last executing test programs: 1m22.957105228s ago: executing program 0 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000000803010000000000000000070000011c00048008000a400000000908000940000000070808"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x80080) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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") pipe2$watch_queue(&(0x7f0000000340), 0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, 0x0) 1m22.063072676s ago: executing program 0 (id=361): r0 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x800}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xf262}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x96, {0x96, 0x2b, "9a6fa51d79cffb5808e2bc5174de312ec6370a490395a45e604c59dcdec6168873438b73a397d3fe58d498dd4dbba959e70ec662d41253681f4944bb94f109d8cf3bf7345e01352baf9a89e598eb73a36d32e4add3db860543a3ca0ba7022dda17a7da2e3bb4e7d748ee2f16351debb082e9610628d7a6ac7dda88f96d89c53f121c602dcb894d51f75e57b4dd169694176a1886"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000180)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x4, [@generic={0x33, 0x10, 0x0, "56cb626484a538cfc20e3cecf6bac95f8a26c8634a60fd05d2b6bc27758e16af186fdf5a41b281d380b67b04b8f39de0"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x9, 0xf, 0x3, [0x30, 0xffff00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x3, 0x9, "8b5d75fc", "c543f64b"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x7, 0x3, 0x4, 0x8, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x15}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "0148"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="63f3d30b576d"}, &(0x7f0000000740)={0x40, 0x19, 0x2, '2h'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x101}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x10}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) getdents64(r1, &(0x7f0000001600)=""/4094, 0xffe) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m19.175532058s ago: executing program 0 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000000803010000000000000000070000011c00048008000a400000000908000940000000070808"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x80080) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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") pipe2$watch_queue(&(0x7f0000000340), 0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, 0x0) 1m17.46758461s ago: executing program 0 (id=376): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x57d, &(0x7f00000003c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x258, &(0x7f0000001040)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, '@0\a', 0x222, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x1d, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x6, 0x100, [0x3, 0x800, 0x0, 0x80000001, 0x3, 0x8, 0xfbd, 0x7, 0x104fa3b1]}}, @generic={0xff, 0x60, "81d270bc1e255bb80e19d89985881cac34e9cbae223391ea7dc568580714adbe657c3ad89b234743f00720b750920f5eec8c6d29ac816bf7361f2800d4cfb08902b1ee690e92e51e8ed89717773305580b60102c67ee7c33b5f20fa17b271bd1"}, @hao={0xc9, 0x10, @mcast2}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0}]}, @fragment={0x1, 0x0, 0x6, 0x1, 0x0, 0x10, 0x67}, @fragment={0xba, 0x0, 0x9, 0x1, 0x0, 0x1b, 0x64}, @dstopts={0x2e, 0x1, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x21}]}, @srh={0x32, 0xe, 0x4, 0x7, 0x10, 0x20, 0x6, [@private2, @remote, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @private1]}, @dstopts={0x2b, 0x5, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3400000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4ebc}, @pad1, @ra={0x5, 0x2, 0x9}]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x3, 0x2, "df21ae", 0x6, "fef5e4"}, "544a6b905ec279f5b1fc8d9ef5d04282edbdc76f2debbb788d0a0eaf7b3b96cc1307615a0075194e4a6f742ed7e496745c7d7a7534bddbceb7c57af4209a0f7ccfbd"}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000009c0)={0x0, &(0x7f0000000940)=[@rdmsr={0x66, 0x18, {0xbd0}}, @set_irq_handler={0xc8, 0x20, {0x3a}}, @out_dx={0x6a, 0x28, {0x5499, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x78}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r3, 0x1000000, 0x13, r4, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x2, 0xfd, 0xfffff020}, {0x6, 0x80, 0x7, 0x7}]}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006340)={0x2020}, 0x2058) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m15.421326027s ago: executing program 0 (id=382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@updpolicy={0x13c, 0x13, 0x1, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x1, 0x2, 0x1, 0xa, 0x800, 0xfb82}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in6=@mcast2, 0x3504, 0x2, 0x0, 0x6, 0x8320, 0x1, 0x8001}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 1m15.196540156s ago: executing program 0 (id=383): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) fsmount(0xffffffffffffffff, 0x0, 0x17c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 1m15.194656936s ago: executing program 32 (id=383): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) fsmount(0xffffffffffffffff, 0x0, 0x17c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 19.173253088s ago: executing program 5 (id=588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 17.602765425s ago: executing program 5 (id=590): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$inet(r5, &(0x7f0000000200), &(0x7f0000000300)=0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500100001000130429bd70000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) (fail_nth: 1) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r8, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x18, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_disconnect(r10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17.282427299s ago: executing program 4 (id=592): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$inet(r5, &(0x7f0000000200), &(0x7f0000000300)=0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500100001000130429bd70000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r8, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x18, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_disconnect(r10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16.676784454s ago: executing program 1 (id=594): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) request_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000740)='lon\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000380)={0x0, 0xa182, 0x10, 0x3, 0x34f}, &(0x7f0000000400), &(0x7f00000004c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 15.813587701s ago: executing program 1 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(0x0, 0x1) fsmount(r7, 0x1, 0xe) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x74a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xff2e) 14.905305279s ago: executing program 1 (id=598): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) io_uring_setup(0x108c, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f00000006c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14.557162564s ago: executing program 4 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB="00000007000000286104e5f2f43ec311", @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r5, @ANYRES64, @ANYBLOB="09bd33c5fdd7a60dd2b03ebca3f44f3dc4e33ba44babe140b38a01cbf360570a45cfadabde75e70b619896f57f0a703a43ef98d3ea915ea0f21766e8d01f130caf5c7fa2a1f47947b74f4baf1a492d3a06b54654287c51d51ddcb0aca04c5e08d2f42d2ae62e777524702190c3149f712b50e12358269be649e21b251676bca83544a4491ac00c0500000000000000d33ccdd03a2f9c0c93d388c187871cb96824dfb3ea10497feb8b18164e88002fc85f589d56016b832de445a08a64fe38ae8b5e09a6b54fa061fdd3fa7903a2aebf386855e376e09e367b1062d80e7eb7048196", @ANYRESHEX=r0, @ANYRES64=r4, @ANYBLOB="ad148224e85c9672ff8be5814a092ce551938d1629eaef46e5419993a925a75eaf9f1bcfd504e533ef5b", @ANYRESHEX=r4], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 14.457520558s ago: executing program 5 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB="00000007000000286104e5f2f43ec311", @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r5, @ANYRES64, @ANYBLOB="09bd33c5fdd7a60dd2b03ebca3f44f3dc4e33ba44babe140b38a01cbf360570a45cfadabde75e70b619896f57f0a703a43ef98d3ea915ea0f21766e8d01f130caf5c7fa2a1f47947b74f4baf1a492d3a06b54654287c51d51ddcb0aca04c5e08d2f42d2ae62e777524702190c3149f712b50e12358269be649e21b251676bca83544a4491ac00c0500000000000000d33ccdd03a2f9c0c93d388c187871cb96824dfb3ea10497feb8b18164e88002fc85f589d56016b832de445a08a64fe38ae8b5e09a6b54fa061fdd3fa7903a2aebf386855e376e09e367b1062d80e7eb7048196", @ANYRESHEX=r0, @ANYRES64=r4, @ANYBLOB="ad148224e85c9672ff8be5814a092ce551938d1629eaef46e5419993a925a75eaf9f1bcfd504e533ef5b", @ANYRESHEX=r4], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 8.171328694s ago: executing program 4 (id=602): r0 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x800}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xf262}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x96, {0x96, 0x2b, "9a6fa51d79cffb5808e2bc5174de312ec6370a490395a45e604c59dcdec6168873438b73a397d3fe58d498dd4dbba959e70ec662d41253681f4944bb94f109d8cf3bf7345e01352baf9a89e598eb73a36d32e4add3db860543a3ca0ba7022dda17a7da2e3bb4e7d748ee2f16351debb082e9610628d7a6ac7dda88f96d89c53f121c602dcb894d51f75e57b4dd169694176a1886"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000180)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x4, [@generic={0x33, 0x10, 0x0, "56cb626484a538cfc20e3cecf6bac95f8a26c8634a60fd05d2b6bc27758e16af186fdf5a41b281d380b67b04b8f39de0"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x9, 0xf, 0x3, [0x30, 0xffff00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x3, 0x9, "8b5d75fc", "c543f64b"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x7, 0x3, 0x4, 0x8, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x15}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x60, 0x1, [0xf00]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, 0x0, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="63f3d30b576d"}, &(0x7f0000000740)={0x40, 0x19, 0x2, '2h'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x101}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x10}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) getdents64(r1, &(0x7f0000001600)=""/4094, 0xffe) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.135612476s ago: executing program 5 (id=603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "7e1446d02b7587c98cfb943e8a17263ecd5d37f580d62e32271ede664d56362d417f1881cb1b8b6d382309a89c1295ea466c83b64ceebcf807eab212db51edad2c1b57ec939a90d8ec40bf289b70ea29352e2ada37bcef704b7786d2aea495065a54c4ec237675aa88ec893960ba12d08e4637b8c18b3c1589cd3c6bea67ef540b38b86bd82cdfa3e78ffdf34993eaf7745d8712e58f05e8096801c7c6925f505c8774c73845cc60a7bc061a31d8b13b6df65d7659b0b49dd62ff7ac195940bb62d90badb183646a7bc6ced17436bf6739604f6b73d03c3325cb02acfc2b4909127c6b7d3e19c41c97f2d6058f1bf1ee31c621255f2c9efcdcb257b568e32999d863456ef7b0fc14dcb9e5d9196d26fd6add993c884a14005bd7a1bbe158948df83aa25039d976065a21b5c0d0a9683d33ac454d79f13de7cbf361c2b0e71375dc3e8170d11dc2ce61fd3093f714cce960cc063f64f8ce897c6256164d8da5dc58bca707f6b637a46c58473d1609b1c895f3629358a250b4303521b686de948da77782de4287da335796515c518be9a07984a848873e788c4048cc8b1635fe8bb4acfa7a77da264e0bf27de4084fd45dc4ffd33e53443c1907b46ad50a63238e4248308a07b65956efbc696de396b7f9ce10982b4cf4bba319fab3c10453d4929adef679bf72849954cf242f8b58e872bb6c6542eb809b979001333e61aa024e62d7163a2c8a6ff469c9f3f0075d612fb4dc1d207267bedd6705f65d7b963f5e7a71ffae22a01e028bac53f19a7f88d2426fa049e2fca573dddd0f1a26db8cc5657cac61daa61ee6e550d20ac79d1e99ea8b09cbd4757869441465544597e34bfda69d31b4ecc15a8410a1e12e73cc733990b127de25e85fc34abe95944d37f347ae742eaee40f89d73adebec81bc8dbf92a2ececdff7fe11e09a92dad3f3916bcd0703be2171764cdff7068fc015f33b9df873236674b72c591c52c889d562fb189ebf6b4c9efc50691eecb8f1c33b2d57900f11644cce3232c2754d5d2eac331867c70582b97a33217edfc55ef4b48ef21f1db08c45b8e025696eac1eaa944f92f339e87b7e14353961b641612e66f45c04e6febe128462461760c4a4819c409bf8acfa3d7d139a435d66a943afd79bfc9dd737f5fd444cd8d584f1de3899b4faeecdf62a6193d66b3e39f3617c9bd8b86a20b8e78a3fb983c053aedf136f6fc30fa017cd18a552229ee7ec26c954e2997e2267cc9ec1c3126cc8339c201c4addbe0eb00542c4381780a8e3efc8b6b9f8dfbee1febccdb7d38fc8fa5dc90a5197b9bffeb8fcde1df4e9da1427a2899e2c210d533b0a193c72416bef5a1deb7ef60e67ee86e0bb7ca0dcfdc363a66eb22131c4498057d1ffb284774a923aadb2957584279f0782479758879e0be736447d9cf03afd0b8d7ecffa20432537afff5ea9b69b62f1266817f3a9e3996486e43cc6d87e3c4d1e8f8bd6c25c73aa128b8764a5526443717038dce59a30241e7d5a1ead6c35f7aeb3358f7dbbd68cd9757b5429ce604f82913f1bde3a805554408b4f0d860fe3da93e99f1444a38652c95a2c1ce95fe6d0cc58c2d0d974f20ead31a506d683aaff15a1886691401cb0fc0284605c69acb77c885186602c29543344e25c2e8a6c80a209093306acac2f0e74ceed6953dd2b12b4f42c32cc4757b312247707464f811f544a3e33825c5264080f3c5c1f50a26a468054431c1141747a188c5a4d1cece0189a263296e2eae9a9741ca28a88e5459d9e7109072ffa40558262541f9d1972e23a236b819d42f34b714b11bc63485d75d679f06928634df7d1dd2d001a2d8f746acc33c8fc5f9f72ec32250d289d87ae689fb42fbed76a2b867609af2275a442be2a32c8ec5726e511243025a03ad0221554ccb09b0bdb948914b614192fa7faadc7ece52494f743b527890414191405afe085730a8abece312acafbd44916d3b997755b0132aaa5de9f4443a73532731821ba3127b8ad99e9bc5649bdf990520d5354a8c5de4f1202e886801e32fbe042fc94834874d7789577d4e38396bee318a30b462ba72ab2b23c341feba1b3be4c3654fce74eebe23a66f8fad113c4c71eb3f073386c2f3278c881ad0144f470c18e060b4d9cd3b968660b6f4830b8d56698dec2018181fa05712b50fdab1e6cbc4e5b0e0b3b7f1458c4861bc5afcaaed1b5c40e44a7695c6fb0540dcb86ce5c622e2fda37be70c14735c28cef28400c15b331fecd617cefbfbe1511217a1d0cca4c2629ff20c4b3d55c213ba32efaca52588a04508a6a855b2477a73a7137aba49151516c08d1ce1c3353c612a394fac80c642f9596021373838f1e6d5471f3c953c799697e8cb9534ad54bf25a7ab1f0c408371aad2401c3a81ca5dc4f38ac2047d3aa0d06698e2f88e86a6ab22c8b0487a01ae611cf03958ed7bbc45fef71b3e217fd54d8d8cfc988cfdf0f01433c24dd8671add341705286c0a5a25dac164d8ee019c76ba1118ea752ee3da34e0da3c82aa22a5c0192a6c1b9e89a6af5bd0199551629c493b6711cc77ae21d0f589affc0a7507f337e50a4d3d6ce2fe65af324d1e55fb91181d8ba0d60faabaf5882a4c502b52167f4dde9b04b6234b5ee7d1eba51e90dc6ff4213cda22aa45c472025cdb36ce27c360ee708848400a4c13442c1a277ae823c52882481c4c9e5a267d85a5da0fb8bce0041407c639a420d8a8c2c2306ffc188997d32b1941197301e0c1ca3e09053aded83607576c28c8016cd749342e631bd1679bc25d58449d6641d2d083f044a1eb5a89d0c837eb7dc7b8a0aaaa594d0002e607abbf4eb339909393d293fff8eb76f0ddc671441745b6ddf1eae2a5b7d2b2cb8d08e9f32afb969a227a5f8168db3fa052761212983810a384b732701d4a71a7bb54d7f494e0e500cef80bd447755f2a52ca31c95cb4b9eefecb7f64c616dd5499fb4fa82f7051ee3980a517efb9a5a5a670ea5ff2c60e688a0129f98dac05ae959088c2b0a2c774bd0cbe36b07dc607d64cb5d490118858b33d8eedc06c50a8502de344eaf867708510649d0fae1ecb695e018932657c097b2921c21ccc2f3c2ce2fa4b3a667b0bc7ae98473ef7146ae8e542ba11e617c34260bd4b54428fa0ebf13a4719ceee890c1d52dad6b9ce19e20f6971d2fee67c56e990110c26652097eafb028698fd8dfb99040a7a84393bd7ee81076defcecd0c2a6a7ccb8d1f23459cec19f03652f7616294b5e5d30d3495eaccdc7eecff14d4c34bc51a4bd4cd27f92235db48818aa533184f6056a25f227899d5ecb01e0780a4469961440deb2843ba45fd1f02915519a8b37ccb3f4a5ff4212a6994483ff0d6f75f2808a31ad3894b1f3fcc039013aca6ea13b818204d1e36371d80bc5dc61fa80872178e927e856d86ca19c0856328448125a5779ee5bc10e1aa9a2ab48fda0cf6b62c3abea27809bb7fba90c85aa67b37416aabcb40e30546aa213766b1e53f75b6321850450b90887f84e9739f792fe40fb4310029343144942d131aa333973afd9be15061fe5b08cbf97c6c2230f849cdec2b79285e24a0225f40c04f2b090023031c0c66f0309b7a6fcf90974b3370b6a966552b9d0914e2f1a22a409590f8d1b73aa9f6f2421079e52dd2e458b3906705a65d9eef300eb2a20121354f8c654f623caa0ae2c64c0f7c44b2da13a43e84d735eab29a87d28bb4fcf47c37be60862e96cd5248e84b25ff2e6aba50585f3a67a8f691e69ce4584f708847461dc435855fd4752513cb1702818a56d2f4f07dd142e15daf4fc93a8308be50e28d0b9802fa119934643f51fb89643534f1fbb05bd2e02f8dd7fb828d231bc983a009e34718405bc8a5b6e87296f572701ceff27c3aef9dfbdf209907dc9cb02d67f0515f5c812d0c791c3dfc9e982b08d1a7e91c664aae62888d6e4703f79544f31415fc29585b22aa5e069e6b086ee87247f8376e05f2a9ab4281923312f1549788b3464a524666e423e3d17bae47936f67b29fd01cb96063150f606284bb7569bfb7cc253d4799f1b7a6af2ffcbb395a06ea899d14998bea343cde4951dc44906fcca3fb7a879eb47808ddab5d5610eda43394632cb81e2566382513022d061572ab0e35d0efb31b772ddada15bb5f967d1ad8e4824c0efbff7c360a012f9c6b55348abc6b2417f54ce93d145dd7f99609d7d84c5906ba5eced49a3b793b2c941a045476a66a7bac17c8851d37c8706eb3c1fc68665f92ffc336a4d05d151b788e06810fb8750a81aa3a598d3fc5f5af8c95c9fd423e3eed23b667b12d7337ff87d323db09c3b81e0748ff105d9d117b357ec0c8693b616854803e041deeae5d287a1188b31082322ac66b05d28b2039a63ce547738678ab7850f6eb1ee2dfce6c0294ef321b14692e0f8bcc84b4b4be36ace2464e9b6c3a1417e76f7f28c43a7e0a06950405ca2665a30c6ee19c10b5471933f9261790b39669aa07ecf2e709be5c6e3d5a1efb2f9f4c66f8f85be1967d77516bd3bf20c2cd192efb0f6447c5e6e05783ee64135a0a7cc0e8e415d3dbef2d69756e05ace98001e531909596591c386ea69ea2ee0684ce0204f6c9938bcf82ad4a078c065f0566380d657ee534a43820d1dd8b735d17c5b82e262f0a0bf56049626c68c4d4bc2d4218de225301488e8fdb9777a37e3f1e3fcce6626533afe3a5040a969ab3a0946b1adae13e1a5f7c97012332e01750c61734778d0b9d50a5b40125aff0a2cb32a308b600f2118a059966757fff94e875ef8f1727b487b88869df9e95a3a2d876128262c9a8c8d333d63aa17045ca40b282f0de679b0c32b6780b87aeb10ca8f7d71e5f363398698e6385408cfcb49667e5594f80624fbc5d2c8af6bb82103effaeeab36dc4a04e4a9c8eb36db1d8697d492bb749bf4eaf6f7e6c1c794f4797e9c611c529a542a89328e3fd0dba24f25eac4388a1823a8db19b9a5ebdc8553faae20532fcdf0537ddb77d3abba77e8ddf414dc9c514624f7c1da31deb8672da4dd0ba5dc39a5f3f801cb486845d11bdf942a0f0d7b85cd821dbe9e151d67152d959b90712f67f3703594b6e8643b17c26b2a2e24a4ff1db5ce4fd61b532a34ef497744a920599a4d1b46d7630309add24c0e3cdabaf7ea65303dca4b36d224b4f261c024e263c5adc6373a256b3abead7876f207344dd4794fb3f7603d99a4b7fb79fde8cc4c486443e2c1c09e0dcd313fdaaa9806fdad54ed5d60bb93775058d53033c2f4ece51504d5fa60b24b120c9cc339f682bfb4d3090eb2a20a7c6ef51edc8547b833d58b6048371e7a0b4eba357a7aed5deed5cdb8c4efb8ec0508e9d65993670ab4097fbeff5b959ec67a1a6a2da6113935d7c88498b3d5a7d7497bcdb50b2108bfb43a7ff0b08304690ef9a36b4d0319f8a8ca9f58bba336ede12a32bd3358631d59546c7798bd0585a3f55de4f839b9ec501e44e61d875e54818b4331820c77ff32afc2dc288d41349690623bda4549efafaed3321d53a04ecc81f3d9e0520acf80d362f9a534731ad418b1c0c7f6882d61f00e06e093c0a544056f161505e8da45adf961f72571a2a6163b32f2ce92a15693a4564db0dacac0e771bb3aa9c91fadf6fb44a550b4d20eaf41c6a2bf0b60757bb2febf44aaefd27324b2efc4830ff2f236b325c70ebe8787241cb2fef87b6f3d1c18c3123f348acc2c1b7dde26d487bbf61cddbf74256b873f7b51998bf679dc486e5b03b692a675090564725b4e1a71916fdf8ee33e6f2e1"}) fsmount(0xffffffffffffffff, 0x0, 0x17c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 8.099589228s ago: executing program 1 (id=606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) fsmount(0xffffffffffffffff, 0x0, 0x17c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 6.729811166s ago: executing program 2 (id=607): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) fsmount(0xffffffffffffffff, 0x0, 0x17c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 5.800700095s ago: executing program 2 (id=609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x78f, &(0x7f0000001940)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x300, 0x0, {0x3}}, 0x14}}, 0x0) 4.213303262s ago: executing program 5 (id=611): r0 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x800}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xf262}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.196578323s ago: executing program 2 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000000803010000000000000000070000011c00048008000a400000000908000940000000070808024000001000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x80080) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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") pipe2$watch_queue(&(0x7f0000000340), 0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, 0x0) 3.383162317s ago: executing program 1 (id=614): r0 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x800}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xf262}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.911863437s ago: executing program 2 (id=615): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000"], 0x0}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000051790860300000000000000ee"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x98, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3bead30b9d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x131, 0x47}, {0x6, 0x24, 0x1a, 0x4, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0xe, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x10, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3bf, 0x2, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x7f, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x3af, 0xfe, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x4, 0xe, 0x10, 0x1}, 0x0, 0x0, 0x2, [{0xbd, &(0x7f0000000680)=@string={0xbd, 0x3, "64abbe18fc487fea7e32a3cd4366aaec048f9764ba37185767040add51c9bbfb439d5fe8d997e2c4a365dd0b0875386cc24950f9ff6f9b31aa0fa442dab24fca124f12acfa27520b205d2462566ee3dd05962cefa4f59ea763cbe096d019c9aca18191decf86364b111ab6d79c24e5b52edc69e2e07fb184f2547034d5383d0556c5891fe7f8d1f665c3c9b9e615374b913e425e0988d6abc230bd0c6c72a42de00a2d547599642c0be143ee395f09d187c8e5371ac7f2b2a26d1b"}}, {0xea, &(0x7f0000000740)=ANY=[@ANYBLOB="ea038223ee9abb44f377b1bfa5c1c5b6d449af5ea9df9692fdbe27c8af243382ba2b01e38b1fe3c767a1a3554641ce9f2113443aac4cf051dad13e775d3aaa1d2e6e45a215126d4c9afd354557584af9266492e02f4b737b8415d563c0355d9f77245911bf1b9428f6eb1fa196990ef97aea1502236f08a66dc7ca5fdcc1edc792fa26e03ee9ad81fa09740eb6ce6b2bcb412f5c192eb13b9034b65081de4662b214a7311a68427999a1a2d8810196ae81fe8d3efe880d2b74f54534003fe8cdc018be421ce5aa0096c7419dfb4fab7d6ba07d857f3fb08fdc897279b0a7504856314ce3e82f405ed000"]}]}) 2.82919376s ago: executing program 4 (id=616): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@fat=@nfs}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x81040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r4], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, &(0x7f0000000040)={0x0, "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"}) 2.506472014s ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setregid(0x0, 0xee01) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 2.417884718s ago: executing program 3 (id=618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "7e1446d02b7587c98cfb943e8a17263ecd5d37f580d62e32271ede664d56362d417f1881cb1b8b6d382309a89c1295ea466c83b64ceebcf807eab212db51edad2c1b57ec939a90d8ec40bf289b70ea29352e2ada37bcef704b7786d2aea495065a54c4ec237675aa88ec893960ba12d08e4637b8c18b3c1589cd3c6bea67ef540b38b86bd82cdfa3e78ffdf34993eaf7745d8712e58f05e8096801c7c6925f505c8774c73845cc60a7bc061a31d8b13b6df65d7659b0b49dd62ff7ac195940bb62d90badb183646a7bc6ced17436bf6739604f6b73d03c3325cb02acfc2b4909127c6b7d3e19c41c97f2d6058f1bf1ee31c621255f2c9efcdcb257b568e32999d863456ef7b0fc14dcb9e5d9196d26fd6add993c884a14005bd7a1bbe158948df83aa25039d976065a21b5c0d0a9683d33ac454d79f13de7cbf361c2b0e71375dc3e8170d11dc2ce61fd3093f714cce960cc063f64f8ce897c6256164d8da5dc58bca707f6b637a46c58473d1609b1c895f3629358a250b4303521b686de948da77782de4287da335796515c518be9a07984a848873e788c4048cc8b1635fe8bb4acfa7a77da264e0bf27de4084fd45dc4ffd33e53443c1907b46ad50a63238e4248308a07b65956efbc696de396b7f9ce10982b4cf4bba319fab3c10453d4929adef679bf72849954cf242f8b58e872bb6c6542eb809b979001333e61aa024e62d7163a2c8a6ff469c9f3f0075d612fb4dc1d207267bedd6705f65d7b963f5e7a71ffae22a01e028bac53f19a7f88d2426fa049e2fca573dddd0f1a26db8cc5657cac61daa61ee6e550d20ac79d1e99ea8b09cbd4757869441465544597e34bfda69d31b4ecc15a8410a1e12e73cc733990b127de25e85fc34abe95944d37f347ae742eaee40f89d73adebec81bc8dbf92a2ececdff7fe11e09a92dad3f3916bcd0703be2171764cdff7068fc015f33b9df873236674b72c591c52c889d562fb189ebf6b4c9efc50691eecb8f1c33b2d57900f11644cce3232c2754d5d2eac331867c70582b97a33217edfc55ef4b48ef21f1db08c45b8e025696eac1eaa944f92f339e87b7e14353961b641612e66f45c04e6febe128462461760c4a4819c409bf8acfa3d7d139a435d66a943afd79bfc9dd737f5fd444cd8d584f1de3899b4faeecdf62a6193d66b3e39f3617c9bd8b86a20b8e78a3fb983c053aedf136f6fc30fa017cd18a552229ee7ec26c954e2997e2267cc9ec1c3126cc8339c201c4addbe0eb00542c4381780a8e3efc8b6b9f8dfbee1febccdb7d38fc8fa5dc90a5197b9bffeb8fcde1df4e9da1427a2899e2c210d533b0a193c72416bef5a1deb7ef60e67ee86e0bb7ca0dcfdc363a66eb22131c4498057d1ffb284774a923aadb2957584279f0782479758879e0be736447d9cf03afd0b8d7ecffa20432537afff5ea9b69b62f1266817f3a9e3996486e43cc6d87e3c4d1e8f8bd6c25c73aa128b8764a5526443717038dce59a30241e7d5a1ead6c35f7aeb3358f7dbbd68cd9757b5429ce604f82913f1bde3a805554408b4f0d860fe3da93e99f1444a38652c95a2c1ce95fe6d0cc58c2d0d974f20ead31a506d683aaff15a1886691401cb0fc0284605c69acb77c885186602c29543344e25c2e8a6c80a209093306acac2f0e74ceed6953dd2b12b4f42c32cc4757b312247707464f811f544a3e33825c5264080f3c5c1f50a26a468054431c1141747a188c5a4d1cece0189a263296e2eae9a9741ca28a88e5459d9e7109072ffa40558262541f9d1972e23a236b819d42f34b714b11bc63485d75d679f06928634df7d1dd2d001a2d8f746acc33c8fc5f9f72ec32250d289d87ae689fb42fbed76a2b867609af2275a442be2a32c8ec5726e511243025a03ad0221554ccb09b0bdb948914b614192fa7faadc7ece52494f743b527890414191405afe085730a8abece312acafbd44916d3b997755b0132aaa5de9f4443a73532731821ba3127b8ad99e9bc5649bdf990520d5354a8c5de4f1202e886801e32fbe042fc94834874d7789577d4e38396bee318a30b462ba72ab2b23c341feba1b3be4c3654fce74eebe23a66f8fad113c4c71eb3f073386c2f3278c881ad0144f470c18e060b4d9cd3b968660b6f4830b8d56698dec2018181fa05712b50fdab1e6cbc4e5b0e0b3b7f1458c4861bc5afcaaed1b5c40e44a7695c6fb0540dcb86ce5c622e2fda37be70c14735c28cef28400c15b331fecd617cefbfbe1511217a1d0cca4c2629ff20c4b3d55c213ba32efaca52588a04508a6a855b2477a73a7137aba49151516c08d1ce1c3353c612a394fac80c642f9596021373838f1e6d5471f3c953c799697e8cb9534ad54bf25a7ab1f0c408371aad2401c3a81ca5dc4f38ac2047d3aa0d06698e2f88e86a6ab22c8b0487a01ae611cf03958ed7bbc45fef71b3e217fd54d8d8cfc988cfdf0f01433c24dd8671add341705286c0a5a25dac164d8ee019c76ba1118ea752ee3da34e0da3c82aa22a5c0192a6c1b9e89a6af5bd0199551629c493b6711cc77ae21d0f589affc0a7507f337e50a4d3d6ce2fe65af324d1e55fb91181d8ba0d60faabaf5882a4c502b52167f4dde9b04b6234b5ee7d1eba51e90dc6ff4213cda22aa45c472025cdb36ce27c360ee708848400a4c13442c1a277ae823c52882481c4c9e5a267d85a5da0fb8bce0041407c639a420d8a8c2c2306ffc188997d32b1941197301e0c1ca3e09053aded83607576c28c8016cd749342e631bd1679bc25d58449d6641d2d083f044a1eb5a89d0c837eb7dc7b8a0aaaa594d0002e607abbf4eb339909393d293fff8eb76f0ddc671441745b6ddf1eae2a5b7d2b2cb8d08e9f32afb969a227a5f8168db3fa052761212983810a384b732701d4a71a7bb54d7f494e0e500cef80bd447755f2a52ca31c95cb4b9eefecb7f64c616dd5499fb4fa82f7051ee3980a517efb9a5a5a670ea5ff2c60e688a0129f98dac05ae959088c2b0a2c774bd0cbe36b07dc607d64cb5d490118858b33d8eedc06c50a8502de344eaf867708510649d0fae1ecb695e018932657c097b2921c21ccc2f3c2ce2fa4b3a667b0bc7ae98473ef7146ae8e542ba11e617c34260bd4b54428fa0ebf13a4719ceee890c1d52dad6b9ce19e20f6971d2fee67c56e990110c26652097eafb028698fd8dfb99040a7a84393bd7ee81076defcecd0c2a6a7ccb8d1f23459cec19f03652f7616294b5e5d30d3495eaccdc7eecff14d4c34bc51a4bd4cd27f92235db48818aa533184f6056a25f227899d5ecb01e0780a4469961440deb2843ba45fd1f02915519a8b37ccb3f4a5ff4212a6994483ff0d6f75f2808a31ad3894b1f3fcc039013aca6ea13b818204d1e36371d80bc5dc61fa80872178e927e856d86ca19c0856328448125a5779ee5bc10e1aa9a2ab48fda0cf6b62c3abea27809bb7fba90c85aa67b37416aabcb40e30546aa213766b1e53f75b6321850450b90887f84e9739f792fe40fb4310029343144942d131aa333973afd9be15061fe5b08cbf97c6c2230f849cdec2b79285e24a0225f40c04f2b090023031c0c66f0309b7a6fcf90974b3370b6a966552b9d0914e2f1a22a409590f8d1b73aa9f6f2421079e52dd2e458b3906705a65d9eef300eb2a20121354f8c654f623caa0ae2c64c0f7c44b2da13a43e84d735eab29a87d28bb4fcf47c37be60862e96cd5248e84b25ff2e6aba50585f3a67a8f691e69ce4584f708847461dc435855fd4752513cb1702818a56d2f4f07dd142e15daf4fc93a8308be50e28d0b9802fa119934643f51fb89643534f1fbb05bd2e02f8dd7fb828d231bc983a009e34718405bc8a5b6e87296f572701ceff27c3aef9dfbdf209907dc9cb02d67f0515f5c812d0c791c3dfc9e982b08d1a7e91c664aae62888d6e4703f79544f31415fc29585b22aa5e069e6b086ee87247f8376e05f2a9ab4281923312f1549788b3464a524666e423e3d17bae47936f67b29fd01cb96063150f606284bb7569bfb7cc253d4799f1b7a6af2ffcbb395a06ea899d14998bea343cde4951dc44906fcca3fb7a879eb47808ddab5d5610eda43394632cb81e2566382513022d061572ab0e35d0efb31b772ddada15bb5f967d1ad8e4824c0efbff7c360a012f9c6b55348abc6b2417f54ce93d145dd7f99609d7d84c5906ba5eced49a3b793b2c941a045476a66a7bac17c8851d37c8706eb3c1fc68665f92ffc336a4d05d151b788e06810fb8750a81aa3a598d3fc5f5af8c95c9fd423e3eed23b667b12d7337ff87d323db09c3b81e0748ff105d9d117b357ec0c8693b616854803e041deeae5d287a1188b31082322ac66b05d28b2039a63ce547738678ab7850f6eb1ee2dfce6c0294ef321b14692e0f8bcc84b4b4be36ace2464e9b6c3a1417e76f7f28c43a7e0a06950405ca2665a30c6ee19c10b5471933f9261790b39669aa07ecf2e709be5c6e3d5a1efb2f9f4c66f8f85be1967d77516bd3bf20c2cd192efb0f6447c5e6e05783ee64135a0a7cc0e8e415d3dbef2d69756e05ace98001e531909596591c386ea69ea2ee0684ce0204f6c9938bcf82ad4a078c065f0566380d657ee534a43820d1dd8b735d17c5b82e262f0a0bf56049626c68c4d4bc2d4218de225301488e8fdb9777a37e3f1e3fcce6626533afe3a5040a969ab3a0946b1adae13e1a5f7c97012332e01750c61734778d0b9d50a5b40125aff0a2cb32a308b600f2118a059966757fff94e875ef8f1727b487b88869df9e95a3a2d876128262c9a8c8d333d63aa17045ca40b282f0de679b0c32b6780b87aeb10ca8f7d71e5f363398698e6385408cfcb49667e5594f80624fbc5d2c8af6bb82103effaeeab36dc4a04e4a9c8eb36db1d8697d492bb749bf4eaf6f7e6c1c794f4797e9c611c529a542a89328e3fd0dba24f25eac4388a1823a8db19b9a5ebdc8553faae20532fcdf0537ddb77d3abba77e8ddf414dc9c514624f7c1da31deb8672da4dd0ba5dc39a5f3f801cb486845d11bdf942a0f0d7b85cd821dbe9e151d67152d959b90712f67f3703594b6e8643b17c26b2a2e24a4ff1db5ce4fd61b532a34ef497744a920599a4d1b46d7630309add24c0e3cdabaf7ea65303dca4b36d224b4f261c024e263c5adc6373a256b3abead7876f207344dd4794fb3f7603d99a4b7fb79fde8cc4c486443e2c1c09e0dcd313fdaaa9806fdad54ed5d60bb93775058d53033c2f4ece51504d5fa60b24b120c9cc339f682bfb4d3090eb2a20a7c6ef51edc8547b833d58b6048371e7a0b4eba357a7aed5deed5cdb8c4efb8ec0508e9d65993670ab4097fbeff5b959ec67a1a6a2da6113935d7c88498b3d5a7d7497bcdb50b2108bfb43a7ff0b08304690ef9a36b4d0319f8a8ca9f58bba336ede12a32bd3358631d59546c7798bd0585a3f55de4f839b9ec501e44e61d875e54818b4331820c77ff32afc2dc288d41349690623bda4549efafaed3321d53a04ecc81f3d9e0520acf80d362f9a534731ad418b1c0c7f6882d61f00e06e093c0a544056f161505e8da45adf961f72571a2a6163b32f2ce92a15693a4564db0dacac0e771bb3aa9c91fadf6fb44a550b4d20eaf41c6a2bf0b60757bb2febf44aaefd27324b2efc4830ff2f236b325c70ebe8787241cb2fef87b6f3d1c18c3123f348acc2c1b7dde26d487bbf61cddbf74256b873f7b51998bf679dc486e5b03b692a675090564725b4e1a71916fdf8ee33e6f2e1"}) fsmount(0xffffffffffffffff, 0x0, 0x17c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 1.950403288s ago: executing program 4 (id=619): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) r2 = io_uring_setup(0x108c, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='blkio.reset_stats\x00', 0x2, 0x0) read(r7, &(0x7f00000000c0)=""/247, 0xf7) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="00000000000000ddb603000000040000850000001b000000b700000000fa126a0c296cebb54201611f9acfc831424c5fcbba4c38b72ac8c51f9999d1ed772ba73c83f17fdb86827b9e330690e1e9ff9485fe4aa1a11b5508"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r10}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x19, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.486433757s ago: executing program 2 (id=620): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) process_vm_readv(r2, &(0x7f0000000340)=[{&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/136, 0x88}, {}], 0x5, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/228, 0xe4}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x3, 0x0) 1.457943049s ago: executing program 3 (id=621): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) r3 = dup(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.440260569s ago: executing program 3 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setresuid(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r4, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 1.380066182s ago: executing program 5 (id=623): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x10) getegid() syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x5548, &(0x7f0000002480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000000)=0x201) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r7) getpid() sendto$unix(r6, &(0x7f00000003c0)="88fa06fa438fd9ecbce8146eddf8872dcdffb623642f6880c6cfd6862c2fc0998ff26b7e5b86214db375e49f56004792adb98a523e2c2da4b446cf4e9a393188da382e8fbe64596f1825c12ea9b5119ed0ef3868f5ab3773", 0x58, 0x40810, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 842.095155ms ago: executing program 4 (id=624): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000480)=ANY=[@ANYBLOB="4338eb8689cd9f54353995fee4afd5f3545f911a0d8e7237d685fb61b5c12de66bc0bab635c7ff5437d3e712cc154c3253bf41f39a95ad11162220d326119236b534a5dccc6b00d1a52cc063f720ea9cd3479148d2d592822c6f33be208c06728d366a9ea48e7aceaf89c9e809cc7a652fe5b525233d9b750efb9691abda966fb29558aab819602927314ca32b0497048e21c0c94c2cbc98", @ANYRES64, @ANYRESDEC, @ANYRES64], 0xff, 0x203, &(0x7f00000009c0)="$eJzsmbGLE0EUxr+Z3ezGQwQLLWxiceAJ3uZ201xjoa0Iwp2oZfDWI7pJJNkiCQgGGxsbO/8RhdR2NmJhpaKCYGFKGwVHZnY2mWTN6iYEi3u/YvjmzcybN2/23sAFBEEcWT5/+v7xyeXd/QsAjmMTrrZ/taZzuDH/3TOrpOXL1okHo3l/DIAQ0779l/0dvP/wVG6OxK0QP4Q5vql97oMrLbkOjvNa3wCDl8YqJIkMwXBLm+8aun1Miyhkt9vRwZ1GFO7IxpdNIJsaIGbiHw8ZDgCU9RbMiK/bH9yrR0AnEVGYipJI98kMFRV5+VPxXeK4aKRA3tfNx4+Gsu9p+46RPx8cvtY1MOxpvQsXnudVdDf0jfOfsaf+LXltM+f/15OUV0tEUXFyO3dOeoh1h/FLrMWzs9QVrEfIOIqv4pXsKqeYH2eJmNm8Rf5BTyynx6NX2VVf/mt6VxOqcAHIDL3ZiKKrpuX1FS1Ozfg5a+bHEOkXuPCTSOoHs4FzRn2yjVehGjfvV7v9wXajWT8MD8NWENSAh6rEqtpcVW1O/Sur+rRh+C8tmOswB716HHf8HhB3/Ek/SFqj4u49b39Ta7iqfxxbP4VInxd1bPfPe6j3z03WMdXbshYGTxAEQRAEQRAEQRAEQRAEkUPlbcaCF9D/q2Tpb2JZ7OCamv07AAD//6KhYw4=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x10000101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = inotify_init() io_submit(0x0, 0x1, &(0x7f0000000140)=[0x0]) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x5816b3ecd2fdf92c, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000380)={r0}) inotify_add_watch(r4, &(0x7f0000000400)='./file1\x00', 0x22000237) fcntl$setown(r5, 0x8, r0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_procfs(0x0, 0x0) socketpair(0x11, 0x80000, 0xe, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000471e5aaddf66de33ee980086003f06"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x4e}, 0x1e) 420.752033ms ago: executing program 3 (id=625): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x6cc0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000480)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ff"], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x92a8, 0x40, 0x2, 0x8b}) r9 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r9, 0x0, 0x235c, 0x3, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 338.536546ms ago: executing program 1 (id=626): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) close_range(r4, 0xffffffffffffffff, 0x0) 68.649437ms ago: executing program 2 (id=627): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) close_range(r4, 0xffffffffffffffff, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e22, 0x1, 'lblc\x00', 0x17, 0x6, 0x77}, 0x2c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="97df798bdc6ae5d020be79a88b46daddbcef11ca3600"/31, @ANYBLOB="191da02fc61be00a2eb3bef25630526785394af83c421c35d6407963eca921a54d59f6acc5cce22719002924cb6141a880f4f1734bf37b92cba219"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000002649fe8310916b69a49e626f54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 193.225727][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 193.234832][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.247971][ T39] usb 4-1: config 0 descriptor?? [ 193.365102][ T998] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 193.546312][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.564000][ T998] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.573373][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.581482][ T998] usb 3-1: Product: syz [ 193.585794][ T998] usb 3-1: Manufacturer: syz [ 193.590409][ T998] usb 3-1: SerialNumber: syz [ 193.765948][ T2019] loop0: detected capacity change from 0 to 16 [ 193.774323][ T2019] erofs: (device loop0): mounted with root inode @ nid 36. [ 194.053638][ T229] usb 5-1: USB disconnect, device number 22 [ 194.085431][ T352] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 194.099975][ T28] audit: type=1400 audit(1764664296.662:237): avc: denied { create } for pid=1978 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.355651][ T2029] netlink: 'syz.4.374': attribute type 12 has an invalid length. [ 194.716113][ T998] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 194.724063][ T998] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 194.756647][ T998] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 194.924710][ T998] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 194.939629][ T998] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 195.010535][ T998] usb 3-1: USB disconnect, device number 16 [ 195.045663][ T998] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 195.296244][ T352] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.303718][ T2040] loop0: detected capacity change from 0 to 1024 [ 195.315334][ T352] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.324673][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.334485][ T352] usb 2-1: Product: syz [ 195.338855][ T352] usb 2-1: Manufacturer: syz [ 195.343524][ T352] usb 2-1: SerialNumber: syz [ 195.349743][ T2040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.359735][ T2040] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.391334][ T2040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.412032][ T28] audit: type=1400 audit(1764664297.972:238): avc: denied { read write } for pid=2038 comm="syz.0.376" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 195.550015][ T28] audit: type=1400 audit(1764664297.972:239): avc: denied { open } for pid=2038 comm="syz.0.376" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 196.065162][ T39] usbhid 4-1:0.46: can't add hid device: -71 [ 196.071273][ T39] usbhid: probe of 4-1:0.46 failed with error -71 [ 196.086100][ T39] usb 4-1: USB disconnect, device number 22 [ 196.192510][ T2066] netlink: 'syz.2.378': attribute type 12 has an invalid length. [ 196.481464][ T352] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 196.497776][ T352] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 196.620888][ T352] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 196.703577][ T352] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 197.196098][ T352] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 197.254199][ T352] usb 2-1: USB disconnect, device number 21 [ 197.302432][ T352] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 197.317623][ T28] audit: type=1400 audit(1764664299.882:240): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 197.342805][ T284] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 197.375230][ T284] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 197.477654][ T284] EXT4-fs (loop0): unmounting filesystem. [ 197.515207][ T39] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 197.571940][ T2081] loop3: detected capacity change from 0 to 512 [ 197.627837][ T28] audit: type=1400 audit(1764664300.192:241): avc: denied { mounton } for pid=2084 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 197.669243][ T899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.697662][ T2081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.706734][ T2081] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.726667][ T28] audit: type=1400 audit(1764664300.292:242): avc: denied { mounton } for pid=2078 comm="syz.3.380" path="/74/file2/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 197.751484][ T2084] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.758787][ T2084] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.766389][ T2084] device bridge_slave_0 entered promiscuous mode [ 197.787202][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.795500][ T2084] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.802849][ T2084] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.811023][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 198.029142][ T2084] device bridge_slave_1 entered promiscuous mode [ 198.112731][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 198.127946][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 198.138933][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 198.150141][ T899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.162236][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.171420][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.179535][ T39] usb 5-1: Product: syz [ 198.183797][ T899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.192888][ T39] usb 5-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 198.226429][ T899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.234431][ T899] usb 3-1: Product: syz [ 198.238655][ T899] usb 3-1: Manufacturer: syz [ 198.243259][ T899] usb 3-1: SerialNumber: syz [ 198.248462][ T39] usb 5-1: SerialNumber: syz [ 198.258187][ T2069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.309189][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.316946][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.317063][ T283] EXT4-fs (loop3): unmounting filesystem. [ 198.330301][ T337] device bridge_slave_1 left promiscuous mode [ 198.336654][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.344654][ T337] device bridge_slave_0 left promiscuous mode [ 198.357010][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.418444][ T337] device veth1_macvtap left promiscuous mode [ 198.424654][ T337] device veth0_vlan left promiscuous mode [ 198.514945][ T39] cdc_ncm 5-1:1.0: bind() failure [ 198.527938][ T39] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 198.552655][ T39] cdc_ncm 5-1:1.1: bind() failure [ 198.669088][ T39] usb 5-1: USB disconnect, device number 23 [ 199.422395][ T2105] loop1: detected capacity change from 0 to 16 [ 199.432552][ T2105] erofs: (device loop1): mounted with root inode @ nid 36. [ 199.696311][ T2101] netlink: 'syz.3.386': attribute type 12 has an invalid length. [ 199.704818][ T809] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.714555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.744750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.765415][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.772581][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.780433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.789117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.798398][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.805505][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.818798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.670581][ T2116] FAULT_INJECTION: forcing a failure. [ 200.670581][ T2116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.690737][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.699353][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.708147][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.717374][ T2116] CPU: 1 PID: 2116 Comm: syz.1.391 Not tainted syzkaller #0 [ 200.724699][ T2116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.734775][ T2116] Call Trace: [ 200.738071][ T2116] [ 200.741069][ T2116] __dump_stack+0x21/0x24 [ 200.745429][ T2116] dump_stack_lvl+0xee/0x150 [ 200.750052][ T2116] ? __cfi_dump_stack_lvl+0x8/0x8 [ 200.755110][ T2116] dump_stack+0x15/0x24 [ 200.759293][ T2116] should_fail_ex+0x3d4/0x520 [ 200.764013][ T2116] should_fail+0xb/0x10 [ 200.768196][ T2116] should_fail_usercopy+0x1a/0x20 [ 200.772414][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.773243][ T2116] _copy_from_user+0x1e/0xc0 [ 200.785573][ T2116] iovec_from_user+0x1aa/0x2e0 [ 200.789958][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.790366][ T2116] ? _parse_integer+0x2a/0x40 [ 200.803123][ T2116] __import_iovec+0x71/0x470 [ 200.807763][ T2116] import_iovec+0x7c/0xb0 [ 200.809298][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.812125][ T2116] ___sys_sendmsg+0x1e4/0x290 [ 200.824981][ T2116] ? __sys_sendmsg+0x270/0x270 [ 200.825017][ T2116] ? __kasan_check_write+0x14/0x20 [ 200.825038][ T2116] ? proc_fail_nth_write+0x17a/0x1f0 [ 200.825062][ T2116] ? vfs_write+0x9d6/0xca0 [ 200.825098][ T2116] ? __fdget+0x19c/0x220 [ 200.825119][ T2116] __x64_sys_sendmsg+0x1f0/0x2c0 [ 200.825146][ T2116] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 200.825172][ T2116] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 200.825198][ T2116] x64_sys_call+0x171/0x9a0 [ 200.825222][ T2116] do_syscall_64+0x4c/0xa0 [ 200.825244][ T2116] ? clear_bhb_loop+0x30/0x80 [ 200.825273][ T2116] ? clear_bhb_loop+0x30/0x80 [ 200.825309][ T2116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.825337][ T2116] RIP: 0033:0x7fc62278f749 [ 200.825355][ T2116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.825375][ T2116] RSP: 002b:00007fc6236d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.825398][ T2116] RAX: ffffffffffffffda RBX: 00007fc6229e5fa0 RCX: 00007fc62278f749 [ 200.825413][ T2116] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000003 [ 200.825426][ T2116] RBP: 00007fc6236d4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.825439][ T2116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.825450][ T2116] R13: 00007fc6229e6038 R14: 00007fc6229e5fa0 R15: 00007ffe4cbfe9d8 [ 200.825470][ T2116] [ 200.838010][ T899] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 200.838056][ T899] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 200.838075][ T899] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 200.842944][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.843236][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.843884][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.844133][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.844677][ T2084] device veth0_vlan entered promiscuous mode [ 200.882514][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.882848][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.051985][ T2134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 201.052737][ T2134] syz.4.394 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.063986][ T2084] device veth1_macvtap entered promiscuous mode [ 201.065221][ T28] audit: type=1400 audit(1764664303.612:243): avc: denied { getopt } for pid=2126 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.065292][ T899] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 201.074899][ T2131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 201.076632][ T899] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 201.082548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.082889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.083175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.083439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.083693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.091290][ T899] usb 3-1: USB disconnect, device number 17 [ 201.091589][ T899] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 201.094523][ T28] audit: type=1400 audit(1764664303.652:244): avc: denied { mounton } for pid=2084 comm="syz-executor" path="/root/syzkaller.VKTSEt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 201.387300][ T998] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 201.697790][ T2145] netlink: 'syz.4.398': attribute type 12 has an invalid length. [ 201.726618][ T998] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.747810][ T998] usb 4-1: not running at top speed; connect to a high speed hub [ 201.801191][ T998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 201.818394][ T998] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 201.831428][ T998] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 201.935237][ T998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.946543][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.219712][ T2147] loop2: detected capacity change from 0 to 256 [ 202.397329][ T28] audit: type=1400 audit(1764664304.962:245): avc: denied { mount } for pid=2146 comm="syz.2.399" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 202.488895][ T2149] loop5: detected capacity change from 0 to 8192 [ 202.519628][ T2149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.400'. [ 202.670766][ T998] usb 4-1: Product: syz [ 202.677053][ T998] usb 4-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 202.682987][ T28] audit: type=1400 audit(1764664305.242:246): avc: denied { unmount } for pid=2084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 202.713174][ T998] usb 4-1: SerialNumber: syz [ 202.745156][ T2136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.960305][ T2152] loop1: detected capacity change from 0 to 40427 [ 202.973286][ T2152] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 202.974117][ T998] cdc_ncm 4-1:1.0: bind() failure [ 202.982468][ T2152] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 202.995141][ T39] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 203.006087][ T998] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 203.013027][ T998] cdc_ncm 4-1:1.1: bind() failure [ 203.034860][ T998] usb 4-1: USB disconnect, device number 23 [ 203.052900][ T2152] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.134892][ T2152] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 203.148114][ T2152] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 203.206746][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 203.213005][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.287773][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.297675][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 203.306791][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.323568][ T39] usb 5-1: config 0 descriptor?? [ 203.832711][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.077848][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.139384][ T2154] loop4: detected capacity change from 0 to 512 [ 204.186418][ T2154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.201674][ T2154] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.214867][ T2176] FAULT_INJECTION: forcing a failure. [ 204.214867][ T2176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.239211][ T2176] CPU: 1 PID: 2176 Comm: syz.5.406 Not tainted syzkaller #0 [ 204.246639][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.256712][ T2176] Call Trace: [ 204.260094][ T2176] [ 204.263040][ T2176] __dump_stack+0x21/0x24 [ 204.267395][ T2176] dump_stack_lvl+0xee/0x150 [ 204.272001][ T2176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 204.277041][ T2176] dump_stack+0x15/0x24 [ 204.281207][ T2176] should_fail_ex+0x3d4/0x520 [ 204.285920][ T2176] should_fail+0xb/0x10 [ 204.290099][ T2176] should_fail_usercopy+0x1a/0x20 [ 204.295135][ T2176] _copy_from_user+0x1e/0xc0 [ 204.299743][ T2176] strndup_user+0xb6/0x150 [ 204.304177][ T2176] __se_sys_mount+0x9c/0x380 [ 204.308773][ T2176] ? fput+0x154/0x1a0 [ 204.312764][ T2176] ? __x64_sys_mount+0xd0/0xd0 [ 204.317531][ T2176] ? __cfi_ksys_write+0x10/0x10 [ 204.322379][ T2176] __x64_sys_mount+0xbf/0xd0 [ 204.326979][ T2176] x64_sys_call+0x65d/0x9a0 [ 204.331485][ T2176] do_syscall_64+0x4c/0xa0 [ 204.335903][ T2176] ? clear_bhb_loop+0x30/0x80 [ 204.340588][ T2176] ? clear_bhb_loop+0x30/0x80 [ 204.345278][ T2176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.351210][ T2176] RIP: 0033:0x7f3dd158f749 [ 204.355628][ T2176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.375406][ T2176] RSP: 002b:00007f3dd2455038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.383824][ T2176] RAX: ffffffffffffffda RBX: 00007f3dd17e6090 RCX: 00007f3dd158f749 [ 204.391805][ T2176] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 204.399776][ T2176] RBP: 00007f3dd2455090 R08: 00002000000003c0 R09: 0000000000000000 [ 204.407780][ T2176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.415755][ T2176] R13: 00007f3dd17e6128 R14: 00007f3dd17e6090 R15: 00007ffe868875b8 [ 204.423730][ T2176] [ 204.433739][ T28] audit: type=1400 audit(1764664306.992:247): avc: denied { sqpoll } for pid=2169 comm="syz.5.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 205.012572][ T2178] loop1: detected capacity change from 0 to 40427 [ 205.027589][ T2178] F2FS-fs (loop1): Image doesn't support compression [ 205.066386][ T2178] F2FS-fs (loop1): invalid crc value [ 205.119340][ T2178] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 205.220645][ T2178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.725583][ T2201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.740450][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 205.775015][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.800895][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 205.810521][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.819240][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.827676][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.836060][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.844329][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.052744][ T28] audit: type=1400 audit(1764664308.612:248): avc: denied { ioctl } for pid=2210 comm="syz.5.415" path="socket:[20705]" dev="sockfs" ino=20705 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.083778][ T2207] loop1: detected capacity change from 0 to 40427 [ 206.096273][ T2207] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 206.104161][ T2207] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 206.119567][ T2207] F2FS-fs (loop1): invalid crc value [ 206.126728][ T2207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.166205][ T2207] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 206.186930][ T2207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.979057][ T376] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 206.988487][ T28] audit: type=1400 audit(1764664308.992:249): avc: denied { append } for pid=2206 comm="syz.1.412" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.124076][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 207.130799][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 207.137588][ T376] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 207.158469][ T285] EXT4-fs (loop4): unmounting filesystem. [ 207.165565][ T39] usb 5-1: USB disconnect, device number 24 [ 207.201417][ T28] audit: type=1400 audit(1764664309.242:250): avc: denied { connect } for pid=2206 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.278637][ T2236] loop3: detected capacity change from 0 to 2048 [ 207.394592][ T2236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.559137][ T28] audit: type=1400 audit(1764664310.122:251): avc: denied { remount } for pid=2234 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.643000][ T2248] tipc: Enabling of bearer rejected, failed to enable media [ 208.553683][ T2220] loop2: detected capacity change from 0 to 40427 [ 208.611355][ T2220] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 208.645083][ T2220] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 208.707849][ T283] EXT4-fs (loop3): unmounting filesystem. [ 208.765123][ T998] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 208.866141][ T2220] F2FS-fs (loop2): Found nat_bits in checkpoint [ 208.956114][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.770101][ T998] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.779841][ T998] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.789242][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.818955][ T998] usb 2-1: config 0 descriptor?? [ 209.930766][ T28] audit: type=1400 audit(1764664312.492:252): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 210.729811][ T2270] 9pnet_fd: Insufficient options for proto=fd [ 210.946240][ T2273] loop2: detected capacity change from 0 to 2048 [ 211.004197][ T2273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.031331][ T28] audit: type=1400 audit(1764664313.592:253): avc: denied { link } for pid=2272 comm="syz.2.427" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 211.054577][ T2273] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 211.165005][ T2273] 9pnet_fd: Insufficient options for proto=fd [ 211.215331][ T28] audit: type=1400 audit(1764664313.782:254): avc: denied { mount } for pid=2277 comm="syz.4.428" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 211.435553][ T2287] loop4: detected capacity change from 0 to 512 [ 211.444305][ T2287] EXT4-fs: Ignoring removed oldalloc option [ 211.515827][ T2287] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.630424][ T2287] EXT4-fs (loop4): 1 truncate cleaned up [ 211.636231][ T2287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.948411][ T286] EXT4-fs (loop2): unmounting filesystem. [ 212.016507][ T2291] 9pnet_fd: Insufficient options for proto=fd [ 212.163755][ T229] usb 2-1: USB disconnect, device number 22 [ 212.222815][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.240368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 212.268876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.366435][ T285] EXT4-fs (loop4): unmounting filesystem. [ 212.374430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 212.382973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.391353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.476507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.485811][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.494883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.926755][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.934183][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.007735][ T28] audit: type=1400 audit(1764664315.572:255): avc: denied { read } for pid=2312 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.075009][ T2317] loop4: detected capacity change from 0 to 256 [ 213.414756][ T2317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 213.516543][ T2323] 9pnet_fd: Insufficient options for proto=fd [ 213.523266][ T2323] FAULT_INJECTION: forcing a failure. [ 213.523266][ T2323] name failslab, interval 1, probability 0, space 0, times 0 [ 213.536895][ T2323] CPU: 0 PID: 2323 Comm: syz.3.440 Not tainted syzkaller #0 [ 213.544222][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.554300][ T2323] Call Trace: [ 213.557599][ T2323] [ 213.560546][ T2323] __dump_stack+0x21/0x24 [ 213.564986][ T2323] dump_stack_lvl+0xee/0x150 [ 213.569593][ T2323] ? __cfi_dump_stack_lvl+0x8/0x8 [ 213.574637][ T2323] dump_stack+0x15/0x24 [ 213.578817][ T2323] should_fail_ex+0x3d4/0x520 [ 213.583608][ T2323] __should_failslab+0xac/0xf0 [ 213.588402][ T2323] ? io_ring_ctx_alloc+0x57/0xb04 [ 213.593448][ T2323] should_failslab+0x9/0x20 [ 213.597984][ T2323] __kmem_cache_alloc_node+0x3d/0x2c0 [ 213.603387][ T2323] ? io_ring_ctx_alloc+0x57/0xb04 [ 213.608410][ T2323] kmalloc_trace+0x29/0xb0 [ 213.612818][ T2323] io_ring_ctx_alloc+0x57/0xb04 [ 213.617668][ T2323] ? __cfi_vfs_write+0x10/0x10 [ 213.622437][ T2323] io_uring_create+0x29a/0xde3 [ 213.627202][ T2323] __x64_sys_io_uring_setup+0x1be/0x1d0 [ 213.632744][ T2323] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 213.638982][ T2323] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 213.645060][ T2323] x64_sys_call+0x4ab/0x9a0 [ 213.649580][ T2323] do_syscall_64+0x4c/0xa0 [ 213.653993][ T2323] ? clear_bhb_loop+0x30/0x80 [ 213.658674][ T2323] ? clear_bhb_loop+0x30/0x80 [ 213.663398][ T2323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.669311][ T2323] RIP: 0033:0x7f00aaf8f749 [ 213.673718][ T2323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.693403][ T2323] RSP: 002b:00007f00a99f6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 213.701845][ T2323] RAX: ffffffffffffffda RBX: 00007f00ab1e6090 RCX: 00007f00aaf8f749 [ 213.709817][ T2323] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000007290 [ 213.717787][ T2323] RBP: 0000200000000280 R08: 0000000000000000 R09: 0000000000000000 [ 213.725765][ T2323] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 213.733731][ T2323] R13: 0000000000000000 R14: 0000000000007290 R15: 0000000000000000 [ 213.741703][ T2323] [ 213.747054][ T998] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 213.936175][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.976998][ T998] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.996051][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.014258][ T998] usb 3-1: Product: syz [ 214.022856][ T998] usb 3-1: Manufacturer: syz [ 214.033028][ T998] usb 3-1: SerialNumber: syz [ 214.530929][ T2336] 9pnet_fd: Insufficient options for proto=fd [ 214.574374][ T2339] loop1: detected capacity change from 0 to 128 [ 214.595899][ T2334] xt_ecn: cannot match TCP bits for non-tcp packets [ 214.759702][ T2339] bio_check_eod: 2104 callbacks suppressed [ 214.759723][ T2339] syz.1.444: attempt to access beyond end of device [ 214.759723][ T2339] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 214.779092][ T2339] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 214.809045][ T2330] loop5: detected capacity change from 0 to 40427 [ 214.855344][ T2330] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 214.959504][ T2330] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 215.002339][ T2330] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.053051][ T998] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 215.062015][ T998] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 215.078955][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 215.080129][ T998] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 215.101016][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 215.162262][ T2330] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 215.204957][ T2330] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 215.253280][ T998] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 215.266037][ T998] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 215.314450][ T998] usb 3-1: USB disconnect, device number 18 [ 215.335374][ T998] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 215.471401][ T2360] FAULT_INJECTION: forcing a failure. [ 215.471401][ T2360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.525340][ T1216] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 215.554947][ T2360] CPU: 1 PID: 2360 Comm: syz.3.447 Not tainted syzkaller #0 [ 215.562289][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.572366][ T2360] Call Trace: [ 215.575675][ T2360] [ 215.578629][ T2360] __dump_stack+0x21/0x24 [ 215.582992][ T2360] dump_stack_lvl+0xee/0x150 [ 215.587612][ T2360] ? __cfi_dump_stack_lvl+0x8/0x8 [ 215.592674][ T2360] dump_stack+0x15/0x24 [ 215.596861][ T2360] should_fail_ex+0x3d4/0x520 [ 215.601579][ T2360] should_fail+0xb/0x10 [ 215.605767][ T2360] should_fail_usercopy+0x1a/0x20 [ 215.610826][ T2360] _copy_from_user+0x1e/0xc0 [ 215.615466][ T2360] strndup_user+0xb6/0x150 [ 215.619917][ T2360] __se_sys_mount+0x9c/0x380 [ 215.624547][ T2360] ? fput+0x154/0x1a0 [ 215.628563][ T2360] ? __x64_sys_mount+0xd0/0xd0 [ 215.633380][ T2360] ? __cfi_ksys_write+0x10/0x10 [ 215.638264][ T2360] __x64_sys_mount+0xbf/0xd0 [ 215.642892][ T2360] x64_sys_call+0x65d/0x9a0 [ 215.647443][ T2360] do_syscall_64+0x4c/0xa0 [ 215.651890][ T2360] ? clear_bhb_loop+0x30/0x80 [ 215.656612][ T2360] ? clear_bhb_loop+0x30/0x80 [ 215.661348][ T2360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.667278][ T2360] RIP: 0033:0x7f00aaf8f749 [ 215.671801][ T2360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.691432][ T2360] RSP: 002b:00007f00abd43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.699878][ T2360] RAX: ffffffffffffffda RBX: 00007f00ab1e5fa0 RCX: 00007f00aaf8f749 [ 215.707874][ T2360] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 215.715132][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 215.715871][ T2360] RBP: 00007f00abd43090 R08: 00002000000003c0 R09: 0000000000000000 [ 215.715890][ T2360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.734820][ T1216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.736967][ T2360] R13: 00007f00ab1e6038 R14: 00007f00ab1e5fa0 R15: 00007ffc7cf93798 [ 215.736990][ T2360] [ 215.798572][ T1216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.820223][ T1216] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 215.845084][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.865081][ T1216] usb 2-1: Product: syz [ 215.869368][ T1216] usb 2-1: Manufacturer: syz [ 215.884209][ T1216] usb 2-1: SerialNumber: syz [ 216.566879][ T2392] loop3: detected capacity change from 0 to 2048 [ 216.608774][ T2392] Alternate GPT is invalid, using primary GPT. [ 216.633197][ T2392] loop3: p2 p3 p7 [ 216.765102][ T352] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 217.004818][ T469] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 217.013753][ T352] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.026678][ T352] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.035766][ T352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.043771][ T352] usb 5-1: Product: syz [ 217.047983][ T352] usb 5-1: Manufacturer: syz [ 217.052594][ T352] usb 5-1: SerialNumber: syz [ 217.357297][ T998] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 217.446357][ T469] usb 4-1: New USB device found, idVendor=07c4, idProduct=a10b, bcdDevice=8e.07 [ 217.455574][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.464446][ T469] usb 4-1: config 0 descriptor?? [ 217.470596][ T469] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 217.556206][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.568997][ T998] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.578140][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.586240][ T998] usb 3-1: Product: syz [ 217.590469][ T998] usb 3-1: Manufacturer: syz [ 217.595168][ T998] usb 3-1: SerialNumber: syz [ 217.925917][ T1216] usb 2-1: 0:2 : does not exist [ 217.933456][ T1216] usb 2-1: USB disconnect, device number 23 [ 217.936783][ T843] udevd[843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.045287][ T2405] loop5: detected capacity change from 0 to 512 [ 218.053986][ T2405] EXT4-fs: Ignoring removed oldalloc option [ 218.063717][ T2405] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.192440][ T2405] EXT4-fs (loop5): 1 truncate cleaned up [ 218.198419][ T2405] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.200294][ T469] usb 4-1: USB disconnect, device number 24 [ 219.220217][ T2084] EXT4-fs (loop5): unmounting filesystem. [ 219.267812][ T2412] 9pnet_fd: Insufficient options for proto=fd [ 219.370921][ T352] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 219.377867][ T352] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 219.385410][ T352] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 219.490170][ T998] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 219.505064][ T998] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 219.512485][ T998] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 219.545131][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.571721][ T352] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 219.593852][ T352] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 219.641944][ T352] usb 5-1: USB disconnect, device number 25 [ 219.652101][ T352] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 219.727452][ T998] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 219.734785][ T998] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 219.747681][ T998] usb 3-1: USB disconnect, device number 19 [ 219.757801][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.759987][ T998] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 219.774021][ T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.787539][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.795952][ T39] usb 6-1: Product: syz [ 219.800867][ T39] usb 6-1: Manufacturer: syz [ 219.806185][ T39] usb 6-1: SerialNumber: syz [ 220.204986][ T2451] netlink: 'syz.1.458': attribute type 12 has an invalid length. [ 220.644344][ T2453] loop4: detected capacity change from 0 to 2048 [ 220.719731][ T2453] EXT4-fs: Ignoring removed bh option [ 221.733725][ T2467] FAULT_INJECTION: forcing a failure. [ 221.733725][ T2467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.746898][ T2467] CPU: 0 PID: 2467 Comm: syz.1.462 Not tainted syzkaller #0 [ 221.754213][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.764306][ T2467] Call Trace: [ 221.767598][ T2467] [ 221.770542][ T2467] __dump_stack+0x21/0x24 [ 221.774889][ T2467] dump_stack_lvl+0xee/0x150 [ 221.779497][ T2467] ? __cfi_dump_stack_lvl+0x8/0x8 [ 221.784554][ T2467] dump_stack+0x15/0x24 [ 221.788727][ T2467] should_fail_ex+0x3d4/0x520 [ 221.793423][ T2467] should_fail+0xb/0x10 [ 221.797605][ T2467] should_fail_usercopy+0x1a/0x20 [ 221.802653][ T2467] _copy_from_user+0x1e/0xc0 [ 221.807262][ T2467] __se_sys_memfd_create+0x131/0x3b0 [ 221.812564][ T2467] __x64_sys_memfd_create+0x5b/0x70 [ 221.817784][ T2467] x64_sys_call+0x235/0x9a0 [ 221.822307][ T2467] do_syscall_64+0x4c/0xa0 [ 221.826744][ T2467] ? clear_bhb_loop+0x30/0x80 [ 221.831447][ T2467] ? clear_bhb_loop+0x30/0x80 [ 221.836150][ T2467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.842077][ T2467] RIP: 0033:0x7fc62278f749 [ 221.846514][ T2467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.866219][ T2467] RSP: 002b:00007fc623691e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 221.874651][ T2467] RAX: ffffffffffffffda RBX: 0000000000000434 RCX: 00007fc62278f749 [ 221.882633][ T2467] RDX: 00007fc623691ef0 RSI: 0000000000000000 RDI: 00007fc622814960 [ 221.890624][ T2467] RBP: 0000200000000940 R08: 00007fc623691bb7 R09: 00007fc623691e40 [ 221.898626][ T2467] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 221.906624][ T2467] R13: 00007fc623691ef0 R14: 00007fc623691eb0 R15: 0000200000000200 [ 221.914629][ T2467] [ 221.935754][ T39] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 221.956031][ T39] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 221.993322][ T39] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 222.014780][ T2453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.178893][ T39] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 222.215931][ T2453] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 222.251397][ T39] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 222.292843][ T39] usb 6-1: USB disconnect, device number 2 [ 222.310348][ T39] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 222.510855][ T2485] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 222.522894][ T2485] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 222.641773][ T2468] loop2: detected capacity change from 0 to 40427 [ 222.672546][ T2468] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 222.690224][ T2468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 222.715961][ T2468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 222.769402][ T2468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 222.777275][ T2468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.903925][ T285] EXT4-fs (loop4): unmounting filesystem. [ 223.016346][ T2490] loop1: detected capacity change from 0 to 40427 [ 223.036609][ T2490] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 223.044649][ T2490] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 223.149716][ T2526] loop4: detected capacity change from 0 to 16 [ 223.158419][ T2526] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.301205][ T2530] FAULT_INJECTION: forcing a failure. [ 223.301205][ T2530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.408719][ T2490] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.474472][ T2530] CPU: 1 PID: 2530 Comm: syz.3.471 Not tainted syzkaller #0 [ 223.481892][ T2530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.491976][ T2530] Call Trace: [ 223.495297][ T2530] [ 223.498245][ T2530] __dump_stack+0x21/0x24 [ 223.502595][ T2530] dump_stack_lvl+0xee/0x150 [ 223.507209][ T2530] ? __cfi_dump_stack_lvl+0x8/0x8 [ 223.512263][ T2530] dump_stack+0x15/0x24 [ 223.516458][ T2530] should_fail_ex+0x3d4/0x520 [ 223.521165][ T2530] should_fail+0xb/0x10 [ 223.525348][ T2530] should_fail_usercopy+0x1a/0x20 [ 223.530402][ T2530] _copy_from_user+0x1e/0xc0 [ 223.535046][ T2530] iovec_from_user+0x1aa/0x2e0 [ 223.539853][ T2530] ? __this_cpu_preempt_check+0x13/0x20 [ 223.545418][ T2530] __import_iovec+0x71/0x470 [ 223.550039][ T2530] import_iovec+0x7c/0xb0 [ 223.554403][ T2530] ___sys_sendmsg+0x1e4/0x290 [ 223.559198][ T2530] ? __sys_sendmsg+0x270/0x270 [ 223.564000][ T2530] __x64_sys_sendmsg+0x1f0/0x2c0 [ 223.568972][ T2530] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 223.574556][ T2530] ? __bpf_trace_sys_enter+0x62/0x70 [ 223.579869][ T2530] ? trace_sys_enter+0x3d/0x50 [ 223.584662][ T2530] x64_sys_call+0x171/0x9a0 [ 223.589176][ T2530] do_syscall_64+0x4c/0xa0 [ 223.593685][ T2530] ? clear_bhb_loop+0x30/0x80 [ 223.598373][ T2530] ? clear_bhb_loop+0x30/0x80 [ 223.603065][ T2530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.608967][ T2530] RIP: 0033:0x7f00aaf8f749 [ 223.613387][ T2530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.632998][ T2530] RSP: 002b:00007f00abd43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.641416][ T2530] RAX: ffffffffffffffda RBX: 00007f00ab1e5fa0 RCX: 00007f00aaf8f749 [ 223.649390][ T2530] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000008 [ 223.657361][ T2530] RBP: 00007f00abd43090 R08: 0000000000000000 R09: 0000000000000000 [ 223.665335][ T2530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.673306][ T2530] R13: 00007f00ab1e6038 R14: 00007f00ab1e5fa0 R15: 00007ffc7cf93798 [ 223.681296][ T2530] [ 223.699226][ T2490] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 223.708586][ T2490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.892150][ T2538] FAULT_INJECTION: forcing a failure. [ 223.892150][ T2538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.900229][ T2540] mmap: syz.4.473 (2540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.905318][ T28] audit: type=1400 audit(1764664326.452:256): avc: denied { read write } for pid=2539 comm="syz.4.473" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.950737][ T2538] CPU: 0 PID: 2538 Comm: syz.3.472 Not tainted syzkaller #0 [ 223.958075][ T2538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.968150][ T2538] Call Trace: [ 223.971544][ T2538] [ 223.974488][ T2538] __dump_stack+0x21/0x24 [ 223.978830][ T2538] dump_stack_lvl+0xee/0x150 [ 223.983426][ T2538] ? __cfi_dump_stack_lvl+0x8/0x8 [ 223.988454][ T2538] dump_stack+0x15/0x24 [ 223.992659][ T2538] should_fail_ex+0x3d4/0x520 [ 223.997347][ T2538] should_fail+0xb/0x10 [ 224.001516][ T2538] should_fail_usercopy+0x1a/0x20 [ 224.006552][ T2538] copy_fpstate_to_sigframe+0x849/0xaa0 [ 224.012112][ T2538] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 224.017836][ T2538] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 224.023920][ T2538] ? get_signal+0x124b/0x1520 [ 224.028699][ T2538] ? fpu__alloc_mathframe+0xb3/0x130 [ 224.034015][ T2538] arch_do_signal_or_restart+0x5bd/0x1030 [ 224.039744][ T2538] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 224.045902][ T2538] ? bpf_trace_run2+0x104/0x250 [ 224.050766][ T2538] ? __x64_sys_recvmmsg+0x18d/0x240 [ 224.055970][ T2538] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 224.061526][ T2538] exit_to_user_mode_loop+0x7a/0xb0 [ 224.066725][ T2538] exit_to_user_mode_prepare+0x87/0xd0 [ 224.072189][ T2538] syscall_exit_to_user_mode+0x1a/0x30 [ 224.077656][ T2538] do_syscall_64+0x58/0xa0 [ 224.082174][ T2538] ? clear_bhb_loop+0x30/0x80 [ 224.086879][ T2538] ? clear_bhb_loop+0x30/0x80 [ 224.091576][ T2538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.097480][ T2538] RIP: 0033:0x7f00aaf8f747 [ 224.101983][ T2538] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 224.121597][ T2538] RSP: 002b:00007f00abd43038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 224.130013][ T2538] RAX: 000000000000012b RBX: 00007f00ab1e5fa0 RCX: 00007f00aaf8f749 [ 224.137985][ T2538] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003 [ 224.145962][ T2538] RBP: 00007f00abd43090 R08: 0000000000000000 R09: 0000000000000000 [ 224.153933][ T2538] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 224.161911][ T2538] R13: 00007f00ab1e6038 R14: 00007f00ab1e5fa0 R15: 00007ffc7cf93798 [ 224.169892][ T2538] [ 224.174352][ T28] audit: type=1400 audit(1764664326.452:257): avc: denied { open } for pid=2539 comm="syz.4.473" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.777983][ T2560] loop2: detected capacity change from 0 to 1024 [ 224.814036][ T2560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.834692][ T2560] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.856342][ T2560] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 224.863310][ T28] audit: type=1400 audit(1764664327.422:258): avc: denied { ioctl } for pid=2566 comm="syz.4.480" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.889090][ T28] audit: type=1400 audit(1764664327.452:259): avc: denied { connect } for pid=2559 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.118071][ T2582] loop1: detected capacity change from 0 to 16 [ 225.146960][ T2582] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.464250][ T2591] Driver unsupported XDP return value 0 on prog (id 245) dev N/A, expect packet loss! [ 225.545114][ T2589] loop3: detected capacity change from 0 to 40427 [ 225.560175][ T2589] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 225.577442][ T2589] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 225.592338][ T2589] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.625671][ T286] EXT4-fs (loop2): unmounting filesystem. [ 225.661027][ T2589] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 225.676048][ T2589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.753036][ T2598] loop4: detected capacity change from 0 to 40427 [ 225.768585][ T2598] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 225.786026][ T2598] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 225.797130][ T2598] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.867185][ T2598] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 225.874492][ T2598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.950137][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 227.840230][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 227.846843][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.882274][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.913061][ T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.954516][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.975974][ T19] usb 6-1: config 0 descriptor?? [ 228.414997][ T19] hub 6-1:0.0: USB hub found [ 228.570083][ T2636] loop1: detected capacity change from 0 to 40427 [ 228.584688][ T2636] F2FS-fs (loop1): invalid crc value [ 228.595278][ T2636] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.616391][ T469] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 228.659988][ T2636] F2FS-fs (loop1): Start checkpoint disabled! [ 228.668434][ T19] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 228.805903][ T2636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 228.815061][ T469] usb 5-1: Using ep0 maxpacket: 32 [ 228.825867][ T469] usb 5-1: config 2 has an invalid interface number: 163 but max is 0 [ 228.834123][ T469] usb 5-1: config 2 has an invalid descriptor of length 227, skipping remainder of the config [ 228.870364][ T469] usb 5-1: config 2 has no interface number 0 [ 228.886392][ T469] usb 5-1: config 2 interface 163 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.934880][ T28] audit: type=1400 audit(1764664331.492:260): avc: denied { getopt } for pid=2635 comm="syz.1.498" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.055662][ T469] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=55.44 [ 229.134024][ T469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.138556][ T19] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 229.150503][ T19] hid-generic: probe of 0003:046D:C31C.000B failed with error -22 [ 229.385512][ T24] usb 6-1: USB disconnect, device number 3 [ 229.398672][ T469] usb 5-1: string descriptor 0 read error: -71 [ 229.414828][ T469] aiptek 5-1:2.163: interface has no int in endpoints, but must have minimum 1 [ 229.470622][ T469] usb 5-1: USB disconnect, device number 26 [ 229.476869][ T229] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 229.566694][ T2638] loop3: detected capacity change from 0 to 40427 [ 229.597846][ T2646] syz.1.498: attempt to access beyond end of device [ 229.597846][ T2646] loop1: rw=2049, sector=77824, nr_sectors = 544 limit=40427 [ 229.613343][ T2638] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 229.626054][ T2638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 229.668830][ T2638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.675597][ T229] usb 3-1: Using ep0 maxpacket: 32 [ 229.682294][ T229] usb 3-1: config 2 has an invalid interface number: 163 but max is 0 [ 229.692772][ T229] usb 3-1: config 2 has no interface number 0 [ 229.711064][ T229] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=55.44 [ 229.724626][ T229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.809227][ T2638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 229.812178][ T376] kworker/u4:4: attempt to access beyond end of device [ 229.812178][ T376] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 229.822982][ T2638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.069704][ T2657] loop4: detected capacity change from 0 to 16 [ 230.078934][ T2657] erofs: (device loop4): mounted with root inode @ nid 36. [ 230.116494][ T809] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.402414][ T2659] loop5: detected capacity change from 0 to 128 [ 230.625117][ T2663] FAULT_INJECTION: forcing a failure. [ 230.625117][ T2663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.638243][ T2663] CPU: 1 PID: 2663 Comm: syz.1.500 Not tainted syzkaller #0 [ 230.645552][ T2663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.655716][ T2663] Call Trace: [ 230.659015][ T2663] [ 230.661957][ T2663] __dump_stack+0x21/0x24 [ 230.666307][ T2663] dump_stack_lvl+0xee/0x150 [ 230.670915][ T2663] ? __cfi_dump_stack_lvl+0x8/0x8 [ 230.675963][ T2663] dump_stack+0x15/0x24 [ 230.680135][ T2663] should_fail_ex+0x3d4/0x520 [ 230.684835][ T2663] should_fail+0xb/0x10 [ 230.689019][ T2663] should_fail_usercopy+0x1a/0x20 [ 230.694074][ T2663] strncpy_from_user+0x24/0x2d0 [ 230.698940][ T2663] ? getname_flags+0xb9/0x500 [ 230.703634][ T2663] getname_flags+0xf4/0x500 [ 230.708152][ T2663] getname+0x19/0x20 [ 230.712056][ T2663] do_sys_openat2+0xcb/0x7e0 [ 230.716661][ T2663] ? __kasan_check_write+0x14/0x20 [ 230.721788][ T2663] ? do_sys_open+0xe0/0xe0 [ 230.726221][ T2663] ? ksys_write+0x1eb/0x240 [ 230.730742][ T2663] __x64_sys_openat+0x136/0x160 [ 230.735615][ T2663] x64_sys_call+0x783/0x9a0 [ 230.740137][ T2663] do_syscall_64+0x4c/0xa0 [ 230.744589][ T2663] ? clear_bhb_loop+0x30/0x80 [ 230.749296][ T2663] ? clear_bhb_loop+0x30/0x80 [ 230.753998][ T2663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.759912][ T2663] RIP: 0033:0x7fc62278f749 [ 230.764340][ T2663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.784397][ T2663] RSP: 002b:00007fc623692038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.792838][ T2663] RAX: ffffffffffffffda RBX: 00007fc6229e6180 RCX: 00007fc62278f749 [ 230.800834][ T2663] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 230.808823][ T2663] RBP: 00007fc623692090 R08: 0000000000000000 R09: 0000000000000000 [ 230.816808][ T2663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.824793][ T2663] R13: 00007fc6229e6218 R14: 00007fc6229e6180 R15: 00007ffe4cbfe9d8 [ 230.832785][ T2663] [ 231.315002][ T2675] 9pnet_fd: Insufficient options for proto=fd [ 231.315080][ T998] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 231.705235][ T998] usb 2-1: Using ep0 maxpacket: 32 [ 231.712038][ T998] usb 2-1: config 2 has an invalid interface number: 163 but max is 0 [ 231.720512][ T998] usb 2-1: config 2 has no interface number 0 [ 231.726926][ T998] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=55.44 [ 231.736245][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.771545][ T229] usb 3-1: string descriptor 0 read error: -71 [ 231.782912][ T229] aiptek 3-1:2.163: Aiptek using 400 ms programming speed [ 231.811768][ T2685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2685 comm=syz.2.511 [ 231.855676][ T2687] FAULT_INJECTION: forcing a failure. [ 231.855676][ T2687] name failslab, interval 1, probability 0, space 0, times 0 [ 231.865943][ T229] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.163/input/input18 [ 231.869401][ T2687] CPU: 0 PID: 2687 Comm: syz.2.512 Not tainted syzkaller #0 [ 231.884798][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.894883][ T2687] Call Trace: [ 231.898180][ T2687] [ 231.901125][ T2687] __dump_stack+0x21/0x24 [ 231.905481][ T2687] dump_stack_lvl+0xee/0x150 [ 231.910100][ T2687] ? __cfi_dump_stack_lvl+0x8/0x8 [ 231.915246][ T2687] dump_stack+0x15/0x24 [ 231.919427][ T2687] should_fail_ex+0x3d4/0x520 [ 231.924136][ T2687] ? dst_alloc+0x16a/0x1e0 [ 231.928675][ T2687] __should_failslab+0xac/0xf0 [ 231.933454][ T2687] should_failslab+0x9/0x20 [ 231.938002][ T2687] kmem_cache_alloc+0x3b/0x330 [ 231.942781][ T2687] dst_alloc+0x16a/0x1e0 [ 231.947136][ T2687] ip_route_output_key_hash_rcu+0x1300/0x2030 [ 231.948617][ T229] usb 3-1: USB disconnect, device number 20 [ 231.953243][ T2687] ip_route_output_flow+0x12e/0x2e0 [ 231.953266][ C1] aiptek 3-1:2.163: aiptek_irq - usb_submit_urb failed with result -19 [ 231.953274][ T2687] ? __cfi_ip_route_output_flow+0x10/0x10 [ 231.953299][ T2687] ? percpu_counter_add_batch+0x13c/0x160 [ 231.984098][ T2687] tcp_v4_connect+0x767/0x1810 [ 231.988872][ T2687] ? __cfi_tcp_v4_connect+0x10/0x10 [ 231.994159][ T2687] ? __kasan_check_write+0x14/0x20 [ 231.999264][ T2687] ? _raw_spin_lock_bh+0x8e/0xe0 [ 232.004202][ T2687] __inet_stream_connect+0x2b3/0xed0 [ 232.009486][ T2687] ? _raw_spin_unlock_bh+0x50/0x60 [ 232.014597][ T2687] ? lock_sock_nested+0x1ec/0x280 [ 232.019623][ T2687] ? __cfi___inet_stream_connect+0x10/0x10 [ 232.025602][ T2687] ? vfs_write+0x9d6/0xca0 [ 232.030018][ T2687] ? slab_free_freelist_hook+0xc2/0x190 [ 232.035563][ T2687] inet_stream_connect+0x62/0xa0 [ 232.040500][ T2687] ? __cfi_inet_stream_connect+0x10/0x10 [ 232.046129][ T2687] __sys_connect+0x398/0x420 [ 232.050733][ T2687] ? __cfi___sys_connect+0x10/0x10 [ 232.055837][ T2687] ? __kasan_check_write+0x14/0x20 [ 232.060961][ T2687] ? debug_smp_processor_id+0x17/0x20 [ 232.066330][ T2687] __x64_sys_connect+0x7a/0x90 [ 232.071110][ T2687] x64_sys_call+0x88d/0x9a0 [ 232.075613][ T2687] do_syscall_64+0x4c/0xa0 [ 232.080021][ T2687] ? clear_bhb_loop+0x30/0x80 [ 232.084694][ T2687] ? clear_bhb_loop+0x30/0x80 [ 232.089365][ T2687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.095274][ T2687] RIP: 0033:0x7f956db8f749 [ 232.099689][ T2687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.119288][ T2687] RSP: 002b:00007f956ea9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 232.127699][ T2687] RAX: ffffffffffffffda RBX: 00007f956dde5fa0 RCX: 00007f956db8f749 [ 232.135762][ T2687] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 232.143725][ T2687] RBP: 00007f956ea9b090 R08: 0000000000000000 R09: 0000000000000000 [ 232.151686][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.159654][ T2687] R13: 00007f956dde6038 R14: 00007f956dde5fa0 R15: 00007ffc46001458 [ 232.167643][ T2687] [ 232.183358][ T2687] loop2: detected capacity change from 0 to 128 [ 232.193169][ T2687] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.538374][ T2691] FAULT_INJECTION: forcing a failure. [ 232.538374][ T2691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.551526][ T2691] CPU: 0 PID: 2691 Comm: syz.3.509 Not tainted syzkaller #0 [ 232.558830][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.568918][ T2691] Call Trace: [ 232.572220][ T2691] [ 232.575167][ T2691] __dump_stack+0x21/0x24 [ 232.579522][ T2691] dump_stack_lvl+0xee/0x150 [ 232.584142][ T2691] ? __cfi_dump_stack_lvl+0x8/0x8 [ 232.589316][ T2691] ? _parse_integer+0x2a/0x40 [ 232.594034][ T2691] dump_stack+0x15/0x24 [ 232.598224][ T2691] should_fail_ex+0x3d4/0x520 [ 232.602935][ T2691] should_fail+0xb/0x10 [ 232.607144][ T2691] should_fail_usercopy+0x1a/0x20 [ 232.612191][ T2691] _copy_from_user+0x1e/0xc0 [ 232.616811][ T2691] ___sys_sendmsg+0x155/0x290 [ 232.621518][ T2691] ? __sys_sendmsg+0x270/0x270 [ 232.626319][ T2691] ? __kasan_check_write+0x14/0x20 [ 232.631452][ T2691] ? proc_fail_nth_write+0x17a/0x1f0 [ 232.636759][ T2691] ? vfs_write+0x9d6/0xca0 [ 232.641209][ T2691] ? __fdget+0x19c/0x220 [ 232.645473][ T2691] __x64_sys_sendmsg+0x1f0/0x2c0 [ 232.650447][ T2691] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 232.655962][ T2691] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 232.662058][ T2691] x64_sys_call+0x171/0x9a0 [ 232.666676][ T2691] do_syscall_64+0x4c/0xa0 [ 232.671107][ T2691] ? clear_bhb_loop+0x30/0x80 [ 232.675804][ T2691] ? clear_bhb_loop+0x30/0x80 [ 232.680504][ T2691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.686426][ T2691] RIP: 0033:0x7f00aaf8f749 [ 232.690871][ T2691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.710490][ T2691] RSP: 002b:00007f00a99d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.719010][ T2691] RAX: ffffffffffffffda RBX: 00007f00ab1e6180 RCX: 00007f00aaf8f749 [ 232.726998][ T2691] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 232.734983][ T2691] RBP: 00007f00a99d6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.742966][ T2691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.750959][ T2691] R13: 00007f00ab1e6218 R14: 00007f00ab1e6180 R15: 00007ffc7cf93798 [ 232.759125][ T2691] [ 232.804369][ T2691] loop3: detected capacity change from 0 to 256 [ 232.817023][ T2691] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111eabd0) [ 232.827405][ T2691] exFAT-fs (loop3): invalid boot region [ 232.833009][ T2691] exFAT-fs (loop3): failed to recognize exfat type [ 232.875860][ T367] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.954837][ T2701] loop4: detected capacity change from 0 to 16 [ 234.145167][ T2701] erofs: (device loop4): mounted with root inode @ nid 36. [ 234.211035][ T998] usb 2-1: string descriptor 0 read error: -71 [ 234.219464][ T998] aiptek 2-1:2.163: Aiptek using 400 ms programming speed [ 234.231664][ T998] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.163/input/input19 [ 234.285181][ T998] usb 2-1: USB disconnect, device number 24 [ 234.291176][ C0] aiptek 2-1:2.163: aiptek_irq - usb_submit_urb failed with result -19 [ 234.335686][ T2711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 234.344613][ T28] audit: type=1326 audit(1764664336.902:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2709 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00aaf8f749 code=0x7ffc0000 [ 234.375122][ T229] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 234.442049][ T2718] loop4: detected capacity change from 0 to 16 [ 234.453092][ T2718] erofs: (device loop4): mounted with root inode @ nid 36. [ 234.655963][ T28] audit: type=1326 audit(1764664336.902:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2709 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00aaf8f749 code=0x7ffc0000 [ 234.680697][ T229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.692503][ T2717] loop1: detected capacity change from 0 to 512 [ 234.727330][ T229] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 234.822184][ T229] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.844645][ T229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.854777][ T229] usb 3-1: config 0 descriptor?? [ 234.864367][ T2717] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 234.864540][ T229] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 235.230584][ T2717] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.256226][ T2717] EXT4-fs (loop1): mount failed [ 235.394533][ T2722] loop5: detected capacity change from 0 to 40427 [ 235.417657][ T2733] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 235.434194][ T2722] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 235.443116][ T2734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2734 comm=syz.4.522 [ 235.447231][ T2722] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 235.492512][ T2722] F2FS-fs (loop5): Found nat_bits in checkpoint [ 235.634923][ T2722] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 235.655055][ T2722] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 235.855093][ T998] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 236.036967][ T998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.056484][ T998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.110765][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.129530][ T998] usb 4-1: Product: syz [ 236.133955][ T998] usb 4-1: Manufacturer: syz [ 236.139082][ T998] usb 4-1: SerialNumber: syz [ 236.192231][ T2745] loop1: detected capacity change from 0 to 2048 [ 236.220021][ T2745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.114050][ T19] usb 3-1: USB disconnect, device number 21 [ 237.223519][ T28] audit: type=1326 audit(1764664339.782:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.266309][ T28] audit: type=1326 audit(1764664339.822:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.291881][ T28] audit: type=1326 audit(1764664339.822:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.397586][ T28] audit: type=1326 audit(1764664339.822:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.688462][ T287] EXT4-fs (loop1): unmounting filesystem. [ 237.753523][ T28] audit: type=1326 audit(1764664339.822:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.805673][ T28] audit: type=1326 audit(1764664339.822:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.851915][ T28] audit: type=1326 audit(1764664339.822:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 237.951727][ T998] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 237.958299][ T998] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 237.965770][ T998] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 238.331105][ T2772] loop5: detected capacity change from 0 to 16 [ 238.401840][ T2772] erofs: (device loop5): mounted with root inode @ nid 36. [ 238.418494][ T614] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 238.485181][ T998] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 238.496425][ T2774] FAULT_INJECTION: forcing a failure. [ 238.496425][ T2774] name failslab, interval 1, probability 0, space 0, times 0 [ 238.512522][ T2774] CPU: 1 PID: 2774 Comm: syz.2.532 Not tainted syzkaller #0 [ 238.519846][ T2774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.529927][ T2774] Call Trace: [ 238.533221][ T2774] [ 238.536163][ T2774] __dump_stack+0x21/0x24 [ 238.540518][ T2774] dump_stack_lvl+0xee/0x150 [ 238.545130][ T2774] ? __cfi_dump_stack_lvl+0x8/0x8 [ 238.550178][ T2774] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 238.556485][ T2774] dump_stack+0x15/0x24 [ 238.560677][ T2774] should_fail_ex+0x3d4/0x520 [ 238.565379][ T2774] ? getname_flags+0xb9/0x500 [ 238.570079][ T2774] __should_failslab+0xac/0xf0 [ 238.574869][ T2774] should_failslab+0x9/0x20 [ 238.579391][ T2774] kmem_cache_alloc+0x3b/0x330 [ 238.584182][ T2774] getname_flags+0xb9/0x500 [ 238.588735][ T2774] __se_sys_newstat+0xba/0x350 [ 238.593518][ T2774] ? __x64_sys_newstat+0x70/0x70 [ 238.598468][ T2774] ? __schedule+0xb8f/0x14e0 [ 238.603096][ T2774] ? __sched_text_start+0x8/0x8 [ 238.607964][ T2774] ? __schedule+0xb8f/0x14e0 [ 238.612508][ T998] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 238.612577][ T2774] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 238.628540][ T998] usb 4-1: USB disconnect, device number 25 [ 238.629477][ T2774] __x64_sys_newstat+0x5b/0x70 [ 238.635785][ T998] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 238.640160][ T2774] x64_sys_call+0x411/0x9a0 [ 238.653767][ T2774] do_syscall_64+0x4c/0xa0 [ 238.658206][ T2774] ? clear_bhb_loop+0x30/0x80 [ 238.662895][ T2774] ? clear_bhb_loop+0x30/0x80 [ 238.667574][ T2774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.673472][ T2774] RIP: 0033:0x7f956db8f749 [ 238.677888][ T2774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.697505][ T2774] RSP: 002b:00007f956ea9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 238.706033][ T2774] RAX: ffffffffffffffda RBX: 00007f956dde5fa0 RCX: 00007f956db8f749 [ 238.714032][ T2774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.717593][ T614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.722020][ T2774] RBP: 00007f956ea9b090 R08: 0000000000000000 R09: 0000000000000000 [ 238.731990][ T614] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 238.739713][ T2774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.739729][ T2774] R13: 00007f956dde6038 R14: 00007f956dde5fa0 R15: 00007ffc46001458 [ 238.739749][ T2774] [ 238.760388][ T335] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.800413][ T614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.816810][ T614] usb 5-1: config 0 descriptor?? [ 238.833908][ T2778] loop2: detected capacity change from 0 to 256 [ 238.848998][ T2778] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.914469][ T2781] loop5: detected capacity change from 0 to 256 [ 238.921633][ T2781] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.956176][ T2781] FAULT_INJECTION: forcing a failure. [ 238.956176][ T2781] name failslab, interval 1, probability 0, space 0, times 0 [ 239.068040][ T2781] CPU: 1 PID: 2781 Comm: syz.5.535 Not tainted syzkaller #0 [ 239.075379][ T2781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.085454][ T2781] Call Trace: [ 239.088747][ T2781] [ 239.091691][ T2781] __dump_stack+0x21/0x24 [ 239.096046][ T2781] dump_stack_lvl+0xee/0x150 [ 239.100657][ T2781] ? __cfi_dump_stack_lvl+0x8/0x8 [ 239.105697][ T2781] ? __kasan_check_write+0x14/0x20 [ 239.110918][ T2781] dump_stack+0x15/0x24 [ 239.115087][ T2781] should_fail_ex+0x3d4/0x520 [ 239.119787][ T2781] ? getname_flags+0xb9/0x500 [ 239.124489][ T2781] __should_failslab+0xac/0xf0 [ 239.129276][ T2781] should_failslab+0x9/0x20 [ 239.133790][ T2781] kmem_cache_alloc+0x3b/0x330 [ 239.138581][ T2781] getname_flags+0xb9/0x500 [ 239.143102][ T2781] getname+0x19/0x20 [ 239.147004][ T2781] do_sys_openat2+0xcb/0x7e0 [ 239.151620][ T2781] ? __kasan_check_write+0x14/0x20 [ 239.156753][ T2781] ? do_sys_open+0xe0/0xe0 [ 239.161189][ T2781] ? ksys_write+0x1eb/0x240 [ 239.165706][ T2781] ? __cfi_ksys_write+0x10/0x10 [ 239.170574][ T2781] __x64_sys_creat+0x8e/0xb0 [ 239.175187][ T2781] x64_sys_call+0x116/0x9a0 [ 239.179740][ T2781] do_syscall_64+0x4c/0xa0 [ 239.184172][ T2781] ? clear_bhb_loop+0x30/0x80 [ 239.188889][ T2781] ? clear_bhb_loop+0x30/0x80 [ 239.193608][ T2781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.199507][ T2781] RIP: 0033:0x7f3dd158f749 [ 239.203924][ T2781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.223563][ T2781] RSP: 002b:00007f3dd2476038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 239.232155][ T2781] RAX: ffffffffffffffda RBX: 00007f3dd17e5fa0 RCX: 00007f3dd158f749 [ 239.240129][ T2781] RDX: 0000000000000000 RSI: d931d3864d39dcdb RDI: 0000200000000000 [ 239.248098][ T2781] RBP: 00007f3dd2476090 R08: 0000000000000000 R09: 0000000000000000 [ 239.256100][ T2781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.264072][ T2781] R13: 00007f3dd17e6038 R14: 00007f3dd17e5fa0 R15: 00007ffe868875b8 [ 239.272057][ T2781] [ 239.477001][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 239.477026][ T28] audit: type=1326 audit(1764664342.042:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 239.785433][ T28] audit: type=1326 audit(1764664342.352:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 239.838992][ T28] audit: type=1326 audit(1764664342.372:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 239.871572][ T614] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 239.944353][ T28] audit: type=1326 audit(1764664342.372:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 239.969065][ T614] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 239.983454][ T614] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 240.046611][ T614] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 240.095371][ T614] nintendo: probe of 0003:057E:200E.000C failed with error -110 [ 240.107257][ T28] audit: type=1326 audit(1764664342.372:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 240.135234][ T614] usb 5-1: USB disconnect, device number 27 [ 240.150395][ T28] audit: type=1326 audit(1764664342.372:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2da38f34b code=0x7ffc0000 [ 240.174002][ T28] audit: type=1326 audit(1764664342.372:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2da38f34b code=0x7ffc0000 [ 240.204633][ T28] audit: type=1326 audit(1764664342.382:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2da3c2005 code=0x7ffc0000 [ 240.228276][ T28] audit: type=1326 audit(1764664342.582:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 240.293946][ T2801] fido_id[2801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 240.318465][ T28] audit: type=1326 audit(1764664342.582:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2da38f749 code=0x7ffc0000 [ 240.935161][ T998] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 241.147919][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.175166][ T998] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 241.198438][ T998] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.198530][ T2812] loop5: detected capacity change from 0 to 256 [ 241.217905][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.231853][ T2812] FAT-fs (loop5): Directory bread(block 64) failed [ 241.345542][ T2812] FAT-fs (loop5): Directory bread(block 65) failed [ 241.354900][ T2812] FAT-fs (loop5): Directory bread(block 66) failed [ 241.390413][ T2812] FAT-fs (loop5): Directory bread(block 67) failed [ 241.424080][ T2812] FAT-fs (loop5): Directory bread(block 68) failed [ 241.458507][ T2812] FAT-fs (loop5): Directory bread(block 69) failed [ 241.495170][ T2812] FAT-fs (loop5): Directory bread(block 70) failed [ 241.526736][ T998] usb 2-1: config 0 descriptor?? [ 241.534341][ T998] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.536149][ T2812] FAT-fs (loop5): Directory bread(block 71) failed [ 241.550573][ T2812] FAT-fs (loop5): Directory bread(block 72) failed [ 241.557324][ T2812] FAT-fs (loop5): Directory bread(block 73) failed [ 241.570843][ T2812] FAULT_INJECTION: forcing a failure. [ 241.570843][ T2812] name failslab, interval 1, probability 0, space 0, times 0 [ 241.583868][ T2812] CPU: 1 PID: 2812 Comm: syz.5.544 Not tainted syzkaller #0 [ 241.591271][ T2812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.601332][ T2812] Call Trace: [ 241.604622][ T2812] [ 241.607568][ T2812] __dump_stack+0x21/0x24 [ 241.612002][ T2812] dump_stack_lvl+0xee/0x150 [ 241.616590][ T2812] ? __cfi_dump_stack_lvl+0x8/0x8 [ 241.621620][ T2812] ? __cfi_vfs_write+0x10/0x10 [ 241.626404][ T2812] dump_stack+0x15/0x24 [ 241.630670][ T2812] should_fail_ex+0x3d4/0x520 [ 241.635358][ T2812] ? getname_flags+0xb9/0x500 [ 241.640054][ T2812] __should_failslab+0xac/0xf0 [ 241.644830][ T2812] should_failslab+0x9/0x20 [ 241.649340][ T2812] kmem_cache_alloc+0x3b/0x330 [ 241.654109][ T2812] getname_flags+0xb9/0x500 [ 241.658616][ T2812] __x64_sys_mknodat+0x98/0xc0 [ 241.663400][ T2812] x64_sys_call+0x220/0x9a0 [ 241.667903][ T2812] do_syscall_64+0x4c/0xa0 [ 241.672327][ T2812] ? clear_bhb_loop+0x30/0x80 [ 241.675100][ T19] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 241.677007][ T2812] ? clear_bhb_loop+0x30/0x80 [ 241.689255][ T2812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.695186][ T2812] RIP: 0033:0x7f3dd158f749 [ 241.699627][ T2812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.719358][ T2812] RSP: 002b:00007f3dd2476038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 241.727795][ T2812] RAX: ffffffffffffffda RBX: 00007f3dd17e5fa0 RCX: 00007f3dd158f749 [ 241.735786][ T2812] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 241.743779][ T2812] RBP: 00007f3dd2476090 R08: 0000000000000000 R09: 0000000000000000 [ 241.751767][ T2812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.759753][ T2812] R13: 00007f3dd17e6038 R14: 00007f3dd17e5fa0 R15: 00007ffe868875b8 [ 241.767840][ T2812] [ 241.777248][ T2815] loop3: detected capacity change from 0 to 16 [ 241.783989][ T2815] erofs: (device loop3): mounted with root inode @ nid 36. [ 241.799715][ T2819] netlink: 52 bytes leftover after parsing attributes in process `syz.5.546'. [ 241.809434][ T2819] netlink: 52 bytes leftover after parsing attributes in process `syz.5.546'. [ 241.825590][ T335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.843858][ T2821] loop5: detected capacity change from 0 to 512 [ 241.851170][ T2821] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 241.964099][ T19] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 242.002305][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.013313][ T19] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.022760][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.030879][ T19] usb 5-1: SerialNumber: syz [ 242.421344][ T19] usb 5-1: 0:2 : does not exist [ 242.426496][ T19] usb 5-1: unit 5 not found! [ 242.433409][ T19] usb 5-1: USB disconnect, device number 28 [ 242.565111][ T998] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 242.645727][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.725190][ T352] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 242.917254][ T352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.932904][ T352] usb 4-1: not running at top speed; connect to a high speed hub [ 242.942009][ T352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 242.959007][ T2843] FAULT_INJECTION: forcing a failure. [ 242.959007][ T2843] name failslab, interval 1, probability 0, space 0, times 0 [ 242.962247][ T352] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 242.971871][ T2843] CPU: 0 PID: 2843 Comm: syz.4.553 Not tainted syzkaller #0 [ 242.983092][ T352] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 242.989858][ T2843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.989874][ T2843] Call Trace: [ 242.989881][ T2843] [ 242.989888][ T2843] __dump_stack+0x21/0x24 [ 242.989916][ T2843] dump_stack_lvl+0xee/0x150 [ 242.989938][ T2843] ? __cfi_dump_stack_lvl+0x8/0x8 [ 242.989964][ T2843] dump_stack+0x15/0x24 [ 243.002887][ T352] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.010678][ T2843] should_fail_ex+0x3d4/0x520 [ 243.010716][ T2843] __should_failslab+0xac/0xf0 [ 243.010739][ T2843] ? kvmalloc_node+0x294/0x480 [ 243.014501][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.016982][ T2843] should_failslab+0x9/0x20 [ 243.017006][ T2843] __kmem_cache_alloc_node+0x3d/0x2c0 [ 243.017034][ T2843] ? kernel_text_address+0xa0/0xd0 [ 243.021773][ T352] usb 4-1: Product: syz [ 243.026024][ T2843] ? kvmalloc_node+0x294/0x480 [ 243.026048][ T2843] __kmalloc_node+0xa1/0x1e0 [ 243.026076][ T2843] ? arch_stack_walk+0xfc/0x150 [ 243.031499][ T352] usb 4-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 243.035329][ T2843] kvmalloc_node+0x294/0x480 [ 243.035356][ T2843] ? __cfi_kvmalloc_node+0x10/0x10 [ 243.035375][ T2843] ? stack_trace_save+0x98/0xe0 [ 243.035401][ T2843] traverse+0xd6/0x560 [ 243.035419][ T2843] ? mutex_lock+0x8d/0x1a0 [ 243.045073][ T352] usb 4-1: SerialNumber: syz [ 243.049145][ T2843] ? _parse_integer_limit+0x18a/0x1d0 [ 243.066735][ T2831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.071232][ T2843] seq_read_iter+0xcf2/0xdd0 [ 243.178249][ T2843] ? kstrtoull+0x137/0x1d0 [ 243.182700][ T2843] seq_read+0x159/0x1f0 [ 243.186874][ T2843] ? __cfi_seq_read+0x10/0x10 [ 243.191571][ T2843] ? __kasan_check_write+0x14/0x20 [ 243.196690][ T2843] ? proc_fail_nth_write+0x17a/0x1f0 [ 243.201979][ T2843] ? avc_policy_seqno+0x1b/0x70 [ 243.206861][ T2843] ? __kasan_check_read+0x11/0x20 [ 243.211900][ T2843] ? __cfi_seq_read+0x10/0x10 [ 243.216589][ T2843] proc_reg_read+0x1e4/0x2d0 [ 243.221210][ T2843] ? __cfi_proc_reg_read+0x10/0x10 [ 243.226340][ T2843] vfs_read+0x26e/0x8c0 [ 243.230504][ T2843] ? __cfi_vfs_read+0x10/0x10 [ 243.235210][ T2843] ? __kasan_check_write+0x14/0x20 [ 243.240342][ T2843] ? __fget_files+0x2d5/0x330 [ 243.245037][ T2843] ? __fdget+0x19c/0x220 [ 243.249292][ T2843] ? __x64_sys_pread64+0xec/0x220 [ 243.254334][ T2843] __x64_sys_pread64+0x191/0x220 [ 243.259294][ T2843] ? __cfi___x64_sys_pread64+0x10/0x10 [ 243.264793][ T2843] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 243.270889][ T2843] x64_sys_call+0x4c7/0x9a0 [ 243.275418][ T2843] do_syscall_64+0x4c/0xa0 [ 243.280222][ T2843] ? clear_bhb_loop+0x30/0x80 [ 243.284157][ T352] cdc_ncm 4-1:1.0: bind() failure [ 243.284930][ T2843] ? clear_bhb_loop+0x30/0x80 [ 243.294769][ T2843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.298351][ T352] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 243.300688][ T2843] RIP: 0033:0x7fe2da38f749 [ 243.300708][ T2843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.300727][ T2843] RSP: 002b:00007fe2db13e038 EFLAGS: 00000246 [ 243.307671][ T352] cdc_ncm 4-1:1.1: bind() failure [ 243.311888][ T2843] ORIG_RAX: 0000000000000011 [ 243.311899][ T2843] RAX: ffffffffffffffda RBX: 00007fe2da5e5fa0 RCX: 00007fe2da38f749 [ 243.311916][ T2843] RDX: 000000000000000f RSI: 0000200000000140 RDI: 0000000000000003 [ 243.338121][ T352] usb 4-1: USB disconnect, device number 26 [ 243.342705][ T2843] RBP: 00007fe2db13e090 R08: 0000000000000000 R09: 0000000000000000 [ 243.342723][ T2843] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 243.342735][ T2843] R13: 00007fe2da5e6038 R14: 00007fe2da5e5fa0 R15: 00007ffde440eda8 [ 243.393277][ T2843] [ 243.398104][ T998] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.407330][ T998] usb 3-1: not running at top speed; connect to a high speed hub [ 243.449691][ T2845] loop4: detected capacity change from 0 to 512 [ 243.470395][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 243.481436][ T998] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 243.492445][ T998] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 243.506032][ T998] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.516167][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.524257][ T998] usb 3-1: Product: syz [ 243.528893][ T998] usb 3-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 243.545381][ T2845] EXT4-fs (loop4): 1 orphan inode deleted [ 243.562904][ T998] usb 3-1: SerialNumber: syz [ 243.568509][ T2845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.578507][ T607] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 243.582156][ T2826] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 243.593893][ T2845] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.839566][ T998] cdc_ncm 3-1:1.0: bind() failure [ 243.841722][ T469] usb 2-1: USB disconnect, device number 25 [ 243.847100][ T998] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 243.880169][ T998] cdc_ncm 3-1:1.1: bind() failure [ 243.905252][ T998] usb 3-1: USB disconnect, device number 22 [ 243.965729][ T2860] FAULT_INJECTION: forcing a failure. [ 243.965729][ T2860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.035427][ T2860] CPU: 1 PID: 2860 Comm: syz.3.558 Not tainted syzkaller #0 [ 244.042760][ T2860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.052832][ T2860] Call Trace: [ 244.056120][ T2860] [ 244.059072][ T2860] __dump_stack+0x21/0x24 [ 244.063422][ T2860] dump_stack_lvl+0xee/0x150 [ 244.068030][ T2860] ? __cfi_dump_stack_lvl+0x8/0x8 [ 244.073072][ T2860] dump_stack+0x15/0x24 [ 244.077244][ T2860] should_fail_ex+0x3d4/0x520 [ 244.081946][ T2860] should_fail+0xb/0x10 [ 244.086121][ T2860] should_fail_usercopy+0x1a/0x20 [ 244.091182][ T2860] _copy_to_user+0x1e/0x90 [ 244.095626][ T2860] simple_read_from_buffer+0xe9/0x160 [ 244.101016][ T2860] proc_fail_nth_read+0x19a/0x210 [ 244.106058][ T2860] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 244.111618][ T2860] ? security_file_permission+0x94/0xb0 [ 244.117194][ T2860] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 244.122836][ T2860] vfs_read+0x26e/0x8c0 [ 244.127032][ T2860] ? __cfi_vfs_read+0x10/0x10 [ 244.131728][ T2860] ? __kasan_check_write+0x14/0x20 [ 244.136846][ T2860] ? mutex_lock+0x8d/0x1a0 [ 244.141284][ T2860] ? __cfi_mutex_lock+0x10/0x10 [ 244.146163][ T2860] ? __fdget_pos+0x2cd/0x380 [ 244.150760][ T2860] ? ksys_read+0x71/0x240 [ 244.155129][ T2860] ksys_read+0x140/0x240 [ 244.159407][ T2860] ? __cfi_ksys_read+0x10/0x10 [ 244.164207][ T2860] ? __bpf_trace_sys_enter+0x62/0x70 [ 244.169692][ T2860] __x64_sys_read+0x7b/0x90 [ 244.174217][ T2860] x64_sys_call+0x2f/0x9a0 [ 244.178698][ T2860] do_syscall_64+0x4c/0xa0 [ 244.183140][ T2860] ? clear_bhb_loop+0x30/0x80 [ 244.187933][ T2860] ? clear_bhb_loop+0x30/0x80 [ 244.192725][ T2860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.198640][ T2860] RIP: 0033:0x7f00aaf8e15c [ 244.203066][ T2860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.222688][ T2860] RSP: 002b:00007f00abd43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.231104][ T2860] RAX: ffffffffffffffda RBX: 00007f00ab1e5fa0 RCX: 00007f00aaf8e15c [ 244.239087][ T2860] RDX: 000000000000000f RSI: 00007f00abd430a0 RDI: 0000000000000006 [ 244.247156][ T2860] RBP: 00007f00abd43090 R08: 0000000000000000 R09: 0000000000000000 [ 244.255135][ T2860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.263106][ T2860] R13: 00007f00ab1e6038 R14: 00007f00ab1e5fa0 R15: 00007ffc7cf93798 [ 244.271084][ T2860] [ 244.384345][ T285] EXT4-fs (loop4): unmounting filesystem. [ 244.698580][ T2878] loop5: detected capacity change from 0 to 16 [ 244.755848][ T2878] erofs: (device loop5): mounted with root inode @ nid 36. [ 244.843853][ T335] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.049973][ T2884] loop2: detected capacity change from 0 to 2048 [ 245.076978][ T2884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 245.842377][ T2890] loop4: detected capacity change from 0 to 16 [ 247.508310][ T2890] erofs: (device loop4): mounted with root inode @ nid 36. [ 247.693720][ T286] EXT4-fs (loop2): unmounting filesystem. [ 247.698676][ T2896] loop3: detected capacity change from 0 to 256 [ 247.892057][ T2904] loop2: detected capacity change from 0 to 1024 [ 247.900431][ T2899] loop1: detected capacity change from 0 to 40427 [ 247.926324][ T2899] F2FS-fs (loop1): invalid crc value [ 247.935122][ T388] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.964077][ T2899] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.976147][ T2904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.004983][ T2904] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.103307][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 248.103323][ T28] audit: type=1400 audit(1764664350.662:320): avc: denied { mounton } for pid=2895 comm="syz.3.567" path="/118/file0/file0" dev="loop3" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 248.109666][ T2899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 248.142018][ T2903] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.568: Freeing blocks not in datazone - block = 0, count = 16 [ 248.166475][ T388] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.169777][ T2901] loop4: detected capacity change from 0 to 40427 [ 248.177573][ T388] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 248.197882][ T2901] F2FS-fs (loop4): fault_injection options not supported [ 248.198376][ T388] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.224582][ T388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.225974][ T2901] F2FS-fs (loop4): invalid crc value [ 248.246694][ T286] EXT4-fs (loop2): unmounting filesystem. [ 248.267368][ T388] usb 6-1: config 0 descriptor?? [ 248.273525][ T388] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 248.309640][ T2901] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.384486][ T2901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.482845][ T2916] loop2: detected capacity change from 0 to 40427 [ 248.495389][ T2916] F2FS-fs (loop2): fault_injection options not supported [ 248.513339][ T2916] F2FS-fs (loop2): invalid crc value [ 248.586360][ T2916] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.616270][ T287] syz-executor: attempt to access beyond end of device [ 248.616270][ T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.637283][ T2916] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.672400][ T285] syz-executor: attempt to access beyond end of device [ 248.672400][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.705425][ T2927] FAULT_INJECTION: forcing a failure. [ 248.705425][ T2927] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 248.762988][ T2927] CPU: 1 PID: 2927 Comm: syz.2.570 Not tainted syzkaller #0 [ 248.770394][ T2927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.780484][ T2927] Call Trace: [ 248.783775][ T2927] [ 248.786728][ T2927] __dump_stack+0x21/0x24 [ 248.791082][ T2927] dump_stack_lvl+0xee/0x150 [ 248.795699][ T2927] ? __cfi_dump_stack_lvl+0x8/0x8 [ 248.800741][ T2927] ? avc_has_perm_noaudit+0x2f4/0x460 [ 248.806140][ T2927] dump_stack+0x15/0x24 [ 248.810313][ T2927] should_fail_ex+0x3d4/0x520 [ 248.815035][ T2927] should_fail_alloc_page+0x61/0x90 [ 248.820251][ T2927] prepare_alloc_pages+0x148/0x5f0 [ 248.825385][ T2927] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 248.830620][ T2927] __alloc_pages+0x124/0x450 [ 248.835243][ T2927] ? __cfi___alloc_pages+0x10/0x10 [ 248.840378][ T2927] ? __cfi_sched_clock_cpu+0x10/0x10 [ 248.845685][ T2927] __folio_alloc+0x12/0x40 [ 248.850123][ T2927] __filemap_get_folio+0x6ec/0x980 [ 248.855601][ T2927] ? __this_cpu_preempt_check+0x13/0x20 [ 248.861186][ T2927] ? __cfi___filemap_get_folio+0x10/0x10 [ 248.866839][ T2927] ? avc_has_perm_noaudit+0x2f4/0x460 [ 248.872241][ T2927] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 248.877986][ T2927] pagecache_get_page+0x2b/0x110 [ 248.882961][ T2927] f2fs_convert_inline_inode+0x674/0x960 [ 248.888616][ T2927] ? __kasan_check_write+0x14/0x20 [ 248.893762][ T2927] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 248.899938][ T2927] ? dquot_initialize+0x20/0x20 [ 248.904817][ T2927] ? setattr_prepare+0x209/0xd20 [ 248.909777][ T2927] ? i_gid_needs_update+0x55/0x1e0 [ 248.914915][ T2927] ? f2fs_setattr+0x71a/0x1330 [ 248.919708][ T2927] f2fs_setattr+0xbbf/0x1330 [ 248.924340][ T2927] ? __cfi_f2fs_setattr+0x10/0x10 [ 248.929367][ T2927] ? current_time+0x18e/0x2a0 [ 248.934062][ T2927] ? security_file_permission+0x8a/0xb0 [ 248.939611][ T2927] ? __cfi_current_time+0x10/0x10 [ 248.944645][ T2927] ? try_break_deleg+0x7c/0x130 [ 248.949512][ T2927] ? __cfi_f2fs_setattr+0x10/0x10 [ 248.954545][ T2927] notify_change+0xcc3/0xf80 [ 248.959142][ T2927] do_sys_ftruncate+0x58f/0x7f0 [ 248.964019][ T2927] ? __cfi_do_sys_ftruncate+0x10/0x10 [ 248.969402][ T2927] ? __cfi_ksys_write+0x10/0x10 [ 248.974269][ T2927] ? debug_smp_processor_id+0x17/0x20 [ 248.979681][ T2927] __x64_sys_ftruncate+0x60/0x70 [ 248.984647][ T2927] x64_sys_call+0x2f9/0x9a0 [ 248.989156][ T2927] do_syscall_64+0x4c/0xa0 [ 248.993571][ T2927] ? clear_bhb_loop+0x30/0x80 [ 248.998372][ T2927] ? clear_bhb_loop+0x30/0x80 [ 249.003074][ T2927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.008979][ T2927] RIP: 0033:0x7f956db8f749 [ 249.013389][ T2927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.033023][ T2927] RSP: 002b:00007f956ea7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 249.041448][ T2927] RAX: ffffffffffffffda RBX: 00007f956dde6090 RCX: 00007f956db8f749 [ 249.049421][ T2927] RDX: 0000000000000000 RSI: 00000000000081ff RDI: 0000000000000004 [ 249.057399][ T2927] RBP: 00007f956ea7a090 R08: 0000000000000000 R09: 0000000000000000 [ 249.065372][ T2927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.073347][ T2927] R13: 00007f956dde6128 R14: 00007f956dde6090 R15: 00007ffc46001458 [ 249.081359][ T2927] [ 249.126104][ T286] syz-executor: attempt to access beyond end of device [ 249.126104][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.261537][ T2957] loop3: detected capacity change from 0 to 2048 [ 250.295438][ T2957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 250.942935][ T2963] loop2: detected capacity change from 0 to 16 [ 251.061968][ T2963] erofs: (device loop2): mounted with root inode @ nid 36. [ 251.077963][ T229] usb 6-1: USB disconnect, device number 4 [ 252.610061][ T2981] netlink: 'syz.5.585': attribute type 12 has an invalid length. [ 252.620184][ T469] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 252.645820][ T283] EXT4-fs (loop3): unmounting filesystem. [ 252.745343][ T335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.867257][ T469] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.902380][ T469] usb 2-1: not running at top speed; connect to a high speed hub [ 253.012327][ T469] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 253.086184][ T469] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 253.141651][ T469] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 253.178921][ T2983] loop4: detected capacity change from 0 to 4096 [ 253.198610][ T469] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.315836][ T2983] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.330795][ T469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.340315][ T2983] EXT4-fs (loop4): Test dummy encryption mode enabled [ 253.348337][ T469] usb 2-1: Product: syz [ 253.353176][ T469] usb 2-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 253.389848][ T2983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 253.511813][ T469] usb 2-1: SerialNumber: syz [ 253.522918][ T2968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.701481][ T2993] 9pnet: Could not find request transport: fd0xffffffffffffffff184467440737095516150xffffffffffffffff [ 253.746167][ T469] cdc_ncm 2-1:1.0: bind() failure [ 255.005387][ T229] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 255.093390][ T469] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 255.112413][ T2997] FAULT_INJECTION: forcing a failure. [ 255.112413][ T2997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.136080][ T469] cdc_ncm 2-1:1.1: bind() failure [ 255.231932][ T469] usb 2-1: USB disconnect, device number 26 [ 255.243946][ T2997] CPU: 1 PID: 2997 Comm: syz.5.590 Not tainted syzkaller #0 [ 255.251271][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.261350][ T2997] Call Trace: [ 255.264646][ T2997] [ 255.267586][ T2997] __dump_stack+0x21/0x24 [ 255.271937][ T2997] dump_stack_lvl+0xee/0x150 [ 255.276540][ T2997] ? __cfi_dump_stack_lvl+0x8/0x8 [ 255.281582][ T2997] ? _parse_integer+0x2a/0x40 [ 255.286348][ T2997] dump_stack+0x15/0x24 [ 255.290519][ T2997] should_fail_ex+0x3d4/0x520 [ 255.295218][ T2997] should_fail+0xb/0x10 [ 255.299397][ T2997] should_fail_usercopy+0x1a/0x20 [ 255.304443][ T2997] _copy_from_user+0x1e/0xc0 [ 255.309047][ T2997] ___sys_sendmsg+0x155/0x290 [ 255.313745][ T2997] ? __sys_sendmsg+0x270/0x270 [ 255.318533][ T2997] ? __kasan_check_write+0x14/0x20 [ 255.323655][ T2997] ? proc_fail_nth_write+0x17a/0x1f0 [ 255.328964][ T2997] ? vfs_write+0x9d6/0xca0 [ 255.333413][ T2997] ? __fdget+0x19c/0x220 [ 255.337670][ T2997] __x64_sys_sendmsg+0x1f0/0x2c0 [ 255.342713][ T2997] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 255.348194][ T2997] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 255.354287][ T2997] x64_sys_call+0x171/0x9a0 [ 255.358827][ T2997] do_syscall_64+0x4c/0xa0 [ 255.363273][ T2997] ? clear_bhb_loop+0x30/0x80 [ 255.367989][ T2997] ? clear_bhb_loop+0x30/0x80 [ 255.372792][ T2997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.378724][ T2997] RIP: 0033:0x7f3dd158f749 [ 255.383163][ T2997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.402789][ T2997] RSP: 002b:00007f3dd2476038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.411223][ T2997] RAX: ffffffffffffffda RBX: 00007f3dd17e5fa0 RCX: 00007f3dd158f749 [ 255.419212][ T2997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 255.427205][ T2997] RBP: 00007f3dd2476090 R08: 0000000000000000 R09: 0000000000000000 [ 255.435190][ T2997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.443172][ T2997] R13: 00007f3dd17e6038 R14: 00007f3dd17e5fa0 R15: 00007ffe868875b8 [ 255.451164][ T2997] [ 255.486987][ T229] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 255.539982][ T229] usb 4-1: config 0 has no interface number 1 [ 255.547651][ T229] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 255.559906][ T229] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 255.578587][ T285] EXT4-fs (loop4): unmounting filesystem. [ 255.594273][ T229] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.754473][ T229] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC9, skipping [ 255.780016][ T229] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 255.789635][ T229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.797936][ T229] usb 4-1: Product: syz [ 255.802215][ T229] usb 4-1: Manufacturer: syz [ 255.807109][ T229] usb 4-1: SerialNumber: syz [ 255.823778][ T229] usb 4-1: config 0 descriptor?? [ 255.829759][ T2990] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 255.841802][ T229] snd-usb-audio: probe of 4-1:0.151 failed with error -2 [ 255.855786][ T229] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 255.864963][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 256.035105][ T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.255692][ T229] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 256.445139][ T229] usb 5-1: Using ep0 maxpacket: 32 [ 256.452840][ T229] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 256.495051][ T229] usb 5-1: config 0 has no interface number 0 [ 256.504780][ T998] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 256.538083][ T229] usb 5-1: config 0 interface 2 has no altsetting 0 [ 256.545079][ T6] usb 6-1: Using ep0 maxpacket: 32 [ 256.551638][ T229] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 256.560938][ T229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.569066][ T229] usb 5-1: Product: syz [ 256.569207][ T6] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 256.573442][ T229] usb 5-1: Manufacturer: syz [ 256.592163][ T229] usb 5-1: SerialNumber: syz [ 256.595084][ T6] usb 6-1: config 0 has no interface number 0 [ 256.602192][ T229] usb 5-1: config 0 descriptor?? [ 256.603181][ T6] usb 6-1: config 0 interface 2 has no altsetting 0 [ 256.626553][ T6] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 256.635704][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.643714][ T6] usb 6-1: Product: syz [ 256.647937][ T6] usb 6-1: Manufacturer: syz [ 256.652563][ T6] usb 6-1: SerialNumber: syz [ 256.658027][ T6] usb 6-1: config 0 descriptor?? [ 256.715069][ T998] usb 3-1: Using ep0 maxpacket: 32 [ 256.721924][ T998] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 256.739856][ T998] usb 3-1: config 0 has no interface number 0 [ 256.746396][ T998] usb 3-1: config 0 interface 2 has no altsetting 0 [ 256.764620][ T998] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 256.784041][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.792118][ T998] usb 3-1: Product: syz [ 256.796434][ T998] usb 3-1: Manufacturer: syz [ 256.801050][ T998] usb 3-1: SerialNumber: syz [ 256.813068][ T998] usb 3-1: config 0 descriptor?? [ 256.819279][ T469] usb 4-1: USB disconnect, device number 27 [ 256.834313][ T229] usb 5-1: USB disconnect, device number 29 [ 256.928668][ T6] usb 6-1: USB disconnect, device number 5 [ 257.015142][ T3006] loop4: detected capacity change from 0 to 512 [ 257.071156][ T998] usb 3-1: USB disconnect, device number 23 [ 257.094107][ T3006] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 257.121081][ T2997] loop5: detected capacity change from 0 to 512 [ 257.259540][ T3006] EXT4-fs warning (device loop4): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.472433][ T3006] EXT4-fs (loop4): mount failed [ 257.481301][ T2997] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 257.494889][ T3012] loop2: detected capacity change from 0 to 512 [ 257.540890][ T2997] EXT4-fs warning (device loop5): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.566396][ T3012] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 257.603962][ T3012] EXT4-fs warning (device loop2): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.624318][ T2997] EXT4-fs (loop5): mount failed [ 257.629893][ T3012] EXT4-fs (loop2): mount failed [ 257.935082][ T6] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 258.126513][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.135442][ T6] usb 4-1: not running at top speed; connect to a high speed hub [ 258.165460][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 258.179989][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 258.197443][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 258.246916][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.263258][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.271722][ T6] usb 4-1: Product: syz [ 258.277315][ T6] usb 4-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 259.538702][ T3047] netlink: 'syz.4.599': attribute type 12 has an invalid length. [ 261.742893][ T3052] netlink: 'syz.5.600': attribute type 12 has an invalid length. [ 264.483235][ T6] usb 4-1: SerialNumber: syz [ 264.618655][ T6] usb 4-1: can't set config #1, error -71 [ 264.643789][ T6] usb 4-1: USB disconnect, device number 28 [ 264.861307][ T3071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.604'. [ 266.065109][ T388] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 266.536974][ T388] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.563370][ T388] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.587066][ T388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.604431][ T388] usb 5-1: Product: syz [ 266.612844][ T388] usb 5-1: Manufacturer: syz [ 266.622652][ T388] usb 5-1: SerialNumber: syz [ 267.165529][ T3088] loop2: detected capacity change from 0 to 2048 [ 267.302759][ T3088] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 268.532319][ T286] EXT4-fs (loop2): unmounting filesystem. [ 268.922685][ T3104] loop2: detected capacity change from 0 to 16 [ 268.930724][ T39] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 268.939041][ T3104] erofs: (device loop2): mounted with root inode @ nid 36. [ 269.007557][ T3069] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.146723][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.297895][ T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.391271][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.402543][ T39] usb 6-1: Product: syz [ 269.407125][ T39] usb 6-1: Manufacturer: syz [ 269.411880][ T39] usb 6-1: SerialNumber: syz [ 269.423976][ T388] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 269.430621][ T388] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 269.438042][ T388] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 269.834135][ T388] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 269.851149][ T388] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 269.875212][ T998] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 269.891139][ T388] usb 5-1: USB disconnect, device number 30 [ 269.907841][ T388] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 269.911099][ T3116] loop4: detected capacity change from 0 to 256 [ 269.992216][ T28] audit: type=1326 audit(1764664372.552:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3115 comm="syz.4.