last executing test programs: 1m13.283143873s ago: executing program 0 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', ',@\x00'}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) 1m12.376248872s ago: executing program 0 (id=155): write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) 1m12.30218888s ago: executing program 0 (id=156): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x48223000) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000180)=0x0) exit(0x0) timer_delete(r1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r10}, 0x10) 1m11.08063092s ago: executing program 0 (id=160): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x26d, &(0x7f00000005c0)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffe3, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x1a0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x84) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000044d564b0000"]) r6 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0xffffffffffffff9b}, {&(0x7f0000000400)=""/42, 0x28}, {&(0x7f0000000340)=""/107, 0xbf}], 0x3}}], 0x40001ec, 0x8103, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0xec, 0x60, 0x0, 0x0) 1m9.04107399s ago: executing program 0 (id=175): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/705], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r8, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r8, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r6}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 1m8.95179883s ago: executing program 0 (id=177): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r1) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE(r0, 0x0, 0x0) 1m8.913865883s ago: executing program 32 (id=177): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r1) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE(r0, 0x0, 0x0) 22.23420029s ago: executing program 2 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1818738200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x40, 0x4, 0x8}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r2, r7, 0x1, 0x0, 0x0, 0x59, 0xf, 0xb5f, 0x12, 0x9, 0x1, 0x80000008, 'syz0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0xffffff61, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x38, 0x0, &(0x7f0000000100)=[@dead_binder_done, @register_looper, @increfs_done, @exit_looper, @request_death={0x400c630e, 0x3}], 0x8f, 0x0, &(0x7f0000000440)="f9c9d423b35edde79d795bcb3c8c4c1c064b6d078c3aa1e0de1eca9769f2b39db9c8e6547d26760bfe43fd06126565e9a4d899c92144037f3ee311c9319f57aa49446197087168cae8ac78ef5a62ed31cf497857cbf63e5d2aa90c68b328e25ff3c0d0eff399d7529a693e6d73c57686104e427ea719949e4dbf2c8ac269d3eca3576e439dd13c286c100788ca0623"}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) splice(r12, &(0x7f0000000500)=0x5, r8, &(0x7f0000000540)=0x1, 0x10000, 0x8) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 21.812241581s ago: executing program 2 (id=439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/56, 0x38}], 0x1, &(0x7f0000000280)=""/169, 0xa9}}], 0x1, 0x120, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r9 = syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 19.511765968s ago: executing program 2 (id=440): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) inotify_init() r5 = timerfd_create(0x8, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000100}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") chdir(&(0x7f00000001c0)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x34}, {0x0, 0x0, 0xfd}, {}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3}, {0x200}, {0x0, 0xa}, {}, {}, {}, {}, {}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 18.564706361s ago: executing program 2 (id=449): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000200", @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000480)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xe5, 0x1}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000340)={r0, 0x0, 0x80000001}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_create(0x4) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.757991329s ago: executing program 2 (id=453): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000a40)={[{@journal_path={'journal_path', 0x3d, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x0, 0x4b6, &(0x7f0000001400)="$eJzs3M1rHOUfAPDvbF763uTXX622thqtYvAladKqPXhQUfCgIOihHmOS1tptI00EW4KNIvUoBe/iUfAv8OZF1IMIXhU8SqFoEJp6kMjMzjTJZrPZvHWb7OcDm32emWfzPN+ZeXafnWdnAmhZPemfJGJ3RPwaEV2V7MICPZWnmenJ4VvTk8NJzM6+8WeSlbs5PTlcFC1etyvP9JYiSp8k8XyyuN7xS5fPDZXLoxfzfP/E+ff6xy9dfurs+aEzo2dGLwyePHni+MCzzww+3UgYbcsVSOO6eejDscMHX3nr2mvDp669/cPXabMOHKmsnx/Hsm4VAU3VLdaTbrW/ZjPV6x5tuLLNYc+8dNLexIawImnHSXdXR9b/u6It5nZeV7z8cVMbB2yo9LNp29Krp2aBLSyJZrcAaI7igz79/ls87tDQ465w44WIzqicr5iZnhyeuR1/e5TyMh0bWH9PRJya+ueL9BErPQ8BALAK2djmyVrjv1IcyJ4rcx178zmU7oj4X0Tsi4j/R8T+iLgnIit7b0TcV3nxbFeD9fdU5RePf0rXa7Z5naTjv+dibuw3My/+/Km7Lc/tyeLvSE6fLY8ey7dJb3RsS/MDder49qVfPltq3fzxX/pI6y/GgnkDrrdXnaAbGZoYWq+NcOOjiEPtteJPbs8EpEfAwYg4FIvnserYWyTOPv7V4aUKLR9/HeswzzT7ZcRjlf0/FVXxF5L685P926M8eqy/OCoW+/Hnq68vWDBvtnJN8a+DdP/vXHj8V5Xo+jupzNd2RLk8enF85XVc/e3TJb/TrOT4Lw759PjvTN7M5qx/eqeyoz4Ympi4OBDRmbyalenMy2bLB+f+W5Evyqfx9x6t3f/35a9JK7g/ItKD+EhEPBARD+ZtfygiHo6Io3Xi//7FR96tE38SSTR1/4/UfP+7ffx3J/Pn61eRaDv33Tc1fgKQaWz/n8hm2nvzJdn73zIabeAaNx8AAABsCqWI2B1Jqa+S7tkdpVJfX+U3/PtjZ6k8Nj7xxOmx9y+MVK4R6I6OUnGmq2ve+dCBpPgtfCU/mJ8rLtYfz88bf962I8v3DY+VR5ocO7S6XQv7fxT9P/XHslfVAJue67WgdVX3/1KT2gHceY18/vsuAFtTjf6/oxntAO483/+hddXq/1eq8sb/sDW1L0r8XuOWdcBWZPwPrUv/h9al/0NLWst1/atPFBcLrP7/bG/4Cv+GEsU7YFO2RoOJK/XLFHe82Mhm7Ii5JVG6OzZLzcS/+e0t75b2rDmR9pgFSyKS2NBK5+6hAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsJn9FwAA//9TYejO") r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 16.081968296s ago: executing program 2 (id=460): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)}], 0x1}}], 0x2, 0x4004044) 14.818729801s ago: executing program 33 (id=460): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)}], 0x1}}], 0x2, 0x4004044) 8.915479592s ago: executing program 4 (id=480): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000001c0)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x2, 0xffffffff, 0x9f, 0xd, 0x8000005, 0x8001}) 6.944563916s ago: executing program 3 (id=488): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x10, 0x4, &(0x7f0000002440)=ANY=[], 0x0, 0x2006, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0xcb0a) 6.838407656s ago: executing program 1 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000b40)=ANY=[]) 6.794430831s ago: executing program 1 (id=490): getrlimit(0xa, &(0x7f0000000000)) 6.721115318s ago: executing program 1 (id=492): r0 = open(0x0, 0x14927e, 0x68) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) fallocate(r0, 0x0, 0x0, 0x1001ed) fallocate(r0, 0x3, 0xf00, 0x10000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) copy_file_range(r3, &(0x7f00000000c0)=0xe, r0, 0x0, 0x1ff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0xfffffffe, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x4, 0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103"], 0x0) 6.266696532s ago: executing program 4 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) ppoll(&(0x7f0000000040)=[{r3, 0x3273}, {r1}], 0x2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x10, r3, &(0x7f00000000c0)=0x7ff, 0x5, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x7, 0xcc, 0xbc1, 0x80000, 0xfffffffc, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x803, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0xbd08, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x4, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) 6.126207426s ago: executing program 4 (id=495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000869000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) 5.964744712s ago: executing program 3 (id=496): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 5.78415459s ago: executing program 6 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x27}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.558627612s ago: executing program 6 (id=498): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000140), &(0x7f0000000200)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000005000000800400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x7de, 0x101, 0x0, 0x8, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) r7 = socket(0x10, 0x80003, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r7, 0x0, 0x0, 0x2042, 0x0, 0x0) socketpair(0x3, 0x1, 0xc8, &(0x7f0000000080)) 5.197974868s ago: executing program 4 (id=500): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) (fail_nth: 1) 4.068377239s ago: executing program 4 (id=501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000001380)) (rerun: 32) getdents(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff7ff, 0xfffffffffffffff8}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4000, 0x4, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) 4.040612772s ago: executing program 6 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0xb, 0x0, @void}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) lseek(r3, 0xffffffffffff7ff7, 0x7) 3.903762605s ago: executing program 1 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r3, &(0x7f0000000000)=@random={'user.', ',@\x00'}, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 3.399595585s ago: executing program 3 (id=505): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (fail_nth: 1) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180d7000000ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe800000000000000000000000000052ed9c502200169078ffff000000000000ffb00afe4e"], 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x2}, 0xa) 3.274520357s ago: executing program 6 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002100010000000000030000000a00000000000000000000000500150002000000b35a08af2f67aab9ece231703dc503a5da1ff7344617d43e8577a0b3dd29fc723bbca4f257367025daa62e44ea2c403d481daf1aca0229d8ecdc4dbdf2288723923c070b0235577e31e31aee"], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000", @ANYRES32, @ANYBLOB="00000000000000000000000000800000000004007ebe920ac405de", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000a40)={0x4, r6, 'id0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x22, &(0x7f0000000580)={[], [{@euid_gt}, {@fowner_lt}, {@dont_appraise}]}, 0x1, 0x4ab, &(0x7f0000000c80)="$eJzs3c1rXOUaAPDnzDRpkubeftzLpe2F20Iv9H7QTD64NLm60JW6KIgFNwo1JtNYM8mEzKQ2oYtUd124EEVBXLj3L3BjVxZBXCu4FBdS0RpBBWFkzsykaZJJB0wzkvP7wSHv+cg87zvD8/LOe86ZE0BmnY6IxyJiMCLyEXE4IpLNB5xu/Fm7e32qviRRq138LkmPq6+3Dm3936GIWI2Ivoh45omIF5OtcSvLK7OTpVJxsbleqM4tFCrLK+euzE3OFGeK8yPj5ycmxofHRic6bEn/A4+4+frLNy98+FTvBz+9duf2Gx9/lDTbHZvasZsaTe+Joxu2HYiIRx9GsC7IN9vz4HefP6L65/eXiDgTEZ/F4cinnyaQBbVarfZr7WC73as1YN/KpWPgJDcUEY1yLjc01BjD/zUGcqVypfrfy+Wl+enGWPlI9OQuXykVh5vfFY5ET1JfH0nL99ZHN62PRaRj4Dfz/en60FS5NL23XR2wyaFN+f9jvpH/QEb4yg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/yG75D9k0tMXLtSXWuv+9+mry0uz5avnpouV2aG5pamhqfLiwtBMuTyT3rMz96DXK5XLCyP/i6VrhWqxUi1UllcuzZWX5quX0vv6LxV79qRVQCeOnrr1RRIRq//vT5e63uY+uQr7W62WRLfvQQa6I9/tDgjoGlN/kF2+4wPb/ETvffra7VjY/boAeyPX7QoAXXP2hPN/kFXm/yG7zP9DdhnjA+b/IXvM/0N2DbZ5/tefNjy7azgi/hwRn+d7Drae9QXsB7lvkub4/+zhfw5u3tub/JyeIuiNiFfevfj2tclqdXGkvv379e3Vd5rbR7tRf6BTrTxt5TEAkF1rd69PtZa9jPvt442LELbGP9Ccm+xLz1EOrCX3XauQ7NK1C6s3IuL4dvGT5vPOG2c+BtbyW+Ifa/5NGi+R1vdA+tz0vYl/YkP8f2yIf/J3vyuQDbfq/c/wdvmXS3M61vPv/v5ncJeunWjf/+XW+798m/7vVIcxXnrv1a/bxr8RcXLb+K14fWmszfHrdTvbYfw7zz/7t3b7au83Xme7+C31UqE6t1CoLK+cS39HbqY4PzJ+fmJifHhsdKKQzlEXWjPVWz1y/NPbO7V/oE38ndpf3/bvDtv/y98/ee70DvH/dWb7z//YDvH7I+I/Hcb/YfSrF9rtq8efbtP+3A7x69vGOoxfeevJgx0eCgDsgcryyuxkqVRcVFBQUFgvdLtnAh62e0nf7ZoAAAAAAAAAAAAAndqta4a/3OGYbrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA/+C0AAP//kijWQQ==") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) unshare(0x20000600) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd, 0x0) 2.348626129s ago: executing program 5 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) 2.277640806s ago: executing program 3 (id=508): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e"], 0x0, 0x44}, 0x28) (fail_nth: 1) 1.979288415s ago: executing program 1 (id=509): syz_usb_connect(0x0, 0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000365b58e20ac0501854285010203010902350001020160fa0904dd11000e01000d0824020109020588"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@abort}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r1, &(0x7f0000000400)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14be95ee817a856fd8b8106a287350d9dbf6c4eedac1a5ce38be888916260fc6e0c7e01ddbc156f0d3d9da0b68f4e3fb98cef488d25e", @ANYRES16=r6, @ANYBLOB="a903030000000000000032000000"], 0x14}}, 0x4004050) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) 1.978838405s ago: executing program 3 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000869000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) 1.373671964s ago: executing program 5 (id=511): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.272272135s ago: executing program 5 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (fail_nth: 1) 1.040571257s ago: executing program 6 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 962.640165ms ago: executing program 3 (id=514): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@delchain={0x24, 0x5f, 0xf31, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0xc0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x30, 0x19, 0x20, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x14, 0xa, 0xfc, 0x3, 0x0, 0x0, 0x600}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x0, 0x1, r4}}, @RTA_IIF={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008080}, 0x80) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 961.997255ms ago: executing program 5 (id=515): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={0x0}, 0x19}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x2, 0x4) 910.87747ms ago: executing program 4 (id=516): socket(0x1, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2814850, &(0x7f0000000040), 0x3, 