last executing test programs: 2m27.151860291s ago: executing program 0 (id=2262): mknod$loop(&(0x7f0000000000)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffa, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x1, 0x7) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x50a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r8 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0) dup2(r5, r0) 2m26.464608111s ago: executing program 0 (id=2257): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 2m26.402386325s ago: executing program 0 (id=2259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3, 0x4, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004, &(0x7f00000000c0)={0xa, 0x4e22, 0xab20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 2m26.290259761s ago: executing program 0 (id=2260): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@max_batch_time}, {}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r2, &(0x7f0000000540)="9538", 0x2) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}, 0x1c) listen(r1, 0x2) sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e00)={0x2, 0x14, 0xc, 0x9, 0x20b, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x14000, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_sec_ctx={0x201, 0x18, 0x1, 0x13, 0x1000, "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"}]}, 0x1058}}, 0x40001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "167d591af5982313b9e4d2034b4953a7ab23c8b26df7c38d80f283c081150b632c2192e30c69738767f5c27c2e4131a67ada39ce113306b7cd9e5f3448425dde"}, 0x48, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_clone(0x80042700, 0x0, 0x0, 0x0, 0x0, 0x0) setfsgid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sched_setaffinity(r7, 0x8, &(0x7f00000003c0)=0xb8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) keyctl$describe(0x6, r4, &(0x7f0000001680)=""/250, 0xfa) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}], 0x2, 0x7, 0x20000000) 2m26.098079152s ago: executing program 0 (id=2263): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0xb, {0x6, 0xfffffffe, 0x0, {0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0xffffffff, 0x8, 0xfffffffb, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x59) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@measure}, {@flag='nomand'}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x800000000, 0x0, 0xffffffff, 0x0, {0x5, 0x6, 0x0, 0x40000000006, 0x0, 0x12006, 0x0, 0x290, 0xfffffffc, 0x2000, 0x2, r2, 0x0, 0xffffffff, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440), 0x120d03d, &(0x7f0000000480)={[{@xino_off}, {@xino_on}, {@index_on}, {@verity_on}, {@uuid_auto}], [{@euid_gt={'euid>', r2}}]}) 2m25.271377581s ago: executing program 0 (id=2273): timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m25.256443422s ago: executing program 32 (id=2273): timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.531929806s ago: executing program 3 (id=3255): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x103000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) setrlimit(0xc, &(0x7f0000000280)={0x5, 0x5}) close(0xffffffffffffffff) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000003300)={'filter\x00', 0x0, [0x2, 0x4, 0x5, 0x3, 0x2]}, &(0x7f0000003380)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x15) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000000c0)=@x86={0xa, 0x7b, 0x8, 0x0, 0x6, 0x7f, 0x7f, 0x6, 0x1, 0x99, 0x9, 0x80, 0x0, 0x6, 0x7fff, 0x2, 0x4, 0xc, 0xfc, '\x00', 0xf9, 0xf07}) 4.772615511s ago: executing program 4 (id=3265): syz_read_part_table(0x604, &(0x7f0000000000)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.743576203s ago: executing program 2 (id=3266): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8, @ANYRESDEC], 0xfd, 0x551b, &(0x7f00000079c0)="$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") r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffeffc}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000e000000100004e20009c907801000000000000007b4b07007461fd77d36c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8e885fac949ede2e89b1a43efa869806bee112108141451b57d097ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcef1bf137360002aa2f19b9640000000000000000001200000000009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d99ed7e417240544af6e8dafe09"], 0x0) (async) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffff00000000}}]}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) (async) syz_mount_image$fuse(0x0, &(0x7f0000002880)='./file0\x00', 0x20240d5, 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) (async) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x800fff, 0xc, 0x4) open(&(0x7f0000000100)='./file1\x00', 0x200, 0x1d) 4.742791973s ago: executing program 3 (id=3267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000010001000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="850b0100009804000a000100aaaaaaaaaaaa000016e9c48bb899a971b5b6f2a49547187f1a688b2f4f8246ad18ee5166aaeeb121185c77cb03b5c5e2cafe8de09b99ddac25cc1c8f6413afa097af41631895746755402aa382e04226b415be63ad74eadd2fcb98cc80b615dfb10ed6f3a75c30e58b763ffe43afcc3ba34a33ef116d5285ae3f277f6c8f1114abe858d0a16eced2cf6f43ffa23e18cd7bd97886"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x56, 0x37, 0x37, 0x37, 0x36, 0x64, 0x36, 0x34, 0x65, 0x36, 0x30, 0x37, 0x64, 0x39, 0x61, 0x36]}, &(0x7f0000000240)={0x0, "62efd018c3089dc026c03a0e71d0ac888e52506dc627bc2ab49837b238675bc9151dd9ca4bae6eaa5c26c65871717f386bbb206bea425efc92f9a20e4fd9f9f9", 0x2f}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r6, &(0x7f0000000340)=""/224, 0xe0) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r10, 0x3f, 0x0, 0x7}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}}, 0x4000004) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x7, [@datasec={0xc, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0xb36c}], "ba"}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x2}, @enum64={0xd, 0x7, 0x0, 0x13, 0x1, 0x8, [{0xa, 0xffffffff, 0x220}, {0x3, 0x3, 0xf}, {0xc, 0xe21, 0x8000}, {0x10, 0x7, 0x8}, {0xa, 0x8, 0x5}, {0x4, 0xffffffff, 0x1ff}, {0x4, 0x1ff, 0x9}]}, @enum64={0x6, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x5, 0x0, 0x80000001}, {0x1, 0xfff, 0x1bd}, {0x4, 0x5, 0x7}, {0x9, 0xe000, 0x80}]}]}, {0x0, [0x30, 0x61, 0x0, 0x0, 0x0]}}, &(0x7f00000008c0)=""/205, 0xe7, 0xcd, 0x1, 0x80000000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={0xffffffffffffffff, 0x20, &(0x7f0000001b80)={&(0x7f0000000a80)=""/4096, 0x1000, 0x0, &(0x7f0000001a80)=""/208, 0xd0}}, 0x10) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x10, r1}, 0x18) r14 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r14, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r14, 0x4004550c, &(0x7f00000001c0)) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r15}, 0x38) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f00000021c0)={{r2, &(0x7f0000001c80)='fscrypt:', 0x0, &(0x7f0000001cc0)={@_ha_fsid={[0x9, 0x4]}, {0x0, 0x8001, 0x2, 0xfffffffffffffff9}}, 0x6518, &(0x7f0000001d00)={@_ha_fsid}, &(0x7f0000001d40)=0x6}, 0x5, &(0x7f0000002100)=[{0x1, 0x6, &(0x7f0000001d80)='\x00', &(0x7f0000001dc0)="6519d43af0fcb7b37a6e78061b5c4017afb5cc7653b506e813e9683399c5da8768e0fe8b73c92162b3c50dea75a556ff95fae98c2364b519e1756e2c9d20644cabdec31451900d057ab2e766fa96c03c044f9ad254db20f4888afa2890730a99f6e970ba500d1fe3985075b76eb25e2348285d1cdf12fc4018d5565c6311d1aeb49c043e5bc3954109bed75815d540138a63bc038d45ec15932bb8cb457d86c274092f2c03507ed7bea5acd8ac03a85aee9186c178fc1452bf76d333550ecd6c2da964cd03f478ecf654d6a67d729facce77812b1009d71f1afd4f8bdccdb7c1972ed69123f6d46cbb112c0ea27f61acac23d8b2e7", 0xf5, 0x12}, {0x1, 0x1, &(0x7f0000001ec0)='logon\x00', &(0x7f0000001f00)="12f193402db1233dec483dead3bd18aed858b904a1c83fac1c4bf2f8815bc10c63b8e7ad3383fc5fa8c6ab56bd647ee35d8c66b841cb11f8b8007e5284f906fe36d415", 0x43, 0x10}, {0x1, 0x2, &(0x7f0000001f80)='logon\x00', &(0x7f0000001fc0)="53f9acd2b991506cf8c7fe4c5edcfeb1bd4faf604947b7d2eefc8e4794ae6b6b7dfd001ee54123c91c07", 0x2a, 0x10}, {0x3, 0xa98, &(0x7f0000002000)='fscrypt:', &(0x7f0000002040)="5f33e675e3774d079684701bd015fecfbf725962f474575bd88064dda31dbcbc8ca474a32cc8861c12b1dfeb8bad4adb12909ac2", 0x34, 0x30}, {0x0, 0x5, &(0x7f0000002080)='fscrypt:', &(0x7f00000020c0)="bf35b97366b8b435ce4e0ad265dd053ab9041c5b2a3102de843b7971d3b840cc3d503a8bb66e33b126a43fd98280b9cf6db3a57023306d179d473f583ceb", 0x3e, 0x8}]}) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r17], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000700)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @ldst={0x0, 0x3, 0x3, 0x9, 0x2, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400}, @tail_call, @ldst={0x0, 0x2, 0x1, 0x2, 0x1, 0x2, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x1c}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1d38b85e}], &(0x7f0000000600)='GPL\x00', 0xf0, 0x0, &(0x7f0000000640), 0x0, 0x0, '\x00', r10, 0x1b, r11, 0x8, &(0x7f0000000a00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xe, 0x3ff, 0x5}, 0x10, r12, 0x0, 0x0, &(0x7f0000002240)=[r13, r14, 0xffffffffffffffff, r15, 0xffffffffffffffff, 0x1, r16, r0, r17], 0x0, 0x10, 0x1}, 0x94) 4.582631862s ago: executing program 3 (id=3272): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x1109093, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 4.569851683s ago: executing program 3 (id=3274): syz_read_part_table(0x604, &(0x7f0000000000)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x20, 0x8, 0x28, {0x28, 0x22, "5013a8919a3a84b80e99efa4d6cbac502ac1fdac686e0fd9c0e2301574816ce26ba0e2d0cdb8"}}, &(0x7f0000000780)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "4d5c0a5552a8f003a809593bc5ef420c3d283544d9b23298e9479d424e891b8089f8d8d0727b4e86dc79"}}, &(0x7f00000007c0)={0x0, 0xf, 0xe5, {0x5, 0xf, 0xe5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "6655b286c1d75b2947d58338a290dd1c"}, @generic={0x8d, 0x10, 0xa, "99f86e759aae679e0a9378dd2b0aa8ca07f0e6b38d9e7392cde64db554f3cc47d08ccef2a98c2dc3fcc28c0bac827722c2a3a701828930d3a41286d73cf025202d941154134a35606431239a1e90ee004a00d94bf83ed0e2d891e7ed9b1cc5c536a207ae5373307bd0cd9c42c528d5d4fbb515b78a3189a51e6237060ab7ec252616d6e3600846527db3"}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xf4, 0xf00f, 0x15, [0xffc000]}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0xc, 0xf, 0x0, [0xff0050, 0xff0000, 0xc0]}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0xeb14, 0xf0f, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0xfc, 0x43, 0xbc, 0x3, 0x7f}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x80, 0xa, 0x9, "c1825fe6", "4ffe3a35"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xe, 0x8, 0x6, 0x6, 0x6}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000980)={0x40, 0x14, 0xc5, "07db8a485d3788a55869955bca3a2a0e80671062bb55dda7afbb0f88e662c5858bb07955cefab54398565d53eefe81c3a532ca08c1da94e29993e589cf491655c08863a054cbf9b7294d84906a5ae8aa6acfda222551637c48a62cbb8a52148429ad1775dc073b8e38a528d085fe185e05b441789618a96e45535a3de88dd80289e31194ef866fcbf0561694a2249b98d4e4e60e81eabe3f1a3d30db6fb458d65528afc71859b71f346ae2f5486f770a91cd4b38bf48198a399e41bcbebd9c69205ad2460b"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xf3b8}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "0e17"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "c42e"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x3a}}) 4.080547411s ago: executing program 2 (id=3276): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x1109093, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) (fail_nth: 2) 3.562819071s ago: executing program 2 (id=3277): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x103000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) setrlimit(0xc, &(0x7f0000000280)={0x5, 0x5}) close(0xffffffffffffffff) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000003300)={'filter\x00', 0x0, [0x2, 0x4, 0x5, 0x3, 0x2]}, &(0x7f0000003380)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x15) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000000c0)=@x86={0xa, 0x7b, 0x8, 0x0, 0x6, 0x7f, 0x7f, 0x6, 0x1, 0x99, 0x9, 0x80, 0x0, 0x6, 0x7fff, 0x2, 0x4, 0xc, 0xfc, '\x00', 0xf9, 0xf07}) 2.743752389s ago: executing program 5 (id=3284): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000480)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x7000, 0x4}}}}}}}}}, 0x0) 2.743225079s ago: executing program 5 (id=3285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 7) 2.695039123s ago: executing program 2 (id=3286): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) tgkill(r1, r1, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="000000000000000000000000593ab556ea7da4849c58fe5fc3b362c7e6e115892cda51bbe6c4bd8614a51be90ca724c36eb739bf880387103e6e4017ba8ef3a1d5712ee7a48421a3e323c018723311577f39e99de6387346a68e12ebd3e67712dffbc4f7c50adf4c6fc7ed52bb82f258b8ed89beb3f5f511f4063ceb3207df722e654dbb4593"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x200) 1.975719125s ago: executing program 2 (id=3288): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010001fff00410000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c00028014000700fc0200000000000000000000000000010400120008000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x94) 1.940338386s ago: executing program 2 (id=3290): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x34, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x22, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r1, r2, 0x13, 0x200a, r2, @value=r7, @void, @void, @void, r6}, 0x20) r8 = syz_open_pts(r5, 0x143603) r9 = syz_open_pts(r5, 0x2000) io_setup(0x1, &(0x7f0000002500)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r10, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r9, &(0x7f0000000380)="a3", 0x1}]) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x1b) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) fsopen(&(0x7f0000000000)='fuse\x00', 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x51, 0xfffe, 0x560c, {0x805, 0x5d4}, {0xfffa, 0x9}, @period={0x5d, 0x1, 0x7, 0x9, 0x4, {0x3, 0x15, 0x7, 0x7}, 0x1, &(0x7f0000000080)=[0x7fff]}}) 1.905152598s ago: executing program 1 (id=3293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (fail_nth: 2) 1.688765341s ago: executing program 5 (id=3294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd7000fddbdf25ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d010000000000000000000000000000040000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040000000aae76ca46f30ef8dca174278c457734ba05022c9b79f1d26de260b00c30d21d7bb13fa02ff5a81137d963b9fe662bf19ba00eefec58c6e4af0681de7544654446a4656478e03ffd2a727bfe757621f75505aebd50824d8e4c8f5bad404b5640d1f390112eb6be5d8b9cbb44045520001012c5846b15412e291f8ed5729edc2c97fc331df7e356082664a4d9dc4cfb5e01743a555fa8e6685ac17146a31d154f1af887d0a483d7f2cea4907b4778298731a72a0ef44d1411e97758649ded5c28a478c4c7f6edfccf71e401a571b69c655bb"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 1.688623081s ago: executing program 5 (id=3295): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = dup(r0) bind$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.650466673s ago: executing program 5 (id=3296): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x173, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6174b0ba013d3cff00000000000000000000000000000000fe8000000002000000000000000000bb84"], 0x0) 1.629776894s ago: executing program 3 (id=3297): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r7], 0x24}}, 0x24008000) 1.551496239s ago: executing program 1 (id=3298): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001b80)=""/248) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000001c80)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x4, 0xae, 0x3, 0x7, 0x8, 0x8, 0x2}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) inotify_init1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) (async) recvmmsg$unix(r6, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) (async) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfc1d}, 0x4}], 0x1, 0x10020, 0x0) inotify_add_watch(r4, &(0x7f0000000700)='./file1\x00', 0x12000775) (async) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600f3fffd0180ffffffffffff030081d8ebffffff8000000000000000001de600000c20381d0100feff0200040003000000970f00000b0000000000000010000000000000000000000000000300001b00000000ffffffffffffffffc300000000000000b9e1bce5e78c7809958c8faf0874a35a249fbd7c98c5563bfe596142cc5b82a6fc654e44b6be2a88d1dc4657978d85065f563f2c9288cc1510099810da8a1af104fe7d567ce7ed4546293a2cca5660e06a9e6c79e3ddf966e8d930e38521717180d4"], 