last executing test programs: 2m58.607905835s ago: executing program 0 (id=72): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x4, "cfa1"}, {0x0, 0xf, "7c1d4c66fab6fca6f91154e7d3"}, {0x0, 0x7, "6580a5e976"}, {0x0, 0x6, "73bc2300"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000403400000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.904601744s ago: executing program 0 (id=73): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x4, "cfa1"}, {0x0, 0xf, "7c1d4c66fab6fca6f91154e7d3"}, {0x0, 0x7, "6580a5e976"}, {0x0, 0x6, "73bc2300"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="0000000000b5e91c5523c135ec0000000000000000000000000000000000000000000000b44d4dbe674a8bc0c94ca0bfb40e2751f3fa65606207b75c9942b8b559fea30cca762322d1712e0791e6aa6ab2aa7bfa0be6e0c29422ec78f7090c1a9d4b84836483136299c9ed4abe6d71da508abb158dbdb8a2689ce52935d94b506e0bb3a15faefcecf7953da2c5edbcc4edf2043294da5f34439a80b6db8f4c8b537e87c8f93b22570d1b76de8b961d31fcf8c23328b8c2c2abb908165ebf"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) 2m56.331198397s ago: executing program 0 (id=77): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$eJzs3T1rU1EYB/Dn3rbJjYvZBFE44OIgRV1dKlJBDAhKB50Uqksrgl2iS/sx/IB+AOkUBLnS3qS3jUbTNMn15febnnv+PW/lkGTJyctrb3e23+29+XzlUxRFFvlGbMQgi27kMXIQE+WTIwDgTzUoy/hSVppeCwCwHFO8/3/7RfcssgUtDABYmGfPXzy+3+ttPk2piDgsL1fNB/2tqnj4qLd5Ox3r1r0O+/2tlZP8Thr/7HCUr8WlYX636p/O5q24eSNirRURKaUHT3pjeTu2F7hvAAAAAAAAAAAAAAAAAAAAAABo0vVII92IW/eq1vp+n/X10/mRzjCvnk7dDzR2f89qXF0dPtbXA5X7y9oYAAAAAAAAAAAAAAAAAAAA/EX2PnzcebW7+/p9XbQj4mzLeYpsOPBxy8qoOP84SyrymPvIc9tye/H/hOJnB6AuWvOZq/ObE5XN+5Ckmbt/vdDhHy9m3FcrIi40ez45GpRlOeUxHmk39eIEAAAAAAAAAAAAAAAAAAD/mfpLvz9mRRMLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG1L//P0OxHxFT/PHJZJ1GtwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7HsAAAD//x9CK0M=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x60}, 0x0) r6 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) 2m54.486893787s ago: executing program 0 (id=86): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x34, 0xffffffffffffffff, [{0x0, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x5, "cfa11c"}, {0x0, 0xf, "7c1d4c66fab6fca6f91154e7d3"}, {0x0, 0x8, "6580a5e97612"}, {0x0, 0xa, "73bc2300ad9d19a3"}, {0x0, 0x2}]}, @cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "7f36c5"}]}]}}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) r0 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000b5e91c5523c135ec0000000000000000000000000000000000000000000000b44d4dbe674a8bc0c94ca0bfb40e2751f3fa65606207b75c9942b8b559fea30cca762322d1712e0791e6aa6ab2aa7bfa0be6e0c29422ec78f7090c1a9d4b84836483136299c9ed4abe6d71da508abb158dbdb8a2689ce52935d94b506e0bb3a15faefcecf7953da2c5edbcc4edf2043294da5f34439a80b6db8f4c8b537e87c8f93b22570d1b76de8b961d31fcf8c23328b8c2c2abb908165ebf"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 2m54.317738928s ago: executing program 0 (id=87): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) pipe2(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16], 0x0) 2m51.473641832s ago: executing program 0 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x60}, 0x0) r6 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) 2m35.966911844s ago: executing program 32 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x60}, 0x0) r6 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) 9.876086699s ago: executing program 2 (id=516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x60}, 0x0) r6 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) 7.373687032s ago: executing program 2 (id=525): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x24008000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 7.357569832s ago: executing program 5 (id=526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0x60}, 0x0) r5 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) 5.991168479s ago: executing program 1 (id=531): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x1, 0xfe00, 0x8000c62) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r8, 0x1, 0x1, 0x800007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x2) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 5.930921289s ago: executing program 1 (id=533): getpid() (async) r0 = getpid() r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") (async) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") sched_setscheduler(r0, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000500000003000000000000110300000000000000000000000000000400000000000000000100000400000000ffffffff02000000000000000000002e00"], 0x0, 0x51}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) (async) r11 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$khugepaged_scan(r11, &(0x7f0000000080), 0x8) (async) write$khugepaged_scan(r11, &(0x7f0000000080), 0x8) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5.488843582s ago: executing program 1 (id=534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) fcntl$lock(r0, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r6, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5.385503642s ago: executing program 3 (id=535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000687b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r2], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.095251224s ago: executing program 2 (id=536): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x6c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000080)) (fail_nth: 3) sendmsg$netlink(r7, 0x0, 0x0) 5.085433824s ago: executing program 5 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec663189d3348bf13f872a468352b72482b5b2b364a29c6f0f2c4e741bf6457d1418455e157253231681a3889f39b3da6b60dbe404cb9a145d0d49cfd1668a32b96ff302975748993a8a534144d211c681ff3d91ffa436d40b9afe648ec8bde2f7553fb5d3f3b8423873903abd024284bfd01511c149b6101851f7aae4675df76e7d32d7b91659e4adcc14ddfff8a2b49d1393de72b9d970ee7f45a755c1d9f7b4d43e37e17d6eaff5fe352d507eb0424ab937980ae8fae8a9062b651a53b6543733e259ee3083a308a78ac50f0972629b74e6aadefedf2352d024d8f27d4bc8703493b08bbe75e34ee5796d0d275cae3d3c0eba179e145feee0c8acc98af7888a374dbe705e058fc565e40677890a39e6999ae47202a9237803e9eee30f368725ca8571a8f6a8ba396905f4f023a60acb644bab6b0b8964aa514c37f23509c685648d6adb0e230aca690c91e664bc49fa30ae42a2c71abc7517181d4157ef996628b3624f367519970366acca85d399e2c7703930e2abd4bdbac076230ad16368ccb350357d57626ea47a15f0fa16bd5efa8233fa3ea1183da730204a455a673c783c10a26411c5de816699f7af3401b9f38592a4cd9f3f0b7de18cd69f831eee87a3d2edb64ecf517d201f32f86b80fcd3287330f286465260370527e6116df0651001405563622e14af715f6c3dd10e1986e3b95ebf618ff42bdd7a74f0d0cc2cc8dab1048eb5fdbfb72cb16f9e2a196b512720cbfbb4696f291200a153c383cc441091c62649a88ef173a42eced93a374e4f0a078244e56c14b3c4cc9625b3e9e1853839ecb00d6cfc2d2398634935aedd9a545e4b13895a3b8b05c8fca9af2bba82762db85a449f5d9c6ff87b724f19dc1805eca58445e67782a30f03e7b1272685ab8306c255604360b0d6e53cc443b0b81bcf92b470b8734b7b7b2ccf2d51fc1a8b43d8dba290e875f35b0bdb66790a3bb4d8391c5fdde5f461b5922c56f8a858865c0fd8b39cb79e8e182342ef0398641ca3c76620482705878ff0d9fe2eaae18a8ad73313663e36feca9bae81834482bb19c651e273bc04333963f2a64d516761280db45fc4217b5c2ab73a8a04c5d2c2aced37bb2825d17f68c4d65dfcc54057a46f045bf435391b7304ee376977220e71e97919cd67e3f0f0f63e0dcee8d90d80ead12a5eda22db217bd362c1a4f9244c99da91d618c6b71b21ed80826d4df95aee10786e61b3141002e342490f2d842051305d2e8d41aca580a13cd48a850eada7dfee4bda67a5491acf4cfdd3919135e7b113a1973595b99d6ba152ae8cc63fd95c1d7d4a59b038c426ffdb949fe1a6004df2bbae2acce3f5720419dc597229f2d120c689b07a344e75f4c631d83b3130cc927412daa9607c8c0fa254cde27306360a9a5d18ff9d4d4ed38162a5202ba214db4486887b5831d727bd93e6e7cddfa4d3480cb3b4683b1de52bdff534016719324051f81bdf49a5c12dd7b389107b3eb5dc4858caebe8c0a9866ff632deebc16492f95d202ce0f454476ab77871d3188ec83fc74f2ec1055893b2a138cce27ac5553c5496cbf147002a9c55fdb202969a4802ca3556453a58d2aa8e19f40e577fa280625468d385af8659a0f3ab69fabf4fa1326f7a7ebad98a23958c91f28c4b03ff9f343b6ecdb82e820bcb7de6f51d0fcfbbcef902d21a7eed03ea125363b758085022ade27451ba5e0acd9a0044ec50571d234855448be132e14517ae38b798482cc07e1c009c1a4cdd5c42f3862dd6d4c3b18f9c41d0bf5b709d742877ef7ee6d9932c6d7a9fd09bede9f80645a5c4b97ae48734985131f948bf20e93f82b93d6e69479491158d83655244d91bb5e9dfdf103e2238a95a92f35750769b87dce1d0e8bac4e6ee5467f9800a12fe27a2c8f727bbda617899ca26d13ec3b68b4acd7200b3206852aafb13c94681413ee7d0987f4d067b4bc5fc5e01ebe9bdbfc0198232f92da3371d12023388f86a4bb4db9bd559570aef27a96812dd2583c72732922266b98c89c264311577621ceb2625dac0af0fd08f5c27a658645777cb36d687d6f0e6835587cbe65ed922cbd1190b1d60259024be61e7e32b1ecb5e72799103c3a3ea91191667418fedf79d839200ee75da4d68fd6facdd1243f30727c40c6a7c4ffa3d937f4c21b076d146f439d8961258526d56336f7d94e945f90053ef865dd9f939b12d8b6b72b1f20a050b69b8a3b8bc88584766bf9783116c8fc8c4883f8dca31dbfd2775675d868136e5f5e16e3508986750fa8825231fed43ae2b444f5992011f0b80b1f3b0e397ff98fe81da3bd00593329f3014315fb4828fdfec77c8f3c8a92278866f7d299f9a0818e36d1bbad629a61345e01e495dfc4412fcc8b64eac5259de21dae5f5b34c06ee81c0e46b12203b639cfef7f12871287abca6b2f70ffa2cb225585bfbf2c0cd010bdd1b2b3f560016e4db6c30a26e517b608633aa40ab1802da8e94188bad14ab007e415ec41c3dabf4d2817a43a082313529e4a80596807b785af9391117f780db637f2214bb8082373303da889ffd89fa43f4cca427b43e3c17942d314a577112cfb31e841ae40fd18220e9aaa24e382936c0b859a3a425c2018b093e42648b7517dcce9af1366dc5ea8fd575001cbe880ddbb0a768033ee3802c68c4b2fc290fcb84f1e33318543fd2ddf065503c0767c86fcde6931797f275ee4c149d616ff02a9a019c223c16cfd6e618b07c7bd8009d3201a92b91a0944ff21d71ffc53c39b7a318c6451d80b05f9d9c81fd1a78ef35e14cbebc1b4e2de28039301042c0fa09ad2e43d5f78ab4104218bab2da5034050bbf625c6803496dd3d77b574aed51badd3e9967548014b8b318dfb2e0a6ce6637cee786806ec06b359d6569c65df2e538b43862be27d4ddb2710447ed7e56cb4a02779c8767e11056cfaca1ab1aea20d4198a050e98695ae3f2a0aadb5b34b6b945379b81259ebe7abe6d3ca23cae048429b6c850813706f59231034fce07c4111961193d581e3bbbd6c9afd8b3d1e0604807dbd880d2ccc5266818a18287e8c4bda311be83c6f1c5e7f571b9f5ab1f84f8252df9d62f75865adcdd61eaaf7df4cbdd994ab17d2d5d684f95715d4636a6cb69fa2619c6b76ee060202a0a8c934aa537d2c5cf736142349b19fb9b532b05e6dff05c4c635f4134bcc0ef2e38c3fd75d8664d7dfa3139e1b2c2cbbdbe4fc0e2e80870ade368b730d4c06946b608088991f346765afaad6765e5a16267b2d249ee22ea1c6cb85d5d0f8ee48204a5dc48ae6415e3802fd8a431d249f95c72f6895978b36c424e40f83dfe1d0ca01dca14c4a308e926fe726ea0b456dcd976147e61744675f81f38bd5ef06ed76692ac8ac03744c8dc313f06aa28832a3286e626d5e29c748c21164475c739d3f6c6ad046fbb1a149867faf770c089b3513a0649d787208f06e7db6f8a44a9e32c6bd8dd9cca53bcd8ba7ec49d4068d7018b4c8fbd13070f9b0d02d3686b54f96a21e74e346c380a99f21f33925d4a39d510842ed84f2605a15051a784d8216364c2f8ec79f7884ec151ac56d11e30e058d2c49998147c1d54e04aea5d2e9bcc5bf051690d7aa905fdd68528309afda3fd5920cecfae73f6d5f8962e647f5e909748ff9105097118feecf28d6d514ede8cb2d4201da6efc9f3c24893570b227dfe673158e6c17bfcd91625bc4f87eb6fc67e5b647b18231da1da165220815b24431144fc05e1e207e12dbd9e26254d61bc9f47e4ec7e5e19a58ea2444e97a6daf57c895ec35c497d84e2f0c2e520e123f3cadf380a7e54836f7b5a9ba24b1bbe690b7f3de459adbe4d80a648ac2d8158e8b0948ea6ec4b8ac3ce4dafc8ed0f709c13a5ada9fa6c254b57e3cc83411e26dacb6aee290ced0bd65f18884b33dfd1229acd273f97d3edf7673747193ececc83e9ba1e1a73ceb8c347ac88333308df5e4d9ea133e2c6fa4bb1489980cf8ce20201bbba6334936fbc6bb7e6495ba48a3648fe57a0957de758182d3248601ab2bc9d2edf826255d5774021ae4d5d7f87a18927ac866b24e9fa2ca4fb5623c9e0ccbe491a61566f5f649047f97db9cea177ce08ec58c28e7e174f427b38c2e3c2d7165b321eeffe4fc03e8acc2c0ba7520699e8f6480261de487e33d3169790024cec06e3d776c98ccbc5da2ec0032c8241bedea3db12687a82e1eafa4ff828f5347e8ae0b22bcfa5de853d05381a04e8eb953a54c5ebb528bc03d4f7d74b1741f7833a7b90456ff847619b5893bd1515ed87cfd9aa44208572d1578849d5e7310b29e4a5af6026d9d5d2d6c18cc222fa375bc756e86d30a673420c4ac99c0b0a6baadd5bb53bf161074e85b105d5c8f704ea4fef269b3e2d62dc9e494393957a9aba76d7a7c79a1f37a9c0b20a69c47f74b489a8d60bb017272497f2cc7e3dd85a6622c0c1038978ca44170229f1ef25d11d2757940a5b6d35eab977937a5cccfb979dd79accb86476ae7da6fa96527a0ad6a7613c9008fd3cb2cbf81d7be93304dab9059c38cb54a191118bdf39148f6a7e44eca45272a3a2f1812ab6ac72f3009c235abcfe300a5599340b7baa1d6b07797a8fc29533b1d39b24642a867cc188327927d224045bb65e47238f7e260dbe81e2fdd8dac3f3da3724817975e008e0ccbfd958fec78f01cd6cf9d46594513d8a67c9ff5d1f745a7b1b82ee0d1b0babcbea6d4334f8f474c0f1d438d80da71e1158865621613cb9eb1b08f224fca3c26ed879fb13a7148d7a65ea7d2364b71568e2b56e7ab492866ff1d9f0d83647682fd3a31ca4c3735ed4accb26d45e9b26f80856a287fdd42a12de98d1b5d4f2278dd78a8b287a18d8edd003d338049214faef3d6c17b3117da3e1c60715480e1739b52ac39265803d5d6019559d028bbc2c874071c021c581458c67aea919e14db399a54314b1d734eaeafee4844ee9c208887b1c4b7c475997146ccd5f6df48262ab997fc0e5f3ef5e68506fd1d9835b7028c22933024dd9ea325dbb1f8172f9c564b973a1668fb8b566e484a6f821c7bf709aecc0794a71ecc8bcf2fd5ac8d0c76b19f4ce02fefa9780549df3f606a0e520b059f95cb4f749b8c9204f1a052a588ce8ccc519a89e5444aec50739e92a914782bd1c991ae6e403aec0655570e1f90d921695548a645c317d9c13d36da32f86bb104d4b36b66b1e766731dfca460354bd9194e90523afc4e36d9aadd8dc777cfe26c955dcf57736139668b29f4c8ad197050737ebba3d55eb30cc94bdc3a1e28c3573a98ca4d5502d9893755cf2dfec4843fa39eb0a9948b6589eceebfe750b2db0", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0x60}, 0x0) r5 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) 4.236011348s ago: executing program 2 (id=539): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) fcntl$lock(r0, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30, 0x43410}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x6}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}, 0x1, 0x0, 0x0, 0x44841}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.235510108s ago: executing program 1 (id=541): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x60}, 0x0) r4 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) 3.755533171s ago: executing program 4 (id=542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000687b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) (fail_nth: 2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.755287541s ago: executing program 4 (id=543): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xac, 0x65, 0x200, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_ACT={0x54, 0x1, [@m_connmark={0x50, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) 3.369517763s ago: executing program 3 (id=544): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/vlan/config\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x83e947aeb50ae75e}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa0, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000fe0e93fe7b497dc09454d48fe9d17aa9500d50337f69ca157a68abcda88b16dc2b157695519023eff49a6665e270db67822a525fb4c859a4c4210fab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1, 0x4, 0xd) 3.368499903s ago: executing program 2 (id=545): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x7fff, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x8001, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x40, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x1, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x4, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0xf, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0x7, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x3, 0x2, 0x3, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x5, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socket(0x11, 0x80000, 0x3) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000980)='./file1\x00', 0x0, 0x0, 0x400) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x80000009}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000840}, 0x8810) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe4}}, 0x0) 3.310926073s ago: executing program 3 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "c54f8ce83935ab4a5ce0935d035c17f52e65dab700d00508002e86025a6175e59f4dca5cfb2f6619c1156ab58fc22d0800", 0x30}, 0x48, 0xfffffffffffffffc) keyctl$update(0x2, r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f0000000500)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000003040)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aab9365394fc37547066b9b86f5eee4151566e1f2d9da24dfbad02f371086103d0a388ec02d6884f964937204cae8951ae84bf5ecf667bf8a9b560e51593793a9fefb3cd2f240dc36c483d660b137749a4fc7161dd4b4a0c1a4b7b6db6687629d123dfc45ae2"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000040), 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r10, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x0) 3.276106873s ago: executing