0x4e6, &(0x7f0000001080)="$eJzs3d9rW20dAPDvSZutW/vavurF68A5dNINXdKubitezAqiVwPnvK+1TUtp2pQm3dYypMM7bwbiL/TKKxEEr0XQ/QkiDPReRJSh27zwQs1L0pO165I2ZU2zNZ8PPDvP+ZF+v09CnuQ5z1lOAD3rQkRMRURfRFyOiOF0eyYtsbVdasc9f/ZgtlaSqFbv/DOJJN3W+FtJuhxMHzYQEd/4WsS3k9fjljc2l2aKxcJaup6vLK/myxubVxaXZxYKC4WVqYnx65M3Jq9Njh1ZW29+5W8/evSLr9783efv/WX6H5e+U0trKN23ux3t2GrzuO2mZ+vPRUN/RKwdJthbrC9tT/blll9+r6sJAQCwr9p3/I9GxKcj4sVPu50NAAAA0AnVLw3Ff5OIKgAAAHBiZerXwCaZXHotwFBkMrnc9jW8H4+zmWKpXPncfGl9ZW77WtmRyGbmF4uFsfRa4ZHIJrX18Xp9Z/3qnvWJiHg/In4wfKa+npstFee6ffIDAAAAesTgnvH/v4e3x/8AAADACTPS7QQAAACAjjP+BwAAgJOv5fg/6T/eRAAAAIBO+PqtW7VSbdz/eu7uxvpS6e6VuUJ5Kbe8PpubLa2t5hZKpYX6b/YtH/T3iqXS6hdiZf1+vlIoV/Lljc3p5dL6SmW6fl/v6UL2WFoFAAAA7Pb+px7/OYmIrS+eqZeaU+m+NsbqU53NDuikzOEOTzqVB3D8+rqdANA1LvCF3mU+Hnpdko7rT7c64Id71g952gAAAHgbjH7igPn//U8Qmg+Ed5iBPPQu8//Qu3Z/vf99F/MAjp/5f+hxLaf9dwy02vGHI84FAADomKF6STK5dC5wKDKZXC7ivfptAbLJ/GKxMBYRH4mIPw1nT9fWx7udNAAAAAAAAAAAAAAAAAAAAAAAAAC8Y6rVJKoAAADAiRaR+XuS3sh/dPji0N7zA6eS/wzXlxFx72d3fnx/plJZG69t/9fL7ZWfpNuvduMMBgAAALBXY5zeGMcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFF6/uzBbKMcZ9ynX46IkWbx+2Ogvhz4zXBEnH2RRP+uxyUR0XcE8bceRsQHzeIntbRiJM1ib/xMRJzpcvzBI4gPvexxrf+Zavb+y8SF+rL5+68/LW/q6YVW/V+m0f/V+7lm/d97bcY49+TX+ZbxH0ac62/e/zTiJ2/Y/37rm5ubrfZVfx4x2vTzJ3klVr6yvJovb2xeWVyeWSgsFFYmJsavT96YvDY5lp9fLBbSf5vG+P4nf/v//dp/tkX8kQPaf7HN9v/vyf1nH9sn/qXPNH/9P9gnfu25/2z6OVDbP9qob23Xdzv/qz+e36/9cy3af9Drf6nN9l++/d2/tnkoAHAMyhubSzPFYmFNReX1SjbaPPhURLwlOavsrtxO3+iPkohDPbzLHRMAAHDkdr70dzsTAAAAAAAAAAAAAAAAAAAA6F07//9/sDO/33b61V8WGOheUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9vVhAAAA//9n9NBb") r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x424) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000240)='mand\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0) 910.2432ms ago: executing program 6 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x90, 0x80, 0x10, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0xdeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0x3}}}}}]}}]}}, 0x0) io_setup(0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000011c0)={[{@discard}, {@abort}, {@dioread_lock}, {@nombcache}, {@block_validity}, {@lazytime}, {@noload}, {@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpquota}, {@init_itable_val}, {@minixdf}]}, 0xfe, 0x573, &(0x7f0000000c40)="$eJzs3d9rW1UcAPDvTdv96nQdjOF8kMIenMyla+uPCT7MR5HhRN9nSLMymi6jScdaB24P7sUXGYKIA/FZfPdx+A/4Vwx0MGQUffAlctPcLmuSNs0yW83nA7c9597TnHvuvd+Tc3OSJoChNZn+yEWciIivkogjLdtGo7lxcr3c2uObxXRJol7/+I8kkua6rHzS/D3ezLwUEb98EXE6115vdWV1oVAul5aa+ana4rWp6srqmSuLhfnSfOnqzOzsuTdnZ955+62BtfW1i399++H99899eXLtm58eHr2bxPk43NzW2o5ncKs1MxmTzWMyFuc3FZweQGV7SbLbO0BfRppxPhZpH3AkRppRD/z/fR4RdWBIJeIfhlQ2Dsju7Qd0H/yf8ei99Rug9vaPrr82Egca90aH1pKn7ozS+92JAdSf1vHz7/fupkv08DrEibEBVAoQEbduR8TZ0dH2/i9p9n/9O9tDmc117PD5p77DXQJa3E/HP693Gv/kNsY/0WH8M94hdvuxffznHg6gmq7S8d+7Hce/G5NWEyPN3AuNMd9YcvlKuZT2bS9GxKkY25/mt5rPObf2oGs/1Tr+S5e1fZtL5B6O7n96zVyhVuivte0e3Y54OR3/ZvW29f8HGmPdzec/PR4Xe6zjeOneK922tbX/8c1iNhbeWtuB6kv9h4hXO57/JzNaydbzk1ON62Equyra/Xnn+K/d6u+//YORnv9DW7d/Immdr63uvI7vD/xd6rZt+/Z3vv73JZ800tlVcKNQqy1NR+yr729fP/Pkb7N8Vj5t/6mTW/d/na7/gxHxaY/tv3PsTteie+H8z+3o/O888eCDz77rVn9v5/+NRupUc00v/V+vO/gsxw4AAAAAAAD2mlxEHI4kl99I53L5/Pr7O47FoVy5Uq2dvlxZvjoXjc/KTsRYLpvpHm95P8R08/2wWX5mU342Io5GxNcjBxv5fLFSntvtxgMAAAAAAAAAAAAAAAAAAMAeMd7l8/+p3378aLd3D3jefOU3DK9t438Q3/QE7Eme/2F4iX8YXuIfhpf4h+El/mF4iX8YXjuJ/5HnuB/Av8/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAzUxQsX0qW+9vhmMc3PXV9ZXqhcPzNXqi7kF5eL+WJl6Vp+vlKZL5fyxcrido9XrlSuTc/E8o2pWqlam6qurF5arCxfrV26sliYL10qjWUF/c9hAAAAAAAAAAAAAAAAAAAA2FBdWV0olMulJQmJvhKje2M3JNYTWWA/8wPubr8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3+CQAA//9B4i32") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) 909.8861ms ago: executing program 5 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) 126.031007ms ago: executing program 1 (id=519): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_open_dev$usbfs(0x0, 0x204, 0x2581) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 0s ago: executing program 5 (id=520): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(0x3) close(r1) (fail_nth: 1) kernel console output (not intermixed with test programs): 400.006159][ T437] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 400.039903][ T437] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 400.059672][ T28] audit: type=1326 audit(1759998221.117:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 400.096836][ T437] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 400.134376][ T437] hid-generic 0006:0004:0009.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 400.263879][ T28] audit: type=1326 audit(1759998221.117:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 400.334606][ T1300] fido_id[1300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 400.371081][ T437] usb 3-1: USB disconnect, device number 11 [ 400.377695][ T28] audit: type=1326 audit(1759998221.117:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 400.429479][ T28] audit: type=1326 audit(1759998221.117:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 400.539358][ T28] audit: type=1326 audit(1759998221.117:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 400.568268][ T28] audit: type=1326 audit(1759998221.127:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 400.591904][ T1317] FAULT_INJECTION: forcing a failure. [ 400.591904][ T1317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.615094][ T1317] CPU: 0 PID: 1317 Comm: syz.4.291 Not tainted syzkaller #0 [ 400.622434][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.632512][ T1317] Call Trace: [ 400.635819][ T1317] [ 400.637373][ T28] audit: type=1400 audit(1759998222.927:366): avc: denied { getopt } for pid=1301 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.638795][ T1317] __dump_stack+0x21/0x24 [ 400.663497][ T1317] dump_stack_lvl+0xee/0x150 [ 400.668114][ T1317] ? __cfi_dump_stack_lvl+0x8/0x8 [ 400.673246][ T1317] ? do_vfs_ioctl+0xc36/0x1c80 [ 400.678119][ T1317] dump_stack+0x15/0x24 [ 400.682298][ T1317] should_fail_ex+0x3d4/0x520 [ 400.687003][ T1317] should_fail+0xb/0x10 [ 400.691176][ T1317] should_fail_usercopy+0x1a/0x20 [ 400.696220][ T1317] _copy_from_user+0x1e/0xc0 [ 400.700836][ T1317] evdev_ioctl_handler+0x6da/0x1cd0 [ 400.706160][ T1317] ? evdev_fasync+0x60/0x60 [ 400.710698][ T1317] ? has_cap_mac_admin+0x330/0x330 [ 400.715835][ T1317] ? security_file_permission+0x94/0xb0 [ 400.721423][ T1317] ? vfs_write+0x9d6/0xca0 [ 400.725875][ T1317] ? slab_free_freelist_hook+0xc2/0x190 [ 400.731486][ T1317] ? selinux_file_ioctl+0x377/0x480 [ 400.736710][ T1317] ? mutex_unlock+0x89/0x220 [ 400.741317][ T1317] ? __cfi_mutex_unlock+0x10/0x10 [ 400.746357][ T1317] ? __fget_files+0x2d5/0x330 [ 400.751571][ T1317] evdev_ioctl+0x27/0x30 [ 400.755843][ T1317] ? __cfi_evdev_ioctl+0x10/0x10 [ 400.760812][ T1317] __se_sys_ioctl+0x12f/0x1b0 [ 400.765511][ T1317] __x64_sys_ioctl+0x7b/0x90 [ 400.770293][ T1317] x64_sys_call+0x58b/0x9a0 [ 400.774815][ T1317] do_syscall_64+0x4c/0xa0 [ 400.779244][ T1317] ? clear_bhb_loop+0x30/0x80 [ 400.784136][ T1317] ? clear_bhb_loop+0x30/0x80 [ 400.788841][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.794850][ T1317] RIP: 0033:0x7f553658eec9 [ 400.799311][ T1317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.819020][ T1317] RSP: 002b:00007f5534ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.827470][ T1317] RAX: ffffffffffffffda RBX: 00007f55367e5fa0 RCX: 00007f553658eec9 [ 400.835471][ T1317] RDX: 00002000000000c0 RSI: 0000000080104592 RDI: 0000000000000003 [ 400.843468][ T1317] RBP: 00007f5534ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 400.851593][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.859786][ T1317] R13: 00007f55367e6038 R14: 00007f55367e5fa0 R15: 00007ffcb2cc3c88 [ 400.867783][ T1317] [ 401.214867][ T437] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 401.311851][ T28] audit: type=1400 audit(1759998223.877:367): avc: denied { bind } for pid=1321 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.432028][ T437] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 401.446306][ T437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.472219][ T437] usb 3-1: Product: syz [ 401.488248][ T437] usb 3-1: Manufacturer: syz [ 401.497837][ T437] usb 3-1: SerialNumber: syz [ 401.511343][ T437] usb 3-1: config 0 descriptor?? [ 401.592758][ T1332] loop3: detected capacity change from 0 to 512 [ 401.605595][ T1332] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.630020][ T1332] EXT4-fs: Ignoring removed bh option [ 401.635762][ T1332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 401.647507][ T1332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 401.711026][ T1332] EXT4-fs (loop3): 1 truncate cleaned up [ 401.716780][ T1332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 401.723911][ T437] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 401.742217][ T437] asix: probe of 3-1:0.0 failed with error -71 [ 401.753453][ T437] usb 3-1: USB disconnect, device number 12 [ 401.755864][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.856475][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.001211][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.097992][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.151055][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.210788][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.250123][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.369860][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.444531][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.776261][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.783900][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.791328][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.798872][ T470] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 402.807133][ T470] hid-generic 0006:0004:0009.0015: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 402.960240][ T1346] fido_id[1346]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 403.034333][ T1354] FAULT_INJECTION: forcing a failure. [ 403.034333][ T1354] name failslab, interval 1, probability 0, space 0, times 0 [ 403.076361][ T1356] loop1: detected capacity change from 0 to 256 [ 403.099583][ T1354] CPU: 0 PID: 1354 Comm: syz.2.300 Not tainted syzkaller #0 [ 403.106915][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.116978][ T1354] Call Trace: [ 403.120270][ T1354] [ 403.123220][ T1354] __dump_stack+0x21/0x24 [ 403.127552][ T1354] dump_stack_lvl+0xee/0x150 [ 403.132145][ T1354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 403.137175][ T1354] ? stack_trace_save+0x98/0xe0 [ 403.142035][ T1354] dump_stack+0x15/0x24 [ 403.146281][ T1354] should_fail_ex+0x3d4/0x520 [ 403.150969][ T1354] __should_failslab+0xac/0xf0 [ 403.155737][ T1354] should_failslab+0x9/0x20 [ 403.160246][ T1354] kmem_cache_alloc_node+0x42/0x340 [ 403.165467][ T1354] ? dup_task_struct+0x5a/0x790 [ 403.170338][ T1354] dup_task_struct+0x5a/0x790 [ 403.175043][ T1354] ? __kasan_check_write+0x14/0x20 [ 403.180155][ T1354] ? recalc_sigpending+0x168/0x1c0 [ 403.185282][ T1354] copy_process+0x5b8/0x3480 [ 403.189878][ T1354] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 403.195622][ T1354] ? __kasan_check_write+0x14/0x20 [ 403.201176][ T1354] ? idle_dummy+0x10/0x10 [ 403.205562][ T1354] kernel_clone+0x23a/0x810 [ 403.210174][ T1354] ? __cfi_kernel_clone+0x10/0x10 [ 403.215222][ T1354] ? __kasan_check_write+0x14/0x20 [ 403.220446][ T1354] ? mutex_unlock+0x89/0x220 [ 403.225069][ T1354] __x64_sys_clone+0x168/0x1b0 [ 403.229867][ T1354] ? __cfi___x64_sys_clone+0x10/0x10 [ 403.235174][ T1354] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 403.241258][ T1354] x64_sys_call+0x990/0x9a0 [ 403.245784][ T1354] do_syscall_64+0x4c/0xa0 [ 403.250204][ T1354] ? clear_bhb_loop+0x30/0x80 [ 403.254924][ T1354] ? clear_bhb_loop+0x30/0x80 [ 403.259609][ T1354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.265521][ T1354] RIP: 0033:0x7f3cd458eec9 [ 403.269975][ T1354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.289586][ T1354] RSP: 002b:00007f3cd53affe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 403.298009][ T1354] RAX: ffffffffffffffda RBX: 00007f3cd47e6180 RCX: 00007f3cd458eec9 [ 403.305981][ T1354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 403.314044][ T1354] RBP: 00007f3cd53b0090 R08: 0000000000000000 R09: 0000000000000000 [ 403.322034][ T1354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 403.330022][ T1354] R13: 00007f3cd47e6218 R14: 00007f3cd47e6180 R15: 00007ffefe7921a8 [ 403.338096][ T1354] [ 403.446988][ T1361] loop5: detected capacity change from 0 to 256 [ 403.749495][ T437] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 403.874057][ T284] EXT4-fs (loop3): unmounting filesystem. [ 404.040559][ T437] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 404.048693][ T437] usb 6-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 404.058924][ T437] usb 6-1: config 0 has no interface number 0 [ 404.067103][ T437] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 404.076387][ T437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.085842][ T437] usb 6-1: Product: syz [ 404.090760][ T437] usb 6-1: Manufacturer: syz [ 404.095888][ T437] usb 6-1: SerialNumber: syz [ 404.107541][ T437] usb 6-1: config 0 descriptor?? [ 404.545595][ T437] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 404.581622][ T437] usb 6-1: No valid video chain found. [ 404.653987][ T437] usb 6-1: USB disconnect, device number 5 [ 404.791324][ T1393] fuse: Bad value for 'fd' [ 404.848092][ T1399] loop3: detected capacity change from 0 to 256 [ 404.970004][ T1407] loop4: detected capacity change from 0 to 512 [ 404.979605][ T1407] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.986632][ T1407] EXT4-fs: Ignoring removed bh option [ 404.992618][ T1407] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.005290][ T1407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 405.027260][ T1407] EXT4-fs (loop4): 1 truncate cleaned up [ 405.033096][ T1407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 405.116377][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.146574][ T1407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.170189][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 405.178787][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.197469][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 405.209464][ T335] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 405.212152][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.234241][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.258843][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.268394][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.278726][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.491590][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.516249][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.554049][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 