0x78) (async) close(r4) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) 1.551341749s ago: executing program 1 (id=3299): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x8000000}, 0xffffffffffffff90}, 0x6d) 1.550224249s ago: executing program 1 (id=3300): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="7800000018002587b9409b14ffff00070204be120205060504000000430009003f000c200a0000000d00993611c31d01e6a985a168d0bf0a0000ffffffffffffffffec0cfd3959547f509058ba86c955370000f22613350400160001000a0000000000e000e218d1ddf66ed53800000000000000000000e4", 0x78, 0x4044c80, 0x0, 0x0) 1.457489275s ago: executing program 4 (id=3301): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002000493e8f6949edbc87df250a0000edff000001020001000800180000234e2308000a0044000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 1.441444806s ago: executing program 1 (id=3302): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x89101) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x8, 0xfffbfffd, 0x984, 0x79, "bea0a0f7615409000400000000000000000200", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000007c0)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@inode_readahead_blks}, {@noinit_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_continue}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x6a5}}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x44f, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x1008088, &(0x7f00000007c0)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0xaa) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getuid() setreuid(0xffffffffffffffff, r6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="6c010000170001008605eb00000008000000007f0000010000000000000000000500000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc0200000000000000000000000000014e21000000000000000000640000000050a7bc79b23af504a3f278172fa3be7b0fe43e501421c459f2cde232961c65ce73f6a986f373a4a5aae50403869fef1e0822fb5eb625d864bfea20d2011e8683953aa42ebe1cc453925294d529422e0b87ed0035bb580418a4184d97b519b4852b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00000000000000000900000000000000000000000000000000000000000000007e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff0000000000000000000000004400050000000000000000000000ffffe0000001000004d3ff000000658e0000fe8000000000000000000000000000bb0400000001030000130500000600000001000000"], 0x16c}}, 0x0) getdents64(r4, &(0x7f0000001280)=""/4089, 0xff9) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000fbcd00000000000000180000000000000000000000000000009500000000000000d50a0000000000009d0000eaffffff00"], &(0x7f0000000000)='GPL\x00', 0x2, 0xf7, &(0x7f0000000500)=""/247}, 0x94) 1.261674496s ago: executing program 3 (id=3303): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffffffffffff, 0xff00}, 0x0, r1}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xe}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0xa5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0xfffffffffffffd01, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xc3, 0x10, 0x10, 0x10, 0x10, 0x3, 0x10, 0x10, 0x10, 0x10, 0x401, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r4, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x8, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x80) getsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000600)=""/94, &(0x7f0000000680)=0x5e) timer_create(0x4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r9, 0x26, 0x0, @void}, 0x10) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x200, 0x7, 0x0, 0x10000, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @value=r0}, 0x50) ioctl$RTC_VL_READ(r9, 0x80047013, &(0x7f00000006c0)) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') writev(r12, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x19, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe01}}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x2, 0x3, 0x3, 0x9, 0x4, 0x10, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}], &(0x7f0000000140)='syzkaller\x00', 0x400, 0x20, &(0x7f0000000180)=""/32, 0x41000, 0x35, '\x00', r1, @fallback=0x2b, r5, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x10, 0xb12, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000440)=[r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x3, 0x0, 0x1}, {0x0, 0x2, 0xa, 0x7}, {0x5, 0x4, 0x5, 0x7}, {0x2, 0x5, 0x1, 0xc}, {0x2, 0x4, 0x10, 0x8}, {0x1, 0x5, 0x3, 0xb}, {0x4, 0x3, 0xf, 0x7}, {0x4, 0x4, 0xa, 0x8}, {0x2, 0x4, 0xf, 0x7}, {0x0, 0x2, 0x10, 0x2}], 0x10, 0x3}, 0x94) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x0, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 1.20400722s ago: executing program 4 (id=3304): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000020000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, 0x0, &(0x7f0000000580)=r4}, 0x20) 853.92934ms ago: executing program 5 (id=3305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0x1, &(0x7f0000000340)={0x9, 0x3}, &(0x7f0000000400)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 426.101205ms ago: executing program 1 (id=3306): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 79.368465ms ago: executing program 4 (id=3307): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = dup(r0) bind$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 67.534096ms ago: executing program 4 (id=3308): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x633, 0x1000000, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x4000, 0x4e21, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d3, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x7, 0x4, 0x20000fff, 0x0, 0x8}, {0x0, 0xffffff80}, {0x8e, 0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd27, 0x70bd29, 0x70bd2c, 0x9, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=3309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) request_key(&(0x7f0000000200)='.dead\x00', 0x0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)={0xd, 0x7, 0x1, {{}, 0x9}}, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x1101, 0x3}) r3 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x1, 0xff, 0x10, 0x2}, {0x1000, 0x6, 0x4, 0x4}, {0xff, 0x5, 0xb, 0x7}, {0xfffb, 0x4, 0x8, 0x5}, {0x0, 0x9, 0x97, 0x8}, {0x7, 0x1, 0x4, 0x4}, {0x1, 0x2, 0x10, 0xc7b}, {0xd, 0x9, 0x4, 0x6}, {0xe72b, 0x7f, 0x7, 0x3}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x2004}, {r4, 0x2000}, {r0, 0x20}, {r1, 0x9004}, {r3, 0x8081}, {r5}], 0x6, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 16.391444][ T2399] usb 6-1: USB disconnect, device number 21 [ 416.550442][ T333] usb 5-1: Using ep0 maxpacket: 32 [ 416.680225][ T333] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.693457][ T333] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 416.702742][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.717272][ T333] usb 5-1: config 0 descriptor?? [ 416.761341][ T333] hub 5-1:0.0: bad descriptor, ignoring hub [ 416.767492][ T333] hub: probe of 5-1:0.0 failed with error -5 [ 416.774118][ T333] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 417.090282][ T9023] binder: 9022:9023 ioctl c0306201 0 returned -14 [ 417.250127][ T333] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 417.345755][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.352925][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.360874][ T9029] device bridge_slave_0 entered promiscuous mode [ 417.367869][ T9036] tipc: Started in network mode [ 417.372997][ T9036] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 417.382343][ T9036] tipc: Enabling of bearer rejected, failed to enable media [ 417.390879][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.397995][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.405600][ T9029] device bridge_slave_1 entered promiscuous mode [ 417.471922][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.479217][ T9029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.486588][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.493665][ T9029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.510137][ T333] usb 6-1: Using ep0 maxpacket: 32 [ 417.520669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.528368][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.536271][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.557493][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.566063][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.573283][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.583261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.591813][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.598885][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.616107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.626625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.640218][ T333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.651764][ T333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.661648][ T333] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 417.671264][ T333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.677279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.691485][ T333] usb 6-1: config 0 descriptor?? [ 417.705334][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.713822][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.721931][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.730834][ T9029] device veth0_vlan entered promiscuous mode [ 417.731041][ T333] hub 6-1:0.0: USB hub found [ 417.749032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.759538][ T9029] device veth1_macvtap entered promiscuous mode [ 417.773821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.784505][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.812767][ T9045] fuse: Bad value for 'fd' [ 417.881763][ T338] device bridge_slave_1 left promiscuous mode [ 417.888006][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.895721][ T338] device bridge_slave_0 left promiscuous mode [ 417.901942][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.911154][ T338] device veth1_macvtap left promiscuous mode [ 417.940410][ T333] hub 6-1:0.0: 1 port detected [ 418.360284][ T39] usb 5-1: USB disconnect, device number 83 [ 418.570160][ T629] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 418.590298][ T39] hub 6-1:0.0: activate --> -90 [ 418.669732][ T9066] loop2: detected capacity change from 0 to 131072 [ 418.703016][ T9066] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 418.711263][ T9066] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 418.742254][ T9066] F2FS-fs (loop2): invalid crc value [ 418.766096][ T9066] F2FS-fs (loop2): Found nat_bits in checkpoint [ 418.769987][ T9078] fuse: Bad value for 'fd' [ 418.809446][ T9066] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 418.817798][ T9066] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 418.820466][ T629] usb 2-1: Using ep0 maxpacket: 32 [ 418.925820][ T9094] binder: 9093:9094 ioctl c0306201 0 returned -14 [ 418.980290][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 419.000607][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 419.013925][ T629] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.024644][ T629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.033541][ T333] usb 6-1: USB disconnect, device number 22 [ 419.044047][ T629] usb 2-1: config 0 descriptor?? [ 419.050177][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 419.070202][ T9064] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 419.090921][ T629] hub 2-1:0.0: USB hub found [ 419.164877][ T9097] loop4: detected capacity change from 0 to 2048 [ 419.191151][ T9097] loop4: p2 < > p4 [ 419.196412][ T9097] loop4: p4 size 262144 extends beyond EOD, truncated [ 419.247622][ T9099] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ þÿÿ [ 419.310211][ T629] hub 2-1:0.0: 1 port detected [ 419.470178][ T7714] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 419.540117][ T333] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 419.614500][ T9105] tipc: Started in network mode [ 419.619403][ T9105] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 419.628499][ T9105] tipc: Enabling of bearer rejected, failed to enable media [ 419.710227][ T7714] usb 5-1: Using ep0 maxpacket: 32 [ 419.790197][ T333] usb 3-1: Using ep0 maxpacket: 8 [ 419.970666][ T333] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 419.981128][ T333] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 419.992009][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.108147][ T7714] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.121151][ T7714] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.130254][ T7714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.139749][ T7714] usb 5-1: config 0 descriptor?? [ 420.180860][ T7714] hub 5-1:0.0: bad descriptor, ignoring hub [ 420.186910][ T7714] hub: probe of 5-1:0.0 failed with error -5 [ 420.193335][ T7714] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 420.310265][ T333] usb 3-1: string descriptor 0 read error: -71 [ 420.321406][ T333] usb 3-1: USB disconnect, device number 83 [ 420.470255][ T9120] loop5: detected capacity change from 0 to 512 [ 420.476471][ T39] usb 2-1: USB disconnect, device number 63 [ 420.529916][ T9120] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2910: inode has both inline data and extents flags [ 420.543867][ T3399] udevd[3399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 420.543865][ T9120] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2910: couldn't read orphan inode 15 (err -117) [ 420.544132][ T9120] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.017313][ T9137] binder: 9136:9137 ioctl c0306201 0 returned -14 [ 421.150120][ T333] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 421.249485][ T9143] tipc: Started in network mode [ 421.254449][ T9143] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 421.263446][ T9143] tipc: Enabling of bearer rejected, failed to enable media [ 421.400182][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 421.680556][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.692354][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.704041][ T333] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 421.714873][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.753719][ T333] usb 3-1: config 0 descriptor?? [ 421.791324][ T333] hub 3-1:0.0: USB hub found [ 421.940317][ T7714] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 421.980155][ T7714] usb 5-1: device reset changed ep0 maxpacket size! [ 421.989292][ T7714] usb 5-1: USB disconnect, device number 84 [ 422.010381][ T333] hub 3-1:0.0: 1 port detected [ 422.326009][ T39] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 422.350169][ T7714] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 422.447512][ T9172] 9pnet: Could not find request transport: rdma [ 422.610177][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 422.790263][ T333] hub 3-1:0.0: activate --> -90 [ 422.795447][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 422.806682][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 422.818464][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 422.827832][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.830221][ T7714] usb 5-1: Using ep0 maxpacket: 8 [ 422.846202][ T39] usb 2-1: config 0 descriptor?? [ 422.870302][ T9166] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 422.891071][ T39] hub 2-1:0.0: USB hub found [ 422.960305][ T7714] usb 5-1: config 128 has an invalid interface number: 40 but max is 0 [ 422.968897][ T7714] usb 5-1: config 128 has no interface number 0 [ 422.975258][ T7714] usb 5-1: config 128 interface 40 has no altsetting 0 [ 422.982265][ T7714] usb 5-1: New USB device found, idVendor=2dc8, idProduct=e745, bcdDevice=89.14 [ 422.991486][ T7714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.993942][ T1301] usb 3-1: USB disconnect, device number 84 [ 423.005622][ T333] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 423.128737][ T39] hub 2-1:0.0: 1 port detected [ 423.160105][ T333] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 423.242653][ T30] audit: type=1400 audit(2000000140.530:1061): avc: denied { listen } for pid=9156 comm="syz.4.2922" path=0000204E000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 423.243285][ T9157] 9pnet: Insufficient options for proto=fd [ 