program 3 (id=547): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pivot_root(0x0, 0x0) (fail_nth: 2) 3.252721213s ago: executing program 5 (id=548): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x12, 0xfffffffffffffffe, &(0x7f0000000040)=0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.176454554s ago: executing program 5 (id=549): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) fcntl$lock(r0, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r6, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.895926555s ago: executing program 3 (id=550): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x7fff, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x8001, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x40, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x1, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x4, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0xf, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0x7, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x3, 0x2, 0x3, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x5, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socket(0x11, 0x80000, 0x3) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000980)='./file1\x00', 0x0, 0x0, 0x400) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x80000009}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000840}, 0x8810) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 2.895686435s ago: executing program 4 (id=551): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") chmod(&(0x7f0000000040)='./file0\x00', 0xce) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_ext={0x1c, 0x21, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff07000000000000c900710018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000054933ffff0ffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018250000", @ANYRES32, @ANYBLOB="00000000f50000008520000003000000186b00000600000000000000dc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x33, &(0x7f0000000f00)=""/51, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xb34d, r1, 0x0, &(0x7f0000000f80)=[0xffffffffffffffff]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001080)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x6c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES8=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.328296118s ago: executing program 5 (id=552): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="020025bd7000ffdbdf"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x24008000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 2.282106648s ago: executing program 2 (id=553): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="020025bd7000ffdbdf"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x24008000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 2.0857113s ago: executing program 1 (id=554): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) fcntl$lock(r0, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30, 0x43410}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x6}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}, 0x1, 0x0, 0x0, 0x44841}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.753902581s ago: executing program 4 (id=555): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x60, 0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000006c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@utf8no}, {@utf8no}], [{@uid_gt={'uid>', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x19}}, {@appraise_type}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'cp865'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") 1.052019565s ago: executing program 1 (id=556): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000340)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\'-!^'}}, {@obj_user={'obj_user', 0x3d, 'tl\x85b_flush\x00'}}, {@audit}, {@permit_directio}]}, 0x81, 0x57d, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x2, 0x200, 0x2, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000002c0a0104fcffe9ff800000000000000027279e46a8be5ec16fceb99f4670f081fe5cab9e1bf72b4e017db047df72aed0b94633da14309f2e3c5c01d34c5d0bb5adcf3853f15a222481af501f2d3dfbb2cd454273d89485a71968250869f917ed932e470785e25e71610a47a500336600d9cc790f78ccc44a275c56aeadd177cea9d6680f58c71ac908748ba964b121f321b6fac4145e7ff1709c9a775f03266c327f7830b497f5f6b44a49d3fe4f09a8", @ANYRES32=0x0, @ANYBLOB="03440200000000001c0012800b0001006d616373656300000c00028005000c007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x15) pwrite64(r0, 0x0, 0x0, 0x9000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open$dir(&(0x7f0000000300)='./file1\x00', 0x1314c0, 0x101) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x30000009}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r9, 0x4, 0x42000) read$FUSE(r9, &(0x7f0000006100)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) socketpair(0x27, 0x801, 0x5, &(0x7f0000000140)) 982.725865ms ago: executing program 3 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000003040)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_emit_ethernet(0x3c, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x6, 0x2c, 0x0, @local, @local, {[], "b9365394fc37"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (fail_nth: 4) 315.097829ms ago: executing program 4 (id=558): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='./file0\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x10}, 0x78, r2}) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 210.421779ms ago: executing program 4 (id=559): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=0x0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000e90b000000b7000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=560): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x38, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) kernel console output (not intermixed with test programs): p2): Test dummy encryption mode enabled [ 187.879764][ T1700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.939971][ T450] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.004778][ T1705] syz.4.355[1705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.004851][ T1705] syz.4.355[1705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.017698][ T1705] loop4: detected capacity change from 0 to 128 [ 188.193917][ T1706] loop5: detected capacity change from 0 to 512 [ 188.229121][ T1706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.238363][ T1706] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.339940][ T539] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.380975][ T450] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 188.389102][ T450] usb 2-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 188.399407][ T450] usb 2-1: config 0 has no interface number 0 [ 188.406820][ T450] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 188.415879][ T450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.423876][ T450] usb 2-1: Product: syz [ 188.428021][ T450] usb 2-1: Manufacturer: syz [ 188.432606][ T450] usb 2-1: SerialNumber: syz [ 188.437619][ T450] usb 2-1: config 0 descriptor?? [ 188.480032][ T340] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 188.521027][ T539] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 188.529166][ T539] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 188.539467][ T539] usb 4-1: config 0 has no interface number 0 [ 188.546912][ T539] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 188.555969][ T539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.564498][ T539] usb 4-1: Product: syz [ 188.568737][ T539] usb 4-1: Manufacturer: syz [ 188.573430][ T539] usb 4-1: SerialNumber: syz [ 188.573455][ T1714] netlink: 'syz.4.362': attribute type 32 has an invalid length. [ 188.588200][ T539] usb 4-1: config 0 descriptor?? [ 188.669940][ T340] usb 6-1: Using ep0 maxpacket: 16 [ 188.676153][ T340] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 188.684898][ T340] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.695012][ T340] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.705299][ T340] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.714379][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.722396][ T340] usb 6-1: Product: syz [ 188.726579][ T340] usb 6-1: Manufacturer: syz [ 188.731206][ T340] usb 6-1: SerialNumber: syz [ 188.846764][ T450] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 188.853253][ T450] usb 2-1: No valid video chain found. [ 188.859458][ T450] usb 2-1: USB disconnect, device number 15 [ 188.996420][ T539] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 189.002899][ T539] usb 4-1: No valid video chain found. [ 189.016604][ T539] usb 4-1: USB disconnect, device number 15 [ 189.035018][ T286] EXT4-fs (loop2): unmounting filesystem. [ 189.139299][ T340] usb 6-1: 0:2 : does not exist [ 189.340017][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.365736][ T1722] input: syz1 as /devices/virtual/input/input5 [ 189.521005][ T19] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 189.530308][ T1727] loop1: detected capacity change from 0 to 512 [ 189.536884][ T1727] EXT4-fs: Ignoring removed i_version option [ 189.546723][ T340] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 189.550005][ T1727] EXT4-fs: Ignoring removed bh option [ 189.558210][ T19] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 189.570920][ T19] usb 3-1: config 0 has no interface number 0 [ 189.584414][ T340] usb 6-1: USB disconnect, device number 10 [ 189.590826][ T611] udevd[611]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 189.591546][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 189.601489][ T611] udevd[611]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 189.611210][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.627788][ T1727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.630745][ T19] usb 3-1: Product: syz [ 189.642111][ T19] usb 3-1: Manufacturer: syz [ 189.646769][ T19] usb 3-1: SerialNumber: syz [ 189.652723][ T19] usb 3-1: config 0 descriptor?? [ 189.657961][ T1727] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.677286][ T1727] netlink: 44 bytes leftover after parsing attributes in process `syz.1.366'. [ 189.696936][ T1727] netlink: 43 bytes leftover after parsing attributes in process `syz.1.366'. [ 189.711186][ T1727] netlink: 'syz.1.366': attribute type 6 has an invalid length. [ 189.719006][ T1727] netlink: 'syz.1.366': attribute type 5 has an invalid length. [ 189.726908][ T1727] netlink: 43 bytes leftover after parsing attributes in process `syz.1.366'. [ 190.051208][ T774] EXT4-fs (loop5): unmounting filesystem. [ 190.070454][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 190.070587][ T28] audit: type=1326 audit(1761735749.595:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.101040][ T28] audit: type=1326 audit(1761735749.605:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.145171][ T28] audit: type=1326 audit(1761735749.605:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.196745][ T19] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 190.198805][ T28] audit: type=1326 audit(1761735749.605:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.205410][ T19] usb 3-1: No valid video chain found. [ 190.235096][ T19] usb 3-1: USB disconnect, device number 16 [ 190.242233][ T28] audit: type=1326 audit(1761735749.605:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.270491][ T28] audit: type=1326 audit(1761735749.605:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.293857][ T28] audit: type=1326 audit(1761735749.645:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.294429][ T283] EXT4-fs (loop1): unmounting filesystem. [ 190.317150][ T28] audit: type=1326 audit(1761735749.655:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.346236][ T28] audit: type=1326 audit(1761735749.715:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.369614][ T28] audit: type=1326 audit(1761735749.715:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1716 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 190.427319][ T1743] loop1: detected capacity change from 0 to 256 [ 190.430154][ T1745] FAULT_INJECTION: forcing a failure. [ 190.430154][ T1745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.434161][ T1743] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 190.463597][ T1745] CPU: 1 PID: 1745 Comm: syz.3.371 Not tainted syzkaller #0 [ 190.470899][ T1745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.480956][ T1745] Call Trace: [ 190.484232][ T1745] [ 190.487156][ T1745] __dump_stack+0x21/0x24 [ 190.491503][ T1745] dump_stack_lvl+0xee/0x150 [ 190.496086][ T1745] ? __cfi_dump_stack_lvl+0x8/0x8 [ 190.501113][ T1745] ? mutex_unlock+0x89/0x220 [ 190.505684][ T1745] dump_stack+0x15/0x24 [ 190.509813][ T1745] should_fail_ex+0x3d4/0x520 [ 190.514466][ T1745] should_fail+0xb/0x10 [ 190.518598][ T1745] should_fail_usercopy+0x1a/0x20 [ 190.523599][ T1745] strncpy_from_user+0x24/0x2d0 [ 190.528424][ T1745] ? getname_flags+0xb9/0x500 [ 190.533078][ T1745] getname_flags+0xf4/0x500 [ 190.537561][ T1745] __x64_sys_mkdirat+0x7c/0xa0 [ 190.542298][ T1745] x64_sys_call+0x73d/0x9a0 [ 190.546776][ T1745] do_syscall_64+0x4c/0xa0 [ 190.551168][ T1745] ? clear_bhb_loop+0x30/0x80 [ 190.555822][ T1745] ? clear_bhb_loop+0x30/0x80 [ 190.560561][ T1745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.566444][ T1745] RIP: 0033:0x7f629b98d717 [ 190.570847][ T1745] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.590428][ T1745] RSP: 002b:00007f629c855e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 190.598819][ T1745] RAX: ffffffffffffffda RBX: 00007f629c855ef0 RCX: 00007f629b98d717 [ 190.606773][ T1745] RDX: 00000000000001ff RSI: 00002000000020c0 RDI: 00000000ffffff9c [ 190.614723][ T1745] RBP: 0000200000002040 R08: 0000000000000000 R09: 0000000000000000 [ 190.622671][ T1745] R10: 0000200000002040 R11: 0000000000000246 R12: 00002000000020c0 [ 190.630619][ T1745] R13: 00007f629c855eb0 R14: 0000000000000000 R15: 0000200000004300 [ 190.638567][ T1745] [ 190.679031][ T1749] loop3: detected capacity change from 0 to 512 [ 190.704646][ T1749] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 192.470274][ T1755] loop4: detected capacity change from 0 to 40427 [ 192.595474][ T1755] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.653552][ T1755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.877337][ T1769] syz.3.372[1769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.877406][ T1769] syz.3.372[1769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.890669][ T1769] loop3: detected capacity change from 0 to 128 [ 193.058310][ T1772] loop2: detected capacity change from 0 to 40427 [ 193.087505][ T1772] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.137298][ T1772] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.137379][ T1776] loop1: detected capacity change from 0 to 512 [ 193.156900][ T1772] bio_check_eod: 20852 callbacks suppressed [ 193.156915][ T1772] syz.2.379: attempt to access beyond end of device [ 193.156915][ T1772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.176186][ T1776] EXT4-fs: Ignoring removed i_version option [ 193.185763][ T1776] EXT4-fs: Ignoring removed bh option [ 193.201862][ T1776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.211464][ T1776] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.219992][ T450] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 193.259967][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.400924][ T450] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 193.409016][ T450] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 193.439940][ T450] usb 6-1: config 0 has no interface number 0 [ 193.447367][ T450] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 193.469940][ T450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.477928][ T450] usb 6-1: Product: syz [ 193.489955][ T450] usb 6-1: Manufacturer: syz [ 193.494552][ T450] usb 6-1: SerialNumber: syz [ 193.507408][ T450] usb 6-1: config 0 descriptor?? [ 193.541703][ T1788] loop3: detected capacity change from 0 to 256 [ 193.707733][ T286] syz-executor: attempt to access beyond end of device [ 193.707733][ T286] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 193.820361][ T539] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.879169][ T283] EXT4-fs (loop1): unmounting filesystem. [ 193.902068][ T1794] loop1: detected capacity change from 0 to 4096 [ 193.911561][ T1794] EXT4-fs (loop1): Test dummy encryption mode enabled [ 194.070796][ T450] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 194.088563][ T1794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.100268][ T450] usb 6-1: No valid video chain found. [ 194.115340][ T450] usb 6-1: USB disconnect, device number 11 [ 194.141008][ T539] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 194.149125][ T539] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 194.159694][ T539] usb 4-1: config 0 has no interface number 0 [ 194.167156][ T539] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 194.176259][ T539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.184318][ T539] usb 4-1: Product: syz [ 194.188502][ T539] usb 4-1: Manufacturer: syz [ 194.193147][ T539] usb 4-1: SerialNumber: syz [ 194.201754][ T539] usb 4-1: config 0 descriptor?? [ 194.684916][ T1806] IPv6: sit1: Disabled Multicast RS [ 194.717251][ T539] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 194.724097][ T539] usb 4-1: No valid video chain found. [ 194.732627][ T539] usb 4-1: USB disconnect, device number 16 [ 194.793165][ T1813] loop4: detected capacity change from 0 to 256 [ 194.802559][ T1813] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 194.841138][ T611] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.915563][ T1815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.389'. [ 194.972199][ T283] EXT4-fs (loop1): unmounting filesystem. [ 194.995083][ T1818] loop1: detected capacity change from 0 to 512 [ 195.012617][ T1818] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 195.192452][ T1821] syz.1.391[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.192525][ T1821] syz.1.391[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.205332][ T1821] loop1: detected capacity change from 0 to 128 [ 195.229666][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 195.229680][ T28] audit: type=1400 audit(1761735754.755:596): avc: denied { write } for pid=1817 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.288638][ T28] audit: type=1400 audit(1761735754.755:597): avc: denied { read } for pid=1817 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.314223][ T28] audit: type=1400 audit(1761735754.795:598): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 195.334470][ T28] audit: type=1400 audit(1761735754.845:599): avc: denied { execute } for pid=1822 comm="syz.3.392" path="/78/cpuacct.usage_percpu" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.372328][ T28] audit: type=1400 audit(1761735754.845:600): avc: denied { read write } for pid=1822 comm="syz.3.392" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.401391][ T28] audit: type=1400 audit(1761735754.845:601): avc: denied { ioctl open } for pid=1822 comm="syz.3.392" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.477897][ T1826] loop3: detected capacity change from 0 to 256 [ 195.484487][ T1826] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 195.530286][ T611] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.541211][ T28] audit: type=1400 audit(1761735755.075:602): avc: denied { mount } for pid=1825 comm="syz.3.393" name="/" dev="incremental-fs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.564823][ T28] audit: type=1400 audit(1761735755.095:603): avc: denied { read } for pid=1825 comm="syz.3.393" name="file0" dev="incremental-fs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.588124][ T28] audit: type=1400 audit(1761735755.095:604): avc: denied { open } for pid=1825 comm="syz.3.393" path="/79/file0/file0" dev="incremental-fs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.619951][ T28] audit: type=1400 audit(1761735755.145:605): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.705761][ T1835] loop4: detected capacity change from 0 to 256 [ 195.740045][ T1835] exfat: Unknown parameter '00000000000000000003' [ 195.838694][ T1830] loop2: detected capacity change from 0 to 40427 [ 195.853654][ T1837] loop3: detected capacity change from 0 to 512 [ 195.860949][ T1830] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 195.887439][ T1837] EXT4-fs: Ignoring removed i_version option [ 195.896783][ T1830] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.909662][ T1837] EXT4-fs: Ignoring removed bh option [ 195.917985][ T1830] F2FS-fs (loop2): invalid crc value [ 195.950259][ T1830] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.951680][ T1845] FAULT_INJECTION: forcing a failure. [ 195.951680][ T1845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.982055][ T1837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.991123][ T1845] CPU: 1 PID: 1845 Comm: syz.1.398 Not tainted syzkaller #0 [ 195.994574][ T1837] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.998427][ T1845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.998440][ T1845] Call Trace: [ 195.998445][ T1845] [ 195.998452][ T1845] __dump_stack+0x21/0x24 [ 196.026599][ T1830] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 196.029099][ T1845] dump_stack_lvl+0xee/0x150 [ 196.036266][ T1830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 196.040673][ T1845] ? __cfi_dump_stack_lvl+0x8/0x8 [ 196.040694][ T1845] dump_stack+0x15/0x24 [ 196.040709][ T1845] should_fail_ex+0x3d4/0x520 [ 196.040730][ T1845] should_fail+0xb/0x10 [ 196.066087][ T1845] should_fail_usercopy+0x1a/0x20 [ 196.071117][ T1845] _copy_from_user+0x1e/0xc0 [ 196.075732][ T1845] __sys_bpf+0x277/0x780 [ 196.079971][ T1845] ? bpf_link_show_fdinfo+0x320/0x320 [ 196.085339][ T1845] ? __cfi_ksys_write+0x10/0x10 [ 196.090189][ T1845] ? debug_smp_processor_id+0x17/0x20 [ 196.095542][ T1845] __x64_sys_bpf+0x7c/0x90 [ 196.099940][ T1845] x64_sys_call+0x488/0x9a0 [ 196.104423][ T1845] do_syscall_64+0x4c/0xa0 [ 196.108817][ T1845] ? clear_bhb_loop+0x30/0x80 [ 196.113476][ T1845] ? clear_bhb_loop+0x30/0x80 [ 196.118159][ T1845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.120841][ T1852] loop5: detected capacity change from 0 to 1024 [ 196.124050][ T1845] RIP: 0033:0x7ff27738efc9 [ 196.134322][ T1852] EXT4-fs (loop5): INFO: recovery required on readonly filesystem [ 196.134743][ T1845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.142581][ T1852] EXT4-fs (loop5): write access will be enabled during recovery [ 196.162097][ T1845] RSP: 002b:00007ff2782b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.162122][ T1845] RAX: ffffffffffffffda RBX: 00007ff2775e5fa0 RCX: 00007ff27738efc9 [ 196.162137][ T1845] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 196.169743][ T1852] EXT4-fs (loop5): barriers disabled [ 196.178123][ T1845] RBP: 00007ff2782b5090 R08: 0000000000000000 R09: 0000000000000000 [ 196.178134][ T1845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.178149][ T1845] R13: 00007ff2775e6038 R14: 00007ff2775e5fa0 R15: 00007ffcb31417f8 [ 196.186302][ T1852] JBD2: no valid journal superblock found [ 196.194037][ T1845] [ 196.232075][ T1852] EXT4-fs (loop5): error loading journal [ 196.554511][ T284] EXT4-fs (loop3): unmounting filesystem. [ 196.629987][ T383] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 196.698152][ T1865] loop3: detected capacity change from 0 to 8192 [ 196.789435][ T1871] loop5: detected capacity change from 0 to 256 [ 196.799513][ T1871] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 196.807287][ T1869] loop2: detected capacity change from 0 to 40427 [ 196.822865][ T1869] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 196.832145][ T383] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 196.860676][ T1869] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 196.869583][ T1869] F2FS-fs (loop2): invalid crc value [ 196.876633][ T1869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.889933][ T383] usb 5-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 196.904280][ T383] usb 5-1: config 0 has no interface number 0 [ 196.913228][ T383] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 196.917684][ T1869] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 196.922486][ T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.929633][ T1869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 196.937740][ T383] usb 5-1: Product: syz [ 196.949314][ T383] usb 5-1: Manufacturer: syz [ 196.954092][ T383] usb 5-1: SerialNumber: syz [ 196.969691][ T383] usb 5-1: config 0 descriptor?? [ 197.239964][ T539] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.379330][ T383] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 197.385763][ T383] usb 5-1: No valid video chain found. [ 197.389945][ T539] usb 3-1: device descriptor read/64, error -71 [ 197.393277][ T383] usb 5-1: USB disconnect, device number 17 [ 197.575635][ T1880] loop1: detected capacity change from 0 to 40427 [ 197.590050][ T1880] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 197.607816][ T1880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 197.616774][ T1880] F2FS-fs (loop1): invalid crc value [ 197.655374][ T1888] loop3: detected capacity change from 0 to 512 [ 197.666450][ T1880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.672820][ T539] usb 3-1: device descriptor read/64, error -71 [ 197.710669][ T1888] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 197.728730][ T1880] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 197.735836][ T1880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.870990][ T1893] loop5: detected capacity change from 0 to 256 [ 197.887717][ T1893] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 197.940415][ T539] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.077317][ T1898] syz.3.408[1898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.077414][ T1898] syz.3.408[1898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.090220][ T1898] loop3: detected capacity change from 0 to 128 [ 198.185426][ T1897] loop4: detected capacity change from 0 to 512 [ 198.228054][ T1897] EXT4-fs: Ignoring removed i_version option [ 198.255661][ T1897] EXT4-fs: Ignoring removed bh option [ 198.325069][ T1897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.344825][ T1897] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.439956][ T342] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 198.630956][ T342] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 198.642368][ T342] usb 2-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 198.662825][ T342] usb 2-1: config 0 has no interface number 0 [ 198.676834][ T342] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 198.694557][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.711264][ T342] usb 2-1: Product: syz [ 198.720088][ T342] usb 2-1: Manufacturer: syz [ 198.730037][ T342] usb 2-1: SerialNumber: syz [ 198.780319][ T342] usb 2-1: config 0 descriptor?? [ 198.821924][ T287] EXT4-fs (loop4): unmounting filesystem. [ 198.846770][ T539] usb 3-1: device descriptor read/64, error -71 [ 199.119975][ T539] usb 3-1: device descriptor read/64, error -71 [ 199.240002][ T539] usb usb3-port1: attempt power cycle [ 200.557047][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 200.557062][ T28] audit: type=1400 audit(1761735759.555:659): avc: denied { bind } for pid=1911 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.650133][ T28] audit: type=1326 audit(1761735760.185:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27738efc9 code=0x7ffc0000 [ 200.673860][ T28] audit: type=1326 audit(1761735760.205:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27738efc9 code=0x7ffc0000 [ 200.741067][ T1923] FAULT_INJECTION: forcing a failure. [ 200.741067][ T1923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.811416][ T1923] CPU: 0 PID: 1923 Comm: syz.5.419 Not tainted syzkaller #0 [ 200.818738][ T1923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.826179][ T342] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 200.828800][ T1923] Call Trace: [ 200.828807][ T1923] [ 200.828815][ T1923] __dump_stack+0x21/0x24 [ 200.839943][ T342] usb 2-1: No valid video chain found. [ 200.841311][ T1923] dump_stack_lvl+0xee/0x150 [ 200.855629][ T1923] ? __cfi_dump_stack_lvl+0x8/0x8 [ 200.855848][ T342] usb 2-1: USB disconnect, device number 16 [ 200.860654][ T1923] dump_stack+0x15/0x24 [ 200.860673][ T1923] should_fail_ex+0x3d4/0x520 [ 200.860693][ T1923] should_fail+0xb/0x10 [ 200.879486][ T1923] should_fail_usercopy+0x1a/0x20 [ 200.884515][ T1923] _copy_from_iter+0x190/0xfd0 [ 200.889289][ T1923] ? __cfi__copy_from_iter+0x10/0x10 [ 200.894578][ T1923] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 200.900311][ T1923] copy_page_from_iter+0x1d2/0x2b0 [ 200.905423][ T1923] ? skb_page_frag_refill+0x221/0x3a0 [ 200.910798][ T1923] tun_get_user+0x807/0x3320 [ 200.915389][ T1923] ? tun_do_read+0x1c20/0x1c20 [ 200.920145][ T1923] ? __kasan_check_write+0x14/0x20 [ 200.925244][ T1923] ? ref_tracker_alloc+0x30f/0x430 [ 200.930419][ T1923] ? file_has_perm+0x4a1/0x640 [ 200.935161][ T1923] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 200.940592][ T1923] ? selinux_file_permission+0x3ef/0x510 [ 200.946200][ T1923] tun_chr_write_iter+0x1fb/0x300 [ 200.951197][ T1923] vfs_write+0x5db/0xca0 [ 200.955419][ T1923] ? slab_free_freelist_hook+0xc2/0x190 [ 200.960946][ T1923] ? __cfi_vfs_write+0x10/0x10 [ 200.965690][ T1923] ? __fget_files+0x2d5/0x330 [ 200.970339][ T1923] ? __fdget_pos+0x1f2/0x380 [ 200.974902][ T1923] ? ksys_write+0x71/0x240 [ 200.979289][ T1923] ksys_write+0x140/0x240 [ 200.983592][ T1923] ? __cfi_ksys_write+0x10/0x10 [ 200.988422][ T1923] ? debug_smp_processor_id+0x17/0x20 [ 200.993777][ T1923] __x64_sys_write+0x7b/0x90 [ 200.998339][ T1923] x64_sys_call+0x27b/0x9a0 [ 201.002837][ T1923] do_syscall_64+0x4c/0xa0 [ 201.007226][ T1923] ? clear_bhb_loop+0x30/0x80 [ 201.011877][ T1923] ? clear_bhb_loop+0x30/0x80 [ 201.016540][ T1923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.022405][ T1923] RIP: 0033:0x7fc368b8da7f [ 201.026802][ T1923] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 201.046555][ T1923] RSP: 002b:00007fc369adc000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 201.054943][ T1923] RAX: ffffffffffffffda RBX: 00007fc368de5fa0 RCX: 00007fc368b8da7f [ 201.062892][ T1923] RDX: 000000000000006e RSI: 0000200000000000 RDI: 00000000000000c8 [ 201.070839][ T1923] RBP: 00007fc369adc090 R08: 0000000000000000 R09: 0000000000000000 [ 201.078787][ T1923] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 201.086744][ T1923] R13: 00007fc368de6038 R14: 00007fc368de5fa0 R15: 00007fff89a16ed8 [ 201.094696][ T1923] [ 201.185423][ T1927] block device autoloading is deprecated and will be removed. [ 201.193274][ T1927] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 201.403537][ T1933] loop4: detected capacity change from 0 to 256 [ 201.442834][ T1933] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 201.541368][ T28] audit: type=1400 audit(1761735761.055:662): avc: denied { read } for pid=1928 comm="syz.5.421" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.696355][ T28] audit: type=1400 audit(1761735761.055:663): avc: denied { open } for pid=1928 comm="syz.5.421" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.737155][ T28] audit: type=1400 audit(1761735761.055:664): avc: denied { ioctl } for pid=1928 comm="syz.5.421" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.795665][ T1940] netlink: 300 bytes leftover after parsing attributes in process `syz.3.422'. [ 202.807264][ T1944] loop5: detected capacity change from 0 to 256 [ 203.095193][ T1931] loop2: detected capacity change from 0 to 40427 [ 203.230793][ T1931] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 203.433632][ T1931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.491777][ T1931] F2FS-fs (loop2): invalid crc value [ 203.511060][ T966] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 203.528126][ T1931] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.561581][ T1931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 203.568719][ T1931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.663376][ T1956] loop3: detected capacity change from 0 to 256 [ 203.771142][ T966] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 203.791252][ T1956] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 203.799826][ T966] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 203.810481][ T966] usb 6-1: config 0 has no interface number 0 [ 203.819154][ T966] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 203.991445][ T28] audit: type=1400 audit(1761735763.465:665): avc: denied { remount } for pid=1954 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 