405.588898][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.665240][ T335] usb 2-1: config 0 descriptor?? [ 405.730419][ T335] hub 2-1:0.0: USB hub found [ 405.906069][ T287] EXT4-fs (loop4): unmounting filesystem. [ 405.938982][ T335] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 406.348377][ T1431] loop4: detected capacity change from 0 to 128 [ 406.810906][ T335] usbhid 2-1:0.0: can't add hid device: -71 [ 407.025480][ T335] usbhid: probe of 2-1:0.0 failed with error -71 [ 407.032790][ T1431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 407.048003][ T1431] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 407.259954][ T335] usb 2-1: USB disconnect, device number 8 [ 407.635281][ T1452] loop3: detected capacity change from 0 to 256 [ 407.668015][ T287] EXT4-fs (loop4): unmounting filesystem. [ 407.701552][ T1456] loop4: detected capacity change from 0 to 256 [ 407.759465][ T424] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 408.122062][ T335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 408.229492][ T424] usb 6-1: Using ep0 maxpacket: 32 [ 408.236063][ T424] usb 6-1: unable to get BOS descriptor or descriptor too short [ 408.244470][ T424] usb 6-1: config index 0 descriptor too short (expected 53, got 34) [ 408.252586][ T424] usb 6-1: config 2 has an invalid interface number: 221 but max is 0 [ 408.260997][ T424] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 408.271314][ T424] usb 6-1: config 2 has no interface number 0 [ 408.277396][ T424] usb 6-1: config 2 interface 221 has no altsetting 0 [ 408.284211][ T291] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 408.294095][ T424] usb 6-1: string descriptor 0 read error: -22 [ 408.300359][ T424] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 408.309519][ T424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.320213][ T424] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 408.327181][ T424] usb 6-1: No valid video chain found. [ 408.340655][ T335] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 408.348957][ T335] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 408.359227][ T335] usb 4-1: config 0 has no interface number 0 [ 408.366836][ T335] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 408.376140][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.384221][ T335] usb 4-1: Product: syz [ 408.388431][ T335] usb 4-1: Manufacturer: syz [ 408.393108][ T335] usb 4-1: SerialNumber: syz [ 408.398250][ T335] usb 4-1: config 0 descriptor?? [ 408.439526][ T339] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 408.470540][ T291] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 408.478667][ T291] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 408.488887][ T291] usb 5-1: config 0 has no interface number 0 [ 408.496632][ T291] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 408.505812][ T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.514285][ T291] usb 5-1: Product: syz [ 408.518477][ T291] usb 5-1: Manufacturer: syz [ 408.523241][ T291] usb 5-1: SerialNumber: syz [ 408.532254][ T1447] loop5: detected capacity change from 0 to 512 [ 408.539259][ T1447] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.546040][ T1447] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.553122][ T1447] EXT4-fs (loop5): Test dummy encryption mode enabled [ 408.560200][ T1447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 408.577051][ T291] usb 5-1: config 0 descriptor?? [ 408.584009][ T1463] process 'syz.2.333' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 408.602621][ T1447] EXT4-fs (loop5): 1 truncate cleaned up [ 408.619462][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 408.690945][ T1447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 408.696767][ T339] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.720025][ T339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 408.726679][ T339] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 408.735758][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.762878][ T1447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1447 comm=syz.5.328 [ 408.778074][ T339] usb 2-1: config 0 descriptor?? [ 408.783655][ T39] usb 6-1: USB disconnect, device number 6 [ 408.885195][ T1468] FAULT_INJECTION: forcing a failure. [ 408.885195][ T1468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.898364][ T1468] CPU: 1 PID: 1468 Comm: syz.2.334 Not tainted syzkaller #0 [ 408.905697][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.915765][ T1468] Call Trace: [ 408.919057][ T1468] [ 408.922023][ T1468] __dump_stack+0x21/0x24 [ 408.926375][ T1468] dump_stack_lvl+0xee/0x150 [ 408.930973][ T1468] ? __cfi_dump_stack_lvl+0x8/0x8 [ 408.936010][ T1468] dump_stack+0x15/0x24 [ 408.940182][ T1468] should_fail_ex+0x3d4/0x520 [ 408.944966][ T1468] should_fail+0xb/0x10 [ 408.949142][ T1468] should_fail_usercopy+0x1a/0x20 [ 408.954184][ T1468] _copy_from_user+0x1e/0xc0 [ 408.958792][ T1468] sock_do_ioctl+0x186/0x310 [ 408.963395][ T1468] ? sock_show_fdinfo+0xb0/0xb0 [ 408.968267][ T1468] ? preempt_schedule_irq+0xbb/0x110 [ 408.973572][ T1468] ? __kasan_check_read+0x11/0x20 [ 408.978621][ T1468] ? preempt_schedule_irq+0xbb/0x110 [ 408.983921][ T1468] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 408.989659][ T1468] sock_ioctl+0x4d8/0x6e0 [ 408.994013][ T1468] ? __cfi_sock_ioctl+0x10/0x10 [ 408.998880][ T1468] ? sysvec_reschedule_ipi+0x78/0x80 [ 409.004197][ T1468] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 409.009853][ T1468] ? __cfi_sock_ioctl+0x10/0x10 [ 409.014900][ T1468] ? __se_sys_ioctl+0x114/0x1b0 [ 409.019764][ T1468] ? __cfi_sock_ioctl+0x10/0x10 [ 409.024633][ T1468] __se_sys_ioctl+0x12f/0x1b0 [ 409.029325][ T1468] __x64_sys_ioctl+0x7b/0x90 [ 409.032039][ T291] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 409.033933][ T1468] x64_sys_call+0x58b/0x9a0 [ 409.041944][ T291] usb 5-1: No valid video chain found. [ 409.044758][ T1468] do_syscall_64+0x4c/0xa0 [ 409.052195][ T291] usb 5-1: USB disconnect, device number 9 [ 409.054638][ T1468] ? clear_bhb_loop+0x30/0x80 [ 409.065164][ T1468] ? clear_bhb_loop+0x30/0x80 [ 409.069877][ T1468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.075797][ T1468] RIP: 0033:0x7f3cd458eec9 [ 409.080245][ T1468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.081320][ T28] audit: type=1326 audit(1759998231.637:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.099868][ T1468] RSP: 002b:00007f3cd53b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.099896][ T1468] RAX: ffffffffffffffda RBX: 00007f3cd47e6180 RCX: 00007f3cd458eec9 [ 409.099910][ T1468] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 409.099923][ T1468] RBP: 00007f3cd53b0090 R08: 0000000000000000 R09: 0000000000000000 [ 409.099947][ T1468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.099958][ T1468] R13: 00007f3cd47e6218 R14: 00007f3cd47e6180 R15: 00007ffefe7921a8 [ 409.123630][ T28] audit: type=1326 audit(1759998231.637:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.131628][ T1468] [ 409.132730][ T335] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 409.144264][ T28] audit: type=1326 audit(1759998231.637:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.147980][ T335] usb 4-1: No valid video chain found. [ 409.156132][ T28] audit: type=1326 audit(1759998231.637:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.165212][ T335] usb 4-1: USB disconnect, device number 4 [ 409.266381][ T28] audit: type=1326 audit(1759998231.637:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.289839][ T28] audit: type=1326 audit(1759998231.637:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.313260][ T28] audit: type=1326 audit(1759998231.637:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.336738][ T28] audit: type=1326 audit(1759998231.637:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.360216][ T28] audit: type=1326 audit(1759998231.637:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.383868][ T28] audit: type=1326 audit(1759998231.637:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1451 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 409.458972][ T339] usbhid 2-1:0.0: can't add hid device: -71 [ 409.471527][ T339] usbhid: probe of 2-1:0.0 failed with error -71 [ 409.479022][ T960] EXT4-fs (loop5): unmounting filesystem. [ 409.489877][ T339] usb 2-1: USB disconnect, device number 9 [ 409.539992][ T1471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 410.525858][ T1486] loop4: detected capacity change from 0 to 256 [ 410.934266][ T1498] loop2: detected capacity change from 0 to 512 [ 411.090320][ T1498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 411.099284][ T1498] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.439486][ T335] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 411.653357][ T1524] FAULT_INJECTION: forcing a failure. [ 411.653357][ T1524] name failslab, interval 1, probability 0, space 0, times 0 [ 411.667716][ T1523] loop4: detected capacity change from 0 to 256 [ 411.679507][ T335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.688761][ T1524] CPU: 0 PID: 1524 Comm: syz.5.348 Not tainted syzkaller #0 [ 411.689777][ T335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.696875][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.715818][ T1524] Call Trace: [ 411.719139][ T1524] [ 411.722091][ T1524] __dump_stack+0x21/0x24 [ 411.726450][ T1524] dump_stack_lvl+0xee/0x150 [ 411.731065][ T1524] ? __cfi_dump_stack_lvl+0x8/0x8 [ 411.736125][ T1524] ? unwind_get_return_address+0x4d/0x90 [ 411.739458][ T335] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 411.741781][ T1524] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 411.756945][ T1524] ? arch_stack_walk+0xfc/0x150 [ 411.759490][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 411.761845][ T1524] dump_stack+0x15/0x24 [ 411.761867][ T1524] should_fail_ex+0x3d4/0x520 [ 411.778668][ T1524] __should_failslab+0xac/0xf0 [ 411.779467][ T335] usb 3-1: SerialNumber: syz [ 411.783456][ T1524] ? alloc_pipe_info+0xe7/0x4b0 [ 411.783489][ T1524] should_failslab+0x9/0x20 [ 411.797414][ T1524] __kmem_cache_alloc_node+0x3d/0x2c0 [ 411.802828][ T1524] ? alloc_pipe_info+0xe7/0x4b0 [ 411.807717][ T1524] kmalloc_trace+0x29/0xb0 [ 411.812170][ T1524] alloc_pipe_info+0xe7/0x4b0 [ 411.816880][ T1524] splice_direct_to_actor+0x956/0xb10 [ 411.822396][ T1524] ? kstrtouint+0x74/0xe0 [ 411.826768][ T1524] ? selinux_file_permission+0x2a5/0x510 [ 411.832431][ T1524] ? fsnotify_perm+0x67/0x5b0 [ 411.837142][ T1524] ? security_file_permission+0x8a/0xb0 [ 411.842721][ T1524] ? __cfi_direct_splice_actor+0x10/0x10 [ 411.848417][ T1524] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 411.854339][ T1524] ? security_file_permission+0x94/0xb0 [ 411.859915][ T1524] ? rw_verify_area+0xa7/0x1c0 [ 411.864713][ T1524] do_splice_direct+0x1b3/0x2c0 [ 411.869600][ T1524] ? avc_policy_seqno+0x1b/0x70 [ 411.874483][ T1524] ? __cfi_do_splice_direct+0x10/0x10 [ 411.879893][ T1524] ? security_file_permission+0x94/0xb0 [ 411.885468][ T1524] do_sendfile+0x5c6/0xeb0 [ 411.889915][ T1524] ? __cfi_vfs_write+0x10/0x10 [ 411.894706][ T1524] ? do_preadv+0x330/0x330 [ 411.899151][ T1524] ? __kasan_check_write+0x14/0x20 [ 411.904281][ T1524] ? fput+0x154/0x1a0 [ 411.908285][ T1524] __x64_sys_sendfile64+0x18f/0x1f0 [ 411.913511][ T1524] ? __cfi_ksys_write+0x10/0x10 [ 411.918389][ T1524] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 411.924127][ T1524] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 411.930236][ T1524] x64_sys_call+0x62c/0x9a0 [ 411.934764][ T1524] do_syscall_64+0x4c/0xa0 [ 411.939197][ T1524] ? clear_bhb_loop+0x30/0x80 [ 411.943896][ T1524] ? clear_bhb_loop+0x30/0x80 [ 411.948604][ T1524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.954544][ T1524] RIP: 0033:0x7fa47498eec9 [ 411.958977][ T1524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.978600][ T1524] RSP: 002b:00007fa4733d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.987037][ T1524] RAX: ffffffffffffffda RBX: 00007fa474be6090 RCX: 00007fa47498eec9 [ 411.995037][ T1524] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 412.003033][ T1524] RBP: 00007fa4733d6090 R08: 0000000000000000 R09: 0000000000000000 [ 412.011033][ T1524] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 412.013794][ T335] usb 3-1: 0:2 : does not exist [ 412.019019][ T1524] R13: 00007fa474be6128 R14: 00007fa474be6090 R15: 00007ffe8e2d4078 [ 412.019043][ T1524] [ 412.095233][ T335] usb 3-1: USB disconnect, device number 13 [ 412.191206][ T1530] loop1: detected capacity change from 0 to 256 [ 412.309791][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 412.479521][ T291] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 413.125042][ T1542] sock: sock_set_timeout: `syz.4.356' (pid 1542) tries to set negative timeout [ 413.137773][ T286] EXT4-fs (loop2): unmounting filesystem. [ 413.283675][ T291] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 413.292637][ T291] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 413.303182][ T291] usb 2-1: config 0 has no interface number 0 [ 413.339096][ T291] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 413.357572][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.374837][ T1554] serio: Serial port ptm0 [ 413.379323][ T291] usb 2-1: Product: syz [ 413.385131][ T291] usb 2-1: Manufacturer: syz [ 413.390020][ T291] usb 2-1: SerialNumber: syz [ 413.403204][ T291] usb 2-1: config 0 descriptor?? [ 413.523855][ T1559] loop2: detected capacity change from 0 to 512 [ 413.582184][ T1559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 413.873972][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 413.889347][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 413.972834][ T291] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 413.976021][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.710692][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.722745][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.730779][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.738278][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.745990][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.753639][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 