] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1162.768229][T12283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.791597][T12283] usb 1-1: config 0 descriptor?? [ 1163.005742][T12402] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 1163.028387][T12402] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006A/input/input21 [ 1163.140191][T12402] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1163.181559][T12283] pyra 0003:1E7D:2CF6.006B: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1163.195824][T16753] FAULT_INJECTION: forcing a failure. [ 1163.195824][T16753] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.208768][T16753] CPU: 0 PID: 16753 Comm: syz.4.4420 Not tainted syzkaller #0 [ 1163.216374][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1163.226477][T16753] Call Trace: [ 1163.226491][T16753] [ 1163.226499][T16753] __dump_stack+0x21/0x24 [ 1163.226526][T16753] dump_stack_lvl+0xee/0x150 [ 1163.241771][T16753] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1163.241805][T16753] ? __stack_depot_save+0x36/0x480 [ 1163.241826][T16753] dump_stack+0x15/0x24 [ 1163.256119][T16753] should_fail_ex+0x3d4/0x520 [ 1163.260836][T16753] __should_failslab+0xac/0xf0 [ 1163.265646][T16753] should_failslab+0x9/0x20 [ 1163.270271][T16753] slab_pre_alloc_hook+0x30/0x1e0 [ 1163.276779][T16753] kmem_cache_alloc_lru+0x49/0x280 [ 1163.281939][T16753] ? shmem_alloc_inode+0x28/0x40 [ 1163.287495][T16753] shmem_alloc_inode+0x28/0x40 [ 1163.292319][T16753] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 1163.297811][T16753] new_inode_pseudo+0x70/0x1f0 [ 1163.302679][T16753] new_inode+0x28/0x1e0 [ 1163.306860][T16753] ? _raw_spin_lock+0x8e/0xe0 [ 1163.311597][T16753] shmem_get_inode+0x349/0xc20 [ 1163.316530][T16753] __shmem_file_setup+0x113/0x2b0 [ 1163.321580][T16753] shmem_file_setup+0x2f/0x40 [ 1163.326287][T16753] __se_sys_memfd_create+0x1e6/0x3b0 [ 1163.331721][T16753] __x64_sys_memfd_create+0x5b/0x70 [ 1163.337131][T16753] x64_sys_call+0x235/0x9a0 [ 1163.341743][T16753] do_syscall_64+0x4c/0xa0 [ 1163.346179][T16753] ? clear_bhb_loop+0x30/0x80 [ 1163.350877][T16753] ? clear_bhb_loop+0x30/0x80 [ 1163.355595][T16753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.362125][T16753] RIP: 0033:0x7f99e298eba9 [ 1163.366571][T16753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.386290][T16753] RSP: 002b:00007f99e13d5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1163.394721][T16753] RAX: ffffffffffffffda RBX: 00000000000004eb RCX: 00007f99e298eba9 [ 1163.402799][T16753] RDX: 00007f99e13d5ef0 RSI: 0000000000000000 RDI: 00007f99e2a127e8 [ 1163.410791][T16753] RBP: 0000200000001fc0 R08: 00007f99e13d5bb7 R09: 00007f99e13d5e40 [ 1163.414337][T16735] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.418870][T16753] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 1163.418892][T16753] R13: 00007f99e13d5ef0 R14: 00007f99e13d5eb0 R15: 00002000000003c0 [ 1163.418915][T16753] [ 1163.444359][T16735] binder: 16730:16735 ioctl 4018620d 200000000040 returned -16 [ 1163.478193][ T19] usb 4-1: USB disconnect, device number 71 [ 1163.736357][T16758] overlayfs: failed to resolve './file7': -2 [ 1163.743057][T12283] pyra 0003:1E7D:2CF6.006B: couldn't init struct pyra_device [ 1163.750905][T12283] pyra 0003:1E7D:2CF6.006B: couldn't install mouse [ 1163.771274][T16758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16758 comm=syz.6.4422 [ 1163.859462][T12283] pyra: probe of 0003:1E7D:2CF6.006B failed with error -32 [ 1163.948292][T12283] usb 1-1: USB disconnect, device number 72 [ 1163.962207][ T28] audit: type=1400 audit(1757596641.492:1027): avc: denied { bind } for pid=16759 comm="syz.4.