204.101526][ T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.190027][ T966] usb 6-1: Product: syz [ 204.226058][ T966] usb 6-1: Manufacturer: syz [ 204.298103][ T966] usb 6-1: SerialNumber: syz [ 204.300667][ T539] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 204.327276][ T966] usb 6-1: config 0 descriptor?? [ 204.444965][ T28] audit: type=1400 audit(1761735763.975:666): avc: denied { read write } for pid=1961 comm="syz.2.427" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.485882][ T28] audit: type=1400 audit(1761735764.005:667): avc: denied { open } for pid=1961 comm="syz.2.427" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.541022][ T539] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 204.559309][ T539] usb 2-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 204.576921][ T539] usb 2-1: config 0 has no interface number 0 [ 204.631091][ T539] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 204.640165][ T539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.648149][ T539] usb 2-1: Product: syz [ 204.652479][ T539] usb 2-1: Manufacturer: syz [ 204.657072][ T539] usb 2-1: SerialNumber: syz [ 204.925785][ T342] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 204.933788][ T966] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 204.940835][ T966] usb 6-1: No valid video chain found. [ 205.121915][ T342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.146857][ T342] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.183155][ T342] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.213924][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.240909][ T342] usb 3-1: SerialNumber: syz [ 205.996400][ T539] usb 2-1: config 0 descriptor?? [ 206.012063][ T966] usb 6-1: USB disconnect, device number 12 [ 206.052416][ T28] audit: type=1400 audit(1761735765.585:668): avc: denied { ioctl } for pid=1968 comm="syz.4.430" path="socket:[21088]" dev="sockfs" ino=21088 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.090372][ T28] audit: type=1400 audit(1761735765.595:669): avc: denied { write } for pid=1968 comm="syz.4.430" name="route" dev="proc" ino=4026532638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 206.133656][ T28] audit: type=1400 audit(1761735765.665:670): avc: denied { write } for pid=1968 comm="syz.4.430" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.175275][ T28] audit: type=1400 audit(1761735765.665:671): avc: denied { add_name } for pid=1968 comm="syz.4.430" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.203909][ T28] audit: type=1400 audit(1761735765.665:672): avc: denied { associate } for pid=1968 comm="syz.4.430" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 206.213251][ T342] usb 3-1: 0:2 : does not exist [ 206.250153][ T342] usb 3-1: unit 255 not found! [ 206.267076][ T342] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5) [ 206.295003][ T342] usb 3-1: USB disconnect, device number 20 [ 206.355039][ T1971] loop5: detected capacity change from 0 to 40427 [ 206.371055][ T1971] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 206.379068][ T1971] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 206.388138][ T1971] F2FS-fs (loop5): invalid crc value [ 206.395081][ T1971] F2FS-fs (loop5): Found nat_bits in checkpoint [ 206.426269][ T1973] loop3: detected capacity change from 0 to 40427 [ 206.430133][ T1971] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 206.439820][ T1973] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 206.439875][ T1971] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.472511][ T539] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 206.478878][ T539] usb 2-1: No valid video chain found. [ 206.497425][ T539] usb 2-1: USB disconnect, device number 17 [ 206.503672][ T28] audit: type=1400 audit(1761735765.995:673): avc: denied { ioctl } for pid=1970 comm="syz.5.429" path="/58/bus/file1" dev="loop5" ino=10 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 206.511129][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 206.543908][ T1973] F2FS-fs (loop3): invalid crc value [ 206.551892][ T28] audit: type=1400 audit(1761735765.995:674): avc: denied { getopt } for pid=1970 comm="syz.5.429" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.570922][ T1973] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.575201][ T28] audit: type=1326 audit(1761735766.005:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27738efc9 code=0x7ffc0000 [ 206.605120][ T1973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.606476][ T28] audit: type=1326 audit(1761735766.005:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff27738efc9 code=0x7ffc0000 [ 206.636171][ T28] audit: type=1326 audit(1761735766.005:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27738efc9 code=0x7ffc0000 [ 206.920868][ T1989] loop4: detected capacity change from 0 to 512 [ 206.957635][ T1989] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 207.002517][ T1984] loop3: detected capacity change from 0 to 40427 [ 207.016803][ T1984] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 207.025241][ T1984] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 207.054811][ T1984] F2FS-fs (loop3): invalid crc value [ 207.087535][ T1984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.165147][ T1984] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.172827][ T1984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.383474][ T2002] FAULT_INJECTION: forcing a failure. [ 207.383474][ T2002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.396649][ T2002] CPU: 1 PID: 2002 Comm: syz.3.432 Not tainted syzkaller #0 [ 207.403937][ T2002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.413988][ T2002] Call Trace: [ 207.417258][ T2002] [ 207.420180][ T2002] __dump_stack+0x21/0x24 [ 207.424513][ T2002] dump_stack_lvl+0xee/0x150 [ 207.429100][ T2002] ? __cfi_dump_stack_lvl+0x8/0x8 [ 207.434115][ T2002] ? sysvec_reschedule_ipi+0x78/0x80 [ 207.439401][ T2002] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 207.445031][ T2002] dump_stack+0x15/0x24 [ 207.449180][ T2002] should_fail_ex+0x3d4/0x520 [ 207.453852][ T2002] should_fail+0xb/0x10 [ 207.458011][ T2002] should_fail_usercopy+0x1a/0x20 [ 207.463031][ T2002] strncpy_from_user+0x24/0x2d0 [ 207.467870][ T2002] ? getname_flags+0xb9/0x500 [ 207.472548][ T2002] getname_flags+0xf4/0x500 [ 207.477047][ T2002] __x64_sys_renameat2+0xc3/0xf0 [ 207.481981][ T2002] x64_sys_call+0x6b8/0x9a0 [ 207.486477][ T2002] do_syscall_64+0x4c/0xa0 [ 207.490884][ T2002] ? clear_bhb_loop+0x30/0x80 [ 207.495568][ T2002] ? clear_bhb_loop+0x30/0x80 [ 207.500241][ T2002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.506129][ T2002] RIP: 0033:0x7f629b98efc9 [ 207.510538][ T2002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.530134][ T2002] RSP: 002b:00007f629c814038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 207.538542][ T2002] RAX: ffffffffffffffda RBX: 00007f629bbe6180 RCX: 00007f629b98efc9 [ 207.546504][ T2002] RDX: ffffffffffffff9c RSI: 0000200000000580 RDI: ffffffffffffff9c [ 207.554465][ T2002] RBP: 00007f629c814090 R08: 0000000000000005 R09: 0000000000000000 [ 207.562428][ T2002] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 207.570395][ T2002] R13: 00007f629bbe6218 R14: 00007f629bbe6180 R15: 00007ffd22fadaa8 [ 207.578362][ T2002] [ 207.581707][ T2001] syz.4.434[2001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.581774][ T2001] syz.4.434[2001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.594663][ T2001] loop4: detected capacity change from 0 to 128 [ 207.756110][ T1996] loop1: detected capacity change from 0 to 512 [ 207.807893][ T1996] EXT4-fs: Ignoring removed i_version option [ 207.826438][ T2006] loop2: detected capacity change from 0 to 256 [ 207.836653][ T1996] EXT4-fs: Ignoring removed bh option [ 207.852053][ T2006] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 207.972254][ T2012] loop5: detected capacity change from 0 to 256 [ 208.008366][ T1996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.050534][ T1996] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.081812][ T2016] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 208.527672][ T2018] loop3: detected capacity change from 0 to 512 [ 208.539003][ T283] EXT4-fs (loop1): unmounting filesystem. [ 208.546634][ T2018] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 208.609996][ T345] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 209.081194][ T345] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 209.081765][ T2026] loop4: detected capacity change from 0 to 256 [ 209.089301][ T345] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 209.095901][ T2026] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 209.173046][ T345] usb 6-1: config 0 has no interface number 0 [ 209.241440][ T2030] syz.3.448[2030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.241514][ T2030] syz.3.448[2030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.254648][ T2030] loop3: detected capacity change from 0 to 128 [ 209.457679][ T2031] loop4: detected capacity change from 0 to 512 [ 209.490156][ T2031] EXT4-fs: Ignoring removed i_version option [ 209.496168][ T2031] EXT4-fs: Ignoring removed bh option [ 209.591321][ T2031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.610247][ T2031] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.696048][ T345] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 209.719946][ T345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.723349][ T2039] loop1: detected capacity change from 0 to 256 [ 209.727978][ T345] usb 6-1: Product: syz [ 209.727994][ T345] usb 6-1: Manufacturer: syz [ 209.743228][ T345] usb 6-1: SerialNumber: syz [ 209.748485][ T2039] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 209.757323][ T345] usb 6-1: config 0 descriptor?? [ 209.890325][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.979953][ T450] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 210.094147][ T287] EXT4-fs (loop4): unmounting filesystem. [ 210.170955][ T450] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.175686][ T345] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 210.191616][ T450] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.193345][ T345] usb 6-1: No valid video chain found. [ 210.209869][ T345] usb 6-1: USB disconnect, device number 13 [ 210.239991][ T450] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.266864][ T450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.295550][ T450] usb 4-1: SerialNumber: syz [ 210.419979][ T539] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 210.468470][ T2044] loop2: detected capacity change from 0 to 512 [ 210.482446][ T2044] EXT4-fs: Ignoring removed i_version option [ 210.488602][ T2044] EXT4-fs: Ignoring removed bh option [ 210.501569][ T2044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.508293][ T450] usb 4-1: 0:2 : does not exist [ 210.510778][ T2044] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.515655][ T450] usb 4-1: unit 255 not found! [ 210.549883][ T450] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 210.561120][ T450] usb 4-1: USB disconnect, device number 17 [ 210.611435][ T539] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 210.619545][ T539] usb 5-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 210.629883][ T539] usb 5-1: config 0 has no interface number 0 [ 210.637465][ T539] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 210.646570][ T539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.654577][ T539] usb 5-1: Product: syz [ 210.658733][ T539] usb 5-1: Manufacturer: syz [ 210.663352][ T539] usb 5-1: SerialNumber: syz [ 210.668585][ T539] usb 5-1: config 0 descriptor?? [ 210.825663][ T2054] FAULT_INJECTION: forcing a failure. [ 210.825663][ T2054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.839014][ T2054] CPU: 1 PID: 2054 Comm: syz.5.447 Not tainted syzkaller #0 [ 210.846296][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.856330][ T2054] Call Trace: [ 210.859587][ T2054] [ 210.862504][ T2054] __dump_stack+0x21/0x24 [ 210.866820][ T2054] dump_stack_lvl+0xee/0x150 [ 210.871389][ T2054] ? __cfi_dump_stack_lvl+0x8/0x8 [ 210.876395][ T2054] dump_stack+0x15/0x24 [ 210.880530][ T2054] should_fail_ex+0x3d4/0x520 [ 210.885199][ T2054] should_fail_alloc_page+0x61/0x90 [ 210.890466][ T2054] prepare_alloc_pages+0x148/0x5f0 [ 210.895566][ T2054] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 210.900746][ T2054] __alloc_pages+0x124/0x450 [ 210.905323][ T2054] ? __cfi___alloc_pages+0x10/0x10 [ 210.910414][ T2054] ? __schedule+0xb8f/0x14e0 [ 210.914988][ T2054] __get_free_pages+0xe/0x30 [ 210.919558][ T2054] kasan_populate_vmalloc_pte+0x29/0x120 [ 210.925174][ T2054] __apply_to_page_range+0x8de/0xc80 [ 210.930527][ T2054] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 210.936752][ T2054] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 210.942980][ T2054] apply_to_page_range+0x3b/0x50 [ 210.947915][ T2054] kasan_populate_vmalloc+0x60/0x70 [ 210.953092][ T2054] alloc_vmap_area+0x173e/0x1870 [ 210.958012][ T2054] ? vm_map_ram+0x930/0x930 [ 210.962494][ T2054] ? __kasan_kmalloc+0x95/0xb0 [ 210.967241][ T2054] ? kmalloc_node_trace+0x3d/0xb0 [ 210.972243][ T2054] __get_vm_area_node+0x160/0x360 [ 210.977249][ T2054] __vmalloc_node_range+0x326/0x13d0 [ 210.982512][ T2054] ? copy_process+0x5b8/0x3480 [ 210.987368][ T2054] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 210.993073][ T2054] ? sysvec_reschedule_ipi+0x78/0x80 [ 210.998342][ T2054] ? arch_dup_task_struct+0x42/0xc0 [ 211.003524][ T2054] ? __cfi___vmalloc_node_range+0x10/0x10 [ 211.009224][ T2054] ? memcpy_erms+0x6/0x10 [ 211.013541][ T2054] ? memcpy+0x56/0x70 [ 211.017505][ T2054] dup_task_struct+0x3ae/0x790 [ 211.022256][ T2054] ? copy_process+0x5b8/0x3480 [ 211.027008][ T2054] ? __kasan_check_write+0x14/0x20 [ 211.032097][ T2054] ? recalc_sigpending+0x168/0x1c0 [ 211.037192][ T2054] copy_process+0x5b8/0x3480 [ 211.041770][ T2054] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 211.047821][ T2054] ? irqentry_exit+0x37/0x40 [ 211.052395][ T2054] ? sysvec_reschedule_ipi+0x78/0x80 [ 211.057661][ T2054] ? idle_dummy+0x10/0x10 [ 211.061979][ T2054] ? kernel_clone+0xa2/0x810 [ 211.066557][ T2054] kernel_clone+0x23a/0x810 [ 211.071043][ T2054] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 211.077349][ T2054] ? __cfi_kernel_clone+0x10/0x10 [ 211.082354][ T2054] ? finish_task_switch+0x16b/0x7b0 [ 211.087539][ T2054] __x64_sys_clone+0x168/0x1b0 [ 211.092287][ T2054] ? __cfi___x64_sys_clone+0x10/0x10 [ 211.097559][ T2054] ? __kasan_check_write+0x14/0x20 [ 211.102646][ T2054] ? fpregs_restore_userregs+0x128/0x260 [ 211.108260][ T2054] ? switch_fpu_return+0xe/0x10 [ 211.113094][ T2054] x64_sys_call+0x990/0x9a0 [ 211.117580][ T2054] do_syscall_64+0x4c/0xa0 [ 211.121973][ T2054] ? clear_bhb_loop+0x30/0x80 [ 211.126633][ T2054] ? clear_bhb_loop+0x30/0x80 [ 211.131294][ T2054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.137171][ T2054] RIP: 0033:0x7fc368b8efc9 [ 211.141582][ T2054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.161166][ T2054] RSP: 002b:00007fc369a99fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 211.169562][ T2054] RAX: ffffffffffffffda RBX: 00007fc368de6180 RCX: 00007fc368b8efc9 [ 211.177519][ T2054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000d024000 [ 211.185471][ T2054] RBP: 00007fc369a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 211.193421][ T2054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 211.201375][ T2054] R13: 00007fc368de6218 R14: 00007fc368de6180 R15: 00007fff89a16ed8 [ 211.209336][ T2054] [ 211.213060][ T2054] warn_alloc: 1 callbacks suppressed [ 211.213084][ T2054] syz.5.447: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 211.233386][ T2054] CPU: 1 PID: 2054 Comm: syz.5.447 Not tainted syzkaller #0 [ 211.240660][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.250696][ T2054] Call Trace: [ 211.253965][ T2054] [ 211.256878][ T2054] __dump_stack+0x21/0x24 [ 211.261192][ T2054] dump_stack_lvl+0xee/0x150 [ 211.265762][ T2054] ? __cfi_dump_stack_lvl+0x8/0x8 [ 211.270770][ T2054] dump_stack+0x15/0x24 [ 211.274909][ T2054] warn_alloc+0x1b0/0x1d0 [ 211.279221][ T2054] ? __cfi_warn_alloc+0x10/0x10 [ 211.284054][ T2054] ? __get_vm_area_node+0x175/0x360 [ 211.289232][ T2054] __vmalloc_node_range+0x34b/0x13d0 [ 211.294499][ T2054] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 211.300201][ T2054] ? sysvec_reschedule_ipi+0x78/0x80 [ 