423.300271][ T7714] usb 5-1: string descriptor 0 read error: -71 [ 423.311066][ T7714] usb 5-1: USB disconnect, device number 85 [ 423.430169][ T333] usb 4-1: device descriptor read/64, error -71 [ 423.460134][ T4660] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 423.639037][ T9188] loop2: detected capacity change from 0 to 40427 [ 423.684189][ T9188] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 423.692280][ T9188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 423.701365][ T9188] F2FS-fs (loop2): invalid crc value [ 423.708529][ T9188] F2FS-fs (loop2): Found nat_bits in checkpoint [ 423.742732][ T9188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 423.749902][ T9188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 423.757492][ T4660] usb 6-1: device descriptor read/64, error -71 [ 423.825570][ T333] usb 4-1: device descriptor read/64, error -71 [ 424.100268][ T333] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 424.240224][ T7714] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 424.281071][ T3212] usb 2-1: USB disconnect, device number 64 [ 424.330205][ T4660] usb 6-1: device descriptor read/64, error -71 [ 424.380168][ T333] usb 4-1: device descriptor read/64, error -71 [ 424.423249][ T285] attempt to access beyond end of device [ 424.423249][ T285] loop2: rw=2049, want=45104, limit=40427 [ 424.480137][ T7714] usb 5-1: Using ep0 maxpacket: 16 [ 424.600229][ T4660] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 424.607996][ T7714] usb 5-1: config 5 has an invalid interface number: 56 but max is 0 [ 424.616530][ T7714] usb 5-1: config 5 has no interface number 0 [ 424.622726][ T7714] usb 5-1: config 5 interface 56 has no altsetting 0 [ 424.780262][ T7714] usb 5-1: New USB device found, idVendor=04cb, idProduct=013b, bcdDevice=f0.ac [ 424.794551][ T7714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.802856][ T3212] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 424.810253][ T333] usb 4-1: device descriptor read/64, error -71 [ 424.811076][ T7714] usb 5-1: Product: syz [ 424.821006][ T7714] usb 5-1: Manufacturer: syz [ 424.825727][ T7714] usb 5-1: SerialNumber: syz [ 424.880257][ T4660] usb 6-1: device descriptor read/64, error -71 [ 424.886831][ T9200] tipc: Enabling of bearer rejected, failed to enable media [ 424.930236][ T333] usb usb4-port1: attempt power cycle [ 425.060260][ T3212] usb 3-1: Using ep0 maxpacket: 8 [ 425.071888][ T7714] usb 5-1: USB disconnect, device number 86 [ 425.180209][ T3212] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.188659][ T3212] usb 3-1: config 179 has no interface number 0 [ 425.195052][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.206360][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 425.217645][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.228906][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 425.240373][ T3212] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.253861][ T3212] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 425.262950][ T3212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.271165][ T4660] usb 6-1: device descriptor read/64, error -71 [ 425.290440][ T9197] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 425.350162][ T333] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 425.390211][ T4660] usb usb6-port1: attempt power cycle [ 425.530240][ T333] usb 4-1: device descriptor read/8, error -71 [ 425.540304][ T3212] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input51 [ 425.794796][ T9197] loop2: detected capacity change from 0 to 1024 [ 425.820299][ T333] usb 4-1: device descriptor read/8, error -71 [ 425.889585][ T9197] EXT4-fs (loop2): Test dummy encryption mode enabled [ 426.100109][ T333] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 426.131989][ T9197] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,noauto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 426.312526][ T3212] usb 3-1: USB disconnect, device number 85 [ 426.330127][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 426.338863][ T3212] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 426.360101][ T4660] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 426.551473][ T9224] xt_socket: unknown flags 0xc [ 427.700289][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 427.766786][ T9225] loop5: detected capacity change from 0 to 40427 [ 427.993590][ T333] usb 4-1: device not accepting address 71, error -71 [ 428.004505][ T333] usb usb4-port1: unable to enumerate USB device [ 428.060869][ T9225] F2FS-fs (loop5): Found nat_bits in checkpoint [ 428.106666][ T9225] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 428.190151][ T536] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 428.234838][ T9231] xt_hashlimit: size too large, truncated to 1048576 [ 428.283327][ T4660] usb 6-1: device not accepting address 25, error -71 [ 428.382761][ T9237] loop2: detected capacity change from 0 to 256 [ 428.404735][ T9237] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 428.420138][ T333] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 428.432625][ T536] usb 5-1: Using ep0 maxpacket: 32 [ 428.550265][ T536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.561226][ T536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.565690][ T9244] tipc: Started in network mode [ 428.571473][ T536] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.577517][ T9244] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 428.585553][ T536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.594744][ T9244] tipc: Enabling of bearer rejected, failed to enable media [ 428.611682][ T536] usb 5-1: config 0 descriptor?? [ 428.651333][ T536] hub 5-1:0.0: USB hub found [ 428.690198][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 428.760123][ T9226] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 428.810211][ T333] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 428.818479][ T333] usb 4-1: config 1 has no interface number 0 [ 428.824722][ T333] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 428.834726][ T333] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 428.844905][ T333] usb 4-1: config 1 interface 105 has no altsetting 0 [ 428.860344][ T536] hub 5-1:0.0: 1 port detected [ 428.970677][ T4660] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 429.010201][ T333] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 429.019479][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.027576][ T333] usb 4-1: Product: syz [ 429.031898][ T9226] usb 2-1: device descriptor read/64, error -71 [ 429.038194][ T333] usb 4-1: Manufacturer: syz [ 429.042935][ T333] usb 4-1: SerialNumber: syz [ 429.060363][ T9232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 429.067497][ T9232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 429.080742][ T4660] usb 6-1: Using ep0 maxpacket: 8 [ 429.210205][ T4660] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 429.218553][ T4660] usb 6-1: config 179 has no interface number 0 [ 429.225097][ T4660] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 429.236215][ T4660] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 429.247500][ T4660] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 429.258763][ T4660] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 429.270209][ T4660] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 429.283676][ T4660] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 429.294526][ T4660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.330273][ T9239] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 429.358985][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2952'. [ 429.368074][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 429.416100][ T9252] FAULT_INJECTION: forcing a failure. [ 429.416100][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 429.428881][ T9252] CPU: 0 PID: 9252 Comm: syz.2.2955 Tainted: G W syzkaller #0 [ 429.430222][ T9226] usb 2-1: device descriptor read/64, error -71 [ 429.437720][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 429.454077][ T9252] Call Trace: [ 429.457364][ T9252] [ 429.460299][ T9252] __dump_stack+0x21/0x30 [ 429.464674][ T9252] dump_stack_lvl+0x110/0x170 [ 429.469498][ T9252] ? show_regs_print_info+0x20/0x20 [ 429.474729][ T9252] dump_stack+0x15/0x20 [ 429.479122][ T9252] should_fail+0x3c1/0x510 [ 429.483559][ T9252] ? alloc_skb_with_frags+0xa8/0x620 [ 429.488865][ T9252] __should_failslab+0xa4/0xe0 [ 429.493676][ T9252] should_failslab+0x9/0x20 [ 429.498243][ T9252] slab_pre_alloc_hook+0x3b/0xe0 [ 429.503227][ T9252] ? alloc_skb_with_frags+0xa8/0x620 [ 429.508526][ T9252] ? alloc_skb_with_frags+0xa8/0x620 [ 429.513840][ T9252] __kmalloc_track_caller+0x6c/0x2c0 [ 429.519171][ T9252] ? alloc_skb_with_frags+0xa8/0x620 [ 429.524466][ T9252] ? alloc_skb_with_frags+0xa8/0x620 [ 429.529839][ T9252] __alloc_skb+0x21a/0x740 [ 429.534263][ T9252] alloc_skb_with_frags+0xa8/0x620 [ 429.539375][ T9252] ? unwind_get_return_address+0x4d/0x90 [ 429.545009][ T9252] sock_alloc_send_pskb+0x87f/0x9a0 [ 429.550217][ T9252] ? sock_kzfree_s+0x60/0x60 [ 429.554833][ T9252] ? fib_rules_unregister+0x380/0x380 [ 429.560239][ T9252] ? __kasan_slab_alloc+0xcf/0xf0 [ 429.565301][ T9252] ? __kasan_slab_alloc+0xbd/0xf0 [ 429.570329][ T9252] ? slab_post_alloc_hook+0x4f/0x2b0 [ 429.575647][ T9252] ? kmem_cache_alloc+0xf7/0x260 [ 429.580607][ T9252] ? ipv6_get_saddr_eval+0xabf/0xf70 [ 429.585906][ T9252] sock_alloc_send_skb+0x32/0x40 [ 429.590917][ T9252] __ip6_append_data+0x2581/0x3860 [ 429.596047][ T9252] ? memcpy+0x56/0x70 [ 429.600097][ T9252] ? __local_bh_enable_ip+0x58/0x80 [ 429.605313][ T9252] ? local_bh_enable+0x1f/0x30 [ 429.610106][ T9252] ? ip6_dst_lookup_tail+0xcb8/0x13f0 [ 429.615496][ T9252] ? ip6_setup_cork+0x1290/0x1290 [ 429.620524][ T9252] ? ip6_setup_cork+0xd10/0x1290 [ 429.625464][ T9252] ip6_make_skb+0x388/0x6e0 [ 429.629979][ T9252] ? ip_skb_dst_mtu+0x630/0x630 [ 429.635032][ T9252] ? ip_skb_dst_mtu+0x630/0x630 [ 429.639913][ T9252] ? ip6_flush_pending_frames+0x360/0x360 [ 429.645684][ T9252] ? ip6_sk_dst_lookup_flow+0x49f/0x840 [ 429.651398][ T9252] udpv6_sendmsg+0x1dc6/0x2720 [ 429.656218][ T9252] ? ip_skb_dst_mtu+0x630/0x630 [ 429.661107][ T9252] ? __kasan_check_write+0x14/0x20 [ 429.666258][ T9252] ? udp_v6_early_demux+0xbf0/0xbf0 [ 429.671534][ T9252] ? udp_lib_lport_inuse+0x6e/0x530 [ 429.676775][ T9252] ? __local_bh_enable_ip+0x58/0x80 [ 429.682004][ T9252] ? udp_lib_get_port+0x1377/0x18c0 [ 429.687240][ T9252] ? __local_bh_enable_ip+0x58/0x80 [ 429.692470][ T9252] ? __local_bh_enable_ip+0x58/0x80 [ 429.697676][ T9252] ? _raw_spin_unlock_bh+0x51/0x60 [ 429.702796][ T9252] ? release_sock+0x15b/0x1b0 [ 429.707500][ T9252] ? inet_send_prepare+0x1cf/0x4c0 [ 429.712636][ T9252] inet6_sendmsg+0xa5/0xc0 [ 429.717104][ T9252] __sys_sendto+0x46d/0x620 [ 429.721628][ T9252] ? __ia32_sys_getpeername+0x90/0x90 [ 429.727133][ T9252] ? __ia32_sys_read+0x90/0x90 [ 429.731920][ T9252] __x64_sys_sendto+0xe5/0x100 [ 429.736710][ T9252] x64_sys_call+0x178/0x9a0 [ 429.741243][ T9252] do_syscall_64+0x4c/0xa0 [ 429.745684][ T9252] ? clear_bhb_loop+0x50/0xa0 [ 429.750373][ T9252] ? clear_bhb_loop+0x50/0xa0 [ 429.755077][ T9252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 429.761036][ T9252] RIP: 0033:0x7fb728253f79 [ 429.765472][ T9252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.785215][ T9252] RSP: 002b:00007fb726caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.793658][ T9252] RAX: ffffffffffffffda RBX: 00007fb7284cdfa0 RCX: 00007fb728253f79 [ 429.801663][ T9252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 429.809661][ T9252] RBP: 00007fb726caf090 R08: 0000200000000180 R09: 000000000000001c [ 429.817667][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.825665][ T9252] R13: 00007fb7284ce038 R14: 00007fb7284cdfa0 R15: 00007ffd9fc21678 [ 429.833673][ T9252] [ 429.836997][ T9226] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 429.847893][ T4660] hub 5-1:0.0: activate --> -90 [ 429.869605][ T4660] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input52 [ 429.880791][ T9232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 429.887144][ T9256] loop2: detected capacity change from 0 to 2048 [ 429.887875][ T9232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 429.902499][ T3399] loop2: p2 < > p4 [ 429.915647][ T3399] loop2: p4 size 262144 extends beyond EOD, truncated [ 429.925167][ T9256] loop2: p2 < > p4 [ 429.929682][ T9256] loop2: p4 size 262144 extends beyond EOD, truncated [ 430.049154][ T536] usb 6-1: USB disconnect, device number 26 [ 430.056549][ T7714] usb 5-1: USB disconnect, device number 87 [ 430.062552][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 430.071249][ T4660] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 430.078358][ T536] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 430.120143][ T9226] usb 2-1: device descriptor read/64, error -71 [ 430.250499][ T414] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 430.350240][ T333] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 430.490173][ T414] usb 3-1: Using ep0 maxpacket: 32 [ 430.510179][ T9226] usb 2-1: device descriptor read/64, error -71 [ 430.610310][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 7 [ 430.622388][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 430.633797][ T9226] usb usb2-port1: attempt power cycle [ 430.639412][ T414] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.648770][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.658296][ T414] usb 3-1: config 0 descriptor?? [ 430.700786][ T414] hub 3-1:0.0: bad descriptor, ignoring hub [ 430.706833][ T414] hub: probe of 3-1:0.0 failed with error -5 [ 430.713288][ T414] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 430.734841][ T9274] tipc: Enabling of bearer rejected, failed to enable media [ 430.870152][ T39] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 431.040181][ T9226] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 431.114202][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 431.120404][ T333] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 431.133847][ T333] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 82:5d:f8:43:4c:da [ 431.157725][ T30] audit: type=1400 audit(2000000148.440:1062): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 431.190247][ T333] usb 4-1: USB disconnect, device number 72 [ 431.198671][ T333] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 431.210447][ T9226] usb 2-1: device descriptor read/8, error -71 [ 431.216929][ T30] audit: type=1400 audit(2000000148.470:1063): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.238667][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.249317][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.264314][ T30] audit: type=1400 audit(2000000148.470:1064): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=14351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.287696][ T30] audit: type=1400 audit(2000000148.470:1065): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=14351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.313633][ T30] audit: type=1400 audit(2000000148.470:1066): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=14351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.337675][ T333] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 431.347750][ T30] audit: type=1400 audit(2000000148.470:1067): avc: denied { ioctl } for pid=9275 comm="syz.3.2964" path="socket:[54775]" dev="sockfs" ino=54775 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 431.351905][ T333] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 431.375509][ T30] audit: type=1400 audit(2000000148.640:1068): avc: denied { read } for pid=9284 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.391396][ T333] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 431.405837][ T30] audit: type=1400 audit(2000000148.640:1069): avc: denied { open } for pid=9284 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.440490][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.449579][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.465691][ T39] usb 5-1: Product: syz [ 431.476619][ T30] audit: type=1400 audit(2000000148.640:1070): avc: denied { getattr } for pid=9284 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.479419][ T39] usb 5-1: Manufacturer: syz [ 431.509956][ T39] usb 5-1: SerialNumber: syz [ 431.540145][ T9226] usb 2-1: device descriptor read/8, error -71 [ 