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1164.177054][T16762] fido_id[16762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1164.623979][T16772] FAULT_INJECTION: forcing a failure. [ 1164.623979][T16772] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.654626][T16772] CPU: 0 PID: 16772 Comm: syz.4.4423 Not tainted syzkaller #0 [ 1164.662147][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1164.672224][T16772] Call Trace: [ 1164.675605][T16772] [ 1164.678546][T16772] __dump_stack+0x21/0x24 [ 1164.682893][T16772] dump_stack_lvl+0xee/0x150 [ 1164.687494][T16772] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1164.692534][T16772] ? vm_area_alloc+0xe9/0x1a0 [ 1164.697252][T16772] ? do_mmap+0x7ae/0xcf0 [ 1164.701551][T16772] ? vm_mmap_pgoff+0x1f5/0x3f0 [ 1164.706348][T16772] ? ksys_mmap_pgoff+0xf6/0x1d0 [ 1164.711227][T16772] ? x64_sys_call+0x8fd/0x9a0 [ 1164.715926][T16772] ? do_syscall_64+0x4c/0xa0 [ 1164.720540][T16772] dump_stack+0x15/0x24 [ 1164.724715][T16772] should_fail_ex+0x3d4/0x520 [ 1164.729417][T16772] ? mas_alloc_nodes+0x2d8/0x850 [ 1164.734386][T16772] __should_failslab+0xac/0xf0 [ 1164.739178][T16772] should_failslab+0x9/0x20 [ 1164.743695][T16772] kmem_cache_alloc+0x3b/0x330 [ 1164.748486][T16772] mas_alloc_nodes+0x2d8/0x850 [ 1164.753306][T16772] mas_preallocate+0xdf5/0x1400 [ 1164.758186][T16772] ? __cfi_mas_preallocate+0x10/0x10 [ 1164.764037][T16772] ? memset+0x35/0x40 [ 1164.768578][T16772] mmap_region+0x1099/0x2140 [ 1164.773201][T16772] ? __cfi_mmap_region+0x10/0x10 [ 1164.778195][T16772] ? kasan_set_track+0x60/0x70 [ 1164.783420][T16772] ? cap_mmap_addr+0x165/0x2e0 [ 1164.788301][T16772] ? __se_sys_memfd_create+0x339/0x3b0 [ 1164.793805][T16772] ? __x64_sys_memfd_create+0x5b/0x70 [ 1164.799206][T16772] ? x64_sys_call+0x235/0x9a0 [ 1164.803911][T16772] ? get_unmapped_area+0x313/0x380 [ 1164.809047][T16772] do_mmap+0x7ae/0xcf0 [ 1164.813272][T16772] ? __cfi_do_mmap+0x10/0x10 [ 1164.817901][T16772] vm_mmap_pgoff+0x1f5/0x3f0 [ 1164.822527][T16772] ? ____kasan_slab_free+0x13d/0x180 [ 1164.827840][T16772] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1164.832988][T16772] ? xfd_validate_state+0x70/0x150 [ 1164.838125][T16772] ksys_mmap_pgoff+0xf6/0x1d0 [ 1164.842828][T16772] ? __kasan_check_write+0x14/0x20 [ 1164.847984][T16772] __x64_sys_mmap+0xfa/0x110 [ 1164.852609][T16772] x64_sys_call+0x8fd/0x9a0 [ 1164.857138][T16772] do_syscall_64+0x4c/0xa0 [ 1164.861578][T16772] ? clear_bhb_loop+0x30/0x80 [ 1164.866284][T16772] ? clear_bhb_loop+0x30/0x80 [ 1164.870997][T16772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.876998][T16772] RIP: 0033:0x7f99e298ebe3 [ 1164.881433][T16772] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 1164.901063][T16772] RSP: 002b:00007f99e13d5e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1164.909501][T16772] RAX: ffffffffffffffda RBX: 000000000000056e RCX: 00007f99e298ebe3 [ 1164.917496][T16772] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1164.925570][T16772] RBP: 0000200000000682 R08: 00000000ffffffff R09: 0000000000000000 [ 1164.933575][T16772] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 1164.941577][T16772] R13: 00007f99e13d5ef0 R14: 00007f99e13d5eb0 R15: 0000200000000200 [ 1164.949628][T16772] [ 1165.254123][T16779] FAULT_INJECTION: forcing a failure. [ 1165.254123][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.267503][T16779] CPU: 1 PID: 16779 Comm: syz.5.4427 Not tainted syzkaller #0 [ 1165.274994][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1165.285104][T16779] Call Trace: [ 1165.288406][T16779] [ 1165.291357][T16779] __dump_stack+0x21/0x24 [ 1165.295708][T16779] dump_stack_lvl+0xee/0x150 [ 1165.300402][T16779] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1165.305490][T16779] ? find_lock_lowest_rq+0x97/0x460 [ 1165.310778][T16779] dump_stack+0x15/0x24 [ 1165.314987][T16779] should_fail_ex+0x3d4/0x520 [ 1165.319815][T16779] should_fail+0xb/0x10 [ 1165.324011][T16779] should_fail_usercopy+0x1a/0x20 [ 1165.329065][T16779] _copy_from_user+0x1e/0xc0 [ 1165.333849][T16779] iovec_from_user+0x1aa/0x2e0 [ 1165.338652][T16779] ? _raw_spin_unlock+0x4c/0x70 [ 1165.343529][T16779] ? __cfi_push_rt_tasks+0x10/0x10 [ 1165.348667][T16779] __import_iovec+0x71/0x470 [ 1165.353296][T16779] import_iovec+0x7c/0xb0 [ 1165.357653][T16779] ___sys_sendmsg+0x1e4/0x290 [ 1165.362351][T16779] ? __sys_sendmsg+0x270/0x270 [ 1165.367135][T16779] ? preempt_schedule_irq+0xbb/0x110 [ 1165.372437][T16779] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1165.378183][T16779] ? irqentry_exit+0x37/0x40 [ 