211.305555][ T2054] ? arch_dup_task_struct+0x42/0xc0 [ 211.310742][ T2054] ? __cfi___vmalloc_node_range+0x10/0x10 [ 211.316444][ T2054] ? memcpy_erms+0x6/0x10 [ 211.320763][ T2054] ? memcpy+0x56/0x70 [ 211.324722][ T2054] dup_task_struct+0x3ae/0x790 [ 211.329477][ T2054] ? copy_process+0x5b8/0x3480 [ 211.334224][ T2054] ? __kasan_check_write+0x14/0x20 [ 211.339314][ T2054] ? recalc_sigpending+0x168/0x1c0 [ 211.344405][ T2054] copy_process+0x5b8/0x3480 [ 211.348983][ T2054] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 211.355030][ T2054] ? irqentry_exit+0x37/0x40 [ 211.359608][ T2054] ? sysvec_reschedule_ipi+0x78/0x80 [ 211.364878][ T2054] ? idle_dummy+0x10/0x10 [ 211.369193][ T2054] ? kernel_clone+0xa2/0x810 [ 211.373877][ T2054] kernel_clone+0x23a/0x810 [ 211.378362][ T2054] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 211.384931][ T2054] ? __cfi_kernel_clone+0x10/0x10 [ 211.389939][ T2054] ? finish_task_switch+0x16b/0x7b0 [ 211.395130][ T2054] __x64_sys_clone+0x168/0x1b0 [ 211.399881][ T2054] ? __cfi___x64_sys_clone+0x10/0x10 [ 211.405152][ T2054] ? __kasan_check_write+0x14/0x20 [ 211.410256][ T2054] ? fpregs_restore_userregs+0x128/0x260 [ 211.415869][ T2054] ? switch_fpu_return+0xe/0x10 [ 211.420702][ T2054] x64_sys_call+0x990/0x9a0 [ 211.425194][ T2054] do_syscall_64+0x4c/0xa0 [ 211.429592][ T2054] ? clear_bhb_loop+0x30/0x80 [ 211.434250][ T2054] ? clear_bhb_loop+0x30/0x80 [ 211.438911][ T2054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.444789][ T2054] RIP: 0033:0x7fc368b8efc9 [ 211.449196][ T2054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.468782][ T2054] RSP: 002b:00007fc369a99fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 211.477173][ T2054] RAX: ffffffffffffffda RBX: 00007fc368de6180 RCX: 00007fc368b8efc9 [ 211.485125][ T2054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000d024000 [ 211.493077][ T2054] RBP: 00007fc369a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 211.501025][ T2054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 211.508978][ T2054] R13: 00007fc368de6218 R14: 00007fc368de6180 R15: 00007fff89a16ed8 [ 211.516935][ T2054] [ 211.520047][ T2054] Mem-Info: [ 211.523214][ T2054] active_anon:10480 inactive_anon:2 isolated_anon:0 [ 211.523214][ T2054] active_file:6779 inactive_file:2537 isolated_file:0 [ 211.523214][ T2054] unevictable:0 dirty:510 writeback:0 [ 211.523214][ T2054] slab_reclaimable:8579 slab_unreclaimable:73121 [ 211.523214][ T2054] mapped:34106 shmem:3136 pagetables:758 [ 211.523214][ T2054] sec_pagetables:0 bounce:0 [ 211.523214][ T2054] kernel_misc_reclaimable:0 [ 211.523214][ T2054] free:1523527 free_pcp:4046 free_cma:0 [ 211.568040][ T2054] Node 0 active_anon:41920kB inactive_anon:8kB active_file:27116kB inactive_file:10148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136424kB dirty:2040kB writeback:0kB shmem:12544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:6004kB pagetables:3032kB sec_pagetables:0kB all_unreclaimable? no [ 211.600347][ T2054] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974192kB mlocked:0kB bounce:0kB free_pcp:5660kB local_pcp:0kB free_cma:0kB [ 211.628348][ T2054] lowmem_reserve[]: 0 3932 3932 3932 [ 211.633832][ T2054] Normal free:3125576kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:42020kB inactive_anon:8kB active_file:27116kB inactive_file:10148kB unevictable:0kB writepending:2040kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:10508kB local_pcp:9536kB free_cma:0kB [ 211.663575][ T2054] lowmem_reserve[]: 0 0 0 0 [ 211.668202][ T2054] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 211.684171][ T2054] Normal: 1652*4kB (UM) 823*8kB (UME) 438*16kB (UM) 339*32kB (UME) 214*64kB (UME) 141*128kB (UM) 48*256kB (UM) 14*512kB (UM) 18*1024kB (UM) 5*2048kB (UME) 736*4096kB (UM) = 3125576kB [ 211.702822][ T2054] 12453 total pagecache pages [ 211.707532][ T2054] 2 pages in swap cache [ 211.711750][ T2054] Free swap = 124508kB [ 211.715927][ T2054] Total swap = 124996kB [ 211.720117][ T2054] 2097051 pages RAM [ 211.723946][ T2054] 0 pages HighMem/MovableOnly [ 211.728631][ T2054] 346839 pages reserved [ 211.732824][ T2054] 0 pages cma reserved [ 211.930095][ T2052] loop1: detected capacity change from 0 to 40427 [ 211.939828][ T2052] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 211.947685][ T2052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 211.957875][ T539] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 211.958029][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 211.958092][ T28] audit: type=1326 audit(1761735771.485:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 211.966020][ T539] usb 5-1: No valid video chain found. [ 211.972426][ T28] audit: type=1326 audit(1761735771.485:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 211.996645][ T539] usb 5-1: USB disconnect, device number 18 [ 212.017817][ T28] audit: type=1326 audit(1761735771.485:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.063468][ T28] audit: type=1326 audit(1761735771.485:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.066772][ T286] EXT4-fs (loop2): unmounting filesystem. [ 212.086991][ T28] audit: type=1326 audit(1761735771.485:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.119702][ T28] audit: type=1326 audit(1761735771.485:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.143132][ T28] audit: type=1326 audit(1761735771.485:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.150285][ T2052] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.166614][ T28] audit: type=1326 audit(1761735771.485:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.198533][ T2061] loop3: detected capacity change from 0 to 256 [ 212.216253][ T28] audit: type=1326 audit(1761735771.485:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.228646][ T2064] loop2: detected capacity change from 0 to 128 [ 212.255963][ T2061] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 212.259833][ T28] audit: type=1326 audit(1761735771.485:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 212.301970][ T2058] exFAT-fs (loop3): hint_cluster is invalid (17) [ 212.312372][ T2064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.330152][ T2052] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 212.343980][ T2064] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.354605][ T2052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 212.356324][ T2062] loop5: detected capacity change from 0 to 40427 [ 212.373091][ T2062] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 212.389994][ T2062] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 212.430715][ T2062] F2FS-fs (loop5): Found nat_bits in checkpoint [ 212.496242][ T2072] loop3: detected capacity change from 0 to 256 [ 212.521017][ T2062] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 212.530090][ T2062] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 212.601893][ T286] EXT4-fs (loop2): unmounting filesystem. [ 212.919757][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 212.919816][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 212.976181][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 212.984169][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 212.991837][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 212.999414][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 213.006991][ T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 213.009402][ T774] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 213.022370][ T774] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 213.030049][ T774] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 213.032851][ T2081] loop2: detected capacity change from 0 to 512 [ 213.066898][ T2081] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 213.129955][ T539] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 213.762412][ T2087] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 213.762623][ T2090] syz.2.456[2090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.772691][ T2090] syz.2.456[2090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.789181][ T2090] loop2: detected capacity change from 0 to 128 [ 213.810061][ T2091] loop5: detected capacity change from 0 to 256 [ 213.816684][ T2091] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 215.228309][ T2094] loop4: detected capacity change from 0 to 256 [ 215.468512][ T539] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 215.478113][ T539] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 215.488437][ T539] usb 4-1: config 0 has no interface number 0 [ 215.496066][ T539] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 215.505164][ T539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.513162][ T539] usb 4-1: Product: syz [ 215.517312][ T539] usb 4-1: Manufacturer: syz [ 215.522052][ T539] usb 4-1: SerialNumber: syz [ 215.529986][ T450] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.543124][ T2100] loop2: detected capacity change from 0 to 512 [ 215.551075][ T539] usb 4-1: config 0 descriptor?? [ 215.556549][ T539] usb 4-1: can't set config #0, error -71 [ 215.566576][ T2100] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 215.570283][ T539] usb 4-1: USB disconnect, device number 18 [ 215.642238][ T2104] loop1: detected capacity change from 0 to 256 [ 215.649134][ T2104] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 215.683252][ T651] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.713049][ T450] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 215.724505][ T450] usb 5-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 215.751018][ T450] usb 5-1: config 0 has no interface number 0 [ 215.767963][ T450] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 215.790959][ T450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.809976][ T966] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 215.822643][ T450] usb 5-1: Product: syz [ 215.835289][ T450] usb 5-1: Manufacturer: syz [ 215.849075][ T450] usb 5-1: SerialNumber: syz [ 215.866747][ T450] usb 5-1: config 0 descriptor?? [ 215.949958][ T539] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 215.977160][ T2105] syz.2.462[2105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.977331][ T2105] syz.2.462[2105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.991491][ T2105] loop2: detected capacity change from 0 to 128 [ 216.041781][ T966] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.052636][ T966] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.065676][ T966] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.075399][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.083830][ T966] usb 6-1: SerialNumber: syz [ 216.131284][ T539] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.141728][ T539] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.151718][ T539] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.160866][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.168944][ T539] usb 4-1: SerialNumber: syz [ 216.291481][ T450] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 216.391779][ T539] usb 4-1: 0:2 : does not exist [ 216.396679][ T539] usb 4-1: unit 255 not found! [ 216.403665][ T539] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 216.432555][ T539] usb 4-1: USB disconnect, device number 19 [ 216.610003][ T450] usb 5-1: No valid video chain found. [ 216.616135][ T966] usb 6-1: 0:2 : does not exist [ 216.620548][ T2107] loop1: detected capacity change from 0 to 4096 [ 216.621052][ T966] usb 6-1: unit 5: unexpected type 0x03 [ 216.633843][ T450] usb 5-1: USB disconnect, device number 19 [ 216.650191][ T966] usb 6-1: unit 4 not found! [ 216.660797][ T966] usb 6-1: USB disconnect, device number 14 [ 216.675423][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 216.684401][ T2110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.465'. [ 216.709750][ T2107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.817444][ T2114] sch_tbf: peakrate 8 is lower than or equals to rate 16 ! [ 216.979939][ T342] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 217.996176][ T2126] loop3: detected capacity change from 0 to 40427 [ 218.003339][ T2126] F2FS-fs (loop3): heap/no_heap options were deprecated [ 218.010359][ T2126] F2FS-fs (loop3): fault_injection options not supported [ 218.017429][ T2126] F2FS-fs (loop3): Unrecognized mount option "meQ5mory=low" or missing value [ 218.057962][ T283] EXT4-fs (loop1): unmounting filesystem. [ 218.070004][ T611] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.097976][ T342] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 218.164204][ T342] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 218.182658][ T342] usb 3-1: config 0 has no interface number 0 [ 218.203247][ T342] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 218.219956][ T342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.228054][ T342] usb 3-1: Product: syz [ 218.232509][ T342] usb 3-1: Manufacturer: syz [ 218.237103][ T342] usb 3-1: SerialNumber: syz [ 218.305925][ T2132] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 218.520454][ T342] usb 3-1: config 0 descriptor?? [ 218.630770][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 218.630786][ T28] audit: type=1400 audit(1761735778.165:724): avc: denied { read } for pid=2129 comm="syz.1.480" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.764728][ T28] audit: type=1400 audit(1761735778.165:725): avc: denied { open } for pid=2129 comm="syz.1.480" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.933178][ T342] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 218.940168][ T342] usb 3-1: No valid video chain found. [ 218.946435][ T342] usb 3-1: USB disconnect, device number 21 [ 218.952565][ T28] audit: type=1326 audit(1761735778.465:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 219.006778][ T28] audit: type=1326 audit(1761735778.465:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 219.121436][ T2144] netlink: 300 bytes leftover after parsing attributes in process `syz.4.472'. [ 219.220818][ T28] audit: type=1326 audit(1761735778.465:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 220.576314][ T28] audit: type=1326 audit(1761735778.465:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 220.833212][ T2146] loop3: detected capacity change from 0 to 512 [ 220.863690][ T2146] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 220.874464][ T28] audit: type=1326 audit(1761735778.465:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 220.921397][ T2152] loop5: detected capacity change from 0 to 256 [ 220.932712][ T28] audit: type=1326 audit(1761735778.465:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 220.986332][ T28] audit: type=1326 audit(1761735778.465:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 221.049955][ T28] audit: type=1326 audit(1761735778.475:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 221.113486][ T2157] loop4: detected capacity change from 0 to 256 [ 221.156069][ T2155] syz.3.473[2155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.156114][ T2155] syz.3.473[2155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.169729][ T2155] loop3: detected capacity change from 0 to 128 [ 221.172167][ T2154] loop2: detected capacity change from 0 to 512 [ 221.194019][ T2154] EXT4-fs: Ignoring removed i_version option [ 221.202350][ T2154] EXT4-fs: Ignoring removed bh option [ 221.211496][ T2154] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.220570][ T2154] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.259987][ T450] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 221.416542][ T342] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.459203][ T2165] netlink: 300 bytes leftover after parsing attributes in process `syz.3.478'. [ 221.624494][ T450] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 221.656315][ T450] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 222.026198][ T342] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 222.146384][ T342] usb 5-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 222.167668][ T450] usb 6-1: config 0 has no interface number 0 [ 223.134422][ T342] usb 5-1: config 0 has no interface number 0 [ 223.300673][ T450] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 223.309783][ T450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.317964][ T342] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 223.334714][ T342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.367719][ T342] usb 5-1: Product: syz [ 223.372125][ T450] usb 6-1: Product: syz [ 223.372550][ T286] EXT4-fs (loop2): unmounting filesystem. [ 223.376285][ T450] usb 6-1: Manufacturer: syz [ 223.376300][ T450] usb 6-1: SerialNumber: syz [ 223.391641][ T342] usb 5-1: Manufacturer: syz [ 223.396233][ T342] usb 5-1: SerialNumber: syz [ 223.410580][ T342] usb 5-1: config 0 descriptor?? [ 223.417619][ T450] usb 6-1: config 0 descriptor?? [ 223.533158][ T2171] loop1: detected capacity change from 0 to 40427 [ 223.540620][ T2171] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 223.548897][ T2171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 223.557374][ T2171] F2FS-fs (loop1): Unrecognized mount option "0177777777777777777777700000000000000000000" or missing value [ 223.774739][ T2174] loop3: detected capacity change from 0 to 512 [ 223.787537][ T2174] EXT4-fs: Ignoring removed i_version option [ 223.795040][ T2174] EXT4-fs: Ignoring removed bh option [ 223.811977][ T2174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.821166][ T2174] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.835903][ T2174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.479'. [ 223.847036][ T28] audit: type=1326 audit(1761735783.365:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 223.862173][ T2174] netlink: 43 bytes leftover after parsing attributes in process `syz.3.479'. [ 223.870444][ T28] audit: type=1326 audit(1761735783.365:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 223.902449][ T28] audit: type=1326 audit(1761735783.365:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 223.923487][ T342] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 223.926083][ T28] audit: type=1326 audit(1761735783.365:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 223.935766][ T342] usb 5-1: No valid video chain found. [ 223.955060][ T28] audit: type=1326 audit(1761735783.365:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 223.955089][ T28] audit: type=1326 audit(1761735783.365:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 223.955109][ T28] audit: type=1400 audit(1761735783.405:740): avc: denied { execute_no_trans } for pid=2170 comm="syz.1.481" path="/97/file1" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 223.972912][ T2174] netlink: 'syz.3.479': attribute type 6 has an invalid length. [ 224.040655][ T2174] netlink: 'syz.3.479': attribute type 5 has an invalid length. [ 224.048327][ T2174] netlink: 43 bytes leftover after parsing attributes in process `syz.3.479'. [ 224.085144][ T342] usb 5-1: USB disconnect, device number 20 [ 224.140083][ T28] audit: type=1326 audit(1761735783.655:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 224.144705][ T450] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 224.181771][ T28] audit: type=1326 audit(1761735783.675:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc368b8efc9 code=0x7ffc0000 [ 224.186955][ T450] usb 6-1: No valid video chain found. [ 224.218847][ T450] usb 6-1: USB disconnect, device number 15 [ 224.257550][ T284] EXT4-fs (loop3): unmounting filesystem. [ 224.691596][ T2197] loop1: detected capacity change from 0 to 256 [ 224.698182][ T2197] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 224.839979][ T345] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 224.966085][ T2205] loop4: detected capacity change from 0 to 256 [ 224.974943][ T2205] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 225.041095][ T345] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 225.051269][ T345] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 225.129654][ T2207] loop5: detected capacity change from 0 to 256 [ 225.138023][ T2207] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 226.301722][ T345] usb 4-1: config 0 has no interface number 0 [ 226.336842][ T611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.354060][ T345] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 226.366974][ T2209] loop2: detected capacity change from 0 to 512 [ 226.369921][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.389920][ T345] usb 4-1: Product: syz [ 226.394107][ T345] usb 4-1: Manufacturer: syz [ 226.398912][ T2209] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 226.401777][ T345] usb 4-1: SerialNumber: syz [ 226.422512][ T345] usb 4-1: config 0 descriptor?? [ 226.729205][ T2214] loop5: detected capacity change from 0 to 256 [ 226.735825][ T2214] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 226.778495][ T2215] syz.2.488[2215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.778568][ T2215] syz.2.488[2215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.792350][ T2215] loop2: detected capacity change from 0 to 128 [ 226.812583][ T651] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.840156][ T28] audit: type=1326 audit(1761735786.365:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2190 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629b98efc9 code=0x7ffc0000 [ 226.864202][ T345] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 226.890600][ T345] usb 4-1: No valid video chain found. [ 226.943173][ T345] usb 4-1: USB disconnect, device number 20 [ 227.916556][ T2217] loop3: detected capacity change from 0 to 40427 [ 227.934989][ T2217] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 227.948131][ T2217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 227.977126][ T2217] F2FS-fs (loop3): invalid crc value [ 228.003752][ T2217] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.054439][ T2217] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 228.063596][ T2217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 228.254064][ T2231] FAULT_INJECTION: forcing a failure. [ 228.254064][ T2231] name failslab, interval 1, probability 0, space 0, times 0 [ 228.266736][ T2231] CPU: 1 PID: 2231 Comm: syz.3.491 Not tainted syzkaller #0 [ 228.274023][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.284077][ T2231] Call Trace: [ 228.287349][ T2231] [ 228.290274][ T2231] __dump_stack+0x21/0x24 [ 228.294599][ T2231] dump_stack_lvl+0xee/0x150 [ 228.299181][ T2231] ? __cfi_dump_stack_lvl+0x8/0x8 [ 228.304313][ T2231] ? release_firmware_map_entry+0x194/0x194 [ 228.310212][ T2231] dump_stack+0x15/0x24 [ 228.314362][ T2231] should_fail_ex+0x3d4/0x520 [ 228.319039][ T2231] __should_failslab+0xac/0xf0 [ 228.323801][ T2231] ? alloc_bprm+0x59/0x750 [ 228.328212][ T2231] should_failslab+0x9/0x20 [ 228.332712][ T2231] __kmem_cache_alloc_node+0x3d/0x2c0 [ 228.338079][ T2231] ? alloc_bprm+0x59/0x750 [ 228.342481][ T2231] kmalloc_trace+0x29/0xb0 [ 228.346882][ T2231] alloc_bprm+0x59/0x750 [ 228.351108][ T2231] do_execveat_common+0x1ab/0xa70 [ 228.356115][ T2231] ? getname_flags+0x206/0x500 [ 228.360861][ T2231] __x64_sys_execveat+0xce/0xf0 [ 228.365691][ T2231] x64_sys_call+0x5d8/0x9a0 [ 228.370174][ T2231] do_syscall_64+0x4c/0xa0 [ 228.374569][ T2231] ? clear_bhb_loop+0x30/0x80 [ 228.379224][ T2231] ? clear_bhb_loop+0x30/0x80 [ 228.383880][ T2231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.389756][ T2231] RIP: 0033:0x7f629b98efc9 [ 228.394191][ T2231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.413774][ T2231] RSP: 002b:00007f629c814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 228.422166][ T2231] RAX: ffffffffffffffda RBX: 00007f629bbe6180 RCX: 00007f629b98efc9 [ 228.430115][ T2231] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 228.438068][ T2231] RBP: 00007f629c814090 R08: 0000000000000000 R09: 0000000000000000 [ 228.446016][ T2231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.453965][ T2231] R13: 00007f629bbe6218 R14: 00007f629bbe6180 R15: 00007ffd22fadaa8 [ 228.461920][ T2231] [ 228.490964][ T2235] FAULT_INJECTION: forcing a failure. [ 228.490964][ T2235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.504186][ T2235] CPU: 0 PID: 2235 Comm: syz.1.497 Not tainted syzkaller #0 [ 228.511494][ T2235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.521565][ T2235] Call Trace: [ 228.524850][ T2235] [ 228.527779][ T2235] __dump_stack+0x21/0x24 [ 228.532121][ T2235] dump_stack_lvl+0xee/0x150 [ 228.536714][ T2235] ? __cfi_dump_stack_lvl+0x8/0x8 [ 228.541747][ T2235] dump_stack+0x15/0x24 [ 228.545894][ T2235] should_fail_ex+0x3d4/0x520 [ 228.550574][ T2235] should_fail+0xb/0x10 [ 228.554726][ T2235] should_fail_usercopy+0x1a/0x20 [ 228.559747][ T2235] _copy_from_user+0x1e/0xc0 [ 228.564337][ T2235] __se_sys_mount+0x176/0x380 [ 228.569014][ T2235] ? __x64_sys_mount+0xd0/0xd0 [ 228.573774][ T2235] ? __cfi_ksys_write+0x10/0x10 [ 228.578625][ T2235] __x64_sys_mount+0xbf/0xd0 [ 228.583216][ T2235] x64_sys_call+0x65d/0x9a0 [ 228.587717][ T2235] do_syscall_64+0x4c/0xa0 [ 228.592148][ T2235] ? clear_bhb_loop+0x30/0x80 [ 228.596823][ T2235] ? clear_bhb_loop+0x30/0x80 [ 228.601494][ T2235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.607389][ T2235] RIP: 0033:0x7ff27738efc9 [ 228.611805][ T2235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.631406][ T2235] RSP: 002b:00007ff2782b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.639820][ T2235] RAX: ffffffffffffffda RBX: 00007ff2775e5fa0 RCX: 00007ff27738efc9 [ 228.647791][ T2235] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 228.655755][ T2235] RBP: 00007ff2782b5090 R08: 0000200000000580 R09: 0000000000000000 [ 228.663720][ T2235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.671686][ T2235] R13: 00007ff2775e6038 R14: 00007ff2775e5fa0 R15: 00007ffcb31417f8 [ 228.679661][ T2235] [ 228.803884][ T2240] loop4: detected capacity change from 0 to 512 [ 228.848794][ T2240] EXT4-fs: Ignoring removed i_version option [ 228.867440][ T2240] EXT4-fs: Ignoring removed bh option [ 228.907093][ T2248] loop3: detected capacity change from 0 to 256 [ 228.917464][ T2243] loop1: detected capacity change from 0 to 512 [ 228.920593][ T2240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.940188][ T2240] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.940265][ T2243] EXT4-fs: Ignoring removed i_version option [ 228.956828][ T2243] EXT4-fs: Ignoring removed bh option [ 228.997886][ T2240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.496'. [ 229.005862][ T2239] loop5: detected capacity change from 0 to 40427 [ 229.008041][ T2243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.016092][ T2240] netlink: 43 bytes leftover after parsing attributes in process `syz.4.496'. [ 229.031124][ T2239] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 229.038853][ T2239] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 229.046287][ T2243] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.047316][ T2240] netlink: 'syz.4.496': attribute type 6 has an invalid length. [ 229.065610][ T2240] netlink: 'syz.4.496': attribute type 5 has an invalid length. [ 229.072310][ T2239] F2FS-fs (loop5): invalid crc value [ 229.078637][ T2240] netlink: 43 bytes leftover after parsing attributes in process `syz.4.496'. [ 229.080307][ T2239] F2FS-fs (loop5): Found nat_bits in checkpoint [ 229.116771][ T2239] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 229.123921][ T2239] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 229.131454][ T345] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 229.249940][ T539] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.501017][ T287] EXT4-fs (loop4): unmounting filesystem. [ 229.524399][ T345] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 229.535427][ T345] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 229.546305][ T345] usb 3-1: config 0 has no interface number 0 [ 229.554565][ T345] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 229.563916][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.631212][ T283] EXT4-fs (loop1): unmounting filesystem. [ 229.631844][ T345] usb 3-1: Product: syz [ 229.642249][ T345] usb 3-1: Manufacturer: syz [ 229.646859][ T345] usb 3-1: SerialNumber: syz [ 229.655067][ T345] usb 3-1: config 0 descriptor?? [ 230.640693][ T2263] loop4: detected capacity change from 0 to 40427 [ 230.701314][ T2263] F2FS-fs (loop4): heap/no_heap options were deprecated [ 230.708353][ T2263] F2FS-fs (loop4): fault_injection options not supported [ 230.715478][ T2263] F2FS-fs (loop4): Unrecognized mount option "meQ5mory=low" or missing value [ 230.726969][ T539] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 230.735350][ T539] usb 4-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 230.745659][ T539] usb 4-1: config 0 has no interface number 0 [ 230.753205][ T539] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 230.762387][ T539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.770425][ T539] usb 4-1: Product: syz [ 230.774596][ T539] usb 4-1: Manufacturer: syz [ 230.779200][ T539] usb 4-1: SerialNumber: syz [ 230.784774][ T539] usb 4-1: config 0 descriptor?? [ 231.029498][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 231.029512][ T28] audit: type=1400 audit(1761735790.555:752): avc: denied { setopt } for pid=2271 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.075707][ T28] audit: type=1400 audit(1761735790.595:753): avc: denied { read } for pid=2271 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.088542][ T2273] 9pnet_fd: Insufficient options for proto=fd [ 231.126315][ T28] audit: type=1326 audit(1761735790.655:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.127962][ T345] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 231.164741][ T28] audit: type=1326 audit(1761735790.655:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.187994][ T345] usb 3-1: No valid video chain found. [ 231.195648][ T539] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 231.202816][ T539] usb 4-1: No valid video chain found. [ 231.209618][ T539] usb 4-1: USB disconnect, device number 21 [ 231.218668][ T345] usb 3-1: USB disconnect, device number 22 [ 231.224705][ T19] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 231.235331][ T28] audit: type=1326 audit(1761735790.655:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.316658][ T28] audit: type=1326 audit(1761735790.655:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.339848][ T28] audit: type=1326 audit(1761735790.655:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.363065][ T28] audit: type=1326 audit(1761735790.655:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.396897][ T28] audit: type=1326 audit(1761735790.655:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.431001][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.444217][ T2278] loop1: detected capacity change from 0 to 256 [ 231.455620][ T28] audit: type=1326 audit(1761735790.685:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c3b8efc9 code=0x7ffc0000 [ 231.459956][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.489273][ T2278] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 231.528482][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.551640][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.569955][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.587454][ T19] usb 5-1: config 0 descriptor?? [ 231.775196][ T2282] loop2: detected capacity change from 0 to 1024 [ 231.808105][ T2282] EXT4-fs: Ignoring removed i_version option [ 231.814519][ T2282] EXT4-fs (loop2): Test dummy encryption mode enabled [ 231.858236][ T2282] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.899937][ T340] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 231.966566][ T2282] fscrypt: AES-256-XTS using blk-crypto-fallback [ 232.024410][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 232.030401][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 232.056765][ T286] EXT4-fs (loop2): unmounting filesystem. [ 232.064379][ T19] usb 5-1: USB disconnect, device number 21 [ 232.091059][ T340] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.116059][ T340] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.123572][ T2284] loop3: detected capacity change from 0 to 40427 [ 232.137971][ T2284] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 232.149638][ T2284] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 232.160649][ T2284] F2FS-fs (loop3): invalid crc value [ 232.176972][ T340] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.177818][ T2290] loop2: detected capacity change from 0 to 128 [ 232.192633][ T2290] FAT-fs (loop2): Unrecognized mount option "184467440737095516157" or missing value [ 232.202540][ T340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.211434][ T2284] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.230164][ T340] usb 6-1: SerialNumber: syz [ 232.243924][ T611] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.288500][ T2284] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 232.297455][ T2284] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 232.456642][ T340] usb 6-1: 0:2 : does not exist [ 232.462008][ T340] usb 6-1: unit 5 not found! [ 232.490655][ T340] usb 6-1: USB disconnect, device number 16 [ 232.830834][ T2310] loop4: detected capacity change from 0 to 2048 [ 232.902018][ T2310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.919658][ T2310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.514: bg 0: block 234: padding at end of block bitmap is not set [ 232.957372][ T2310] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 232.969804][ T2310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 232.969804][ T2310] [ 232.979475][ T2310] EXT4-fs (loop4): Total free blocks count 0 [ 232.985469][ T2310] EXT4-fs (loop4): Free/Dirty block details [ 232.991362][ T2310] EXT4-fs (loop4): free_blocks=0 [ 232.996293][ T2310] EXT4-fs (loop4): dirty_blocks=16 [ 233.001407][ T2310] EXT4-fs (loop4): Block reservation details [ 233.007372][ T2310] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 233.623652][ T287] EXT4-fs (loop4): unmounting filesystem. [ 233.651042][ T2317] loop2: detected capacity change from 0 to 256 [ 233.788775][ T2321] loop1: detected capacity change from 0 to 512 [ 233.807237][ T2322] loop5: detected capacity change from 0 to 512 [ 233.824891][ T2321] EXT4-fs: Ignoring removed i_version option [ 233.831251][ T2321] EXT4-fs: Ignoring removed bh option [ 233.857715][ T2322] EXT4-fs: Ignoring removed i_version option [ 233.864634][ T2322] EXT4-fs: Ignoring removed bh option [ 233.873440][ T2321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.882996][ T2321] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.912537][ T2322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 233.921722][ T2322] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.948020][ T2322] netlink: 44 bytes leftover after parsing attributes in process `syz.5.517'. [ 233.950014][ T19] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.957076][ T2322] netlink: 43 bytes leftover after parsing attributes in process `syz.5.517'. [ 233.973454][ T2322] netlink: 'syz.5.517': attribute type 6 has an invalid length. [ 233.980007][ T340] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 233.981156][ T2322] netlink: 'syz.5.517': attribute type 5 has an invalid length. [ 233.981171][ T2322] netlink: 43 bytes leftover after parsing attributes in process `syz.5.517'. [ 234.027605][ T2328] loop3: detected capacity change from 0 to 512 [ 234.039787][ T283] EXT4-fs (loop1): unmounting filesystem. [ 234.052202][ T2328] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 234.065436][ T2330] loop1: detected capacity change from 0 to 256 [ 234.074526][ T2330] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 234.187075][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.197236][ T340] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 234.205455][ T340] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 234.217197][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.226151][ T340] usb 3-1: config 0 has no interface number 0 [ 234.233453][ T19] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.243193][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.251525][ T19] usb 5-1: SerialNumber: syz [ 234.256562][ T340] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 234.269882][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.278976][ T340] usb 3-1: Product: syz [ 234.283471][ T340] usb 3-1: Manufacturer: syz [ 234.288708][ T2333] syz.3.519[2333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.288792][ T2333] syz.3.519[2333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.304466][ T2333] loop3: detected capacity change from 0 to 128 [ 234.327772][ T340] usb 3-1: SerialNumber: syz [ 234.333894][ T340] usb 3-1: config 0 descriptor?? [ 234.480608][ T19] usb 5-1: 0:2 : does not exist [ 234.488940][ T19] usb 5-1: unit 255 not found! [ 234.496942][ T19] usb 5-1: 5:0: cannot get min/max values for control 7 (id 5) [ 234.507118][ T774] EXT4-fs (loop5): unmounting filesystem. [ 234.551110][ T19] usb 5-1: USB disconnect, device number 22 [ 234.553066][ T2336] loop5: detected capacity change from 0 to 256 [ 234.574964][ T2336] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 234.630424][ T651] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.760533][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.763010][ T340] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 234.816250][ T340] usb 3-1: No valid video chain found. [ 234.843724][ T340] usb 3-1: USB disconnect, device number 23 [ 235.329381][ T2347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 235.498677][ T2349] loop4: detected capacity change from 0 to 256 [ 235.520296][ T2349] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 235.560571][ T611] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.572642][ T2353] loop5: detected capacity change from 0 to 256 [ 235.620849][ T2355] loop3: detected capacity change from 0 to 4096 [ 235.629774][ T2355] EXT4-fs (loop3): Test dummy encryption mode enabled [ 235.637718][ T2355] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.021694][ T340] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 236.068719][ T342] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 236.571106][ T340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.579313][ T342] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 236.582047][ T340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.589336][ T342] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 236.599938][ T284] EXT4-fs (loop3): unmounting filesystem. [ 236.608846][ T342] usb 6-1: config 0 has no interface number 0 [ 236.615327][ T340] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.622442][ T342] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 236.638799][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.646979][ T342] usb 6-1: Product: syz [ 236.651290][ T342] usb 6-1: Manufacturer: syz [ 236.655928][ T342] usb 6-1: SerialNumber: syz [ 236.657014][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.668840][ T340] usb 3-1: SerialNumber: syz [ 236.673152][ T342] usb 6-1: config 0 descriptor?? [ 236.781784][ T2368] loop3: detected capacity change from 0 to 512 [ 236.788366][ T2368] EXT4-fs: Ignoring removed i_version option [ 236.794642][ T2368] EXT4-fs: Ignoring removed bh option [ 236.821761][ T2368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.830943][ T2368] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.905233][ T340] usb 3-1: 0:2 : does not exist [ 236.926145][ T340] usb 3-1: unit 255 not found! [ 236.937664][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 236.937677][ T28] audit: type=1400 audit(1761735796.465:773): avc: denied { connect } for pid=2378 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.965217][ T340] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5) [ 236.984894][ T28] audit: type=1400 audit(1761735796.505:774): avc: denied { ioctl } for pid=2378 comm="syz.1.533" path="socket:[23677]" dev="sockfs" ino=23677 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.992218][ T340] usb 3-1: USB disconnect, device number 24 [ 237.113447][ T342] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 237.120162][ T342] usb 6-1: No valid video chain found. [ 237.140189][ T342] usb 6-1: USB disconnect, device number 17 [ 237.168146][ T2383] netlink: 272 bytes leftover after parsing attributes in process `syz.4.532'. [ 237.519160][ T284] EXT4-fs (loop3): unmounting filesystem. [ 237.845030][ T2396] loop5: detected capacity change from 0 to 256 [ 237.977449][ T2398] FAULT_INJECTION: forcing a failure. [ 237.977449][ T2398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.990561][ T2398] CPU: 1 PID: 2398 Comm: syz.2.536 Not tainted syzkaller #0 [ 237.997846][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.007897][ T2398] Call Trace: [ 238.011168][ T2398] [ 238.014095][ T2398] __dump_stack+0x21/0x24 [ 238.018420][ T2398] dump_stack_lvl+0xee/0x150 [ 238.023000][ T2398] ? __cfi_dump_stack_lvl+0x8/0x8 [ 238.028020][ T2398] ? should_fail_ex+0x15f/0x520 [ 238.032864][ T2398] dump_stack+0x15/0x24 [ 238.037011][ T2398] should_fail_ex+0x3d4/0x520 [ 238.041686][ T2398] should_fail+0xb/0x10 [ 238.045838][ T2398] should_fail_usercopy+0x1a/0x20 [ 238.050863][ T2398] _copy_to_user+0x1e/0x90 [ 238.055288][ T2398] sk_getsockopt+0x1623/0x1e30 [ 238.060038][ T2398] ? __cfi_sk_getsockopt+0x10/0x10 [ 238.065127][ T2398] ? __cfi_avc_has_perm+0x10/0x10 [ 238.070131][ T2398] ? selinux_socket_getsockopt+0x208/0x2e0 [ 238.075914][ T2398] ? __cfi_selinux_socket_getsockopt+0x10/0x10 [ 238.082047][ T2398] ? finish_task_switch+0x16b/0x7b0 [ 238.087221][ T2398] sock_getsockopt+0x74/0xa0 [ 238.091788][ T2398] __sys_getsockopt+0x1a7/0x4a0 [ 238.096621][ T2398] __x64_sys_getsockopt+0xbf/0xd0 [ 238.101637][ T2398] x64_sys_call+0x3d/0x9a0 [ 238.106030][ T2398] do_syscall_64+0x4c/0xa0 [ 238.110426][ T2398] ? clear_bhb_loop+0x30/0x80 [ 238.115083][ T2398] ? clear_bhb_loop+0x30/0x80 [ 238.119738][ T2398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.125607][ T2398] RIP: 0033:0x7f16c3b8efc9 [ 238.130001][ T2398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.149581][ T2398] RSP: 002b:00007f16c25b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 238.157971][ T2398] RAX: ffffffffffffffda RBX: 00007f16c3de6180 RCX: 00007f16c3b8efc9 [ 238.165919][ T2398] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000009 [ 238.173867][ T2398] RBP: 00007f16c25b5090 R08: 0000200000000080 R09: 0000000000000000 [ 238.181823][ T2398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.189770][ T2398] R13: 00007f16c3de6218 R14: 00007f16c3de6180 R15: 00007ffd0ded2cb8 [ 238.190046][ T340] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 238.197725][ T2398] [ 238.199265][ T450] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 238.221337][ T2394] loop4: detected capacity change from 0 to 512 [ 238.228289][ T2394] EXT4-fs: Ignoring removed i_version option [ 238.234388][ T2394] EXT4-fs: Ignoring removed bh option [ 238.251708][ T2394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.261819][ T2394] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.284201][ T2394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.537'. [ 238.309610][ T2394] netlink: 43 bytes leftover after parsing attributes in process `syz.4.537'. [ 238.318648][ T2394] netlink: 'syz.4.537': attribute type 6 has an invalid length. [ 238.326741][ T2394] netlink: 'syz.4.537': attribute type 5 has an invalid length. [ 238.334380][ T2394] netlink: 43 bytes leftover after parsing attributes in process `syz.4.537'. [ 238.361745][ T287] EXT4-fs (loop4): unmounting filesystem. [ 238.411024][ T450] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.421191][ T450] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.421295][ T340] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 238.430989][ T450] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.438207][ T340] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 238.447407][ T450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.457530][ T340] usb 6-1: config 0 has no interface number 0 [ 238.465629][ T450] usb 4-1: SerialNumber: syz [ 238.473048][ T340] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 238.485186][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.493250][ T340] usb 6-1: Product: syz [ 238.497452][ T340] usb 6-1: Manufacturer: syz [ 238.502088][ T340] usb 6-1: SerialNumber: syz [ 238.507371][ T340] usb 6-1: config 0 descriptor?? [ 238.644340][ T28] audit: type=1326 audit(1761735798.175:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.673056][ T28] audit: type=1326 audit(1761735798.175:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.697493][ T28] audit: type=1326 audit(1761735798.175:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.727978][ T28] audit: type=1326 audit(1761735798.175:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.751359][ T28] audit: type=1326 audit(1761735798.175:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.774724][ T28] audit: type=1326 audit(1761735798.175:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.802248][ T2404] incfs: Can't find or create .index dir in ./file0 [ 238.808908][ T2404] incfs: mount failed -14 [ 238.813474][ T28] audit: type=1326 audit(1761735798.175:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.815559][ T450] usb 4-1: 0:2 : does not exist [ 238.837077][ T28] audit: type=1326 audit(1761735798.175:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2403 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084178efc9 code=0x7ffc0000 [ 238.902747][ T450] usb 4-1: USB disconnect, device number 22 [ 238.931867][ T2410] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 239.102428][ T340] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 239.108801][ T340] usb 6-1: No valid video chain found. [ 239.124559][ T340] usb 6-1: USB disconnect, device number 18 [ 239.189938][ T342] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 239.270591][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 239.370913][ T342] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 239.379046][ T342] usb 2-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 239.389363][ T342] usb 2-1: config 0 has no interface number 0 [ 239.396686][ T342] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 239.405752][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.413734][ T342] usb 2-1: Product: syz [ 239.417882][ T342] usb 2-1: Manufacturer: syz [ 239.422483][ T342] usb 2-1: SerialNumber: syz [ 239.427860][ T342] usb 2-1: config 0 descriptor?? [ 239.714294][ T2423] FAULT_INJECTION: forcing a failure. [ 239.714294][ T2423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.727755][ T2423] CPU: 0 PID: 2423 Comm: syz.3.547 Not tainted syzkaller #0 [ 239.735054][ T2423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.745109][ T2423] Call Trace: [ 239.748381][ T2423] [ 239.751309][ T2423] __dump_stack+0x21/0x24 [ 239.755641][ T2423] dump_stack_lvl+0xee/0x150 [ 239.760228][ T2423] ? __cfi_dump_stack_lvl+0x8/0x8 [ 239.765246][ T2423] dump_stack+0x15/0x24 [ 239.769383][ T2423] should_fail_ex+0x3d4/0x520 [ 239.774046][ T2423] should_fail+0xb/0x10 [ 239.778187][ T2423] should_fail_usercopy+0x1a/0x20 [ 239.783200][ T2423] strncpy_from_user+0x24/0x2d0 [ 239.788033][ T2423] ? getname_flags+0xb9/0x500 [ 239.792697][ T2423] getname_flags+0xf4/0x500 [ 239.797184][ T2423] user_path_at_empty+0x30/0x1c0 [ 239.802100][ T2423] __se_sys_pivot_root+0x17f/0xc40 [ 239.807201][ T2423] ? bpf_trace_run2+0x104/0x250 [ 239.812035][ T2423] ? fput+0x154/0x1a0 [ 239.816000][ T2423] ? __x64_sys_pivot_root+0x70/0x70 [ 239.821186][ T2423] ? ksys_write+0x1eb/0x240 [ 239.825672][ T2423] ? __cfi_ksys_write+0x10/0x10 [ 239.830506][ T2423] ? __bpf_trace_sys_enter+0x62/0x70 [ 239.835770][ T2423] __x64_sys_pivot_root+0x5b/0x70 [ 239.840781][ T2423] x64_sys_call+0x855/0x9a0 [ 239.845266][ T2423] do_syscall_64+0x4c/0xa0 [ 239.849662][ T2423] ? clear_bhb_loop+0x30/0x80 [ 239.854321][ T2423] ? clear_bhb_loop+0x30/0x80 [ 239.858982][ T2423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.864859][ T2423] RIP: 0033:0x7f629b98efc9 [ 239.869259][ T2423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.888843][ T2423] RSP: 002b:00007f629c856038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 239.897236][ T2423] RAX: ffffffffffffffda RBX: 00007f629bbe5fa0 RCX: 00007f629b98efc9 [ 239.905188][ T2423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.913141][ T2423] RBP: 00007f629c856090 R08: 0000000000000000 R09: 0000000000000000 [ 239.921088][ T2423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.929041][ T2423] R13: 00007f629bbe6038 R14: 00007f629bbe5fa0 R15: 00007ffd22fadaa8 [ 239.936995][ T2423] [ 239.946169][ T342] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 239.954850][ T342] usb 2-1: No valid video chain found. [ 239.967988][ T342] usb 2-1: USB disconnect, device number 18 [ 239.976595][ T2424] loop2: detected capacity change from 0 to 512 [ 240.002674][ T2424] EXT4-fs: Ignoring removed i_version option [ 240.015365][ T2424] EXT4-fs: Ignoring removed bh option [ 240.242789][ T2434] loop4: detected capacity change from 0 to 512 [ 240.249463][ T2434] EXT4-fs: Ignoring removed nobh option [ 240.403726][ T2424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.412886][ T2424] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.412906][ T2434] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.551: corrupted inode contents [ 240.435030][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.442076][ T2434] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.551: mark_inode_dirty error [ 240.453825][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.460558][ T2434] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.551: corrupted inode contents [ 240.472560][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.479062][ T2434] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.551: mark_inode_dirty error [ 240.490390][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.497117][ T2434] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.551: Failed to acquire dquot type 0 [ 240.509012][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.515846][ T2434] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.551: corrupted inode contents [ 240.547116][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.553705][ T2434] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.551: mark_inode_dirty error [ 240.565821][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.572379][ T2434] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.551: corrupted inode contents [ 240.584688][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.591271][ T2434] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.551: mark_inode_dirty error [ 240.602920][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.609455][ T2434] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.551: corrupted inode contents [ 240.621952][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.628475][ T2434] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 240.629013][ T286] EXT4-fs (loop2): unmounting filesystem. [ 240.643902][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.650493][ T2434] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.551: corrupted inode contents [ 240.662406][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.668906][ T2434] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.551: mark_inode_dirty error [ 240.680147][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.686651][ T2434] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 240.695752][ T2434] EXT4-fs (loop4): Remounting filesystem read-only [ 240.702452][ T2434] EXT4-fs (loop4): 1 truncate cleaned up [ 240.708075][ T2434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 240.717009][ T2434] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.809431][ T2445] loop3: detected capacity change from 0 to 512 [ 240.823132][ T2445] EXT4-fs: Ignoring removed i_version option [ 240.829304][ T2445] EXT4-fs: Ignoring removed bh option [ 240.841430][ T2445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.850435][ T19] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 240.858324][ T2445] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.873342][ T2445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.550'. [ 240.884462][ T2445] netlink: 43 bytes leftover after parsing attributes in process `syz.3.550'. [ 240.918718][ T2445] netlink: 'syz.3.550': attribute type 6 has an invalid length. [ 240.926540][ T2445] netlink: 'syz.3.550': attribute type 5 has an invalid length. [ 240.934220][ T2445] netlink: 43 bytes leftover after parsing attributes in process `syz.3.550'. [ 240.943682][ T287] EXT4-fs (loop4): unmounting filesystem. [ 241.045846][ T2454] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 241.249984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.370479][ T340] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 241.418723][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.684819][ T2456] loop4: detected capacity change from 0 to 256 [ 241.691520][ T2456] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 241.839096][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.881303][ T611] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.884186][ T2458] loop1: detected capacity change from 0 to 1024 [ 241.898104][ T19] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.904763][ T2458] ext4: Unknown parameter 'smackfsdef' [ 241.923001][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.924529][ T284] EXT4-fs (loop3): unmounting filesystem. [ 241.938430][ T19] usb 6-1: SerialNumber: syz [ 241.944772][ T340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.969225][ T340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.359173][ T651] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.391462][ T2458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2604 sclass=netlink_route_socket pid=2458 comm=syz.1.556 [ 242.405642][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 242.405655][ T28] audit: type=1400 audit(1761735801.935:807): avc: denied { map } for pid=2457 comm="syz.1.556" path="socket:[22990]" dev="sockfs" ino=22990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.448303][ T28] audit: type=1400 audit(1761735801.965:808): avc: denied { read accept } for pid=2457 comm="syz.1.556" path="socket:[22990]" dev="sockfs" ino=22990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.589009][ T19] usb 6-1: 0:2 : does not exist [ 242.594278][ T19] usb 6-1: unit 255 not found! [ 242.599406][ T340] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.600471][ T28] audit: type=1400 audit(1761735802.125:809): avc: denied { rename } for pid=2464 comm="syz.4.558" name="bus" dev="incremental-fs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.608563][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.636474][ T28] audit: type=1400 audit(1761735802.125:810): avc: denied { connect } for pid=2464 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.639564][ T340] usb 3-1: SerialNumber: syz [ 242.658814][ T287] ------------[ cut here ]------------ [ 242.663875][ T28] audit: type=1400 audit(1761735802.125:811): avc: denied { ioctl } for pid=2464 comm="syz.4.558" path="socket:[23062]" dev="sockfs" ino=23062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.668571][ T287] WARNING: CPU: 1 PID: 287 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 242.693867][ T19] usb 6-1: 5:0: cannot get min/max values for control 7 (id 5) [ 242.700991][ T287] Modules linked in: [ 242.701010][ T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 242.701030][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.701039][ T287] RIP: 0010:drop_nlink+0xc5/0x110 [ 242.701062][ T287] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 242.701076][ T287] RSP: 0018:ffffc90000a67c38 EFLAGS: 00010293 [ 242.701091][ T287] RAX: ffffffff81c3ab85 RBX: ffff888132094bd8 RCX: ffff88810cfb0000 [ 242.701105][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.701116][ T287] RBP: ffffc90000a67c60 R08: 0000000000000004 R09: 0000000000000003 [ 242.701128][ T287] R10: fffff5200014cf78 R11: 1ffff9200014cf78 R12: dffffc0000000000 [ 242.701142][ T287] R13: 1ffff11026412984 R14: ffff888132094c20 R15: 0000000000000000 [ 242.701154][ T287] FS: 00005555735cc500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 242.701170][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.713688][ T19] usb 6-1: USB disconnect, device number 19 [ 242.720167][ T287] CR2: 00005555735ef4e8 CR3: 000000012feeb000 CR4: 00000000003526a0 [ 242.730280][ T28] audit: type=1400 audit(1761735802.125:812): avc: denied { write } for pid=2464 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.735241][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.735258][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.735271][ T287] Call Trace: [ 242.868601][ T287] [ 242.871576][ T287] shmem_rmdir+0x5b/0x90 [ 242.875837][ T287] vfs_rmdir+0x393/0x500 [ 242.880107][ T287] incfs_kill_sb+0x105/0x220 [ 242.884699][ T287] deactivate_locked_super+0xb5/0x120 [ 242.890157][ T287] deactivate_super+0xaf/0xe0 [ 242.894837][ T287] cleanup_mnt+0x45f/0x4e0 [ 242.899250][ T287] __cleanup_mnt+0x19/0x20 [ 242.903699][ T287] task_work_run+0x1db/0x240 [ 242.908292][ T287] ? __cfi_task_work_run+0x10/0x10 [ 242.911480][ T340] usb 3-1: 0:2 : does not exist [ 242.913431][ T287] ? __x64_sys_umount+0x125/0x160 [ 242.919781][ T340] usb 3-1: unit 255 not found! [ 242.923269][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 242.923295][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 242.934377][ T340] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5) [ 242.938618][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 242.938642][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 242.951719][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.957166][ T287] do_syscall_64+0x58/0xa0 [ 242.957189][ T287] ? clear_bhb_loop+0x30/0x80 [ 242.975164][ T340] usb 3-1: USB disconnect, device number 25 [ 242.977256][ T287] ? clear_bhb_loop+0x30/0x80 [ 242.992510][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.998409][ T287] RIP: 0033:0x7f08417902f7 [ 243.002847][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 243.022481][ T287] RSP: 002b:00007ffc2e455128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 243.031009][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08417902f7 [ 243.038977][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e4551e0 [ 243.046968][ T287] RBP: 00007ffc2e4551e0 R08: 0000000000000000 R09: 0000000000000000 [ 243.054958][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2e456270 [ 243.062952][ T287] R13: 00007f0841811d7d R14: 000000000003b3b3 R15: 00007ffc2e4562b0 [ 243.070935][ T287] [ 243.073939][ T287] ---[ end trace 0000000000000000 ]--- [ 243.079478][ T287] ================================================================== [ 243.087530][ T287] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 243.093757][ T287] Write of size 4 at addr 0000000000000170 by task syz-executor/287 [ 243.101710][ T287] [ 243.104014][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 243.112929][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.122961][ T287] Call Trace: [ 243.126222][ T287] [ 243.129133][ T287] __dump_stack+0x21/0x24 [ 243.133442][ T287] dump_stack_lvl+0xee/0x150 [ 243.138009][ T287] ? __cfi_dump_stack_lvl+0x8/0x8 [ 243.143014][ T287] ? ihold+0x20/0x60 [ 243.146891][ T287] ? ihold+0x20/0x60 [ 243.150763][ T287] print_report+0x3d/0x60 [ 243.155079][ T287] kasan_report+0x122/0x150 [ 243.159561][ T287] ? ihold+0x20/0x60 [ 243.163438][ T287] kasan_check_range+0x280/0x290 [ 243.168357][ T287] __kasan_check_write+0x14/0x20 [ 243.173271][ T287] ihold+0x20/0x60 [ 243.176971][ T287] vfs_rmdir+0x25f/0x500 [ 243.181193][ T287] incfs_kill_sb+0x105/0x220 [ 243.185764][ T287] deactivate_locked_super+0xb5/0x120 [ 243.191118][ T287] deactivate_super+0xaf/0xe0 [ 243.195773][ T287] cleanup_mnt+0x45f/0x4e0 [ 243.200167][ T287] __cleanup_mnt+0x19/0x20 [ 243.204558][ T287] task_work_run+0x1db/0x240 [ 243.209131][ T287] ? __cfi_task_work_run+0x10/0x10 [ 243.214220][ T287] ? __x64_sys_umount+0x125/0x160 [ 243.219227][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 243.224579][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 243.229757][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 243.235194][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 243.240633][ T287] do_syscall_64+0x58/0xa0 [ 243.245027][ T287] ? clear_bhb_loop+0x30/0x80 [ 243.249689][ T287] ? clear_bhb_loop+0x30/0x80 [ 243.254344][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.260219][ T287] RIP: 0033:0x7f08417902f7 [ 243.264612][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 243.284195][ T287] RSP: 002b:00007ffc2e455128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 243.292586][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08417902f7 [ 243.300536][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e4551e0 [ 243.308483][ T287] RBP: 00007ffc2e4551e0 R08: 0000000000000000 R09: 0000000000000000 [ 243.316430][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2e456270 [ 243.324379][ T287] R13: 00007f0841811d7d R14: 000000000003b3b3 R15: 00007ffc2e4562b0 [ 243.332331][ T287] [ 243.335328][ T287] ================================================================== [ 243.374768][ T287] Disabling lock debugging due to kernel taint [ 243.381192][ T287] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 243.388996][ T287] #PF: supervisor write access in kernel mode [ 243.395062][ T287] #PF: error_code(0x0002) - not-present page [ 243.401046][ T287] PGD 1322eb067 P4D 1322eb067 PUD 0 [ 243.406323][ T287] Oops: 0002 [#1] PREEMPT SMP KASAN [ 243.411504][ T287] CPU: 1 PID: 287 Comm: syz-executor Tainted: G B W syzkaller #0 [ 243.420415][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.430627][ T287] RIP: 0010:ihold+0x26/0x60 [ 243.435120][ T287] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 243.454709][ T287] RSP: 0018:ffffc90000a67c78 EFLAGS: 00010246 [ 243.460758][ T287] RAX: ffff88810cfb0000 RBX: 0000000000000000 RCX: ffff88810cfb0000 [ 243.468712][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.476660][ T287] RBP: ffffc90000a67c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 243.484614][ T287] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888132094be4 [ 243.492563][ T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 243.500513][ T287] FS: 00005555735cc500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 243.509427][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.516001][ T287] CR2: 0000000000000170 CR3: 000000012feeb000 CR4: 00000000003506a0 [ 243.523971][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.531940][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.539900][ T287] Call Trace: [ 243.543173][ T287] [ 243.546088][ T287] vfs_rmdir+0x25f/0x500 [ 243.550318][ T287] incfs_kill_sb+0x105/0x220 [ 243.554899][ T287] deactivate_locked_super+0xb5/0x120 [ 243.560256][ T287] deactivate_super+0xaf/0xe0 [ 243.564926][ T287] cleanup_mnt+0x45f/0x4e0 [ 243.569324][ T287] __cleanup_mnt+0x19/0x20 [ 243.573720][ T287] task_work_run+0x1db/0x240 [ 243.578293][ T287] ? __cfi_task_work_run+0x10/0x10 [ 243.583384][ T287] ? __x64_sys_umount+0x125/0x160 [ 243.588391][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 243.593743][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 243.598925][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 243.604364][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 243.609807][ T287] do_syscall_64+0x58/0xa0 [ 243.614201][ T287] ? clear_bhb_loop+0x30/0x80 [ 243.618862][ T287] ? clear_bhb_loop+0x30/0x80 [ 243.623521][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.629398][ T287] RIP: 0033:0x7f08417902f7 [ 243.633794][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 243.653377][ T287] RSP: 002b:00007ffc2e455128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 243.661777][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08417902f7 [ 243.669727][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e4551e0 [ 243.677677][ T287] RBP: 00007ffc2e4551e0 R08: 0000000000000000 R09: 0000000000000000 [ 243.685627][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2e456270 [ 243.693585][ T287] R13: 00007f0841811d7d R14: 000000000003b3b3 R15: 00007ffc2e4562b0 [ 243.701555][ T287] [ 243.704561][ T287] Modules linked in: [ 243.708450][ T287] CR2: 0000000000000170 [ 243.712582][ T287] ---[ end trace 0000000000000000 ]--- [ 243.718013][ T287] RIP: 0010:ihold+0x26/0x60 [ 243.722507][ T287] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 243.742091][ T287] RSP: 0018:ffffc90000a67c78 EFLAGS: 00010246 [ 243.748138][ T287] RAX: ffff88810cfb0000 RBX: 0000000000000000 RCX: ffff88810cfb0000 [ 243.756088][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.764041][ T287] RBP: ffffc90000a67c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 243.771994][ T287] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888132094be4 [ 243.779949][ T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 243.787901][ T287] FS: 00005555735cc500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 243.796808][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.803370][ T287] CR2: 0000000000000170 CR3: 000000012feeb000 CR4: 00000000003506a0 [ 243.811326][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.819275][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.827229][ T287] Kernel panic - not syncing: Fatal exception [ 243.833495][ T287] Kernel Offset: disabled [ 243.837797][ T287] Rebooting in 86400 seconds..