431.579185][ T30] audit: type=1326 audit(2000000148.860:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.5.2971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7b3560f79 code=0x0 [ 431.771524][ T9267] SELinux: policydb magic number 0x380 does not match expected magic number 0xf97cff8c [ 431.781862][ T9267] SELinux: failed to load policy [ 431.930145][ T333] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 432.170605][ T333] usb 4-1: Using ep0 maxpacket: 32 [ 432.240198][ T536] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 432.270327][ T2459] usb 3-1: reset high-speed USB device number 86 using dummy_hcd [ 432.300242][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.311603][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.322283][ T333] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.331984][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.342263][ T333] usb 4-1: config 0 descriptor?? [ 432.360307][ T39] usb 5-1: 0:2 : does not exist [ 432.377544][ T39] usb 5-1: USB disconnect, device number 88 [ 432.385626][ T333] hub 4-1:0.0: USB hub found [ 432.453568][ T9346] loop4: detected capacity change from 0 to 40427 [ 432.494002][ T9346] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 432.503027][ T9346] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 432.514713][ T9346] 8021q: VLANs not supported on lo [ 432.530112][ T536] usb 6-1: device descriptor read/64, error -71 [ 432.540282][ T2459] usb 3-1: device descriptor read/64, error -71 [ 432.590254][ T333] hub 4-1:0.0: 1 port detected [ 432.632668][ T9350] tipc: Enabling of bearer rejected, failed to enable media [ 432.920212][ T536] usb 6-1: device descriptor read/64, error -71 [ 432.969708][ T2459] usb 3-1: device descriptor read/64, error -71 [ 433.190123][ T536] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 433.240124][ T2459] usb 3-1: reset high-speed USB device number 86 using dummy_hcd [ 433.250313][ T333] hub 4-1:0.0: activate --> -90 [ 433.450712][ T7714] usb 4-1: USB disconnect, device number 73 [ 433.470237][ T333] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 433.470476][ T536] usb 6-1: device descriptor read/64, error -71 [ 433.510091][ T2459] usb 3-1: device descriptor read/64, error -71 [ 433.705237][ T9365] tipc: Enabled bearer , priority 10 [ 433.854138][ T9359] loop4: detected capacity change from 0 to 131072 [ 433.871933][ T9359] F2FS-fs (loop4): Test dummy encryption mode enabled [ 433.881747][ T9359] F2FS-fs (loop4): invalid crc value [ 433.890227][ T536] usb 6-1: device descriptor read/64, error -71 [ 433.911024][ T9359] F2FS-fs (loop4): Found nat_bits in checkpoint [ 433.970373][ T9359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 434.010191][ T536] usb usb6-port1: attempt power cycle [ 434.040175][ T2459] usb 3-1: device descriptor read/64, error -71 [ 434.330202][ T2459] usb 3-1: reset high-speed USB device number 86 using dummy_hcd [ 434.446396][ T9381] loop4: detected capacity change from 0 to 1024 [ 434.510193][ T536] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 434.520415][ T9381] EXT4-fs (loop4): Ignoring removed orlov option [ 434.532286][ T9381] EXT4-fs (loop4): bad geometry: block count 6422528 exceeds size of device (512 blocks) [ 434.545704][ T2459] usb 3-1: device descriptor read/8, error -71 [ 434.614165][ T9381] FAULT_INJECTION: forcing a failure. [ 434.614165][ T9381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.627478][ T9381] CPU: 0 PID: 9381 Comm: syz.4.2990 Tainted: G W syzkaller #0 [ 434.636306][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 434.646600][ T9381] Call Trace: [ 434.649914][ T9381] [ 434.652884][ T9381] __dump_stack+0x21/0x30 [ 434.657266][ T9381] dump_stack_lvl+0x110/0x170 [ 434.661982][ T9381] ? show_regs_print_info+0x20/0x20 [ 434.667216][ T9381] ? vfs_write+0xc72/0xfd0 [ 434.671679][ T9381] dump_stack+0x15/0x20 [ 434.675878][ T9381] should_fail+0x3c1/0x510 [ 434.680417][ T9381] should_fail_usercopy+0x1a/0x20 [ 434.685481][ T9381] _copy_from_user+0x20/0xd0 [ 434.690109][ T9381] __sys_bpf+0x258/0x7d0 [ 434.694367][ T9381] ? bpf_link_show_fdinfo+0x330/0x330 [ 434.699742][ T9381] ? debug_smp_processor_id+0x17/0x20 [ 434.705142][ T9381] __x64_sys_bpf+0x7c/0x90 [ 434.709704][ T9381] x64_sys_call+0x4b9/0x9a0 [ 434.714224][ T9381] do_syscall_64+0x4c/0xa0 [ 434.718658][ T9381] ? clear_bhb_loop+0x50/0xa0 [ 434.723527][ T9381] ? clear_bhb_loop+0x50/0xa0 [ 434.728325][ T9381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 434.730646][ T9226] tipc: Node number set to 11521 [ 434.734380][ T9381] RIP: 0033:0x7f717fec5f79 [ 434.743777][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.763428][ T9381] RSP: 002b:00007f717e921028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.772009][ T9381] RAX: ffffffffffffffda RBX: 00007f718013ffa0 RCX: 00007f717fec5f79 [ 434.779997][ T9381] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 434.788315][ T9381] RBP: 00007f717e921090 R08: 0000000000000000 R09: 0000000000000000 [ 434.796457][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.804441][ T9381] R13: 00007f7180140038 R14: 00007f718013ffa0 R15: 00007ffea5601508 [ 434.812431][ T9381] [ 434.886341][ T9393] tipc: Enabling of bearer rejected, failed to enable media [ 434.900243][ T2459] usb 3-1: device descriptor read/8, error -71 [ 434.900545][ T536] usb 6-1: device descriptor read/8, error -71 [ 435.101649][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 435.110863][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 435.132256][ T9398] wireguard: wireguard0: Could not create IPv6 socket [ 435.139084][ T9398] device wireguard0 entered promiscuous mode [ 435.145251][ T9226] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 435.150423][ T536] usb 6-1: device descriptor read/8, error -71 [ 435.330955][ T9408] binder: 9407:9408 ioctl c0306201 0 returned -14 [ 435.400207][ T9226] usb 2-1: Using ep0 maxpacket: 32 [ 435.500178][ T2459] usb 3-1: reset high-speed USB device number 86 using dummy_hcd [ 435.520288][ T9226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 435.535930][ T9226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 435.550709][ T9226] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.560019][ T9226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.579240][ T9226] usb 2-1: config 0 descriptor?? [ 435.600181][ T9392] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 435.620940][ T9226] hub 2-1:0.0: USB hub found [ 435.670198][ T2459] usb 3-1: device firmware changed [ 435.675531][ T2459] usb 3-1: USB disconnect, device number 86 [ 435.755629][ T9416] FAULT_INJECTION: forcing a failure. [ 435.755629][ T9416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.789712][ T9416] CPU: 0 PID: 9416 Comm: syz.4.3003 Tainted: G W syzkaller #0 [ 435.798552][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 435.808642][ T9416] Call Trace: [ 435.811954][ T9416] [ 435.814917][ T9416] __dump_stack+0x21/0x30 [ 435.819288][ T9416] dump_stack_lvl+0x110/0x170 [ 435.824007][ T9416] ? show_regs_print_info+0x20/0x20 [ 435.829250][ T9416] dump_stack+0x15/0x20 [ 435.833443][ T9416] should_fail+0x3c1/0x510 [ 435.837881][ T9416] should_fail_usercopy+0x1a/0x20 [ 435.842924][ T9416] _copy_to_user+0x20/0x90 [ 435.847357][ T9416] simple_read_from_buffer+0xe9/0x160 [ 435.852756][ T9416] proc_fail_nth_read+0x1a6/0x220 [ 435.858045][ T9416] ? proc_fault_inject_write+0x310/0x310 [ 435.863702][ T9416] ? security_file_permission+0x83/0xa0 [ 435.869273][ T9416] ? proc_fault_inject_write+0x310/0x310 [ 435.874922][ T9416] vfs_read+0x28d/0xc40 [ 435.879097][ T9416] ? kernel_read+0x1f0/0x1f0 [ 435.883791][ T9416] ? __kasan_check_write+0x14/0x20 [ 435.888922][ T9416] ? mutex_lock+0x9b/0x1c0 [ 435.893359][ T9416] ? wait_for_completion_killable_timeout+0x10/0x10 [ 435.899964][ T9416] ? __fget_files+0x2c4/0x320 [ 435.904661][ T9416] ? __fdget_pos+0x2d2/0x380 [ 435.909274][ T9416] ? ksys_read+0x71/0x250 [ 435.913620][ T9416] ksys_read+0x149/0x250 [ 435.917880][ T9416] ? vfs_write+0xfd0/0xfd0 [ 435.922687][ T9416] ? debug_smp_processor_id+0x17/0x20 [ 435.928099][ T9416] __x64_sys_read+0x7b/0x90 [ 435.932831][ T9416] x64_sys_call+0x96d/0x9a0 [ 435.937482][ T9416] do_syscall_64+0x4c/0xa0 [ 435.941939][ T9416] ? clear_bhb_loop+0x50/0xa0 [ 435.946665][ T9416] ? clear_bhb_loop+0x50/0xa0 [ 435.951361][ T9416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.957270][ T9416] RIP: 0033:0x7f717fe8684e [ 435.961701][ T9416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.981326][ T9416] RSP: 002b:00007f717e920fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.989762][ T9416] RAX: ffffffffffffffda RBX: 00007f717e9216c0 RCX: 00007f717fe8684e [ 435.997764][ T9416] RDX: 000000000000000f RSI: 00007f717e9210a0 RDI: 0000000000000006 [ 436.005862][ T9416] RBP: 00007f717e921090 R08: 0000000000000000 R09: 0000000000000000 [ 436.013872][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.021949][ T9416] R13: 00007f7180140038 R14: 00007f718013ffa0 R15: 00007ffea5601508 [ 436.029947][ T9416] [ 436.040232][ T9226] hub 2-1:0.0: 1 port detected [ 436.231207][ T2459] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 436.278288][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 436.278306][ T30] audit: type=1326 audit(2000000153.560:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.327711][ T30] audit: type=1326 audit(2000000153.560:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.352961][ T30] audit: type=1326 audit(2000000153.580:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.379316][ T30] audit: type=1326 audit(2000000153.590:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.403590][ T30] audit: type=1326 audit(2000000153.590:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.439736][ T30] audit: type=1326 audit(2000000153.590:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.470176][ T2459] usb 3-1: Using ep0 maxpacket: 32 [ 436.473423][ T30] audit: type=1326 audit(2000000153.590:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.520414][ T30] audit: type=1326 audit(2000000153.590:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.550542][ T30] audit: type=1326 audit(2000000153.610:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.582618][ T30] audit: type=1326 audit(2000000153.610:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59d6e1f79 code=0x7ffc0000 [ 436.590536][ T2459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.629511][ T2459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.644948][ T2459] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.658601][ T2459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.671998][ T2459] usb 3-1: config 0 descriptor?? [ 436.761011][ T2459] hub 3-1:0.0: USB hub found [ 436.890373][ T9441] loop5: detected capacity change from 0 to 16 [ 436.966767][ T9441] erofs: Unknown parameter '0x0000000000000003' [ 436.980422][ T2459] hub 3-1:0.0: 1 port detected [ 437.632183][ T9226] usb 2-1: USB disconnect, device number 69 [ 437.824786][ T9443] loop4: detected capacity change from 0 to 512 [ 437.920306][ T2459] hub 3-1:0.0: activate --> -90 [ 437.960107][ T536] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 437.970028][ T9443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.981302][ T9443] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.100377][ T9447] binder: 9446:9447 ioctl c0306201 0 returned -14 [ 438.207567][ T9451] tipc: Enabling of bearer rejected, failed to enable media [ 438.230208][ T536] usb 4-1: device descriptor read/64, error -71 [ 438.340911][ T7714] usb 3-1: USB disconnect, device number 87 [ 438.620216][ T536] usb 4-1: device descriptor read/64, error -71 [ 438.890184][ T536] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 439.130247][ T629] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 439.160102][ T536] usb 4-1: device descriptor read/64, error -71 [ 439.220111][ T7714] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 439.370132][ T629] usb 3-1: Using ep0 maxpacket: 16 [ 439.379911][ T9471] FAULT_INJECTION: forcing a failure. [ 439.379911][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.393496][ T9471] CPU: 1 PID: 9471 Comm: syz.1.3020 Tainted: G W syzkaller #0 [ 439.402307][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.412399][ T9471] Call Trace: [ 439.415712][ T9471] [ 439.418675][ T9471] __dump_stack+0x21/0x30 [ 439.423038][ T9471] dump_stack_lvl+0x110/0x170 [ 439.427749][ T9471] ? show_regs_print_info+0x20/0x20 [ 439.432984][ T9471] ? irqentry_exit+0x37/0x40 [ 439.437609][ T9471] dump_stack+0x15/0x20 [ 439.441794][ T9471] should_fail+0x3c1/0x510 [ 439.446246][ T9471] should_fail_usercopy+0x1a/0x20 [ 439.451300][ T9471] _copy_from_user+0x20/0xd0 [ 439.455923][ T9471] __copy_msghdr_from_user+0xc9/0x630 [ 439.461332][ T9471] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 439.466657][ T9471] ___sys_sendmsg+0x19a/0x2e0 [ 439.471508][ T9471] ? _kstrtoull+0x3c0/0x4d0 [ 439.476057][ T9471] ? __sys_sendmsg+0x280/0x280 [ 439.480867][ T9471] ? update_load_avg+0x40d/0x1110 [ 439.485931][ T9471] __sys_sendmmsg+0x2ba/0x4e0 [ 439.490657][ T9471] ? __ia32_sys_sendmsg+0x2f0/0x2f0 [ 439.495876][ T9471] ? finish_task_switch+0x16b/0x780 [ 439.501260][ T9471] ? __kasan_check_write+0x14/0x20 [ 439.506547][ T9471] ? switch_fpu_return+0x15d/0x2c0 [ 439.511697][ T9471] __x64_sys_sendmmsg+0xa0/0xb0 [ 439.516756][ T9471] x64_sys_call+0x6c6/0x9a0 [ 439.521406][ T9471] do_syscall_64+0x4c/0xa0 [ 439.525861][ T9471] ? clear_bhb_loop+0x50/0xa0 [ 439.530593][ T9471] ? clear_bhb_loop+0x50/0xa0 [ 439.535307][ T9471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.541221][ T9471] RIP: 0033:0x7ff22ec1bf79 [ 439.545661][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.565297][ T9471] RSP: 002b:00007ff22d635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.574029][ T9471] RAX: ffffffffffffffda RBX: 00007ff22ee96180 RCX: 00007ff22ec1bf79 [ 439.582026][ T9471] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008 [ 439.590017][ T9471] RBP: 00007ff22d635090 R08: 0000000000000000 R09: 0000000000000000 [ 439.598017][ T9471] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 439.606013][ T9471] R13: 00007ff22ee96218 R14: 00007ff22ee96180 R15: 00007ffe78216c58 [ 439.614014][ T9471] [ 439.780179][ T7714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.800768][ T629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.810405][ T7714] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 439.812025][ T629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.010758][ T7714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.020482][ T629] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.025424][ T7714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.029838][ T629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.051882][ T629] usb 3-1: Product: syz [ 440.054271][ T7714] usb 5-1: Product: syz [ 440.064813][ T629] usb 3-1: Manufacturer: syz [ 440.069933][ T7714] usb 5-1: Manufacturer: syz [ 440.078441][ T629] usb 3-1: SerialNumber: syz [ 440.082935][ T7714] usb 5-1: SerialNumber: syz [ 440.280113][ T536] usb 4-1: device descriptor read/64, error -71 [ 440.400465][ T536] usb usb4-port1: attempt power cycle [ 440.564878][ T7714] usb 5-1: USB disconnect, device number 89 [ 440.610993][ T629] usb 3-1: cannot find UAC_HEADER [ 440.616823][ T629] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 440.676671][ T629] usb 3-1: USB disconnect, device number 88 [ 440.810154][ T536] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 440.990309][ T536] usb 4-1: device descriptor read/8, error -71 [ 441.065502][ T9487] binder: 9486:9487 ioctl c0306201 0 returned -14 [ 441.260170][ T536] usb 4-1: device descriptor read/8, error -71 [ 441.327702][ T9497] loop5: detected capacity change from 0 to 1024 [ 441.400463][ T9497] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 441.434956][ T9497] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.530124][ T536] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 441.700272][ T536] usb 4-1: device descriptor read/8, error -71 [ 441.900111][ T4660] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 441.910281][ T629] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 441.970205][ T536] usb 4-1: device descriptor read/8, error -71 [ 441.978849][ T9511] loop4: detected capacity change from 0 to 512 [ 442.018932][ T9511] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 442.018932][ T9511] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 442.018932][ T9511] [ 