1165.382815][T16779] ? sysvec_reschedule_ipi+0x78/0x80 [ 1165.388143][T16779] ? __fdget+0x19c/0x220 [ 1165.392414][T16779] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1165.397381][T16779] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1165.402873][T16779] ? __kasan_check_write+0x14/0x20 [ 1165.408034][T16779] ? fpregs_restore_userregs+0x128/0x260 [ 1165.413798][T16779] ? switch_fpu_return+0xe/0x10 [ 1165.418782][T16779] x64_sys_call+0x171/0x9a0 [ 1165.423329][T16779] do_syscall_64+0x4c/0xa0 [ 1165.427773][T16779] ? clear_bhb_loop+0x30/0x80 [ 1165.432490][T16779] ? clear_bhb_loop+0x30/0x80 [ 1165.437209][T16779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.443227][T16779] RIP: 0033:0x7f344498eba9 [ 1165.447673][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.467314][T16779] RSP: 002b:00007f34457b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.475762][T16779] RAX: ffffffffffffffda RBX: 00007f3444bd6180 RCX: 00007f344498eba9 [ 1165.483767][T16779] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000009 [ 1165.491770][T16779] RBP: 00007f34457b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.499769][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.507771][T16779] R13: 00007f3444bd6218 R14: 00007f3444bd6180 R15: 00007ffdc58c4c68 [ 1165.515777][T16779] [ 1165.587676][T12444] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1165.790695][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4428'. [ 1165.802228][T12444] usb 4-1: Using ep0 maxpacket: 32 [ 1166.039056][T12444] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1166.490463][T12444] usb 4-1: config 0 has no interface number 0 [ 1166.554653][T12444] usb 4-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 1166.686254][T12444] usb 4-1: config 0 interface 214 has no altsetting 0 [ 1166.730846][T12444] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1166.753946][T12444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.849756][T12444] usb 4-1: Product: syz [ 1166.853985][T12444] usb 4-1: Manufacturer: syz [ 1166.860706][T12444] usb 4-1: SerialNumber: syz [ 1166.868069][T12444] usb 4-1: config 0 descriptor?? [ 1166.873346][T16775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1167.605016][T16802] 9pnet_fd: Insufficient options for proto=fd [ 1167.974783][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 1168.325934][T16814] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1168.657049][T16818] xt_hashlimit: max too large, truncated to 1048576 [ 1169.226354][T16831] 9pnet_fd: Insufficient options for proto=fd [ 1169.247902][T16831] 9pnet_fd: Insufficient options for proto=fd [ 1169.387696][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1169.409394][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1169.441540][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1169.474630][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1169.506863][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1169.549436][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1169.585287][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1169.627843][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1169.684075][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1169.743477][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1169.798394][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1169.869281][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1169.875786][T16841] fuse: Bad value for 'user_id' [ 1169.908128][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1169.942056][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1170.024490][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1170.047577][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1170.077683][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1170.100931][T16848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4442'. [ 1170.129918][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1170.467561][T16851] overlayfs: failed to resolve './file7': -2 [ 1170.488160][T16851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16851 comm=syz.3.4447 [ 