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2da38f749 code=0x0 [ 270.076522][ T998] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.087589][ T19] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 270.095998][ T28] audit: type=1400 audit(1764664372.662:322): avc: denied { append } for pid=3115 comm="syz.4.616" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 270.143143][ T998] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.152371][ T998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.160498][ T998] usb 2-1: Product: syz [ 270.164737][ T998] usb 2-1: Manufacturer: syz [ 270.170942][ T998] usb 2-1: SerialNumber: syz [ 270.230833][ T28] audit: type=1400 audit(1764664372.792:323): avc: denied { mount } for pid=3119 comm="syz.3.617" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 270.260015][ T28] audit: type=1400 audit(1764664372.822:324): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 270.279584][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.289583][ T19] usb 3-1: not running at top speed; connect to a high speed hub [ 270.299089][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 270.310884][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 270.322509][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 270.335667][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.344929][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.354597][ T19] usb 3-1: Product: syz [ 270.359519][ T19] usb 3-1: Manufacturer: ⎂髮䒻石뾱솥뛅䧔庯銖뻽젧⒯舳⮺ᾋ쟣ꅧ喣䅆鿎ጡ㩄䲬凰퇚眾㩝ᶪ渮ꉅሕ䱭ﶚ䔵塗壘搦䬯筳ᖄ揕㗀齝⑷ᅙᮿ⢔ꄟ首癩ȕ漣ꘈ읭忊쇜쟭朗膭৺๴캶⭫䇋尯⸙㮱㒐傶扆ᒲㆧ栚祂ꆙƁ꺖ﺁ㺍裾⬍㑅㼀취ᣀ䊾ª잖鵁俻綫ꁫ蕽㽿辰觜祲Ʞ䡐ㅖ⿨幀Ð [ 270.395445][ T19] usb 3-1: SerialNumber: syz [ 270.401612][ T3114] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 270.612325][ T19] cdc_ncm 3-1:1.0: bind() failure [ 270.620265][ T39] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 270.621907][ T19] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 270.628035][ T39] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 270.633618][ T19] cdc_ncm 3-1:1.1: bind() failure [ 270.658901][ T19] usb 3-1: USB disconnect, device number 24 [ 270.666613][ T39] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 270.847791][ T39] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 270.855893][ T39] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 270.876229][ T39] usb 6-1: USB disconnect, device number 6 [ 270.882618][ T39] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 271.301718][ T998] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 271.308946][ T998] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 271.316867][ T998] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 271.605886][ T28] audit: type=1400 audit(1764664374.152:325): avc: denied { map } for pid=3133 comm="syz.3.622" path="socket:[23797]" dev="sockfs" ino=23797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.824111][ T998] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 271.841289][ T998] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 271.855693][ T28] audit: type=1400 audit(1764664374.152:326): avc: denied { read accept } for pid=3133 comm="syz.3.622" path="socket:[23797]" dev="sockfs" ino=23797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.873454][ T998] usb 2-1: USB disconnect, device number 27 [ 271.899578][ T998] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 272.112981][ T3146] loop4: detected capacity change from 0 to 16 [ 272.155457][ T3146] erofs: Unknown parameter 'C8놉͟T59T_r7օa-k5T7L2SA󚕭" &64k' [ 272.225359][ T3070] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.399328][ T28] audit: type=1400 audit(1764664374.962:327): avc: denied { ioctl } for pid=3149 comm="syz.3.625" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.419381][ T3153] loop1: detected capacity change from 0 to 512 [ 272.457521][ T3153] EXT4-fs: Ignoring removed oldalloc option [ 272.467969][ T3153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.512514][ T28] audit: type=1400 audit(1764664375.002:328): avc: denied { watch watch_reads } for pid=3145 comm="syz.4.624" path="/120/file1" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 272.613084][ T3153] EXT4-fs (loop1): 1 truncate cleaned up [ 272.625283][ T3153] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.691367][ T3159] loop2: detected capacity change from 0 to 512 [ 272.703115][ T3147] loop5: detected capacity change from 0 to 40427 [ 272.707885][ T3159] EXT4-fs: Ignoring removed oldalloc option [ 272.735473][ T3159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.777973][ T3147] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 272.787141][ T3159] EXT4-fs (loop2): 1 truncate cleaned up [ 272.792815][ T3159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.805174][ T3147] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 272.895630][ T3147] F2FS-fs (loop5): Found nat_bits in checkpoint [ 272.939043][ T3161] loop3: detected capacity change from 0 to 256 [ 273.005641][ T3161] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.018221][ T3161] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 273.019884][ T3170] FAULT_INJECTION: forcing a failure. [ 273.019884][ T3170] name failslab, interval 1, probability 0, space 0, times 0 [ 273.052853][ T3161] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 273.069727][ T3170] CPU: 0 PID: 3170 Comm: syz.2.627 Not tainted syzkaller #0 [ 273.077067][ T3170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.087147][ T3170] Call Trace: [ 273.090443][ T3170] [ 273.093398][ T3170] __dump_stack+0x21/0x24 [ 273.097753][ T3170] dump_stack_lvl+0xee/0x150 [ 273.102365][ T3170] ? __cfi_dump_stack_lvl+0x8/0x8 [ 273.107409][ T3170] ? ____fput+0x15/0x20 [ 273.111593][ T3170] ? exit_to_user_mode_loop+0x9b/0xb0 [ 273.116987][ T3170] ? exit_to_user_mode_prepare+0x87/0xd0 [ 273.122633][ T3170] ? syscall_exit_to_user_mode+0x1a/0x30 [ 273.128298][ T3170] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.134403][ T3170] dump_stack+0x15/0x24 [ 273.138605][ T3170] should_fail_ex+0x3d4/0x520 [ 273.143307][ T3170] __should_failslab+0xac/0xf0 [ 273.148084][ T3170] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 273.154089][ T3170] should_failslab+0x9/0x20 [ 273.158604][ T3170] __kmem_cache_alloc_node+0x3d/0x2c0 [ 273.164010][ T3170] ? __cfi_mutex_lock+0x10/0x10 [ 273.168880][ T3170] ? delete_node+0x2f4/0xa60 [ 273.173485][ T3170] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 273.179487][ T3170] __kmalloc+0xa1/0x1e0 [ 273.183659][ T3170] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 273.189741][ T3170] tracepoint_probe_unregister+0x1e6/0x8b0 [ 273.195553][ T3170] bpf_probe_unregister+0x61/0x70 [ 273.200592][ T3170] bpf_raw_tp_link_release+0x63/0x90 [ 273.205881][ T3170] bpf_link_free+0x13a/0x390 [ 273.210477][ T3170] ? bpf_link_put_deferred+0x20/0x20 [ 273.215776][ T3170] ? security_file_free+0xd8/0xf0 [ 273.220827][ T3170] bpf_link_release+0x15f/0x170 [ 273.225676][ T3170] ? __cfi_bpf_link_release+0x10/0x10 [ 273.231052][ T3170] __fput+0x1fc/0x8f0 [ 273.235041][ T3170] ____fput+0x15/0x20 [ 273.239112][ T3170] task_work_run+0x1db/0x240 [ 273.243710][ T3170] ? __cfi_task_work_run+0x10/0x10 [ 273.248828][ T3170] ? __cfi___close_range+0x10/0x10 [ 273.253941][ T3170] exit_to_user_mode_loop+0x9b/0xb0 [ 273.259143][ T3170] exit_to_user_mode_prepare+0x87/0xd0 [ 273.264603][ T3170] syscall_exit_to_user_mode+0x1a/0x30 [ 273.270074][ T3170] do_syscall_64+0x58/0xa0 [ 273.274490][ T3170] ? clear_bhb_loop+0x30/0x80 [ 273.279174][ T3170] ? clear_bhb_loop+0x30/0x80 [ 273.283862][ T3170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.289762][ T3170] RIP: 0033:0x7f956db8f749 [ 273.294177][ T3170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.313787][ T3170] RSP: 002b:00007f956ea7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 273.322217][ T3170] RAX: 0000000000000000 RBX: 00007f956dde6090 RCX: 00007f956db8f749 [ 273.330208][ T3170] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 273.338178][ T3170] RBP: 00007f956ea7a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.346149][ T3170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.354141][ T3170] R13: 00007f956dde6128 R14: 00007f956dde6090 R15: 00007ffc46001458 [ 273.362126][ T3170] [ 273.371601][ T3147] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 273.379001][ T3147] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 273.398937][ T287] EXT4-fs (loop1): unmounting filesystem. [ 273.452401][ T3148] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 273.452463][ T3170] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 273.464219][ T3148] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 273.481954][ T3148] CPU: 0 PID: 3148 Comm: syz.4.624 Not tainted syzkaller #0 [ 273.489239][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.499331][ T3148] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 273.505493][ T3148] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 273.525093][ T3148] RSP: 0018:ffffc90005407650 EFLAGS: 00010096 [ 273.531151][ T3148] RAX: 1ffff11026e2ae89 RBX: ffff888137157440 RCX: ffff888115f72880 [ 273.539202][ T3148] RDX: ffff8881145abcc0 RSI: 0000000000000001 RDI: ffffc900054c5000 [ 273.547177][ T3148] RBP: ffffc90005407690 R08: 0000000000000000 R09: fffffbfff0ee4ef6 [ 273.555139][ T3148] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000001 [ 273.563104][ T3148] R13: ffff888137157440 R14: dffffc0000000000 R15: ffffffff817146d0 [ 273.571069][ T3148] FS: 00007fe2d8df76c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 273.579997][ T3148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.586586][ T3148] CR2: 0000555580e2a4a8 CR3: 000000011c5e7000 CR4: 00000000003526b0 [ 273.594563][ T3148] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.602534][ T3148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.610503][ T3148] Call Trace: [ 273.613774][ T3148] [ 273.616729][ T3148] __schedule+0x1263/0x14e0 [ 273.621254][ T3148] ? __sched_text_start+0x8/0x8 [ 273.626103][ T3148] ? preempt_schedule_irq+0xbb/0x110 [ 273.631393][ T3148] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 273.637115][ T3148] preempt_schedule_irq+0x9b/0x110 [ 273.642235][ T3148] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 273.647952][ T3148] raw_irqentry_exit_cond_resched+0x29/0x30 [ 273.653862][ T3148] irqentry_exit+0x37/0x40 [ 273.658280][ T3148] sysvec_apic_timer_interrupt+0x64/0xc0 [ 273.663941][ T3148] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 273.669924][ T3148] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 273.675998][ T3148] Code: 89 fb e8 23 00 00 00 48 8b 3d 7c 4f 02 06 48 89 de e8 f4 c0 43 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 30 43 92 7e 65 8b 15 31 43 92 [ 273.695601][ T3148] RSP: 0018:ffffc90005407938 EFLAGS: 00000246 [ 273.701664][ T3148] RAX: ffffffff8262ab1f RBX: 0000000000000008 RCX: ffff8881145abcc0 [ 273.709627][ T3148] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.717588][ T3148] RBP: ffffc90005407980 R08: 0000000000000000 R09: ffffc90005407d10 [ 273.725568][ T3148] R10: fffff52000a80fac R11: 1ffff92000a80faa R12: 0000000000000000 [ 273.733534][ T3148] R13: 0000000000000000 R14: ffffc90005407b20 R15: 0000000000000000 [ 273.741501][ T3148] ? iovec_from_user+0x2f/0x2e0 [ 273.746370][ T3148] ? iovec_from_user+0x60/0x2e0 [ 273.751232][ T3148] ? __sys_recvmsg_sock+0x50/0x50 [ 273.756255][ T3148] __import_iovec+0x71/0x470 [ 273.760847][ T3148] import_iovec+0x7c/0xb0 [ 273.765175][ T3148] ___sys_recvmsg+0x433/0x510 [ 273.769850][ T3148] ? __sys_recvmsg+0x270/0x270 [ 273.774618][ T3148] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 273.780775][ T3148] ? do_recvmmsg+0x364/0x7a0 [ 273.785369][ T3148] do_recvmmsg+0x359/0x7a0 [ 273.789788][ T3148] ? __sys_recvmmsg+0x280/0x280 [ 273.794638][ T3148] ? __schedule+0xb8f/0x14e0 [ 273.799252][ T3148] __x64_sys_recvmmsg+0x18d/0x240 [ 273.804291][ T3148] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 273.809844][ T3148] ? __kasan_check_write+0x14/0x20 [ 273.814962][ T3148] x64_sys_call+0x3e7/0x9a0 [ 273.819465][ T3148] do_syscall_64+0x4c/0xa0 [ 273.823872][ T3148] ? clear_bhb_loop+0x30/0x80 [ 273.828547][ T3148] ? clear_bhb_loop+0x30/0x80 [ 273.833224][ T3148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.839111][ T3148] RIP: 0033:0x7fe2da38f749 [ 273.843514][ T3148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.863122][ T3148] RSP: 002b:00007fe2d8df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 273.871529][ T3148] RAX: ffffffffffffffda RBX: 00007fe2da5e6090 RCX: 00007fe2da38f749 [ 273.879495][ T3148] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000003 [ 273.887556][ T3148] RBP: 00007fe2da413f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.895531][ T3148] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 273.903512][ T3148] R13: 00007fe2da5e6128 R14: 00007fe2da5e6090 R15: 00007ffde440eda8 [ 273.911489][ T3148] [ 273.914504][ T3148] Modules linked in: [ 273.918420][ T3148] ---[ end trace 0000000000000000 ]--- [ 273.918451][ T3170] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 273.923884][ T3148] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 273.929950][ T3170] CPU: 1 PID: 3170 Comm: syz.2.627 Tainted: G D syzkaller #0 [ 273.936090][ T3148] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 273.944857][ T3170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.964461][ T3148] RSP: 0018:ffffc90005407650 EFLAGS: 00010096 [ 273.974529][ T3170] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 273.980595][ T3148] RAX: 1ffff11026e2ae89 RBX: ffff888137157440 RCX: ffff888115f72880 [ 273.986743][ T3170] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 273.994795][ T3148] RDX: ffff8881145abcc0 RSI: 0000000000000001 RDI: ffffc900054c5000 [ 274.014402][ T3170] RSP: 0018:ffffc90005587b90 EFLAGS: 00010096 [ 274.022371][ T3148] RBP: ffffc90005407690 R08: 0000000000000000 R09: fffffbfff0ee4ef6 [ 274.028437][ T3170] RAX: 1ffff11026e2ae89 RBX: ffff888137157440 RCX: ffff888114bf6540 [ 274.036441][ T3148] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000001 [ 274.044404][ T3170] RDX: ffff888115f71440 RSI: 0000000000000000 RDI: ffffc900054c5000 [ 274.052375][ T3148] R13: ffff888137157440 R14: dffffc0000000000 R15: ffffffff817146d0 [ 274.060343][ T3170] RBP: ffffc90005587bd0 R08: 0000000000000080 R09: fffffbfff0ee4ef6 [ 274.068314][ T3148] FS: 00007fe2d8df76c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 274.076280][ T3170] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000000 [ 274.085205][ T3148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.093177][ T3170] R13: ffff888137157440 R14: dffffc0000000000 R15: ffffffff817146d0 [ 274.099755][ T3148] CR2: 0000555580e2a4a8 CR3: 000000011c5e7000 CR4: 00000000003526b0 [ 274.107716][ T3170] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 274.115679][ T3148] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.124596][ T3170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.132572][ T3148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.139159][ T3170] CR2: 00007f956dbf0df8 CR3: 000000011d317000 CR4: 00000000003526a0 [ 274.147129][ T3148] Kernel panic - not syncing: Fatal exception [ 274.155117][ T3170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.155133][ T3170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.155146][ T3170] Call Trace: [ 274.155152][ T3170] [ 274.155163][ T3170] __schedule+0x1263/0x14e0 [ 274.155194][ T3170] ? __sched_text_start+0x8/0x8 [ 274.155216][ T3170] ? memcpy+0x56/0x70 [ 274.155233][ T3170] ? __kasan_check_write+0x14/0x20 [ 274.155255][ T3170] do_task_dead+0x9c/0xa0 [ 274.155280][ T3170] do_exit+0x1baa/0x2650 [ 274.155306][ T3170] ? __fget_files+0x2d5/0x330 [ 274.155325][ T3170] ? __cfi_do_exit+0x10/0x10 [ 274.155352][ T3170] ? kick_process+0xee/0x160 [ 274.155374][ T3170] ? zap_other_threads+0x2b7/0x2f0 [ 274.155397][ T3170] do_group_exit+0x210/0x2d0 [ 274.155423][ T3170] __x64_sys_exit_group+0x3f/0x40 [ 274.155451][ T3170] x64_sys_call+0x7b4/0x9a0 [ 274.155472][ T3170] do_syscall_64+0x4c/0xa0 [ 274.155492][ T3170] ? clear_bhb_loop+0x30/0x80 [ 274.155518][ T3170] ? clear_bhb_loop+0x30/0x80 [ 274.155543][ T3170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.155568][ T3170] RIP: 0033:0x7f956db8f749 [ 274.155582][ T3170] Code: Unable to access opcode bytes at 0x7f956db8f71f. [ 274.155592][ T3170] RSP: 002b:00007f956ea79f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 274.155611][ T3170] RAX: ffffffffffffffda RBX: 00007f956dbf0df8 RCX: 00007f956db8f749 [ 274.155625][ T3170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 274.155637][ T3170] RBP: 0000000000000009 R08: 00007f956ea77ce7 R09: 0000000000000001 [ 274.155654][ T3170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.155665][ T3170] R13: 00007f956dde6128 R14: 00007f956dde6090 R15: 00007ffc46001458 [ 274.155683][ T3170] [ 274.155688][ T3170] Modules linked in: [ 274.161763][ T3170] ---[ end trace 0000000000000000 ]--- [ 274.161774][ T3170] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 274.161798][ T3170] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 274.161815][ T3170] RSP: 0018:ffffc90005407650 EFLAGS: 00010096 [ 274.161830][ T3170] RAX: 1ffff11026e2ae89 RBX: ffff888137157440 RCX: ffff888115f72880 [ 274.161844][ T3170] RDX: ffff8881145abcc0 RSI: 0000000000000001 RDI: ffffc900054c5000 [ 274.161858][ T3170] RBP: ffffc90005407690 R08: 0000000000000000 R09: fffffbfff0ee4ef6 [ 274.161871][ T3170] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000001 [ 274.161884][ T3170] R13: ffff888137157440 R14: dffffc0000000000 R15: ffffffff817146d0 [ 274.161898][ T3170] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 274.161915][ T3170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.161928][ T3170] CR2: 00007f956dbf0df8 CR3: 000000011d317000 CR4: 00000000003526a0 [ 274.161943][ T3170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.161954][ T3170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.340808][ T3148] Shutting down cpus with NMI [ 275.631022][ T3148] Kernel Offset: disabled [ 275.635358][ T3148] Rebooting in 86400 seconds..