442.038773][ T9511] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 442.051632][ T9511] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 442.062658][ T9511] EXT4-fs (loop4): 1 truncate cleaned up [ 442.068320][ T9511] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,i_version,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 442.090872][ T536] usb usb4-port1: unable to enumerate USB device [ 442.100769][ T338] __quota_error: 7 callbacks suppressed [ 442.100785][ T338] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 442.123744][ T338] EXT4-fs error (device loop4): ext4_release_dquot:6261: comm kworker/u4:4: Failed to release dquot type 1 [ 442.180189][ T4660] usb 2-1: device descriptor read/64, error -71 [ 442.180685][ T629] usb 6-1: Using ep0 maxpacket: 16 [ 442.304601][ T9511] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.3034: iget: bad i_size value: 360287970199339018 [ 442.317473][ T629] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.328573][ T9511] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.3034: iget: bad i_size value: 360287970199339018 [ 442.329276][ T629] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.351792][ T629] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 442.365620][ T629] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.369162][ T9511] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 442.373033][ T629] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 442.396141][ T629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.408458][ T629] usb 6-1: config 0 descriptor?? [ 442.579903][ T9525] tipc: Enabling of bearer rejected, failed to enable media [ 442.861467][ T4660] usb 2-1: device descriptor read/64, error -71 [ 442.917041][ T9529] tipc: Enabling of bearer rejected, failed to enable media [ 442.931492][ T284] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz-executor: bit already cleared for inode 15 [ 442.944366][ T45] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 442.956134][ T45] EXT4-fs error (device loop4): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 1 [ 443.031567][ T9533] netlink: 'syz.4.3041': attribute type 4 has an invalid length. [ 443.042547][ T9533] netlink: 'syz.4.3041': attribute type 4 has an invalid length. [ 443.082761][ T629] hid (null): invalid report_size 296079416 [ 443.088725][ T629] hid (null): unknown global tag 0xfa [ 443.095504][ T629] hid (null): global environment stack underflow [ 443.150211][ T4660] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 443.395638][ T9537] kvm [9506]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 443.407349][ T9537] kvm [9506]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 443.420121][ T4660] usb 2-1: device descriptor read/64, error -71 [ 443.423028][ T9537] kvm [9506]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 443.994858][ T9553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3673742268 (3673742268 ns) > initial count (981121206 ns). Using initial count to start timer. [ 444.014412][ T9553] kvm [9552]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 444.024026][ T9553] kvm [9552]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 444.110136][ T4660] usb 2-1: device descriptor read/64, error -71 [ 444.391386][ T4660] usb usb2-port1: attempt power cycle [ 444.413770][ T9564] loop2: detected capacity change from 0 to 512 [ 444.441825][ T9564] EXT4-fs (loop2): bad block size 16384 [ 444.454836][ T9564] device sit2 entered promiscuous mode [ 444.540187][ T536] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 444.677268][ T3212] usb 6-1: USB disconnect, device number 31 [ 444.771417][ T9569] tipc: Enabling of bearer rejected, failed to enable media [ 444.830158][ T536] usb 4-1: Using ep0 maxpacket: 8 [ 444.944048][ T30] audit: type=1400 audit(2000000162.230:1098): avc: denied { accept } for pid=9573 comm="syz.4.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.964542][ T536] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 444.970780][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 444.976465][ T9574] usb usb8: usbfs: process 9574 (syz.4.3056) did not claim interface 0 before use [ 444.989953][ T536] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.000733][ T536] usb 4-1: config 0 has no interface number 0 [ 445.042268][ T30] audit: type=1326 audit(2000000162.320:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9575 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717fec5f79 code=0x7ffc0000 [ 445.184112][ T9581] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3055'. [ 445.360124][ T629] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 445.390184][ T536] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 445.399413][ T536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.407520][ T536] usb 4-1: Product: syz [ 445.411873][ T536] usb 4-1: Manufacturer: syz [ 445.416538][ T536] usb 4-1: SerialNumber: syz [ 445.422533][ T536] usb 4-1: config 0 descriptor?? [ 445.460986][ T536] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 445.467449][ T536] usb 4-1: No valid video chain found. [ 445.592748][ T30] audit: type=1400 audit(2000000162.880:1100): avc: denied { write } for pid=9584 comm="syz.5.3060" name="cgroup.subtree_control" dev="cgroup2" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 445.617175][ T30] audit: type=1326 audit(2000000162.880:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.3060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7b3560f79 code=0x0 [ 445.644775][ T9587] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 445.655668][ T30] audit: type=1400 audit(2000000162.940:1102): avc: denied { relabelto } for pid=9584 comm="syz.5.3060" name="cgroup.subtree_control" dev="cgroup2" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 445.672750][ T2459] usb 4-1: USB disconnect, device number 78 [ 445.688881][ T30] audit: type=1400 audit(2000000162.940:1103): avc: denied { associate } for pid=9584 comm="syz.5.3060" name="cgroup.subtree_control" dev="cgroup2" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initrc_exec_t:s0" [ 445.740265][ T629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.751093][ T629] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.768083][ T629] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.941152][ T629] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.951594][ T629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.959915][ T629] usb 5-1: Product: syz [ 445.998072][ T629] usb 5-1: Manufacturer: syz [ 446.004353][ T629] usb 5-1: SerialNumber: syz [ 446.090445][ T629] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 446.109575][ T629] cdc_ncm 5-1:1.0: bind() failure [ 446.510403][ T9609] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3067'. [ 446.530272][ T536] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 446.680156][ T629] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 446.800184][ T536] usb 4-1: device descriptor read/64, error -71 [ 446.920172][ T629] usb 2-1: Using ep0 maxpacket: 32 [ 447.010117][ T2459] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 447.040243][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 447.051758][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 447.062986][ T629] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.072084][ T629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.080801][ T629] usb 2-1: config 0 descriptor?? [ 447.100359][ T9601] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 447.120806][ T629] hub 2-1:0.0: USB hub found [ 447.210142][ T536] usb 4-1: device descriptor read/64, error -71 [ 447.260160][ T2459] usb 3-1: Using ep0 maxpacket: 8 [ 447.351630][ T9620] tipc: Enabling of bearer rejected, failed to enable media [ 447.410174][ T629] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 447.420324][ T2459] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.490212][ T536] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 447.500224][ T2459] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 447.510153][ T2459] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 447.519940][ T2459] usb 3-1: config 12 interface 0 has no altsetting 0 [ 447.680228][ T2459] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 447.689542][ T2459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.697953][ T2459] usb 3-1: Product: syz [ 447.702288][ T2459] usb 3-1: Manufacturer: syz [ 447.706894][ T2459] usb 3-1: SerialNumber: syz [ 447.730252][ T629] usbhid 2-1:0.0: can't add hid device: -71 [ 447.736274][ T629] usbhid: probe of 2-1:0.0 failed with error -71 [ 447.760141][ T536] usb 4-1: device descriptor read/64, error -71 [ 447.770624][ T629] usb 2-1: USB disconnect, device number 73 [ 447.953350][ T9617] loop2: detected capacity change from 0 to 512 [ 447.992610][ T9617] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 448.003959][ T9617] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 448.089397][ T629] usb 5-1: USB disconnect, device number 90 [ 448.571697][ T9635] loop4: detected capacity change from 0 to 2048 [ 448.876200][ T9642] loop5: detected capacity change from 0 to 256 [ 448.966572][ T9642] FAT-fs (loop5): Directory bread(block 64) failed [ 448.973758][ T9642] FAT-fs (loop5): Directory bread(block 65) failed [ 448.982457][ T9642] FAT-fs (loop5): Directory bread(block 66) failed [ 448.989823][ T9642] FAT-fs (loop5): Directory bread(block 67) failed [ 448.999585][ T9642] FAT-fs (loop5): Directory bread(block 68) failed [ 449.008538][ T9642] FAT-fs (loop5): Directory bread(block 69) failed [ 449.015536][ T695] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 449.024907][ T9642] FAT-fs (loop5): Directory bread(block 70) failed [ 449.033203][ T9642] FAT-fs (loop5): Directory bread(block 71) failed [ 449.041101][ T9642] FAT-fs (loop5): Directory bread(block 72) failed [ 449.047950][ T9642] FAT-fs (loop5): Directory bread(block 73) failed [ 449.074112][ T9642] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.270143][ T695] usb 5-1: Using ep0 maxpacket: 32 [ 449.410456][ T695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 449.445393][ T536] usb 4-1: device descriptor read/64, error -71 [ 449.451861][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 449.465776][ T9635] loop4: p2 < > p4 [ 449.471061][ T9635] loop4: p4 size 262144 extends beyond EOD, truncated [ 449.479002][ T695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 449.507259][ T695] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 449.516694][ T695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.525934][ T695] usb 5-1: config 0 descriptor?? [ 449.550347][ T9638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.574927][ T695] hub 5-1:0.0: USB hub found [ 449.628904][ T536] usb usb4-port1: attempt power cycle [ 449.820216][ T695] hub 5-1:0.0: 1 port detected [ 449.994369][ T9650] loop5: detected capacity change from 0 to 40427 [ 450.601038][ T2459] usb 3-1: selecting invalid altsetting 0 [ 450.607451][ T2459] snd-usb-audio: probe of 3-1:12.0 failed with error -12 [ 450.627768][ T2459] usb 3-1: USB disconnect, device number 89 [ 450.637990][ T9657] loop2: detected capacity change from 0 to 2048 [ 450.692013][ T9657] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 450.706958][ T9657] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.719571][ T9657] fs-verity: sha512 using implementation "sha512-avx2" [ 450.798534][ T9669] FAULT_INJECTION: forcing a failure. [ 450.798534][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 450.811348][ T629] Bluetooth: hci0: command 0x1003 tx timeout [ 450.811375][ T9669] CPU: 0 PID: 9669 Comm: syz.2.3085 Tainted: G W syzkaller #0 [ 450.817517][ T2974] Bluetooth: hci0: sending frame failed (-49) [ 450.826139][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 450.826156][ T9669] Call Trace: [ 450.826162][ T9669] [ 450.826170][ T9669] __dump_stack+0x21/0x30 [ 450.826198][ T9669] dump_stack_lvl+0x110/0x170 [ 450.826217][ T9669] ? show_regs_print_info+0x20/0x20 [ 450.826240][ T9669] dump_stack+0x15/0x20 [ 450.826258][ T9669] should_fail+0x3c1/0x510 [ 450.826277][ T9669] __should_failslab+0xa4/0xe0 [ 450.826300][ T9669] should_failslab+0x9/0x20 [ 450.826318][ T9669] slab_pre_alloc_hook+0x3b/0xe0 [ 450.826339][ T9669] ? getname_flags+0xb9/0x500 [ 450.826358][ T9669] kmem_cache_alloc+0x44/0x260 [ 450.826379][ T9669] getname_flags+0xb9/0x500 [ 450.826399][ T9669] user_path_at_empty+0x30/0x1c0 [ 450.826418][ T9669] ? __x64_sys_umount+0xd4/0x170 [ 450.826439][ T9669] __x64_sys_umount+0xf9/0x170 [ 450.826458][ T9669] ? path_umount+0xfb0/0xfb0 [ 450.826476][ T9669] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 450.826502][ T9669] x64_sys_call+0x8b7/0x9a0 [ 450.826522][ T9669] do_syscall_64+0x4c/0xa0 [ 450.826543][ T9669] ? clear_bhb_loop+0x50/0xa0 [ 450.826562][ T9669] ? clear_bhb_loop+0x50/0xa0 [ 450.826579][ T9669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.826603][ T9669] RIP: 0033:0x7fb728253f79 [ 450.954952][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.975242][ T9669] RSP: 002b:00007fb726caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 450.983933][ T9669] RAX: ffffffffffffffda RBX: 00007fb7284cdfa0 RCX: 00007fb728253f79 [ 450.991950][ T9669] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000001c0 [ 450.999948][ T9669] RBP: 00007fb726caf090 R08: 0000000000000000 R09: 0000000000000000 [ 451.007943][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.015936][ T9669] R13: 00007fb7284ce038 R14: 00007fb7284cdfa0 R15: 00007ffd9fc21678 [ 451.023943][ T9669] [ 451.028068][ T536] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 451.036662][ T9670] tipc: Enabling of bearer rejected, failed to enable media [ 451.045559][ T7714] usb 5-1: USB disconnect, device number 91 [ 451.062744][ T9672] loop2: detected capacity change from 0 to 512 [ 451.114442][ T9672] EXT4-fs (loop2): Ignoring removed oldalloc option [ 451.124487][ T9672] EXT4-fs (loop2): 1 truncate cleaned up [ 451.130711][ T536] usb 4-1: Using ep0 maxpacket: 32 [ 451.136049][ T9672] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 451.260253][ T536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 451.271787][ T536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 451.283417][ T536] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 451.292761][ T536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.310433][ T536] usb 4-1: config 0 descriptor?? [ 451.330579][ T9655] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 451.356276][ T9675] xt_CONNSECMARK: invalid mode: 0 [ 451.370759][ T536] hub 4-1:0.0: USB hub found [ 451.434619][ T9675] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3086: invalid indirect mapped block 234881024 (level 0) [ 451.448754][ T9675] EXT4-fs (loop2): Remounting filesystem read-only [ 451.651524][ T9677] loop5: detected capacity change from 0 to 512 [ 451.670124][ T536] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 451.679412][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3089'. [ 452.632030][ T536] usbhid 4-1:0.0: can't add hid device: -71 [ 452.639763][ T536] usbhid: probe of 4-1:0.0 failed with error -71 [ 452.654953][ T9707] loop4: detected capacity change from 0 to 2048 [ 452.684248][ T9709] fuse: Unknown parameter 'grou00000000000000000000' [ 452.691926][ T536] usb 4-1: USB disconnect, device number 81 [ 452.702791][ T3201] loop4: p2 < > p4 [ 452.709801][ T3201] loop4: p4 size 262144 extends beyond EOD, truncated [ 452.727674][ T30] audit: type=1326 audit(2000000170.010:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.754607][ T30] audit: type=1326 audit(2000000170.010:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.780413][ T30] audit: type=1326 audit(2000000170.010:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.781209][ T9707] loop4: p2 < > p4 [ 452.804594][ T30] audit: type=1326 audit(2000000170.010:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.831647][ T9707] loop4: p4 size 262144 extends beyond EOD, [ 452.831647][ T30] audit: type=1326 audit(2000000170.010:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.831680][ T30] audit: type=1326 audit(2000000170.010:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.837744][ T9707] truncated [ 452.861363][ T30] audit: type=1326 audit(2000000170.010:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb728253f79 code=0x7ffc0000 [ 452.912684][ T629] Bluetooth: hci0: command 0x1001 tx timeout [ 452.918867][ T2974] Bluetooth: hci0: sending frame failed (-49) [ 