1171.161635][T12444] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1171.252840][T12444] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, a8:4f:70:ec:00:00 [ 1171.358688][T12444] usb 4-1: USB disconnect, device number 72 [ 1171.365608][T12444] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1171.675419][T16837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1171.713391][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1171.751754][ T28] audit: type=1326 audit(1757596649.850:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.4.4443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 1171.774925][ T343] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1172.026674][ T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.076761][ T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.106108][ T343] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1172.134550][ T343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.196838][ T343] usb 7-1: config 0 descriptor?? [ 1172.614076][ T343] pyra 0003:1E7D:2CF6.006C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 1173.178398][ T343] pyra 0003:1E7D:2CF6.006C: couldn't init struct pyra_device [ 1173.208348][ T343] pyra 0003:1E7D:2CF6.006C: couldn't install mouse [ 1173.243909][ T343] pyra: probe of 0003:1E7D:2CF6.006C failed with error -32 [ 1173.280294][ T343] usb 7-1: USB disconnect, device number 19 [ 1173.363894][T16878] fido_id[16878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1174.714313][T16903] 9pnet_fd: Insufficient options for proto=fd [ 1174.766310][T16902] 9pnet_fd: Insufficient options for proto=fd [ 1175.604817][T16892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1175.623539][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1175.652184][ T28] audit: type=1326 audit(1757596654.024:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16891 comm="syz.4.4459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e298eba9 code=0x0 [ 1175.700462][ T19] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1175.878691][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.908115][ T19] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1175.944929][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.987706][ T19] usb 7-1: config 0 descriptor?? [ 1176.557426][ T19] microsoft 0003:045E:00F9.006D: unbalanced delimiter at end of report description [ 1177.322617][T16927] overlayfs: failed to resolve './file7': -2 [ 1177.413162][T16928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16928 comm=syz.3.4468 [ 1179.251071][ T19] microsoft 0003:045E:00F9.006D: parse failed [ 1179.269174][ T19] microsoft: probe of 0003:045E:00F9.006D failed with error -22 [ 1179.280253][T16932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12656 sclass=netlink_route_socket pid=16932 comm=syz.4.4469 [ 1180.640958][ T343] usb 7-1: USB disconnect, device number 20 [ 1186.116309][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1186.127283][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1190.053998][T17006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1190.116168][T17017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1190.140653][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1190.160316][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1190.186036][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1190.202887][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1190.236980][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1190.256493][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1190.265093][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.273740][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1190.282243][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1190.290252][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1190.298367][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1190.309973][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1190.319107][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1190.328370][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1190.337697][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1190.471183][T17024] overlayfs: failed to