452.925698][ T30] audit: type=1326 audit(2000000170.050:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb72821484e code=0x7ffc0000 [ 452.949472][ T30] audit: type=1326 audit(2000000170.050:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb728253c0b code=0x7ffc0000 [ 452.973657][ T30] audit: type=1326 audit(2000000170.050:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb728253c0b code=0x7ffc0000 [ 453.025051][ T9723] xt_hashlimit: size too large, truncated to 1048576 [ 453.070101][ T2459] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 453.105296][ T9729] FAULT_INJECTION: forcing a failure. [ 453.105296][ T9729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.118680][ T9729] CPU: 1 PID: 9729 Comm: syz.3.3107 Tainted: G W syzkaller #0 [ 453.127487][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 453.137586][ T9729] Call Trace: [ 453.140901][ T9729] [ 453.143870][ T9729] __dump_stack+0x21/0x30 [ 453.148235][ T9729] dump_stack_lvl+0x110/0x170 [ 453.152942][ T9729] ? show_regs_print_info+0x20/0x20 [ 453.158179][ T9729] ? __stack_depot_save+0x34/0x480 [ 453.163329][ T9729] ? path_openat+0x280e/0x2f20 [ 453.168131][ T9729] dump_stack+0x15/0x20 [ 453.172333][ T9729] should_fail+0x3c1/0x510 [ 453.176791][ T9729] should_fail_usercopy+0x1a/0x20 [ 453.181941][ T9729] _copy_from_user+0x20/0xd0 [ 453.186570][ T9729] __copy_msghdr_from_user+0xc9/0x630 [ 453.191990][ T9729] ? _kstrtoull+0x3c0/0x4d0 [ 453.196560][ T9729] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 453.201893][ T9729] ? kstrtouint_from_user+0x1c4/0x220 [ 453.207431][ T9729] ___sys_sendmsg+0x19a/0x2e0 [ 453.212166][ T9729] ? __sys_sendmsg+0x280/0x280 [ 453.216979][ T9729] ? __fdget+0x1a1/0x230 [ 453.221270][ T9729] __x64_sys_sendmsg+0x206/0x2f0 [ 453.226273][ T9729] ? ___sys_sendmsg+0x2e0/0x2e0 [ 453.231169][ T9729] ? ksys_write+0x1f4/0x250 [ 453.235709][ T9729] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 453.241824][ T9729] x64_sys_call+0x4b/0x9a0 [ 453.246393][ T9729] do_syscall_64+0x4c/0xa0 [ 453.250962][ T9729] ? clear_bhb_loop+0x50/0xa0 [ 453.255672][ T9729] ? clear_bhb_loop+0x50/0xa0 [ 453.260399][ T9729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.266329][ T9729] RIP: 0033:0x7fa59d6e1f79 [ 453.270848][ T9729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.290523][ T9729] RSP: 002b:00007fa59c13d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.298988][ T9729] RAX: ffffffffffffffda RBX: 00007fa59d95bfa0 RCX: 00007fa59d6e1f79 [ 453.307006][ T9729] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 453.315015][ T9729] RBP: 00007fa59c13d090 R08: 0000000000000000 R09: 0000000000000000 [ 453.323026][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.331030][ T9729] R13: 00007fa59d95c038 R14: 00007fa59d95bfa0 R15: 00007ffdd63d50e8 [ 453.339039][ T9729] [ 453.360918][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'. [ 453.410110][ T629] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 453.441794][ T9740] fuse: Unknown parameter 'grou00000000000000000000' [ 453.600271][ T2459] usb 3-1: device descriptor read/64, error -71 [ 453.650203][ T629] usb 5-1: Using ep0 maxpacket: 32 [ 453.770633][ T629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 453.796935][ T9748] loop5: detected capacity change from 0 to 512 [ 453.797192][ T629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 453.814904][ T629] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.824081][ T629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.832931][ T629] usb 5-1: config 0 descriptor?? [ 453.850325][ T9715] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 453.870757][ T629] hub 5-1:0.0: USB hub found [ 453.877350][ T9748] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.888602][ T9748] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.901665][ T9748] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.3114: invalid size [ 454.040241][ T2459] usb 3-1: device descriptor read/64, error -71 [ 454.100185][ T629] hub 5-1:0.0: 1 port detected [ 454.220118][ T333] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 454.283802][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3119'. [ 454.310153][ T2459] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 454.460157][ T333] usb 6-1: Using ep0 maxpacket: 8 [ 454.580375][ T333] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 454.589018][ T333] usb 6-1: config 179 has no interface number 0 [ 454.595466][ T2459] usb 3-1: device descriptor read/64, error -71 [ 454.601860][ T333] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 454.613220][ T333] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 454.625049][ T333] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 454.636444][ T333] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 454.647875][ T333] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 454.661630][ T333] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 454.670753][ T333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.690299][ T9754] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 454.931153][ T629] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input53 [ 454.970189][ T629] Bluetooth: hci0: command 0x1009 tx timeout [ 455.000154][ T2459] usb 3-1: device descriptor read/64, error -71 [ 455.111284][ T9754] FAULT_INJECTION: forcing a failure. [ 455.111284][ T9754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.120774][ T2459] usb usb3-port1: attempt power cycle [ 455.124700][ T9754] CPU: 0 PID: 9754 Comm: syz.5.3116 Tainted: G W syzkaller #0 [ 455.138782][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 455.148850][ T9754] Call Trace: [ 455.152737][ T9754] [ 455.155702][ T9754] __dump_stack+0x21/0x30 [ 455.160038][ T9754] dump_stack_lvl+0x110/0x170 [ 455.164827][ T9754] ? show_regs_print_info+0x20/0x20 [ 455.170039][ T9754] ? format_decode+0x1bb/0x1520 [ 455.174966][ T9754] dump_stack+0x15/0x20 [ 455.179134][ T9754] should_fail+0x3c1/0x510 [ 455.183587][ T9754] should_fail_usercopy+0x1a/0x20 [ 455.188621][ T9754] _copy_from_user+0x20/0xd0 [ 455.193217][ T9754] kstrtouint_from_user+0xd3/0x220 [ 455.198363][ T9754] ? kstrtol_from_user+0x2a0/0x2a0 [ 455.203480][ T9754] ? 0xffffffff81000000 [ 455.207640][ T9754] ? _copy_to_user+0x78/0x90 [ 455.212357][ T9754] ? simple_read_from_buffer+0x10f/0x160 [ 455.218042][ T9754] proc_fail_nth_write+0x8b/0x200 [ 455.223104][ T9754] ? proc_fail_nth_read+0x220/0x220 [ 455.228335][ T9754] ? security_file_permission+0x79/0xa0 [ 455.233885][ T9754] ? security_file_permission+0x83/0xa0 [ 455.239434][ T9754] ? proc_fail_nth_read+0x220/0x220 [ 455.244634][ T9754] vfs_write+0x3f9/0xfd0 [ 455.248877][ T9754] ? file_end_write+0x1b0/0x1b0 [ 455.254364][ T9754] ? __kasan_check_write+0x14/0x20 [ 455.259767][ T9754] ? mutex_lock+0x9b/0x1c0 [ 455.264302][ T9754] ? wait_for_completion_killable_timeout+0x10/0x10 [ 455.271004][ T9754] ? __fget_files+0x2c4/0x320 [ 455.275728][ T9754] ? __fdget_pos+0x2d2/0x380 [ 455.280328][ T9754] ? ksys_write+0x71/0x250 [ 455.284773][ T9754] ksys_write+0x149/0x250 [ 455.289120][ T9754] ? __ia32_sys_read+0x90/0x90 [ 455.293920][ T9754] ? debug_smp_processor_id+0x17/0x20 [ 455.299300][ T9754] __x64_sys_write+0x7b/0x90 [ 455.303910][ T9754] x64_sys_call+0x8ef/0x9a0 [ 455.308427][ T9754] do_syscall_64+0x4c/0xa0 [ 455.312869][ T9754] ? clear_bhb_loop+0x50/0xa0 [ 455.317572][ T9754] ? clear_bhb_loop+0x50/0xa0 [ 455.322271][ T9754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 455.328172][ T9754] RIP: 0033:0x7fd7b352184e [ 455.332601][ T9754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.352354][ T9754] RSP: 002b:00007fd7b1fbbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.361026][ T9754] RAX: ffffffffffffffda RBX: 00007fd7b1fbc6c0 RCX: 00007fd7b352184e [ 455.369036][ T9754] RDX: 0000000000000001 RSI: 00007fd7b1fbc0a0 RDI: 0000000000000005 [ 455.377071][ T9754] RBP: 00007fd7b1fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 455.385084][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.393065][ T9754] R13: 00007fd7b37db038 R14: 00007fd7b37dafa0 R15: 00007fff8575e4f8 [ 455.401078][ T9754] [ 455.407483][ T629] usb 5-1: USB disconnect, device number 92 [ 455.415637][ T7714] usb 6-1: USB disconnect, device number 32 [ 455.430104][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 455.438754][ T7714] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 455.467253][ T9767] fuse: Unknown parameter 'grou00000000000000000000' [ 455.493685][ T9770] loop5: detected capacity change from 0 to 2048 [ 455.511074][ T9770] loop5: p2 < > p4 [ 455.516131][ T9770] loop5: p4 size 262144 extends beyond EOD, truncated [ 455.540167][ T2459] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 455.670136][ T2459] usb 3-1: device descriptor read/8, error -71 [ 455.683775][ T9773] xt_hashlimit: size too large, truncated to 1048576 [ 455.880166][ T2459] usb 3-1: device descriptor read/8, error -71 [ 455.956239][ T7714] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 456.267359][ T9783] tipc: Enabling of bearer rejected, failed to enable media [ 456.380105][ T2459] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 456.450113][ T7714] usb 6-1: Using ep0 maxpacket: 32 [ 456.550231][ T2459] usb 3-1: device descriptor read/8, error -71 [ 456.570546][ T7714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 456.581617][ T7714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 456.592849][ T7714] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.602044][ T7714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.610897][ T7714] usb 6-1: config 0 descriptor?? [ 456.630219][ T9770] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 456.651058][ T7714] hub 6-1:0.0: USB hub found [ 456.707141][ T9785] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 456.820174][ T2459] usb 3-1: device descriptor read/8, error -71 [ 456.940168][ T7714] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 456.940243][ T2459] usb usb3-port1: unable to enumerate USB device [ 457.066920][ T9792] loop4: detected capacity change from 0 to 512 [ 457.141985][ T9792] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 457.156555][ T9792] ext4 filesystem being mounted at /571/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.250219][ T7714] usbhid 6-1:0.0: can't add hid device: -71 [ 457.256231][ T7714] usbhid: probe of 6-1:0.0 failed with error -71 [ 457.290989][ T7714] usb 6-1: USB disconnect, device number 33 [ 457.739411][ T9803] fuse: Unknown parameter 'group_i00000000000000000000' [ 457.760177][ T9805] FAULT_INJECTION: forcing a failure. [ 457.760177][ T9805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.773368][ T9805] CPU: 1 PID: 9805 Comm: syz.5.3135 Tainted: G W syzkaller #0 [ 457.782173][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 457.792364][ T9805] Call Trace: [ 457.795652][ T9805] [ 457.798586][ T9805] __dump_stack+0x21/0x30 [ 457.802928][ T9805] dump_stack_lvl+0x110/0x170 [ 457.807615][ T9805] ? show_regs_print_info+0x20/0x20 [ 457.813222][ T9805] dump_stack+0x15/0x20 [ 457.817394][ T9805] should_fail+0x3c1/0x510 [ 457.821814][ T9805] should_fail_usercopy+0x1a/0x20 [ 457.826841][ T9805] _copy_from_iter+0x21e/0x1070 [ 457.831716][ T9805] ? copy_mc_pipe_to_iter+0x770/0x770 [ 457.837112][ T9805] ? __kmalloc_track_caller+0x13c/0x2c0 [ 457.842697][ T9805] ? __check_object_size+0x2f4/0x3c0 [ 457.848431][ T9805] netlink_sendmsg+0x72c/0xb80 [ 457.853203][ T9805] ? netlink_getsockopt+0x530/0x530 [ 457.858406][ T9805] ? kasan_set_track+0x4a/0x70 [ 457.863185][ T9805] ? security_socket_sendmsg+0x82/0xa0 [ 457.868652][ T9805] ? netlink_getsockopt+0x530/0x530 [ 457.873980][ T9805] ____sys_sendmsg+0x5b7/0x8f0 [ 457.878771][ T9805] ? __sys_sendmsg_sock+0x40/0x40 [ 457.883813][ T9805] ? import_iovec+0x7c/0xb0 [ 457.888329][ T9805] ___sys_sendmsg+0x236/0x2e0 [ 457.893023][ T9805] ? __sys_sendmsg+0x280/0x280 [ 457.897807][ T9805] ? __fdget+0x1a1/0x230 [ 457.902077][ T9805] __x64_sys_sendmsg+0x206/0x2f0 [ 457.907125][ T9805] ? ___sys_sendmsg+0x2e0/0x2e0 [ 457.911992][ T9805] ? ksys_write+0x1f4/0x250 [ 457.916505][ T9805] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 457.922586][ T9805] x64_sys_call+0x4b/0x9a0 [ 457.927016][ T9805] do_syscall_64+0x4c/0xa0 [ 457.931449][ T9805] ? clear_bhb_loop+0x50/0xa0 [ 457.936273][ T9805] ? clear_bhb_loop+0x50/0xa0 [ 457.941081][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.947010][ T9805] RIP: 0033:0x7fd7b3560f79 [ 457.951446][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.971463][ T9805] RSP: 002b:00007fd7b1fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.979890][ T9805] RAX: ffffffffffffffda RBX: 00007fd7b37dafa0 RCX: 00007fd7b3560f79 [ 457.987866][ T9805] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 457.995861][ T9805] RBP: 00007fd7b1fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 458.003838][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.011836][ T9805] R13: 00007fd7b37db038 R14: 00007fd7b37dafa0 R15: 00007fff8575e4f8 [ 458.019820][ T9805] [ 458.520130][ T7714] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 458.655698][ T9821] tipc: Enabling of bearer rejected, failed to enable media [ 458.760196][ T7714] usb 5-1: Using ep0 maxpacket: 8 [ 458.880182][ T7714] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 458.888405][ T7714] usb 5-1: config 0 has no interface number 0 [ 458.971928][ T7714] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 458.981315][ T7714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 458.989610][ T7714] usb 5-1: SerialNumber: syz [ 458.996026][ T7714] usb 5-1: config 0 descriptor?? [ 459.041718][ T7714] usb 5-1: NDI device with a latency value of 1 [ 459.064360][ T9826] loop5: detected capacity change from 0 to 40427 [ 459.086550][ T9826] F2FS-fs (loop5): Found nat_bits in checkpoint [ 459.117355][ T9826] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 459.140130][ T3212] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 459.216289][ T9837] fuse: Unknown parameter 'group_i00000000000000000000' [ 459.260218][ T7714] ftdi_sio 5-1:0.255: FTDI USB Serial Device converter detected [ 459.268968][ T7714] usb 5-1: Detected FT232RL [ 459.290221][ T7714] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 459.310167][ T7714] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 459.330217][ T7714] ftdi_sio 5-1:0.255: GPIO initialisation failed: -71 [ 459.337947][ T7714] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 459.347755][ T7714] usb 5-1: USB disconnect, device number 93 [ 459.353945][ T536] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 459.362743][ T7714] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.372896][ T7714] ftdi_sio 5-1:0.255: device disconnected [ 459.545667][ T9849] loop5: detected capacity change from 0 to 512 [ 459.552114][ T3212] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 459.560897][ T3212] usb 3-1: config 179 has no interface number 0 [ 459.567340][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 459.578818][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 459.826465][ T9849] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 459.852227][ T9849] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.882967][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 459.882985][ T30] audit: type=1400 audit(2000000177.170:1144): avc: denied { mounton } for pid=9848 comm="syz.5.3151" path="/172/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.077035][ T9858] loop4: detected capacity change from 0 to 2048 [ 460.437951][ T9865] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 460.452688][ T9865] SELinux: failed to load policy [ 460.593608][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 460.605095][ T3212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 460.616364][ T3212] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 460.629718][ T3212] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 460.638902][ T3212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.642604][ T9869] fuse: Unknown parameter 'group_i00000000000000000000' [ 460.647054][ T536] usb 2-1: Using ep0 maxpacket: 32 [ 460.663544][ T9858] loop4: p2 < > p4 [ 460.668660][ T9858] loop4: p4 size 262144 extends beyond EOD, truncated [ 460.680175][ T9823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 460.687862][ T9823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 460.769390][ T9874] tipc: Enabling of bearer rejected, failed to enable media [ 460.770520][ T536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 460.788798][ T536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 460.800553][ T536] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.809610][ T536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.818710][ T536] usb 2-1: config 0 descriptor?? [ 460.840277][ T9829] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 460.861168][ T536] hub 2-1:0.0: USB hub found [ 460.929693][ T3212] usb 3-1: USB disconnect, device number 94 [ 460.940127][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 460.950097][ T7714] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 461.424631][ T9878] loop5: detected capacity change from 0 to 40427 [ 461.460179][ T536] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 461.490149][ T7714] usb 5-1: Using ep0 maxpacket: 32 [ 461.498981][ T9878] F2FS-fs (loop5): Found nat_bits in checkpoint [ 461.534337][ T9878] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 461.630371][ T7714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 461.641560][ T7714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 461.652885][ T7714] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 461.662030][ T7714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.670870][ T7714] usb 5-1: config 0 descriptor?? [ 461.690675][ T9863] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 461.711329][ T7714] hub 5-1:0.0: USB hub found [ 461.752624][ T9889] tipc: Enabling of bearer rejected, failed to enable media [ 461.780199][ T536] usbhid 2-1:0.0: can't add hid device: -71 [ 461.786297][ T536] usbhid: probe of 2-1:0.0 failed with error -71 [ 461.831141][ T536] usb 2-1: USB disconnect, device number 74 [ 461.930274][ T7714] hub 5-1:0.0: 1 port detected [ 461.961018][ T9891] loop5: detected capacity change from 0 to 1024 [ 461.980265][ T3212] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 462.012126][ T9891] EXT4-fs (loop5): Ignoring removed orlov option [ 462.018640][ T9891] EXT4-fs (loop5): bad geometry: block count 6422528 exceeds size of device (512 blocks) [ 462.220104][ T3212] usb 4-1: Using ep0 maxpacket: 32 [ 462.272908][ T9900] fuse: Unknown parameter 'group_id00000000000000000000' [ 462.340195][ T3212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.351684][ T3212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.711741][ T3212] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 462.720923][ T3212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.742671][ T3212] usb 4-1: config 0 descriptor?? [ 462.781181][ T3212] hub 4-1:0.0: USB hub found [ 462.851343][ T9896] loop5: detected capacity change from 0 to 131072 [ 462.930977][ T9910] loop2: detected capacity change from 0 to 16 [ 462.943942][ T9896] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 462.961824][ T9910] erofs: Unknown parameter '0x0000000000000003' [ 463.029300][ T9896] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 463.657290][ T9896] F2FS-fs (loop5): invalid crc value [ 463.743127][ T9913] tipc: Enabling of bearer rejected, failed to enable media [ 463.772124][ T695] usb 5-1: USB disconnect, device number 94 [ 463.879588][ T9896] F2FS-fs (loop5): Found nat_bits in checkpoint [ 463.961571][ T3212] hub 4-1:0.0: 1 port detected [ 463.977603][ T9919] loop4: detected capacity change from 0 to 512 [ 464.113044][ T9896] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 464.120310][ T9896] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 464.128536][ T9919] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 464.147525][ T9919] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.284421][ T30] audit: type=1400 audit(2000000181.570:1145): avc: denied { getopt } for pid=9935 comm="syz.4.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.291935][ T9936] loop4: detected capacity change from 0 to 512 [ 464.350159][ T3212] hub 4-1:0.0: activate --> -90 [ 464.361009][ T9936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.373388][ T9936] EXT4-fs (loop4): 1 truncate cleaned up [ 464.379154][ T9936] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 464.404164][ T9936] fscrypt (loop4, inode 18): Unsupported encryption flags (0x08) [ 464.431695][ T9939] fuse: Unknown parameter 'group_id00000000000000000000' [ 464.701155][ T9950] loop5: detected capacity change from 0 to 2048 [ 464.732175][ T3399] loop5: p2 < > p4 [ 464.736727][ T3399] loop5: p4 size 262144 extends beyond EOD, truncated [ 464.746544][ T9950] loop5: p2 < > p4 [ 464.751134][ T9950] loop5: p4 size 262144 extends beyond EOD, truncated [ 464.790765][ T333] usb 4-1: USB disconnect, device number 82 [ 464.820195][ T7713] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 465.030172][ T7714] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 465.060131][ T7713] usb 2-1: Using ep0 maxpacket: 32 [ 465.190168][ T7713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 465.201217][ T7713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 465.212716][ T7713] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.222025][ T7713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.234233][ T7713] usb 2-1: config 0 descriptor?? [ 465.245575][ T9952] loop4: detected capacity change from 0 to 40427 [ 465.250589][ T9947] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 465.270206][ T7714] usb 6-1: Using ep0 maxpacket: 32 [ 465.276032][ T7713] hub 2-1:0.0: USB hub found [ 465.321794][ T9952] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 465.331637][ T9952] F2FS-fs (loop4): invalid crc value [ 465.338517][ T9952] F2FS-fs (loop4): Found nat_bits in checkpoint [ 465.377545][ T9952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 465.390211][ T7714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 465.407348][ T7714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 465.419026][ T7714] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.428237][ T7714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.441165][ T7714] usb 6-1: config 0 descriptor?? [ 465.460331][ T9950] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 465.480176][ T7713] hub 2-1:0.0: 1 port detected [ 465.485655][ T7714] hub 6-1:0.0: USB hub found [ 465.640106][ T536] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 465.724149][ T9972] tipc: Enabling of bearer rejected, failed to enable media [ 465.790374][ T7714] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 465.890291][ T536] usb 4-1: Using ep0 maxpacket: 8 [ 466.051528][ T7714] hid-generic 0003:046D:C31C.0018: item fetching failed at offset 0/1 [ 466.059839][ T536] usb 4-1: unable to get BOS descriptor or descriptor too short [ 466.070509][ T7714] hid-generic: probe of 0003:046D:C31C.0018 failed with error -22 [ 466.140616][ T536] usb 4-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 466.150800][ T536] usb 4-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 466.161114][ T536] usb 4-1: config 12 interface 0 has no altsetting 0 [ 466.321081][ T536] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 466.333079][ T536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.346715][ T536] usb 4-1: Product: syz [ 466.354327][ T536] usb 4-1: Manufacturer: syz [ 466.361691][ T536] usb 4-1: SerialNumber: syz [ 466.372907][ T7715] usb 6-1: USB disconnect, device number 34 [ 466.682161][ T2459] usb 2-1: USB disconnect, device number 75 [ 467.940174][ T2459] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 468.222883][ T2459] usb 2-1: Using ep0 maxpacket: 32 [ 468.360175][ T2459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.377361][ T2459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.397631][ T2459] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 468.416247][ T2459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.440244][ T2459] usb 2-1: config 0 descriptor?? [ 468.500771][ T2459] hub 2-1:0.0: USB hub found [ 468.504182][ T9998] loop5: detected capacity change from 0 to 512 [ 468.522302][ T9998] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 468.522302][ T9998] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 468.522302][ T9998] [ 468.540242][ T9998] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.551057][ T9987] loop4: detected capacity change from 0 to 131072 [ 468.560432][ T9987] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 468.570633][ T9987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 468.589994][ T9987] F2FS-fs (loop4): invalid crc value [ 468.901771][T10006] loop2: detected capacity change from 0 to 512 [ 468.923325][ T9987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 468.932198][T10006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 468.956091][ T2459] hub 2-1:0.0: 1 port detected [ 468.962465][ T9998] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 468.971581][T10006] EXT4-fs (loop2): 1 truncate cleaned up [ 468.977276][T10006] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 468.992630][ T9998] EXT4-fs (loop5): 1 truncate cleaned up [ 469.009797][ T9998] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,i_version,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 469.033897][ T696] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 469.057983][ T696] EXT4-fs error (device loop5): ext4_release_dquot:6261: comm kworker/u4:5: Failed to release dquot type 1 [ 469.095385][ T9987] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 469.102857][ T9987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 469.268714][ T9998] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.3209: iget: bad i_size value: 360287970199339018 [ 469.282231][ T9998] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.3209: iget: bad i_size value: 360287970199339018 [ 469.297025][ T9998] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 469.330704][ T536] usb 4-1: selecting invalid altsetting 0 [ 469.348742][ T536] snd-usb-audio: probe of 4-1:12.0 failed with error -12 [ 469.367249][ T536] usb 4-1: USB disconnect, device number 83 [ 469.413086][ T333] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 469.735787][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 469.750193][ T2459] hub 2-1:0.0: activate --> -90 [ 469.786712][ T7147] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz-executor: bit already cleared for inode 15 [ 469.800069][ T4240] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 469.811782][ T4240] EXT4-fs error (device loop5): ext4_release_dquot:6261: comm kworker/u4:6: Failed to release dquot type 1 [ 469.851193][T10020] tipc: Enabling of bearer rejected, failed to enable media [ 469.860207][ T333] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 469.868514][ T333] usb 3-1: config 0 has no interface number 0 [ 470.030225][ T333] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 470.039423][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.047759][ T333] usb 3-1: Product: syz [ 470.052297][ T333] usb 3-1: Manufacturer: syz [ 470.056933][ T333] usb 3-1: SerialNumber: syz [ 470.066677][ T333] usb 3-1: config 0 descriptor?? [ 470.110748][ T333] smsc95xx v2.0.0 [ 470.174355][ T629] usb 2-1: USB disconnect, device number 76 [ 471.804072][T10060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.811416][T10060] IPv6: NLM_F_CREATE should be set when creating new route [ 471.818674][T10060] IPv6: NLM_F_CREATE should be set when creating new route [ 471.827983][T10061] tipc: Enabling of bearer rejected, failed to enable media [ 471.870180][ T333] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 471.881719][ T333] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.884048][ T30] audit: type=1400 audit(2000000189.170:1146): avc: denied { validate_trans } for pid=10059 comm="syz.3.3217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 471.911511][ T333] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 471.923530][ T333] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 471.962121][ T333] usb 3-1: USB disconnect, device number 95 [ 472.057275][T10064] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3215'. [ 472.321712][ T30] audit: type=1400 audit(2000000189.600:1147): avc: denied { create } for pid=10075 comm="syz.3.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 472.906059][T10100] loop2: detected capacity change from 0 to 2048 [ 472.940844][T10100] loop2: p2 < > p4 [ 472.946639][T10100] loop2: p4 size 262144 extends beyond EOD, truncated [ 473.095165][T10096] loop4: detected capacity change from 0 to 40427 [ 473.171640][T10096] F2FS-fs (loop4): invalid crc value [ 473.191173][T10096] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 473.251947][T10096] F2FS-fs (loop4): recover fsync data on readonly fs [ 473.258827][T10096] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 473.267180][T10096] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 473.300191][ T9226] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 473.630989][T10114] loop5: detected capacity change from 0 to 512 [ 473.650021][T10114] EXT4-fs (loop5): Test dummy encryption mode enabled [ 473.661471][T10114] EXT4-fs (loop5): Can't change test_dummy_encryption on remount [ 473.730113][ T7714] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 473.810817][ T9226] usb 3-1: Using ep0 maxpacket: 32 [ 473.930538][ T9226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 474.000971][ T9226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 474.147541][T10126] fuse: Bad value for 'fd' [ 474.148066][ T9226] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 474.174495][T10127] loop4: detected capacity change from 0 to 2048 [ 474.181729][ T9226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.190889][ T9226] usb 3-1: config 0 descriptor?? [ 474.200621][ T3399] loop4: p2 < > p4 [ 474.205205][ T3399] loop4: p4 size 262144 extends beyond EOD, truncated [ 474.210657][T10100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.220483][T10127] loop4: p2 < > p4 [ 474.225077][T10127] loop4: p4 size 262144 extends beyond EOD, truncated [ 474.232703][ T9226] hub 3-1:0.0: USB hub found [ 474.320119][ T7714] usb 2-1: not running at top speed; connect to a high speed hub [ 474.400212][ T7714] usb 2-1: config 3 has an invalid interface number: 61 but max is 0 [ 474.408450][ T7714] usb 2-1: config 3 has no interface number 0 [ 474.415031][ T7714] usb 2-1: config 3 interface 61 has no altsetting 0 [ 474.450546][ T9226] hub 3-1:0.0: 1 port detected [ 474.520134][ T333] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 474.590375][ T7714] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 474.599633][ T7714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.607873][ T7714] usb 2-1: Product: syz [ 474.612177][ T7714] usb 2-1: Manufacturer: syz [ 474.616796][ T7714] usb 2-1: SerialNumber: syz [ 474.760313][ T333] usb 5-1: Using ep0 maxpacket: 32 [ 474.830147][ T695] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 474.880220][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 474.892703][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 474.903893][ T333] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 474.913170][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.922465][ T333] usb 5-1: config 0 descriptor?? [ 474.940262][T10127] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 474.960922][ T333] hub 5-1:0.0: USB hub found [ 475.210806][ T695] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 475.219901][ T695] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 475.231855][ T695] usb 4-1: config 0 has no interface number 0 [ 475.250485][ T333] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 475.390403][ T695] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 475.399728][ T695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.407847][ T695] usb 4-1: Product: syz [ 475.412226][ T695] usb 4-1: Manufacturer: syz [ 475.416873][ T695] usb 4-1: SerialNumber: syz [ 475.422452][ T695] usb 4-1: config 0 descriptor?? [ 475.531647][ T333] hid-generic 0003:046D:C31C.0019: item fetching failed at offset 0/1 [ 475.540369][ T333] hid-generic: probe of 0003:046D:C31C.0019 failed with error -22 [ 475.612872][ T333] usb 3-1: USB disconnect, device number 96 [ 475.850436][ T9226] usb 5-1: USB disconnect, device number 95 [ 475.900388][ T695] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 475.906908][ T695] usb 4-1: No valid video chain found. [ 476.040807][ T7714] snd-usb-audio: probe of 2-1:3.61 failed with error -2 [ 476.048953][ T7714] usb 2-1: USB disconnect, device number 77 [ 476.104470][ T695] usb 4-1: USB disconnect, device number 84 [ 476.150117][ T9226] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 476.410097][ T9226] usb 6-1: Using ep0 maxpacket: 8 [ 476.540179][ T9226] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.555368][ T9226] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 476.575956][ T9226] usb 6-1: config 179 has no interface number 0 [ 476.583092][ T9226] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 476.594402][ T9226] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 476.605971][ T9226] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 476.626504][ T9226] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.651467][T10163] fuse: Bad value for 'fd' [ 476.656139][ T9226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.700144][T10147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 476.735976][T10154] loop2: detected capacity change from 0 to 131072 [ 476.780109][ T536] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 476.823986][T10154] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 476.835119][T10154] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 476.846939][T10170] device veth0 entered promiscuous mode [ 476.854769][T10170] device vlan2 entered promiscuous mode [ 476.870276][T10154] F2FS-fs (loop2): invalid crc value [ 476.911093][T10154] F2FS-fs (loop2): Found nat_bits in checkpoint [ 476.978925][ T333] usb 6-1: USB disconnect, device number 35 [ 477.011133][T10154] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 477.018395][T10154] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 477.071518][T10181] device sit0 entered promiscuous mode [ 477.079081][T10181] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 477.089039][T10181] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3256'. [ 477.580157][ T536] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 477.591112][ T536] usb 5-1: can't read configurations, error -71 [ 477.595166][T10190] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3259'. [ 477.686814][T10201] fuse: Bad value for 'fd' [ 477.712117][T10203] loop5: detected capacity change from 0 to 256 [ 477.735587][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3264'. [ 477.946281][T10208] loop4: detected capacity change from 0 to 2048 [ 477.962073][T10211] device erspan0 entered promiscuous mode [ 477.980929][T10208] loop4: p2 < > p4 [ 477.995944][T10208] loop4: p4 size 262144 extends beyond EOD, truncated [ 478.162673][T10212] loop2: detected capacity change from 0 to 40427 [ 478.250191][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 478.274011][T10212] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 478.290236][T10212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 478.308287][T10212] F2FS-fs (loop2): fault_type options not supported [ 478.315756][T10212] F2FS-fs (loop2): fault_injection options not supported [ 478.324278][T10212] F2FS-fs (loop2): invalid crc value [ 478.331521][T10212] F2FS-fs (loop2): Found nat_bits in checkpoint [ 478.360136][ T7715] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 478.374965][T10212] F2FS-fs (loop2): Start checkpoint disabled! [ 478.381981][T10212] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 478.389101][T10212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 478.420124][ T333] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 478.500095][ T536] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 478.610075][ T7715] usb 6-1: Using ep0 maxpacket: 8 [ 478.622071][ T696] attempt to access beyond end of device [ 478.622071][ T696] loop2: rw=2049, want=40984, limit=40427 [ 478.730947][ T7715] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 478.749626][ T333] usb 4-1: Using ep0 maxpacket: 32 [ 478.750693][ T536] usb 5-1: Using ep0 maxpacket: 32 [ 478.764531][ T7715] usb 6-1: config 179 has no interface number 0 [ 478.771059][ T7715] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 478.782407][ T7715] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 478.793959][ T7715] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 478.811389][ T7715] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 478.811817][T10239] FAULT_INJECTION: forcing a failure. [ 478.811817][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.825861][ T7715] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 478.838985][T10239] CPU: 1 PID: 10239 Comm: syz.2.3276 Tainted: G W syzkaller #0 [ 478.848477][ T7715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.856063][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 478.856082][T10239] Call Trace: [ 478.856089][T10239] [ 478.856102][T10239] __dump_stack+0x21/0x30 [ 478.856130][T10239] dump_stack_lvl+0x110/0x170 [ 478.856157][T10239] ? show_regs_print_info+0x20/0x20 [ 478.856180][T10239] dump_stack+0x15/0x20 [ 478.856201][T10239] should_fail+0x3c1/0x510 [ 478.891176][T10219] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 478.894939][T10239] should_fail_usercopy+0x1a/0x20 [ 478.900867][ T536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 478.903531][T10239] strncpy_from_user+0x24/0x2e0 [ 478.927693][ T536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 478.932097][T10239] ? kmem_cache_alloc+0xf7/0x260 [ 478.932136][T10239] getname_flags+0xf4/0x500 [ 478.932164][T10239] user_path_at_empty+0x30/0x1c0 [ 478.951478][ T536] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.952665][T10239] ? __x64_sys_umount+0xd4/0x170 [ 478.958117][ T536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.966909][T10239] __x64_sys_umount+0xf9/0x170 [ 478.966944][T10239] ? path_umount+0xfb0/0xfb0 [ 478.966964][T10239] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 478.984653][ T536] usb 5-1: config 0 descriptor?? [ 478.984825][T10239] x64_sys_call+0x8b7/0x9a0 [ 479.004931][T10239] do_syscall_64+0x4c/0xa0 [ 479.009356][T10239] ? clear_bhb_loop+0x50/0xa0 [ 479.010460][T10208] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 479.014141][T10239] ? clear_bhb_loop+0x50/0xa0 [ 479.025802][T10239] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.031758][T10239] RIP: 0033:0x7fb728253f79 [ 479.034019][ T536] hub 5-1:0.0: USB hub found [ 479.036213][T10239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.060437][T10239] RSP: 002b:00007fb726caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 479.068862][T10239] RAX: ffffffffffffffda RBX: 00007fb7284cdfa0 RCX: 00007fb728253f79 [ 479.076877][T10239] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000001c0 [ 479.084855][T10239] RBP: 00007fb726caf090 R08: 0000000000000000 R09: 0000000000000000 [ 479.092836][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.100840][T10239] R13: 00007fb7284ce038 R14: 00007fb7284cdfa0 R15: 00007ffd9fc21678 [ 479.108827][T10239] [ 479.130227][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 479.141416][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 479.152705][ T333] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 479.162052][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.171105][ T333] usb 4-1: config 0 descriptor?? [ 479.204152][T10227] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 479.216370][ T695] usb 6-1: USB disconnect, device number 36 [ 479.259262][ T333] hub 4-1:0.0: USB hub found [ 479.540132][ T333] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 479.777989][ T536] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 479.813175][ T333] hid-generic 0003:046D:C31C.001A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 479.836833][T10254] udevd[10254]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 480.082887][T10271] FAULT_INJECTION: forcing a failure. [ 480.082887][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 480.095616][T10271] CPU: 1 PID: 10271 Comm: syz.5.3285 Tainted: G W syzkaller #0 [ 480.104753][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 480.114845][T10271] Call Trace: [ 480.118153][T10271] [ 480.121113][T10271] __dump_stack+0x21/0x30 [ 480.125470][T10271] dump_stack_lvl+0x110/0x170 [ 480.130173][T10271] ? show_regs_print_info+0x20/0x20 [ 480.135399][T10271] dump_stack+0x15/0x20 [ 480.139581][T10271] should_fail+0x3c1/0x510 [ 480.144027][T10271] __should_failslab+0xa4/0xe0 [ 480.148817][T10271] should_failslab+0x9/0x20 [ 480.153349][T10271] slab_pre_alloc_hook+0x3b/0xe0 [ 480.158322][T10271] kmem_cache_alloc_trace+0x48/0x270 [ 480.163633][T10271] ? bpf_prog_alloc_no_stats+0x9a/0x2d0 [ 480.169204][T10271] ? __vmalloc+0x79/0x90 [ 480.173484][T10271] bpf_prog_alloc_no_stats+0x9a/0x2d0 [ 480.178891][T10271] bpf_prog_alloc+0x1f/0x1e0 [ 480.183509][T10271] bpf_prog_load+0x822/0x1640 [ 480.188213][T10271] ? map_freeze+0x360/0x360 [ 480.192746][T10271] ? irqentry_exit+0x37/0x40 [ 480.197365][T10271] ? audit_tree_destroy_watch+0x20/0x20 [ 480.202942][T10271] ? security_bpf+0x82/0xa0 [ 480.207474][T10271] __sys_bpf+0x51d/0x7d0 [ 480.211837][T10271] ? bpf_link_show_fdinfo+0x330/0x330 [ 480.217248][T10271] ? __kasan_check_write+0x14/0x20 [ 480.222402][T10271] ? switch_fpu_return+0x15d/0x2c0 [ 480.227549][T10271] __x64_sys_bpf+0x7c/0x90 [ 480.231987][T10271] x64_sys_call+0x4b9/0x9a0 [ 480.236516][T10271] do_syscall_64+0x4c/0xa0 [ 480.240961][T10271] ? clear_bhb_loop+0x50/0xa0 [ 480.245666][T10271] ? clear_bhb_loop+0x50/0xa0 [ 480.250400][T10271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.256330][T10271] RIP: 0033:0x7fd7b3560f79 [ 480.260779][T10271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.280410][T10271] RSP: 002b:00007fd7b1f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.289006][T10271] RAX: ffffffffffffffda RBX: 00007fd7b37db180 RCX: 00007fd7b3560f79 [ 480.297040][T10271] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 480.305081][T10271] RBP: 00007fd7b1f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 480.313444][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.321456][T10271] R13: 00007fd7b37db218 R14: 00007fd7b37db180 R15: 00007fff8575e4f8 [ 480.329463][T10271] [ 480.548201][ T414] usb 4-1: USB disconnect, device number 85 [ 480.610145][ T536] usbhid 5-1:0.0: can't add hid device: -71 [ 480.620517][ T536] usbhid: probe of 5-1:0.0 failed with error -71 [ 480.660687][ T536] usb 5-1: USB disconnect, device number 97 [ 480.783168][T10290] FAULT_INJECTION: forcing a failure. [ 480.783168][T10290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.796594][T10290] CPU: 1 PID: 10290 Comm: syz.1.3293 Tainted: G W syzkaller #0 [ 480.805491][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 480.815580][T10290] Call Trace: [ 480.819005][T10290] [ 480.821980][T10290] __dump_stack+0x21/0x30 [ 480.826352][T10290] dump_stack_lvl+0x110/0x170 [ 480.831059][T10290] ? show_regs_print_info+0x20/0x20 [ 480.836391][T10290] ? __stack_depot_save+0x34/0x480 [ 480.841539][T10290] ? path_openat+0x280e/0x2f20 [ 480.846338][T10290] dump_stack+0x15/0x20 [ 480.850533][T10290] should_fail+0x3c1/0x510 [ 480.854990][T10290] should_fail_usercopy+0x1a/0x20 [ 480.860054][T10290] _copy_from_user+0x20/0xd0 [ 480.864672][T10290] iovec_from_user+0x1bc/0x2f0 [ 480.869438][T10290] ? __copy_msghdr_from_user+0x329/0x630 [ 480.875077][T10290] ? _kstrtoull+0x3c0/0x4d0 [ 480.879582][T10290] __import_iovec+0x71/0x400 [ 480.884182][T10290] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 480.889504][T10290] ? kstrtouint_from_user+0x1c4/0x220 [ 480.894912][T10290] import_iovec+0x7c/0xb0 [ 480.896527][T10292] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3294'. [ 480.899282][T10290] ___sys_sendmsg+0x1fd/0x2e0 [ 480.912925][T10290] ? __sys_sendmsg+0x280/0x280 [ 480.917741][T10290] ? __fdget+0x1a1/0x230 [ 480.922034][T10290] __x64_sys_sendmsg+0x206/0x2f0 [ 480.927018][T10290] ? ___sys_sendmsg+0x2e0/0x2e0 [ 480.931901][T10290] ? ksys_write+0x1f4/0x250 [ 480.936455][T10290] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 480.942562][T10290] x64_sys_call+0x4b/0x9a0 [ 480.947141][T10290] do_syscall_64+0x4c/0xa0 [ 480.951602][T10290] ? clear_bhb_loop+0x50/0xa0 [ 480.956457][T10290] ? clear_bhb_loop+0x50/0xa0 [ 480.961177][T10290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.967118][T10290] RIP: 0033:0x7ff22ec1bf79 [ 480.971569][T10290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.991395][T10290] RSP: 002b:00007ff22d677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.999850][T10290] RAX: ffffffffffffffda RBX: 00007ff22ee95fa0 RCX: 00007ff22ec1bf79 [ 481.007866][T10290] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 481.015914][T10290] RBP: 00007ff22d677090 R08: 0000000000000000 R09: 0000000000000000 [ 481.023953][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.031990][T10290] R13: 00007ff22ee96038 R14: 00007ff22ee95fa0 R15: 00007ffe78216c58 [ 481.039995][T10290] [ 481.050348][ T7715] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 481.063707][T10296] xt_hashlimit: size too large, truncated to 1048576 [ 481.119916][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3300'. [ 481.410114][ T7715] usb 3-1: Using ep0 maxpacket: 8 [ 481.557593][T10322] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3302'. [ 481.812544][ T7715] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 481.837492][ T7715] usb 3-1: config 179 has no interface number 0 [ 481.845917][ T7715] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 481.859199][ T7715] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 481.873615][ T7715] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 481.885806][ T7715] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 481.904391][ T7715] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 481.939539][ T7715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.615377][ T7714] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 482.640133][T10284] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 482.656970][T10335] binder: 10334:10335 ioctl c018620b 200000000240 returned -14 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 482.687886][ T30] audit: type=1400 audit(2000000199.970:1148): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14526]" dev="pipefs" ino=14526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 482.812983][ T45] tipc: Resetting bearer [ 482.818833][ T338] tipc: Disabling bearer [ 482.827673][ T338] tipc: Left network mode [ 482.870865][ T414] usb 3-1: USB disconnect, device number 97 [ 482.880184][ T333] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 483.020172][ T7714] usb 4-1: device descriptor read/all, error -71 [ 483.611307][ T338] device bridge_slave_1 left promiscuous mode [ 483.617452][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.625366][ T338] device bridge_slave_0 left promiscuous mode [ 483.631543][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.639739][ T338] device veth1_macvtap left promiscuous mode [ 483.645852][ T338] device veth0_vlan left promiscuous mode [ 484.377502][ T338] tipc: Left network mode [ 484.382290][ T338] tipc: Disabling bearer [ 484.387647][ T338] tipc: Left network mode [ 484.392328][ T338] tipc: Left network mode [ 484.396972][ T338] tipc: Left network mode [ 485.291451][ T338] device bridge_slave_1 left promiscuous mode [ 485.297729][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.305676][ T338] device bridge_slave_0 left promiscuous mode [ 485.311971][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.320164][ T338] device bridge_slave_1 left promiscuous mode [ 485.326321][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.334257][ T338] device bridge_slave_0 left promiscuous mode [ 485.340498][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.349695][ T338] device bridge_slave_1 left promiscuous mode [ 485.356216][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.363911][ T338] device bridge_slave_0 left promiscuous mode [ 485.370331][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.378447][ T338] device bridge_slave_1 left promiscuous mode [ 485.384689][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.392372][ T338] device bridge_slave_0 left promiscuous mode [ 485.398589][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.407693][ T338] device veth1_macvtap left promiscuous mode [ 485.413861][ T338] device veth0_vlan left promiscuous mode [ 485.419992][ T338] device veth1_macvtap left promiscuous mode [ 485.426076][ T338] device veth0_vlan left promiscuous mode [ 485.432265][ T338] device veth1_macvtap left promiscuous mode [ 485.438275][ T338] device veth0_vlan left promiscuous mode [ 485.444674][ T338] device veth1_macvtap left promiscuous mode [ 485.450729][ T338] device veth0_vlan left promiscuous mode