resolve './file7': -2 [ 1190.483373][T17024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17024 comm=syz.5.4492 [ 1190.506457][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1190.644816][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1190.756861][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1191.035571][T17027] fuse: Bad value for 'fd' [ 1194.590891][T17076] overlayfs: failed to resolve './file7': -2 [ 1194.602360][T17076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17076 comm=syz.3.4509 [ 1195.267878][T17081] x_tables: duplicate underflow at hook 1 [ 1198.832423][ T8495] Bluetooth: hci0: Frame reassembly failed (-84) [ 1200.246517][T17128] overlayfs: failed to resolve './file7': -2 [ 1200.258326][T17128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17128 comm=syz.4.4523 [ 1200.801954][T17103] Bluetooth: hci0: command 0x1003 tx timeout [ 1200.808044][ T8392] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1200.950057][T17134] x_tables: duplicate underflow at hook 1 [ 1201.536375][T17140] FAULT_INJECTION: forcing a failure. [ 1201.536375][T17140] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1201.553615][T17140] CPU: 1 PID: 17140 Comm: syz.5.4527 Not tainted syzkaller #0 [ 1201.561140][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1201.571224][T17140] Call Trace: [ 1201.574531][T17140] [ 1201.577491][T17140] __dump_stack+0x21/0x24 [ 1201.581866][T17140] dump_stack_lvl+0xee/0x150 [ 1201.586490][T17140] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1201.591549][T17140] ? kernel_text_address+0xa0/0xd0 [ 1201.596789][T17140] dump_stack+0x15/0x24 [ 1201.601095][T17140] should_fail_ex+0x3d4/0x520 [ 1201.605995][T17140] should_fail+0xb/0x10 [ 1201.610198][T17140] get_futex_key+0x16a/0xb00 [ 1201.614833][T17140] ? stack_trace_save+0x98/0xe0 [ 1201.619718][T17140] ? __cfi_get_futex_key+0x10/0x10 [ 1201.624867][T17140] ? _parse_integer_limit+0x18a/0x1d0 [ 1201.630278][T17140] futex_wait_setup+0xa8/0x240 [ 1201.635073][T17140] ? __cfi_futex_wait_setup+0x10/0x10 [ 1201.640475][T17140] ? futex_setup_timer+0xb0/0xc0 [ 1201.645447][T17140] futex_wait+0x170/0x750 [ 1201.649804][T17140] ? __cfi_futex_wait+0x10/0x10 [ 1201.654677][T17140] ? __kasan_check_write+0x14/0x20 [ 1201.659823][T17140] ? security_file_permission+0x94/0xb0 [ 1201.665400][T17140] ? vfs_write+0x9d6/0xca0 [ 1201.669845][T17140] ? slab_free_freelist_hook+0xc2/0x190 [ 1201.675432][T17140] do_futex+0x2dc/0x420 [ 1201.679612][T17140] ? __cfi_do_futex+0x10/0x10 [ 1201.684325][T17140] ? __kasan_check_write+0x14/0x20 [ 1201.689485][T17140] ? mutex_unlock+0x89/0x220 [ 1201.694108][T17140] __se_sys_futex+0x273/0x2e0 [ 1201.698891][T17140] ? __kasan_check_write+0x14/0x20 [ 1201.704040][T17140] ? __x64_sys_futex+0x100/0x100 [ 1201.709104][T17140] ? ksys_write+0x1eb/0x240 [ 1201.713644][T17140] ? __cfi_ksys_write+0x10/0x10 [ 1201.718533][T17140] __x64_sys_futex+0xe5/0x100 [ 1201.723232][T17140] x64_sys_call+0x7ec/0x9a0 [ 1201.727765][T17140] do_syscall_64+0x4c/0xa0 [ 1201.732200][T17140] ? clear_bhb_loop+0x30/0x80 [ 1201.737034][T17140] ? clear_bhb_loop+0x30/0x80 [ 1201.741749][T17140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.747668][T17140] RIP: 0033:0x7f344498eba9 [ 1201.752116][T17140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.772453][T17140] RSP: 002b:00007f34457f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1201.780898][T17140] RAX: ffffffffffffffda RBX: 00007f3444bd5fa0 RCX: 00007f344498eba9 [ 1201.788992][T17140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000000cffc [ 1201.797001][T17140] RBP: 00007f34457f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.805213][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.813258][T17140] R13: 00007f3444bd6038 R14: 00007f3444bd5fa0 R15: 00007ffdc58c4c68 [ 1201.821360][T17140] [ 1202.087169][T17149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4531'. [ 1204.641181][T17197] x_tables: duplicate underflow at hook 1 [ 1207.310554][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1207.391078][T17245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1207.715820][T17252] overlayfs: failed to resolve './file7': -2 [ 1207.734669][T17252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17252 comm=syz.4.4557 [ 1207.799923][T17255] x_tables: duplicate underflow at hook 1 [ 1208.061357][ T1008] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1208.238454][ T1008] usb 4-1: Using ep0 maxpacket: 16 [ 1208.244829][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.275322][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.305728][ T1008] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1208.333778][ T1008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.380786][ T1008] usb 4-1: config 0 descriptor?? [ 1209.050009][T16738] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1209.262859][T17273] overlayfs: failed to resolve './file7': -2 [ 1209.276734][T17273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17273 comm=syz.6.4563 [ 1209.384944][T16738] usb 1-1: Using ep0 maxpacket: 8 [ 1209.421867][T16738] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 1209.560196][T16738] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1209.803345][T16738] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1210.042768][T16738] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.065456][T16738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.074813][T16738] usb 1-1: Product: А [ 1210.083891][T16738] usb 1-1: Manufacturer: 宫ㅸ북荽ѭ᤺ꦛ䂺꘎৔⼞⼖沦幅ề鳓蛎ဨ猅㱈瘕Ȕ㠪蒑៥㙶㇜覊㲒큟鎛濇窴菩ꈬ茇᳋΀椳ṝ曱ꄊ沘⹭놋ᵼ铜说ⲃ秴鍺竂琿અ귡䞜ⅱ [ 1210.105665][T16738] usb 1-1: SerialNumber: syz [ 1210.131644][T17269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1210.138993][T17269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1210.840724][T17285] device veth0_vlan left promiscuous mode [ 1210.851934][T17285] device veth0_vlan entered promiscuous mode [ 1210.916654][ T1008] usbhid 4-1:0.0: can't add hid device: -71 [ 1210.926648][ T1008] usbhid: probe of 4-1:0.0 failed with error -71 [ 1210.964541][ T1008] usb 4-1: USB disconnect, device number 73 [ 1210.984224][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1211.015294][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1211.363031][T16738] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 1211.391842][T16738] usb 1-1: USB disconnect, device number 73 [ 1212.033814][T17309] x_tables: duplicate underflow at hook 1 [ 1213.641825][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4579'. [ 1213.664761][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4579'. [ 1213.989325][ T28] audit: type=1400 audit(1757596695.148:1030): avc: denied { lock } for pid=17334 comm="syz.0.4582" path="/" dev="configfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1215.277459][T17366] fuse: Unknown parameter 'user_i00000000000000000000' [ 1215.358086][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4594'. [ 1215.370411][T17370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4594'. [ 1218.741817][T17392] FAULT_INJECTION: forcing a failure. [ 1218.741817][T17392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.768168][T17392] CPU: 0 PID: 17392 Comm: syz.5.4598 Not tainted syzkaller #0 [ 1218.775779][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1218.786124][T17392] Call Trace: [ 1218.789441][T17392] [ 1218.792613][T17392] __dump_stack+0x21/0x24 [ 1218.797142][T17392] dump_stack_lvl+0xee/0x150 [ 1218.801753][T17392] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1218.806804][T17392] ? _parse_integer+0x2a/0x40 [ 1218.811516][T17392] dump_stack+0x15/0x24 [ 1218.815698][T17392] should_fail_ex+0x3d4/0x520 [ 1218.820428][T17392] should_fail+0xb/0x10 [ 1218.824624][T17392] should_fail_usercopy+0x1a/0x20 [ 1218.829693][T17392] _copy_from_user+0x1e/0xc0 [ 1218.834325][T17392] ___sys_sendmsg+0x155/0x290 [ 1218.839038][T17392] ? __sys_sendmsg+0x270/0x270 [ 1218.843839][T17392] ? __kasan_check_write+0x14/0x20 [ 1218.849008][T17392] ? proc_fail_nth_write+0x17a/0x1f0 [ 1218.854593][T17392] ? vfs_write+0x9d6/0xca0 [ 1218.859062][T17392] ? __fdget+0x19c/0x220 [ 1218.863338][T17392] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1218.868311][T17392] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1218.873809][T17392] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1218.879928][T17392] x64_sys_call+0x171/0x9a0 [ 1218.884470][T17392] do_syscall_64+0x4c/0xa0 [ 1218.888909][T17392] ? clear_bhb_loop+0x30/0x80 [ 1218.893722][T17392] ? clear_bhb_loop+0x30/0x80 [ 1218.898435][T17392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.904365][T17392] RIP: 0033:0x7f344498eba9 [ 1218.908815][T17392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.928546][T17392] RSP: 002b:00007f34457f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.937001][T17392] RAX: ffffffffffffffda RBX: 00007f3444bd5fa0 RCX: 00007f344498eba9 [ 1218.945007][T17392] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1218.953009][T17392] RBP: 00007f34457f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.961015][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.969045][T17392] R13: 00007f3444bd6038 R14: 00007f3444bd5fa0 R15: 00007ffdc58c4c68 [ 1218.977146][T17392] [ 1218.983984][T17395] 9pnet_fd: Insufficient options for proto=fd [ 1219.012508][T17395] 9pnet_fd: Insufficient options for proto=fd [ 1219.123030][T17129] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1219.247888][T17401] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4603'. [ 1219.294730][T17129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.317045][T17129] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1219.348049][T17129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.397816][T17129] usb 4-1: config 0 descriptor?? [ 1219.843312][T17129] keytouch 0003:0926:3333.006E: fixing up Keytouch IEC report descriptor [ 1219.868809][T17129] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006E/input/input22 [ 1219.975991][T17129] keytouch 0003:0926:3333.006E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1220.207107][ T28] audit: type=1400 audit(1757596701.843:1031): avc: denied { read } for pid=17414 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1220.261677][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1220.291049][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1220.383933][ T28] audit: type=1400 audit(1757596702.015:1032): avc: denied { create } for pid=17417 comm="syz.4.4608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 194) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK [ 1221.108118][ T28] audit: type=1400 audit(1757596702.798:1033): avc: denied { read write } for pid=11527 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping dhcpcd.[ 1221.221172][ T28] audit: type=1400 audit(1757596702.798:1034): avc: denied { open } for pid=11527 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 .. stopped /sbin/dhcpcd (pid 141) [ 1221.332610][ T28] audit: type=1400 audit(1757596702.798:1035): avc: denied { ioctl } for pid=11527 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping network: [ 1221.673183][T17450] 9pnet_fd: Insufficient options for proto=fd [ 1221.784898][ T28] audit: type=1400 audit(1757596703.517:1036): avc: denied { read write } for pid=17458 comm="ip" path="/dev/console" dev="rootfs" ino=6597 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1221.828403][ T28] audit: type=1400 audit(1757596703.570:1037): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1222.114886][ T28] audit: type=1400 audit(1757596703.667:1038): avc: denied { prog_load } for pid=17449 comm="syz.5.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1222.137436][ T28] audit: type=1400 audit(1757596703.688:1039): avc: denied { map_create } for pid=17449 comm="syz.5.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1222.157456][ T28] audit: type=1400 audit(1757596703.688:1040): avc: denied { map_read map_write } for pid=17449 comm="syz.5.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1222.218119][ T1008] usb 4-1: USB disconnect, device number 74 OK Stopping iptables: OK Stopping system message bus: done [ 1222.462868][T17479] 9pnet_fd: Insufficient options for proto=fd [ 1222.472673][T17479] 9pnet_fd: Insufficient options for proto=fd [ 1222.686029][ T1008] usb 4-1: new high-speed USB device number 75 using dummy_hcd killall: can't kill pid 17013: No such process killall: can't kill pid 17016: No such process [ 1222.852215][T17474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4617'. killall: can't kill pid 17104: No such process killall: can't kill pid 17288: No such process killall: can't kill pid 17413: No such process [ 1222.873350][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.885788][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4617'. [ 1222.903880][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.933365][ T1008] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 Stopping klogd: [ 1222.955821][ T1008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.974840][ T1008] usb 4-1: config 0 descriptor?? OK Stopping acpid: [ 1223.272447][ T60] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1223.362917][ T1008] pyra 0003:1E7D:2CF6.006F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1223.451968][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.472516][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.517710][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1223.554812][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.590960][ T60] usb 1-1: config 0 descriptor?? [ 1224.067310][ T1008] pyra 0003:1E7D:2CF6.006F: couldn't init struct pyra_device [ 1224.076401][ T60] pyra 0003:1E7D:2CF6.0070: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1224.087570][ T1008] pyra 0003:1E7D:2CF6.006F: couldn't install mouse [ 1224.094765][ T1008] pyra: probe of 0003:1E7D:2CF6.006F failed with error -32 [ 1224.103313][ T1008] usb 4-1: USB disconnect, device number 75 OK Stopping syslogd: stopped /sbin/syslogd (pid 85) OK [ 1224.995198][ T60] pyra 0003:1E7D:2CF6.0070: couldn't init struct pyra_device [ 1225.049006][ T60] pyra 0003:1E7D:2CF6.0070: couldn't install mouse [ 1225.072971][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4624'. [ 1225.120952][ T60] pyra: probe of 0003:1E7D:2CF6.0070 failed with error -32 [ 1225.129425][ T60] usb 1-1: USB disconnect, device number 74 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 1225.407493][ T28] kauditd_printk_skb: 12 callbacks suppressed Connection to 10.128.1.215 closed by remote host. [ 1225.407515][ T28] audit: type=1400 audit(1757596707.401:1053): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[2836]" dev="pipefs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 1226.139487][ T8919] device bridge_slave_1 left promiscuous mode [ 1226.145726][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.153472][ T8919] device bridge_slave_0 left promiscuous mode [ 1226.159718][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.168414][ T8919] device veth1_macvtap left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 1226.490882][ T8919] tipc: Left network mode [ 1226.918751][ T8919] device bridge_slave_1 left promiscuous mode [ 1226.924921][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.932419][ T8919] device bridge_slave_0 left promiscuous mode [ 1226.938635][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.946667][ T8919] device bridge_slave_1 left promiscuous mode [ 1226.952831][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.960445][ T8919] device bridge_slave_0 left promiscuous mode [ 1226.966809][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.975358][ T8919] device bridge_slave_1 left promiscuous mode [ 1226.981491][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.989108][ T8919] device bridge_slave_0 left promiscuous mode [ 1226.995660][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.004351][ T8919] device veth1_macvtap left promiscuous mode [ 1227.010607][ T8919] device veth0_vlan left promiscuous mode [ 1227.017187][ T8919] device veth1_macvtap left promiscuous mode [ 1227.023432][ T8919] device veth0_vlan left promiscuous mode [ 1227.029524][ T8919] device veth1_macvtap left promiscuous mode [ 1227.035677][ T8919] device veth0_vlan left promiscuous mode [ 1227.377786][T17531] kvm: exiting hardware virtualization [ 1227.384425][T17531] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1227.392475][T17531] ACPI: PM: Preparing to enter system sleep state S5 [ 1227.399469][T17531] reboot: Power down serialport: VM disconnected.