414.753653][ T28] audit: type=1400 audit(1759998237.267:391): avc: denied { map } for pid=1566 comm="syz.4.363" path="socket:[21080]" dev="sockfs" ino=21080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 414.793840][ T286] EXT4-fs (loop2): unmounting filesystem. [ 414.800930][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.820774][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.828240][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.879258][ T437] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 414.887066][ T28] audit: type=1400 audit(1759998237.287:392): avc: denied { bind } for pid=1566 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.912819][ T291] usb 2-1: No valid video chain found. [ 414.917883][ T437] hid-generic 0006:0004:0009.0016: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 414.919322][ T291] usb 2-1: USB disconnect, device number 10 [ 414.936401][ T28] audit: type=1400 audit(1759998237.287:393): avc: denied { write } for pid=1566 comm="syz.4.363" path="socket:[21085]" dev="sockfs" ino=21085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.105755][ T1573] fido_id[1573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 415.145430][ T1580] loop1: detected capacity change from 0 to 512 [ 415.216303][ T1580] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 415.229651][ T1580] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.368: iget: bad i_size value: 12154757448730 [ 415.260738][ T1580] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.368: couldn't read orphan inode 13 (err -117) [ 415.312541][ T1580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 415.341651][ T1578] loop5: detected capacity change from 0 to 40427 [ 415.360058][ T1578] F2FS-fs (loop5): invalid crc value [ 415.369199][ T1578] F2FS-fs (loop5): Found nat_bits in checkpoint [ 415.384283][ T1580] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 415.417391][ T1580] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 415.428930][ T1578] F2FS-fs (loop5): Start checkpoint disabled! [ 415.445277][ T1578] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 415.452925][ T1580] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 415.500393][ T285] EXT4-fs (loop1): unmounting filesystem. [ 415.503022][ T28] audit: type=1400 audit(1759998238.067:394): avc: denied { rename } for pid=1577 comm="syz.5.366" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 415.579609][ T1590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'. [ 415.579898][ T646] kworker/u4:6: attempt to access beyond end of device [ 415.579898][ T646] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 415.612082][ T1590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'. [ 415.711319][ T1586] loop3: detected capacity change from 0 to 40427 [ 415.728806][ T1586] F2FS-fs (loop3): Unrecognized mount option "nodiscgc=sync" or missing value [ 416.877794][ T28] audit: type=1400 audit(1759998239.437:395): avc: denied { create } for pid=1581 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 416.975140][ T28] audit: type=1400 audit(1759998239.537:396): avc: denied { getopt } for pid=1581 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.140956][ T1620] loop1: detected capacity change from 0 to 256 [ 417.148608][ T28] audit: type=1400 audit(1759998239.707:397): avc: denied { wake_alarm } for pid=1615 comm="syz.2.379" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 417.449507][ T437] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 417.536851][ T1624] syz.3.381[1624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.537320][ T1624] syz.3.381[1624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.557016][ T28] audit: type=1400 audit(1759998240.117:398): avc: denied { mount } for pid=1623 comm="syz.3.381" name="/" dev="ramfs" ino=21238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.632775][ T28] audit: type=1400 audit(1759998240.117:399): avc: denied { remount } for pid=1623 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.659508][ T437] usb 3-1: Using ep0 maxpacket: 32 [ 417.666415][ T437] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 417.692135][ T437] usb 3-1: config 0 has no interface number 0 [ 417.700291][ T1629] FAULT_INJECTION: forcing a failure. [ 417.700291][ T1629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.713455][ T28] audit: type=1400 audit(1759998240.157:400): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.716191][ T1631] loop4: detected capacity change from 0 to 512 [ 417.739977][ T437] usb 3-1: config 0 interface 2 has no altsetting 0 [ 417.746680][ T1629] CPU: 1 PID: 1629 Comm: syz.3.383 Not tainted syzkaller #0 [ 417.753988][ T1629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.764149][ T1629] Call Trace: [ 417.767438][ T1629] [ 417.770378][ T1629] __dump_stack+0x21/0x24 [ 417.774729][ T1629] dump_stack_lvl+0xee/0x150 [ 417.779346][ T1629] ? __cfi_dump_stack_lvl+0x8/0x8 [ 417.784511][ T1629] dump_stack+0x15/0x24 [ 417.788670][ T1629] should_fail_ex+0x3d4/0x520 [ 417.793357][ T1629] should_fail+0xb/0x10 [ 417.797522][ T1629] should_fail_usercopy+0x1a/0x20 [ 417.802596][ T1629] _copy_from_user+0x1e/0xc0 [ 417.807204][ T1629] __sys_bpf+0x277/0x780 [ 417.811453][ T1629] ? bpf_link_show_fdinfo+0x320/0x320 [ 417.816826][ T1629] ? __cfi_ksys_write+0x10/0x10 [ 417.821769][ T1629] ? debug_smp_processor_id+0x17/0x20 [ 417.827154][ T1629] __x64_sys_bpf+0x7c/0x90 [ 417.831668][ T1629] x64_sys_call+0x488/0x9a0 [ 417.836176][ T1629] do_syscall_64+0x4c/0xa0 [ 417.840595][ T1629] ? clear_bhb_loop+0x30/0x80 [ 417.845308][ T1629] ? clear_bhb_loop+0x30/0x80 [ 417.849987][ T1629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.855889][ T1629] RIP: 0033:0x7fc26698eec9 [ 417.860326][ T1629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.880018][ T1629] RSP: 002b:00007fc2677b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.888446][ T1629] RAX: ffffffffffffffda RBX: 00007fc266be5fa0 RCX: 00007fc26698eec9 [ 417.896600][ T1629] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 417.904576][ T1629] RBP: 00007fc2677b3090 R08: 0000000000000000 R09: 0000000000000000 [ 417.912547][ T1629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.920521][ T1629] R13: 00007fc266be6038 R14: 00007fc266be5fa0 R15: 00007ffe11cb0988 [ 417.928510][ T1629] [ 417.933242][ T1631] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.935207][ T437] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 417.944729][ T1631] EXT4-fs: Ignoring removed bh option [ 417.979549][ T1631] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 418.012739][ T437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.061545][ T1631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.065268][ T437] usb 3-1: Product: syz [ 418.085937][ T437] usb 3-1: Manufacturer: syz [ 418.096043][ T437] usb 3-1: SerialNumber: syz [ 418.106537][ T1631] EXT4-fs (loop4): 1 truncate cleaned up [ 418.106872][ T437] usb 3-1: config 0 descriptor?? [ 418.116094][ T1631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 418.872543][ T1644] netlink: 'syz.4.384': attribute type 27 has an invalid length. [ 418.886270][ T437] usb 3-1: invalid MIDI in EP 0 [ 418.894963][ T437] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 418.903530][ T437] usb 3-1: USB disconnect, device number 14 [ 419.153423][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.160734][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.378245][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.399828][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 419.415494][ T1645] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.422724][ T1645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.431557][ T1645] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.438771][ T1645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.450156][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 419.488200][ T1645] device veth0_vlan left promiscuous mode [ 419.506933][ T1645] device veth0_vlan entered promiscuous mode [ 419.518235][ T1645] device veth1_macvtap left promiscuous mode [ 419.528825][ T1645] device veth1_macvtap entered promiscuous mode [ 419.536209][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.565805][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.573763][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.587096][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.595746][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.604237][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.612284][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 419.612759][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 419.619022][ T19] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 419.626032][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 419.634713][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.643940][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.653613][ T19] usb 2-1: config 0 descriptor?? [ 419.659872][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.672608][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 419.680852][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 419.688974][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.697463][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.706115][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.753011][ T1655] FAULT_INJECTION: forcing a failure. [ 419.753011][ T1655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.766272][ T1655] CPU: 0 PID: 1655 Comm: syz.5.390 Not tainted syzkaller #0 [ 419.773661][ T1655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.783804][ T1655] Call Trace: [ 419.787357][ T1655] [ 419.790291][ T1655] __dump_stack+0x21/0x24 [ 419.794626][ T1655] dump_stack_lvl+0xee/0x150 [ 419.799247][ T1655] ? __cfi_dump_stack_lvl+0x8/0x8 [ 419.804363][ T1655] ? vfs_write+0x9d6/0xca0 [ 419.808787][ T1655] dump_stack+0x15/0x24 [ 419.812945][ T1655] should_fail_ex+0x3d4/0x520 [ 419.817636][ T1655] should_fail+0xb/0x10 [ 419.821806][ T1655] should_fail_usercopy+0x1a/0x20 [ 419.826862][ T1655] _copy_from_user+0x1e/0xc0 [ 419.831896][ T1655] __sys_connect+0x132/0x420 [ 419.836490][ T1655] ? __cfi___sys_connect+0x10/0x10 [ 419.841613][ T1655] ? __kasan_check_write+0x14/0x20 [ 419.846725][ T1655] ? debug_smp_processor_id+0x17/0x20 [ 419.852107][ T1655] __x64_sys_connect+0x7a/0x90 [ 419.856873][ T1655] x64_sys_call+0x88d/0x9a0 [ 419.861411][ T1655] do_syscall_64+0x4c/0xa0 [ 419.865829][ T1655] ? clear_bhb_loop+0x30/0x80 [ 419.870509][ T1655] ? clear_bhb_loop+0x30/0x80 [ 419.875195][ T1655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.881093][ T1655] RIP: 0033:0x7fa47498eec9 [ 419.885497][ T1655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.905207][ T1655] RSP: 002b:00007fa4733f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 419.913622][ T1655] RAX: ffffffffffffffda RBX: 00007fa474be5fa0 RCX: 00007fa47498eec9 [ 419.921597][ T1655] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 419.929569][ T1655] RBP: 00007fa4733f7090 R08: 0000000000000000 R09: 0000000000000000 [ 419.937888][ T1655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.945869][ T1655] R13: 00007fa474be6038 R14: 00007fa474be5fa0 R15: 00007ffe8e2d4078 [ 419.953841][ T1655] [ 420.135070][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 420.135086][ T28] audit: type=1400 audit(1759998242.697:403): avc: denied { setopt } for pid=1659 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.162341][ T19] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 420.169955][ T19] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 420.177117][ T19] chicony 0003:04F2:1123.0017: unbalanced collection at end of report description [ 420.186767][ T19] chicony 0003:04F2:1123.0017: Chicony hid parse failed: -22 [ 420.194413][ T19] chicony: probe of 0003:04F2:1123.0017 failed with error -22 [ 420.269082][ T287] EXT4-fs (loop4): unmounting filesystem. [ 420.304827][ T1671] loop4: detected capacity change from 0 to 256 [ 420.312132][ T1671] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.322890][ T437] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 420.330689][ T1671] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 420.341123][ T1671] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 420.381052][ T1676] loop4: detected capacity change from 0 to 256 [ 420.397987][ T19] usb 2-1: USB disconnect, device number 11 [ 420.561947][ T437] usb 6-1: Using ep0 maxpacket: 16 [ 420.579134][ T437] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.589803][ T437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 420.599896][ T437] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 420.626993][ T437] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 420.636446][ T437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.645571][ T437] usb 6-1: Product: syz [ 420.650817][ T437] usb 6-1: Manufacturer: syz [ 420.655853][ T437] usb 6-1: SerialNumber: syz [ 420.694103][ T437] usb 6-1: config 0 descriptor?? [ 420.913941][ T437] usb 6-1: USB disconnect, device number 7 [ 421.059916][ T1689] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.068343][ T1689] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.138679][ T1692] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.146753][ T1692] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.154661][ T1692] FAULT_INJECTION: forcing a failure. [ 421.154661][ T1692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.167932][ T1692] CPU: 0 PID: 1692 Comm: syz.2.401 Not tainted syzkaller #0 [ 421.175267][ T1692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.185496][ T1692] Call Trace: [ 421.188772][ T1692] [ 421.191708][ T1692] __dump_stack+0x21/0x24 [ 421.196301][ T1692] dump_stack_lvl+0xee/0x150 [ 421.200902][ T1692] ? __cfi_dump_stack_lvl+0x8/0x8 [ 421.206019][ T1692] dump_stack+0x15/0x24 [ 421.210173][ T1692] should_fail_ex+0x3d4/0x520 [ 421.214856][ T1692] should_fail+0xb/0x10 [ 421.219022][ T1692] should_fail_usercopy+0x1a/0x20 [ 421.224052][ T1692] _copy_to_user+0x1e/0x90 [ 421.228498][ T1692] simple_read_from_buffer+0xe9/0x160 [ 421.234010][ T1692] proc_fail_nth_read+0x19a/0x210 [ 421.239050][ T1692] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 421.244602][ T1692] ? security_file_permission+0x94/0xb0 [ 421.250158][ T1692] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 421.255713][ T1692] vfs_read+0x26e/0x8c0 [ 421.259905][ T1692] ? __cfi_vfs_read+0x10/0x10 [ 421.264594][ T1692] ? __kasan_check_write+0x14/0x20 [ 421.269700][ T1692] ? mutex_lock+0x8d/0x1a0 [ 421.274124][ T1692] ? __cfi_mutex_lock+0x10/0x10 [ 421.278997][ T1692] ? __fdget_pos+0x2cd/0x380 [ 421.283589][ T1692] ? ksys_read+0x71/0x240 [ 421.287927][ T1692] ksys_read+0x140/0x240 [ 421.292182][ T1692] ? __cfi_ksys_read+0x10/0x10 [ 421.296949][ T1692] ? fput+0x154/0x1a0 [ 421.300950][ T1692] ? debug_smp_processor_id+0x17/0x20 [ 421.306329][ T1692] __x64_sys_read+0x7b/0x90 [ 421.310841][ T1692] x64_sys_call+0x2f/0x9a0 [ 421.315294][ T1692] do_syscall_64+0x4c/0xa0 [ 421.319718][ T1692] ? clear_bhb_loop+0x30/0x80 [ 421.324402][ T1692] ? clear_bhb_loop+0x30/0x80 [ 421.329087][ T1692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.334995][ T1692] RIP: 0033:0x7f3cd458d8dc [ 421.339418][ T1692] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.359052][ T1692] RSP: 002b:00007f3cd53f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.367470][ T1692] RAX: ffffffffffffffda RBX: 00007f3cd47e5fa0 RCX: 00007f3cd458d8dc [ 421.375474][ T1692] RDX: 000000000000000f RSI: 00007f3cd53f20a0 RDI: 0000000000000006 [ 421.383448][ T1692] RBP: 00007f3cd53f2090 R08: 0000000000000000 R09: 0000000000000000 [ 421.391426][ T1692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.399420][ T1692] R13: 00007f3cd47e6038 R14: 00007f3cd47e5fa0 R15: 00007ffefe7921a8 [ 421.407403][ T1692] [ 421.479454][ T478] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 421.490286][ T1695] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.498296][ T1695] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.571470][ T1704] loop2: detected capacity change from 0 to 256 [ 421.634291][ T1707] FAULT_INJECTION: forcing a failure. [ 421.634291][ T1707] name failslab, interval 1, probability 0, space 0, times 0 [ 421.669455][ T1707] CPU: 1 PID: 1707 Comm: syz.4.406 Not tainted syzkaller #0 [ 421.670565][ T478] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 421.676792][ T1707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.676807][ T1707] Call Trace: [ 421.676813][ T1707] [ 421.676820][ T1707] __dump_stack+0x21/0x24 [ 421.695541][ T478] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 421.698678][ T1707] dump_stack_lvl+0xee/0x150 [ 421.709449][ T478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.714109][ T1707] ? __cfi_dump_stack_lvl+0x8/0x8 [ 421.714139][ T1707] ? bpf_prog_e95a4a16f042d2d7+0x21/0x25 [ 421.729058][ T478] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 421.733801][ T1707] dump_stack+0x15/0x24 [ 421.733826][ T1707] should_fail_ex+0x3d4/0x520 [ 421.733853][ T1707] ? getname_flags+0xb9/0x500 [ 421.761952][ T1707] __should_failslab+0xac/0xf0 [ 421.766747][ T1707] should_failslab+0x9/0x20 [ 421.771275][ T1707] kmem_cache_alloc+0x3b/0x330 [ 421.776073][ T1707] ? __cfi_ksys_write+0x10/0x10 [ 421.776130][ T478] usb 2-1: config 0 has no interface number 0 [ 421.780964][ T1707] getname_flags+0xb9/0x500 [ 421.780998][ T1707] __x64_sys_rmdir+0x3c/0x50 [ 421.781022][ T1707] x64_sys_call+0x68e/0x9a0 [ 421.781045][ T1707] do_syscall_64+0x4c/0xa0 [ 421.800765][ T478] usb 2-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.805564][ T1707] ? clear_bhb_loop+0x30/0x80 [ 421.823248][ T1707] ? clear_bhb_loop+0x30/0x80 [ 421.827948][ T1707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.833854][ T1707] RIP: 0033:0x7f553658eec9 [ 421.838285][ T1707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.857923][ T1707] RSP: 002b:00007f5534ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 421.866345][ T1707] RAX: ffffffffffffffda RBX: 00007f55367e5fa0 RCX: 00007f553658eec9 [ 421.874338][ T1707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 421.882577][ T1707] RBP: 00007f5534ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.890558][ T1707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.898532][ T1707] R13: 00007f55367e6038 R14: 00007f55367e5fa0 R15: 00007ffcb2cc3c88 [ 421.906517][ T1707] [ 421.917323][ T478] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 421.926644][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.938575][ T478] usb 2-1: config 0 descriptor?? [ 421.948897][ T478] usb 2-1: MIDIStreaming interface descriptor not found [ 422.441138][ T437] usb 2-1: USB disconnect, device number 12 [ 422.490273][ T470] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 422.548562][ T1715] loop4: detected capacity change from 0 to 40427 [ 422.565386][ T1715] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 422.573940][ T1715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 422.582486][ T1715] F2FS-fs (loop4): heap/no_heap options were deprecated [ 422.590647][ T1715] F2FS-fs (loop4): invalid crc value [ 422.602563][ T1715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 422.683364][ T1715] F2FS-fs (loop4): Start checkpoint disabled! [ 422.691622][ T1715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 422.698682][ T1715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 422.709489][ T470] usb 3-1: Using ep0 maxpacket: 32 [ 422.716430][ T470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 422.799830][ T470] usb 3-1: config index 0 descriptor too short (expected 53, got 34) [ 422.807943][ T470] usb 3-1: config 2 has an invalid interface number: 221 but max is 0 [ 422.816325][ T470] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 422.826571][ T470] usb 3-1: config 2 has no interface number 0 [ 422.832834][ T470] usb 3-1: config 2 interface 221 has no altsetting 0 [ 422.863507][ T470] usb 3-1: string descriptor 0 read error: -22 [ 422.919146][ T1726] FAULT_INJECTION: forcing a failure. [ 422.919146][ T1726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.932442][ T1726] CPU: 1 PID: 1726 Comm: syz.4.408 Not tainted syzkaller #0 [ 422.939745][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.949807][ T1726] Call Trace: [ 422.953097][ T1726] [ 422.956039][ T1726] __dump_stack+0x21/0x24 [ 422.960398][ T1726] dump_stack_lvl+0xee/0x150 [ 422.965003][ T1726] ? __cfi_dump_stack_lvl+0x8/0x8 [ 422.970046][ T1726] dump_stack+0x15/0x24 [ 422.974220][ T1726] should_fail_ex+0x3d4/0x520 [ 422.979100][ T1726] should_fail+0xb/0x10 [ 422.983278][ T1726] should_fail_usercopy+0x1a/0x20 [ 422.988423][ T1726] _copy_from_user+0x1e/0xc0 [ 422.993034][ T1726] __sys_bpf+0x277/0x780 [ 422.997290][ T1726] ? bpf_link_show_fdinfo+0x320/0x320 [ 423.002678][ T1726] ? fpregs_restore_userregs+0x128/0x260 [ 423.008329][ T1726] __x64_sys_bpf+0x7c/0x90 [ 423.012774][ T1726] x64_sys_call+0x488/0x9a0 [ 423.017295][ T1726] do_syscall_64+0x4c/0xa0 [ 423.021727][ T1726] ? clear_bhb_loop+0x30/0x80 [ 423.026426][ T1726] ? clear_bhb_loop+0x30/0x80 [ 423.031132][ T1726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.037052][ T1726] RIP: 0033:0x7f553658eec9 [ 423.041488][ T1726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.061114][ T1726] RSP: 002b:00007f5534fb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.069562][ T1726] RAX: ffffffffffffffda RBX: 00007f55367e6180 RCX: 00007f553658eec9 [ 423.077556][ T1726] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 423.085546][ T1726] RBP: 00007f5534fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 423.093535][ T1726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.101531][ T1726] R13: 00007f55367e6218 R14: 00007f55367e6180 R15: 00007ffcb2cc3c88 [ 423.109615][ T1726] [ 423.114438][ T470] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 423.123690][ T470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.148373][ T470] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 423.155451][ T470] usb 3-1: No valid video chain found. [ 423.167392][ T28] audit: type=1400 audit(1759998245.727:404): avc: denied { unlink } for pid=1727 comm="syz.3.412" name="#1" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 423.193187][ T28] audit: type=1400 audit(1759998245.757:405): avc: denied { remount } for pid=1727 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 423.229698][ T1732] loop3: detected capacity change from 0 to 256 [ 423.386651][ T1737] IPv6: NLM_F_CREATE should be specified when creating new route [ 423.398585][ T1718] loop2: detected capacity change from 0 to 512 [ 423.407522][ T1718] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.414330][ T1718] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.421873][ T1737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1737 comm=syz.3.415 [ 423.429552][ T478] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 423.438859][ T1718] EXT4-fs (loop2): Test dummy encryption mode enabled [ 423.448932][ T1718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 423.461136][ T28] audit: type=1400 audit(1759998246.027:406): avc: denied { create } for pid=1736 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 423.461595][ T1718] EXT4-fs (loop2): 1 truncate cleaned up [ 423.487726][ T1718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.526482][ T1718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1718 comm=syz.2.409 [ 423.546212][ T19] usb 3-1: USB disconnect, device number 15 [ 423.582587][ T1746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.589868][ T1746] IPv6: NLM_F_CREATE should be set when creating new route [ 423.620730][ T478] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 423.631783][ T478] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 423.640169][ T478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.650496][ T478] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 423.659471][ T478] usb 2-1: config 0 has no interface number 0 [ 423.671708][ T478] usb 2-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.687984][ T1750] loop5: detected capacity change from 0 to 512 [ 423.695605][ T1750] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.702276][ T478] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 423.722078][ T1750] EXT4-fs: Ignoring removed bh option [ 423.727758][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.736432][ T1750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 423.753410][ T478] usb 2-1: config 0 descriptor?? [ 423.762309][ T478] usb 2-1: MIDIStreaming interface descriptor not found [ 423.769360][ T1750] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 423.829511][ T1750] EXT4-fs (loop5): 1 truncate cleaned up [ 423.835359][ T1750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 424.030958][ T470] usb 2-1: USB disconnect, device number 13 [ 424.156326][ T286] EXT4-fs (loop2): unmounting filesystem. [ 424.598157][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 424.723914][ T960] EXT4-fs (loop5): unmounting filesystem. [ 424.799459][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 424.806734][ T19] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.834003][ T19] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.851066][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 424.879722][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.921497][ T19] usb 5-1: config 0 descriptor?? [ 424.928944][ T1778] loop5: detected capacity change from 0 to 1024 [ 424.956888][ T1781] loop3: detected capacity change from 0 to 256 [ 424.971341][ T1778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 425.153856][ T1785] FAULT_INJECTION: forcing a failure. [ 425.153856][ T1785] name failslab, interval 1, probability 0, space 0, times 0 [ 425.166618][ T1785] CPU: 1 PID: 1785 Comm: syz.5.426 Not tainted syzkaller #0 [ 425.173925][ T1785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.183997][ T1785] Call Trace: [ 425.187411][ T1785] [ 425.190351][ T1785] __dump_stack+0x21/0x24 [ 425.194705][ T1785] dump_stack_lvl+0xee/0x150 [ 425.199305][ T1785] ? __cfi_dump_stack_lvl+0x8/0x8 [ 425.204530][ T1785] ? __cfi_push_rt_tasks+0x10/0x10 [ 425.209658][ T1785] ? __cfi_push_rt_tasks+0x10/0x10 [ 425.214788][ T1785] dump_stack+0x15/0x24 [ 425.218967][ T1785] should_fail_ex+0x3d4/0x520 [ 425.223670][ T1785] __should_failslab+0xac/0xf0 [ 425.228449][ T1785] ? kvmalloc_node+0x294/0x480 [ 425.233224][ T1785] should_failslab+0x9/0x20 [ 425.237742][ T1785] __kmem_cache_alloc_node+0x3d/0x2c0 [ 425.243131][ T1785] ? kvmalloc_node+0x294/0x480 [ 425.247899][ T1785] __kmalloc_node+0xa1/0x1e0 [ 425.252510][ T1785] kvmalloc_node+0x294/0x480 [ 425.257109][ T1785] ? __cfi_kvmalloc_node+0x10/0x10 [ 425.262227][ T1785] traverse+0xd6/0x560 [ 425.266400][ T1785] ? __cfi_mutex_lock+0x10/0x10 [ 425.271272][ T1785] seq_lseek+0x13b/0x260 [ 425.275531][ T1785] __x64_sys_lseek+0x182/0x200 [ 425.280326][ T1785] x64_sys_call+0x297/0x9a0 [ 425.284863][ T1785] do_syscall_64+0x4c/0xa0 [ 425.289300][ T1785] ? clear_bhb_loop+0x30/0x80 [ 425.293999][ T1785] ? clear_bhb_loop+0x30/0x80 [ 425.298706][ T1785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.304618][ T1785] RIP: 0033:0x7fa47498eec9 [ 425.310263][ T1785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.329878][ T1785] RSP: 002b:00007fa4733b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 425.338303][ T1785] RAX: ffffffffffffffda RBX: 00007fa474be6180 RCX: 00007fa47498eec9 [ 425.346275][ T1785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 425.354250][ T1785] RBP: 00007fa4733b5090 R08: 0000000000000000 R09: 0000000000000000 [ 425.362230][ T1785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.370199][ T1785] R13: 00007fa474be6218 R14: 00007fa474be6180 R15: 00007ffe8e2d4078 [ 425.378175][ T1785] [ 425.529454][ T478] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 425.662301][ T581] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.801848][ T960] EXT4-fs (loop5): unmounting filesystem. [ 426.030772][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 426.041674][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 426.048283][ T478] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 426.057223][ T19] usb 5-1: USB disconnect, device number 10 [ 426.063199][ T478] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 426.074946][ T478] usb 4-1: config 0 has no interface number 0 [ 426.082706][ T478] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 426.091854][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.099949][ T478] usb 4-1: Product: syz [ 426.352470][ T478] usb 4-1: Manufacturer: syz [ 426.357143][ T478] usb 4-1: SerialNumber: syz [ 426.362423][ T478] usb 4-1: config 0 descriptor?? [ 426.452503][ T1807] binder: 1806:1807 unknown command 0 [ 426.457916][ T1807] binder: 1806:1807 ioctl c0306201 200000000080 returned -22 [ 426.466435][ T1807] FAULT_INJECTION: forcing a failure. [ 426.466435][ T1807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.479863][ T1807] CPU: 1 PID: 1807 Comm: syz.2.436 Not tainted syzkaller #0 [ 426.487182][ T1807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.497247][ T1807] Call Trace: [ 426.500542][ T1807] [ 426.503477][ T1807] __dump_stack+0x21/0x24 [ 426.507816][ T1807] dump_stack_lvl+0xee/0x150 [ 426.512416][ T1807] ? __cfi_dump_stack_lvl+0x8/0x8 [ 426.517470][ T1807] dump_stack+0x15/0x24 [ 426.521644][ T1807] should_fail_ex+0x3d4/0x520 [ 426.526343][ T1807] should_fail+0xb/0x10 [ 426.530537][ T1807] should_fail_usercopy+0x1a/0x20 [ 426.535579][ T1807] _copy_from_user+0x1e/0xc0 [ 426.540188][ T1807] binder_ioctl_write_read+0x141/0xaeb0 [ 426.545840][ T1807] ? __kasan_check_write+0x14/0x20 [ 426.550973][ T1807] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 426.556452][ T1807] ? avc_has_perm+0x158/0x240 [ 426.561160][ T1807] ? binder_has_work_ilocked+0x3c0/0x3c0 [ 426.566811][ T1807] ? is_bpf_text_address+0x177/0x190 [ 426.572137][ T1807] ? kernel_text_address+0xa0/0xd0 [ 426.577261][ T1807] ? __kernel_text_address+0xd/0x30 [ 426.582484][ T1807] ? unwind_get_return_address+0x4d/0x90 [ 426.588120][ T1807] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 426.594284][ T1807] ? arch_stack_walk+0xfc/0x150 [ 426.599155][ T1807] ? memcpy+0x56/0x70 [ 426.603151][ T1807] ? avc_has_extended_perms+0x95f/0xdc0 [ 426.608752][ T1807] ? binder_debug+0x13c/0x1a0 [ 426.613458][ T1807] ? _binder_inner_proc_unlock+0x40/0x40 [ 426.619112][ T1807] ? __kasan_check_write+0x14/0x20 [ 426.624237][ T1807] ? _raw_spin_lock+0x8e/0xe0 [ 426.628932][ T1807] ? __cfi__raw_spin_lock+0x10/0x10 [ 426.634142][ T1807] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 426.639879][ T1807] ? _raw_spin_unlock+0x4c/0x70 [ 426.644742][ T1807] binder_ioctl+0x355/0x19a0 [ 426.649362][ T1807] ? __cfi_binder_ioctl+0x10/0x10 [ 426.654404][ T1807] ? has_cap_mac_admin+0x330/0x330 [ 426.659522][ T1807] ? security_file_permission+0x94/0xb0 [ 426.665076][ T1807] ? vfs_write+0x9d6/0xca0 [ 426.669684][ T1807] ? slab_free_freelist_hook+0xc2/0x190 [ 426.675270][ T1807] ? selinux_file_ioctl+0x377/0x480 [ 426.680497][ T1807] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 426.686069][ T1807] ? mutex_unlock+0x89/0x220 [ 426.690673][ T1807] ? __cfi_mutex_unlock+0x10/0x10 [ 426.695708][ T1807] ? __fget_files+0x2d5/0x330 [ 426.700389][ T1807] ? security_file_ioctl+0x95/0xc0 [ 426.705521][ T1807] ? __cfi_binder_ioctl+0x10/0x10 [ 426.710568][ T1807] __se_sys_ioctl+0x12f/0x1b0 [ 426.715259][ T1807] __x64_sys_ioctl+0x7b/0x90 [ 426.719853][ T1807] x64_sys_call+0x58b/0x9a0 [ 426.724376][ T1807] do_syscall_64+0x4c/0xa0 [ 426.728806][ T1807] ? clear_bhb_loop+0x30/0x80 [ 426.733504][ T1807] ? clear_bhb_loop+0x30/0x80 [ 426.738208][ T1807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.744130][ T1807] RIP: 0033:0x7f3cd458eec9 [ 426.748551][ T1807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.768166][ T1807] RSP: 002b:00007f3cd53f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.776609][ T1807] RAX: ffffffffffffffda RBX: 00007f3cd47e5fa0 RCX: 00007f3cd458eec9 [ 426.784598][ T1807] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000006 [ 426.792575][ T1807] RBP: 00007f3cd53f2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.800562][ T1807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.808540][ T1807] R13: 00007f3cd47e6038 R14: 00007f3cd47e5fa0 R15: 00007ffefe7921a8 [ 426.816540][ T1807] [ 426.819488][ T19] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 426.828000][ T1807] binder: 1806:1807 ioctl c0306201 2000000001c0 returned -14 [ 426.860627][ T1809] binder: 1808:1809 unknown command 0 [ 426.868086][ T1809] binder: 1808:1809 ioctl c0306201 200000000080 returned -22 [ 426.879251][ T1809] binder: 1808:1809 ioctl c0306201 200000000140 returned -11 [ 426.887672][ T1809] binder_alloc: 1808: binder_alloc_buf size 20480 failed, no address space [ 426.896335][ T1809] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 427.066938][ T28] audit: type=1326 audit(1759998249.627:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 427.092145][ T478] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 427.098529][ T478] usb 4-1: No valid video chain found. [ 427.105805][ T478] usb 4-1: USB disconnect, device number 5 [ 427.112481][ T28] audit: type=1326 audit(1759998249.627:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 428.439480][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 428.935656][ T383] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 428.942601][ T1007] Bluetooth: hci0: command 0x1003 tx timeout [ 428.960546][ T19] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 429.071001][ T28] audit: type=1326 audit(1759998249.627:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 429.108298][ T19] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 429.175130][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.185613][ T19] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 429.195039][ T28] audit: type=1326 audit(1759998249.627:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 429.218559][ T19] usb 5-1: config 0 has no interface number 0 [ 429.225132][ T19] usb 5-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.239145][ T28] audit: type=1326 audit(1759998249.627:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 429.263502][ T19] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 429.273356][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.285425][ T19] usb 5-1: config 0 descriptor?? [ 429.290593][ T28] audit: type=1326 audit(1759998249.627:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 429.317653][ T19] usb 5-1: MIDIStreaming interface descriptor not found [ 429.343288][ T28] audit: type=1326 audit(1759998249.627:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 429.367765][ T28] audit: type=1326 audit(1759998249.677:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1780 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26698eec9 code=0x7ffc0000 [ 429.391268][ T28] audit: type=1400 audit(1759998251.847:415): avc: denied { execute } for pid=1810 comm="syz.5.438" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 429.412690][ T28] audit: type=1400 audit(1759998251.847:416): avc: denied { execute_no_trans } for pid=1810 comm="syz.5.438" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 429.448616][ T19] usb 5-1: USB disconnect, device number 11 [ 429.570649][ T1818] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 429.580012][ T1818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 429.651460][ T1830] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 429.673285][ T1830] SELinux: failed to load policy [ 429.762022][ T1836] loop2: detected capacity change from 0 to 256 [ 429.882798][ T1836] xt_bpf: check failed: parse error [ 430.080888][ T1839] loop4: detected capacity change from 0 to 512 [ 430.090619][ T1839] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 430.130219][ T337] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.144367][ T1838] fuse: Bad value for 'fd' [ 430.149592][ T19] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 430.157456][ T1838] mmap: syz.4.447 (1838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 430.290169][ T1845] loop4: detected capacity change from 0 to 512 [ 430.301136][ T1845] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 430.309280][ T1845] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 430.318888][ T1845] EXT4-fs (loop4): 1 truncate cleaned up [ 430.324920][ T1845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 430.340005][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 430.364011][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 430.375895][ T19] usb 2-1: config index 0 descriptor too short (expected 53, got 34) [ 430.384438][ T19] usb 2-1: config 2 has an invalid interface number: 221 but max is 0 [ 430.392800][ T19] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 430.403267][ T19] usb 2-1: config 2 has no interface number 0 [ 430.409538][ T19] usb 2-1: config 2 interface 221 has no altsetting 0 [ 430.422855][ T19] usb 2-1: string descriptor 0 read error: -22 [ 430.431327][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 430.446595][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.520993][ T19] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 430.545043][ T19] usb 2-1: No valid video chain found. [ 431.163815][ T1856] loop2: detected capacity change from 0 to 512 [ 431.208096][ T287] EXT4-fs (loop4): unmounting filesystem. [ 431.301186][ T1856] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 431.309524][ T1856] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 431.322049][ T1856] EXT4-fs (loop2): 1 truncate cleaned up [ 431.327875][ T1856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.295520][ T286] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /80/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 432.337792][ T1833] loop1: detected capacity change from 0 to 512 [ 432.348047][ T1860] loop4: detected capacity change from 0 to 512 [ 432.357569][ T1860] journal_path: Lookup failure for './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 432.383318][ T1860] EXT4-fs: error: could not find journal device path [ 432.390925][ T1860] FAULT_INJECTION: forcing a failure. [ 432.390925][ T1860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.404148][ T1860] CPU: 0 PID: 1860 Comm: syz.4.452 Not tainted syzkaller #0 [ 432.411462][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.421548][ T1860] Call Trace: [ 432.424838][ T1860] [ 432.427780][ T1860] __dump_stack+0x21/0x24 [ 432.432123][ T1860] dump_stack_lvl+0xee/0x150 [ 432.436719][ T1860] ? __cfi_dump_stack_lvl+0x8/0x8 [ 432.441744][ T1860] ? _parse_integer+0x2a/0x40 [ 432.446425][ T1860] dump_stack+0x15/0x24 [ 432.450576][ T1860] should_fail_ex+0x3d4/0x520 [ 432.455261][ T1860] should_fail+0xb/0x10 [ 432.459418][ T1860] should_fail_usercopy+0x1a/0x20 [ 432.464460][ T1860] _copy_from_user+0x1e/0xc0 [ 432.469051][ T1860] iovec_from_user+0x1aa/0x2e0 [ 432.473823][ T1860] __import_iovec+0x71/0x470 [ 432.478415][ T1860] import_iovec+0x7c/0xb0 [ 432.482831][ T1860] vfs_writev+0x113/0x590 [ 432.487166][ T1860] ? do_writev+0x2b0/0x2b0 [ 432.491595][ T1860] ? vfs_write+0x9d6/0xca0 [ 432.496029][ T1860] ? __fdget_pos+0x1f2/0x380 [ 432.500619][ T1860] ? do_writev+0x76/0x2b0 [ 432.504960][ T1860] do_writev+0x14a/0x2b0 [ 432.509221][ T1860] ? do_readv+0x3e0/0x3e0 [ 432.513548][ T1860] ? debug_smp_processor_id+0x17/0x20 [ 432.518922][ T1860] __x64_sys_writev+0x7d/0x90 [ 432.523600][ T1860] x64_sys_call+0xad/0x9a0 [ 432.528022][ T1860] do_syscall_64+0x4c/0xa0 [ 432.532443][ T1860] ? clear_bhb_loop+0x30/0x80 [ 432.537133][ T1860] ? clear_bhb_loop+0x30/0x80 [ 432.541813][ T1860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.547722][ T1860] RIP: 0033:0x7f553658eec9 [ 432.552151][ T1860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.571752][ T1860] RSP: 002b:00007f5534ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 432.580196][ T1860] RAX: ffffffffffffffda RBX: 00007f55367e5fa0 RCX: 00007f553658eec9 [ 432.588250][ T1860] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 432.596305][ T1860] RBP: 00007f5534ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 432.604277][ T1860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.612267][ T1860] R13: 00007f55367e6038 R14: 00007f55367e5fa0 R15: 00007ffcb2cc3c88 [ 432.620239][ T1860] [ 432.624194][ T1833] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.649904][ T1833] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.665015][ T1833] EXT4-fs (loop1): Test dummy encryption mode enabled [ 432.686928][ T1833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 432.698862][ T1858] EXT4-fs (loop2): unmounting filesystem. [ 432.716734][ T1833] EXT4-fs (loop1): 1 truncate cleaned up [ 432.722565][ T1833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 432.797870][ T1833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1833 comm=syz.1.446 [ 432.812398][ T478] usb 2-1: USB disconnect, device number 14 [ 433.040667][ T1875] loop3: detected capacity change from 0 to 512 [ 433.759534][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 433.759550][ T28] audit: type=1400 audit(1759998256.624:422): avc: denied { remount } for pid=1867 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 433.849725][ T611] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 434.271747][ T1880] loop3: detected capacity change from 0 to 256 [ 434.306360][ T1880] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 434.427638][ T28] audit: type=1400 audit(1759998257.994:423): avc: denied { name_bind } for pid=1879 comm="syz.3.462" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 434.450839][ T611] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 434.469605][ T611] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 434.479786][ T611] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.500669][ T1883] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.507793][ T611] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 434.516957][ T1883] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.529260][ T1883] device bridge_slave_0 entered promiscuous mode [ 434.531643][ T611] usb 6-1: config 0 has no interface number 0 [ 434.536759][ T1883] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.542526][ T611] usb 6-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.549098][ T1883] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.570279][ T285] EXT4-fs (loop1): unmounting filesystem. [ 434.570457][ T1883] device bridge_slave_1 entered promiscuous mode [ 434.715277][ T611] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 434.724568][ T611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.767470][ T611] usb 6-1: config 0 descriptor?? [ 434.778268][ T611] usb 6-1: MIDIStreaming interface descriptor not found [ 434.949852][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.044915][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.172224][ T1901] loop3: detected capacity change from 0 to 128 [ 435.222942][ T1895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.464'. [ 435.331400][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.396468][ T1883] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.403577][ T1883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.410889][ T1883] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.417928][ T1883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.870136][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.877577][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.885526][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.902916][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.913238][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.922275][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.936636][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.953978][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.970840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.979742][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.987167][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 435.994390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.009468][ T311] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 436.009736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.025531][ T611] usb 6-1: USB disconnect, device number 8 [ 436.025849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.039931][ T311] hid-generic 0006:0004:0009.0018: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 436.041013][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.056393][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.064230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 436.072834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.081375][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.088413][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.133284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.144166][ T1907] fido_id[1907]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 436.149027][ T1909] loop1: detected capacity change from 0 to 256 [ 436.164289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.172783][ T339] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 436.181239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.189550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.222227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.234681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.244506][ T1911] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 436.254214][ T28] audit: type=1400 audit(1759998259.814:424): avc: denied { load_policy } for pid=1910 comm="syz.5.467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 436.259632][ T1911] SELinux: failed to load policy [ 436.279095][ T1883] device veth0_vlan entered promiscuous mode [ 436.289123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.297421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.318120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.327731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.337799][ T1913] loop4: detected capacity change from 0 to 256 [ 436.343672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.352785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.362409][ T1883] device veth1_macvtap entered promiscuous mode [ 436.369924][ T339] usb 4-1: Using ep0 maxpacket: 8 [ 436.375770][ T1913] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.388107][ T646] device bridge_slave_1 left promiscuous mode [ 436.394991][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.411588][ T339] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 436.420385][ T646] device bridge_slave_0 left promiscuous mode [ 436.421407][ T339] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 436.427323][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.443528][ T1913] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.443590][ T646] device veth1_macvtap left promiscuous mode [ 436.454937][ T339] usb 4-1: Product: syz [ 436.462002][ T646] device veth0_vlan left promiscuous mode [ 436.477015][ T339] usb 4-1: Manufacturer: syz [ 436.482184][ T339] usb 4-1: SerialNumber: syz [ 436.489548][ T470] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 436.490956][ T339] usb 4-1: config 0 descriptor?? [ 436.701261][ T470] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 436.735488][ T470] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 436.842583][ T470] usb 2-1: config 0 has no interface number 0 [ 436.850295][ T470] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 436.859535][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.867604][ T470] usb 2-1: Product: syz [ 436.871949][ T470] usb 2-1: Manufacturer: syz [ 436.876601][ T470] usb 2-1: SerialNumber: syz [ 436.886352][ T470] usb 2-1: config 0 descriptor?? [ 436.907555][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 436.915386][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.924716][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.935687][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.944220][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.418981][ T339] usb 4-1: USB disconnect, device number 6 [ 437.427586][ T28] audit: type=1400 audit(1759998260.994:425): avc: denied { mounton } for pid=1883 comm="syz-executor" path="/root/syzkaller.dXPVap/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 437.515888][ T470] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 437.524214][ T28] audit: type=1326 audit(1759998261.084:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 437.548461][ T470] usb 2-1: No valid video chain found. [ 437.555014][ T470] usb 2-1: USB disconnect, device number 15 [ 437.561703][ T28] audit: type=1326 audit(1759998261.084:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 437.674155][ T1927] loop5: detected capacity change from 0 to 512 [ 437.947604][ T28] audit: type=1326 audit(1759998261.084:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 437.982447][ T28] audit: type=1326 audit(1759998261.084:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 438.005433][ T1929] loop4: detected capacity change from 0 to 256 [ 438.009316][ T28] audit: type=1326 audit(1759998261.084:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 438.013558][ T1929] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 438.069454][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 438.079025][ T28] audit: type=1326 audit(1759998261.084:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff1c9b8eec9 code=0x7ffc0000 [ 439.044519][ T1940] loop3: detected capacity change from 0 to 1024 [ 439.053118][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.064937][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.075061][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.088275][ T19] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.101816][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.120165][ T1940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 439.129946][ T19] usb 7-1: config 0 descriptor?? [ 439.635521][ T19] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 439.644319][ T19] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 439.653574][ T19] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 439.699490][ T478] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 439.779472][ T339] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 439.791842][ T1954] loop4: detected capacity change from 0 to 512 [ 439.840130][ T337] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.880515][ T478] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 439.888776][ T478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 439.911441][ T478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 439.936668][ T478] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.940799][ T437] usb 7-1: USB disconnect, device number 2 [ 439.956020][ T284] EXT4-fs (loop3): unmounting filesystem. [ 439.961167][ T478] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.971409][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.982682][ T339] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 439.994515][ T339] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 440.005019][ T339] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.005270][ T478] usb 2-1: config 0 descriptor?? [ 440.020474][ T339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 440.029354][ T339] usb 6-1: config 0 has no interface number 0 [ 440.035753][ T339] usb 6-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.049436][ T339] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 440.058754][ T1945] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 440.066307][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.080310][ T339] usb 6-1: config 0 descriptor?? [ 440.089285][ T339] usb 6-1: MIDIStreaming interface descriptor not found [ 440.246465][ T1960] loop3: detected capacity change from 0 to 512 [ 440.348791][ T437] usb 6-1: USB disconnect, device number 9 [ 440.447044][ T372] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.459558][ T335] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 440.487447][ T478] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 440.496036][ T478] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 440.511987][ T478] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 440.681296][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.727247][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.737524][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.752171][ T335] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.761868][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.780729][ T335] usb 5-1: config 0 descriptor?? [ 440.898046][ T1969] xt_bpf: check failed: parse error [ 440.916081][ T1971] FAULT_INJECTION: forcing a failure. [ 440.916081][ T1971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.932189][ T1971] CPU: 1 PID: 1971 Comm: syz.3.483 Not tainted syzkaller #0 [ 440.939531][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.949606][ T1971] Call Trace: [ 440.954185][ T1971] [ 440.957124][ T1971] __dump_stack+0x21/0x24 [ 440.961454][ T1971] dump_stack_lvl+0xee/0x150 [ 440.966065][ T1971] ? __cfi_dump_stack_lvl+0x8/0x8 [ 440.971108][ T1971] dump_stack+0x15/0x24 [ 440.975283][ T1971] should_fail_ex+0x3d4/0x520 [ 440.979993][ T1971] should_fail+0xb/0x10 [ 440.984191][ T1971] should_fail_usercopy+0x1a/0x20 [ 440.989240][ T1971] _copy_from_user+0x1e/0xc0 [ 440.993835][ T1971] do_ipt_set_ctl+0x676/0xcb0 [ 440.998571][ T1971] ? memcpy+0x56/0x70 [ 441.002594][ T1971] ? avc_has_perm_noaudit+0x2f4/0x460 [ 441.007969][ T1971] ? __cfi_do_ipt_set_ctl+0x10/0x10 [ 441.013178][ T1971] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 441.018914][ T1971] ? __kasan_check_write+0x14/0x20 [ 441.024029][ T1971] ? mutex_unlock+0x89/0x220 [ 441.028652][ T1971] ? __cfi_mutex_unlock+0x10/0x10 [ 441.033698][ T1971] ? __cfi_avc_has_perm+0x10/0x10 [ 441.038763][ T1971] nf_setsockopt+0x284/0x2b0 [ 441.043466][ T1971] ip_setsockopt+0xed/0x100 [ 441.048043][ T1971] udp_setsockopt+0x8a/0xa0 [ 441.052604][ T1971] ipv6_setsockopt+0x14f/0x1a0 [ 441.057418][ T1971] tcp_setsockopt+0xeb/0x100 [ 441.062094][ T1971] sock_common_setsockopt+0xb1/0xc0 [ 441.067313][ T1971] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 441.073222][ T1971] __sys_setsockopt+0x306/0x4e0 [ 441.078089][ T1971] ? __cfi___sys_setsockopt+0x10/0x10 [ 441.083493][ T1971] ? ksys_write+0x1eb/0x240 [ 441.088004][ T1971] ? __cfi_ksys_write+0x10/0x10 [ 441.092876][ T1971] __x64_sys_setsockopt+0xbf/0xd0 [ 441.097916][ T1971] x64_sys_call+0x124/0x9a0 [ 441.102431][ T1971] do_syscall_64+0x4c/0xa0 [ 441.106853][ T1971] ? clear_bhb_loop+0x30/0x80 [ 441.111539][ T1971] ? clear_bhb_loop+0x30/0x80 [ 441.116236][ T1971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.122143][ T1971] RIP: 0033:0x7fc26698eec9 [ 441.126577][ T1971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.146203][ T1971] RSP: 002b:00007fc2677b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 441.154631][ T1971] RAX: ffffffffffffffda RBX: 00007fc266be5fa0 RCX: 00007fc26698eec9 [ 441.162621][ T1971] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 441.172439][ T1971] RBP: 00007fc2677b3090 R08: 0000000000000508 R09: 0000000000000000 [ 441.180427][ T1971] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 441.188498][ T1971] R13: 00007fc266be6038 R14: 00007fc266be5fa0 R15: 00007ffe11cb0988 [ 441.196511][ T1971] [ 441.219187][ T1975] netlink: 152 bytes leftover after parsing attributes in process `syz.5.484'. [ 441.232200][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.241123][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.248592][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.256294][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.263891][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.312778][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.320477][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.328024][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.335863][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.343561][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.351163][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.359181][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.367118][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.374859][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.382533][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.390254][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.397754][ T339] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 441.411528][ T339] hid-generic 0006:0004:0009.001B: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 441.473394][ T1980] FAULT_INJECTION: forcing a failure. [ 441.473394][ T1980] name failslab, interval 1, probability 0, space 0, times 0 [ 441.486315][ T1980] CPU: 0 PID: 1980 Comm: syz.3.485 Not tainted syzkaller #0 [ 441.492997][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.493624][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.501250][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.512556][ T1980] Call Trace: [ 441.512571][ T1980] [ 441.512580][ T1980] __dump_stack+0x21/0x24 [ 441.512607][ T1980] dump_stack_lvl+0xee/0x150 [ 441.512626][ T1980] ? __cfi_dump_stack_lvl+0x8/0x8 [ 441.512647][ T1980] ? stack_trace_save+0x98/0xe0 [ 441.520573][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.523641][ T1980] dump_stack+0x15/0x24 [ 441.523666][ T1980] should_fail_ex+0x3d4/0x520 [ 441.526662][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.530924][ T1980] __should_failslab+0xac/0xf0 [ 441.530954][ T1980] ? kvmalloc_node+0x294/0x480 [ 441.530973][ T1980] should_failslab+0x9/0x20 [ 441.535792][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.540628][ T1980] __kmem_cache_alloc_node+0x3d/0x2c0 [ 441.540660][ T1980] ? kvmalloc_node+0x294/0x480 [ 441.545572][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.552874][ T1980] __kmalloc_node+0xa1/0x1e0 [ 441.552911][ T1980] kvmalloc_node+0x294/0x480 [ 441.552928][ T1980] ? __kasan_check_write+0x14/0x20 [ 441.552947][ T1980] ? __cfi_kvmalloc_node+0x10/0x10 [ 441.552968][ T1980] seq_read_iter+0x1fc/0xdd0 [ 441.557313][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.561803][ T1980] vfs_read+0x41e/0x8c0 [ 441.561838][ T1980] ? __cfi_vfs_read+0x10/0x10 [ 441.569544][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.574086][ T1980] ? __cfi_mutex_lock+0x10/0x10 [ 441.578957][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.583413][ T1980] ? __fdget_pos+0x2cd/0x380 [ 441.583444][ T1980] ? ksys_read+0x71/0x240 [ 441.583473][ T1980] ksys_read+0x140/0x240 [ 441.591064][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.596232][ T1980] ? __cfi_ksys_read+0x10/0x10 [ 441.601327][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.608956][ T1980] ? debug_smp_processor_id+0x17/0x20 [ 441.613861][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.618276][ T1980] __x64_sys_read+0x7b/0x90 [ 441.623513][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.628685][ T1980] x64_sys_call+0x2f/0x9a0 [ 441.628716][ T1980] do_syscall_64+0x4c/0xa0 [ 441.633516][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.640671][ T1980] ? clear_bhb_loop+0x30/0x80 [ 441.640704][ T1980] ? clear_bhb_loop+0x30/0x80 [ 441.645213][ T335] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.649629][ T1980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.649662][ T1980] RIP: 0033:0x7fc26698eec9 [ 441.649680][ T1980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.657598][ T335] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 441.662007][ T1980] RSP: 002b:00007fc267792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.662033][ T1980] RAX: ffffffffffffffda RBX: 00007fc266be6090 RCX: 00007fc26698eec9 [ 441.672126][ T335] plantronics 0003:047F:FFFF.001C: hiddev97,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 441.673985][ T1980] RDX: 000000000000cb0a RSI: 0000200000000340 RDI: 000000000000000a [ 441.674004][ T1980] RBP: 00007fc267792090 R08: 0000000000000000 R09: 0000000000000000 [ 441.842359][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.850345][ T1980] R13: 00007fc266be6128 R14: 00007fc266be6090 R15: 00007ffe11cb0988 [ 441.858350][ T1980] [ 441.905408][ T6] usb 5-1: USB disconnect, device number 12 [ 442.233973][ T478] usb 2-1: USB disconnect, device number 16 [ 442.859545][ T478] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 442.870141][ T2004] input: syz1 as /devices/virtual/input/input10 [ 443.040774][ T478] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 443.049658][ T478] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 443.061400][ T478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.076362][ T478] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 443.088769][ T478] usb 2-1: config 0 has no interface number 0 [ 443.095970][ T478] usb 2-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.118583][ T478] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 443.296285][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.507998][ T478] usb 2-1: config 0 descriptor?? [ 443.530276][ T478] usb 2-1: MIDIStreaming interface descriptor not found [ 443.534113][ T2017] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 443.537351][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 443.537368][ T28] audit: type=1400 audit(1759998267.104:434): avc: denied { load_policy } for pid=2016 comm="syz.6.498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 443.547519][ T2017] SELinux: failed to load policy [ 443.635333][ T2019] netlink: 152 bytes leftover after parsing attributes in process `syz.3.496'. [ 443.674062][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 443.690171][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 443.698085][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 443.714041][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 443.971830][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 444.062137][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 444.106517][ T2024] FAULT_INJECTION: forcing a failure. [ 444.106517][ T2024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.147096][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 444.757743][ T2024] CPU: 0 PID: 2024 Comm: syz.4.500 Not tainted syzkaller #0 [ 444.765176][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.775265][ T2024] Call Trace: [ 444.778824][ T2024] [ 444.781768][ T2024] __dump_stack+0x21/0x24 [ 444.786128][ T2024] dump_stack_lvl+0xee/0x150 [ 444.790731][ T2024] ? __cfi_dump_stack_lvl+0x8/0x8 [ 444.795763][ T2024] ? __switch_to_asm+0x3a/0x60 [ 444.800551][ T2024] dump_stack+0x15/0x24 [ 444.804710][ T2024] should_fail_ex+0x3d4/0x520 [ 444.809397][ T2024] should_fail+0xb/0x10 [ 444.813571][ T2024] should_fail_usercopy+0x1a/0x20 [ 444.818703][ T2024] _copy_from_user+0x1e/0xc0 [ 444.823301][ T2024] __sys_bpf+0x277/0x780 [ 444.827551][ T2024] ? bpf_link_show_fdinfo+0x320/0x320 [ 444.832922][ T2024] ? preempt_schedule_irq+0xbb/0x110 [ 444.838218][ T2024] ? irqentry_exit+0x37/0x40 [ 444.842815][ T2024] ? sysvec_reschedule_ipi+0x78/0x80 [ 444.848119][ T2024] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 444.853783][ T2024] __x64_sys_bpf+0x7c/0x90 [ 444.858225][ T2024] x64_sys_call+0x488/0x9a0 [ 444.862752][ T2024] do_syscall_64+0x4c/0xa0 [ 444.867179][ T2024] ? clear_bhb_loop+0x30/0x80 [ 444.872028][ T2024] ? clear_bhb_loop+0x30/0x80 [ 444.876718][ T2024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.882616][ T2024] RIP: 0033:0x7f553658eec9 [ 444.887129][ T2024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.906737][ T2024] RSP: 002b:00007f5534ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.915160][ T2024] RAX: ffffffffffffffda RBX: 00007f55367e5fa0 RCX: 00007f553658eec9 [ 444.923135][ T2024] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 444.931113][ T2024] RBP: 00007f5534ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 444.939087][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.947055][ T2024] R13: 00007f55367e6038 R14: 00007f55367e5fa0 R15: 00007ffcb2cc3c88 [ 444.955040][ T2024] [ 444.962908][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 444.970541][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 444.983120][ T28] audit: type=1400 audit(1759998268.554:435): avc: denied { create } for pid=2016 comm="syz.6.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 445.002590][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 445.002988][ T2027] loop4: detected capacity change from 0 to 4096 [ 445.016665][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 445.031160][ T611] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 445.040429][ T2027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 445.042528][ T335] usb 2-1: USB disconnect, device number 17 [ 445.125776][ T611] hid-generic 0006:0004:0009.001D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 445.826547][ T2042] fido_id[2042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 445.857307][ T2043] FAULT_INJECTION: forcing a failure. [ 445.857307][ T2043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.871036][ T2043] CPU: 0 PID: 2043 Comm: syz.3.505 Not tainted syzkaller #0 [ 445.878368][ T2043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.888444][ T2043] Call Trace: [ 445.891742][ T2043] [ 445.894691][ T2043] __dump_stack+0x21/0x24 [ 445.899048][ T2043] dump_stack_lvl+0xee/0x150 [ 445.903703][ T2043] ? __cfi_dump_stack_lvl+0x8/0x8 [ 445.908751][ T2043] ? vfs_write+0x9d6/0xca0 [ 445.913220][ T2043] dump_stack+0x15/0x24 [ 445.917395][ T2043] should_fail_ex+0x3d4/0x520 [ 445.922100][ T2043] should_fail+0xb/0x10 [ 445.926375][ T2043] should_fail_usercopy+0x1a/0x20 [ 445.931516][ T2043] _copy_from_user+0x1e/0xc0 [ 445.936145][ T2043] __sys_connect+0x132/0x420 [ 445.940759][ T2043] ? __cfi___sys_connect+0x10/0x10 [ 445.945891][ T2043] ? __kasan_check_write+0x14/0x20 [ 445.951042][ T2043] ? debug_smp_processor_id+0x17/0x20 [ 445.956451][ T2043] __x64_sys_connect+0x7a/0x90 [ 445.961244][ T2043] x64_sys_call+0x88d/0x9a0 [ 445.965774][ T2043] do_syscall_64+0x4c/0xa0 [ 445.970214][ T2043] ? clear_bhb_loop+0x30/0x80 [ 445.974923][ T2043] ? clear_bhb_loop+0x30/0x80 [ 445.979628][ T2043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.985549][ T2043] RIP: 0033:0x7fc26698eec9 [ 445.989981][ T2043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.009627][ T2043] RSP: 002b:00007fc267792038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 446.018070][ T2043] RAX: ffffffffffffffda RBX: 00007fc266be6090 RCX: 00007fc26698eec9 [ 446.026081][ T2043] RDX: 000000000000002e RSI: 0000200000000100 RDI: 0000000000000005 [ 446.034080][ T2043] RBP: 00007fc267792090 R08: 0000000000000000 R09: 0000000000000000 [ 446.042518][ T2043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.050521][ T2043] R13: 00007fc266be6128 R14: 00007fc266be6090 R15: 00007ffe11cb0988 [ 446.058523][ T2043] [ 446.814673][ T2053] FAULT_INJECTION: forcing a failure. [ 446.814673][ T2053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.900521][ T2053] CPU: 1 PID: 2053 Comm: syz.3.508 Not tainted syzkaller #0 [ 446.907866][ T2053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.918050][ T2053] Call Trace: [ 446.921358][ T2053] [ 446.924307][ T2053] __dump_stack+0x21/0x24 [ 446.928667][ T2053] dump_stack_lvl+0xee/0x150 [ 446.933382][ T2053] ? __cfi_dump_stack_lvl+0x8/0x8 [ 446.938443][ T2053] dump_stack+0x15/0x24 [ 446.942624][ T2053] should_fail_ex+0x3d4/0x520 [ 446.947390][ T2053] should_fail+0xb/0x10 [ 446.951580][ T2053] should_fail_usercopy+0x1a/0x20 [ 446.956643][ T2053] _copy_from_user+0x1e/0xc0 [ 446.961359][ T2053] __sys_bpf+0x277/0x780 [ 446.965631][ T2053] ? bpf_link_show_fdinfo+0x320/0x320 [ 446.971034][ T2053] ? __cfi_ksys_write+0x10/0x10 [ 446.975956][ T2053] ? debug_smp_processor_id+0x17/0x20 [ 446.981363][ T2053] __x64_sys_bpf+0x7c/0x90 [ 446.985813][ T2053] x64_sys_call+0x488/0x9a0 [ 446.990343][ T2053] do_syscall_64+0x4c/0xa0 [ 446.994884][ T2053] ? clear_bhb_loop+0x30/0x80 [ 446.999590][ T2053] ? clear_bhb_loop+0x30/0x80 [ 447.004295][ T2053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.010214][ T2053] RIP: 0033:0x7fc26698eec9 [ 447.014645][ T2053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.035247][ T2053] RSP: 002b:00007fc2677b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.043862][ T2053] RAX: ffffffffffffffda RBX: 00007fc266be5fa0 RCX: 00007fc26698eec9 [ 447.051852][ T2053] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 447.059834][ T2053] RBP: 00007fc2677b3090 R08: 0000000000000000 R09: 0000000000000000 [ 447.067909][ T2053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.076501][ T2053] R13: 00007fc266be6038 R14: 00007fc266be5fa0 R15: 00007ffe11cb0988 [ 447.084495][ T2053] [ 447.240195][ T478] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 447.436224][ T2060] loop6: detected capacity change from 0 to 512 [ 447.506719][ T478] usb 2-1: Using ep0 maxpacket: 32 [ 447.612554][ T478] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.623480][ T478] usb 2-1: config index 0 descriptor too short (expected 53, got 34) [ 447.707806][ T478] usb 2-1: config 2 has an invalid interface number: 221 but max is 0 [ 447.718326][ T478] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 447.729708][ T478] usb 2-1: config 2 has no interface number 0 [ 447.735873][ T478] usb 2-1: config 2 interface 221 has no altsetting 0 [ 447.751234][ T478] usb 2-1: string descriptor 0 read error: -22 [ 447.757502][ T478] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 447.769075][ T478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.796135][ T478] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 447.807512][ T478] usb 2-1: No valid video chain found. [ 447.840275][ T2066] FAULT_INJECTION: forcing a failure. [ 447.840275][ T2066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.857332][ T2066] CPU: 1 PID: 2066 Comm: syz.5.512 Not tainted syzkaller #0 [ 447.864763][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.876758][ T2066] Call Trace: [ 447.880091][ T2066] [ 447.883039][ T2066] __dump_stack+0x21/0x24 [ 447.887396][ T2066] dump_stack_lvl+0xee/0x150 [ 447.892011][ T2066] ? __cfi_dump_stack_lvl+0x8/0x8 [ 447.897051][ T2066] ? _parse_integer+0x2a/0x40 [ 447.901762][ T2066] dump_stack+0x15/0x24 [ 447.905943][ T2066] should_fail_ex+0x3d4/0x520 [ 447.910667][ T2066] should_fail+0xb/0x10 [ 447.914943][ T2066] should_fail_usercopy+0x1a/0x20 [ 447.919999][ T2066] _copy_from_user+0x1e/0xc0 [ 447.925015][ T2066] ___sys_sendmsg+0x155/0x290 [ 447.929718][ T2066] ? __sys_sendmsg+0x270/0x270 [ 447.934508][ T2066] ? __kasan_check_write+0x14/0x20 [ 447.939638][ T2066] ? proc_fail_nth_write+0x17a/0x1f0 [ 447.944954][ T2066] ? vfs_write+0x9d6/0xca0 [ 447.949404][ T2066] ? __fdget+0x19c/0x220 [ 447.953686][ T2066] __x64_sys_sendmsg+0x1f0/0x2c0 [ 447.958652][ T2066] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 447.964141][ T2066] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 447.970245][ T2066] x64_sys_call+0x171/0x9a0 [ 447.974776][ T2066] do_syscall_64+0x4c/0xa0 [ 447.979227][ T2066] ? clear_bhb_loop+0x30/0x80 [ 447.983935][ T2066] ? clear_bhb_loop+0x30/0x80 [ 447.988625][ T2066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.994545][ T2066] RIP: 0033:0x7fa47498eec9 [ 447.999087][ T2066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.018841][ T2066] RSP: 002b:00007fa4733f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.027276][ T2066] RAX: ffffffffffffffda RBX: 00007fa474be5fa0 RCX: 00007fa47498eec9 [ 448.035291][ T2066] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 448.043409][ T2066] RBP: 00007fa4733f7090 R08: 0000000000000000 R09: 0000000000000000 [ 448.051387][ T2066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.059362][ T2066] R13: 00007fa474be6038 R14: 00007fa474be5fa0 R15: 00007ffe8e2d4078 [ 448.067342][ T2066] [ 448.100718][ T2056] loop1: detected capacity change from 0 to 512 [ 448.110391][ T2056] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.122571][ T2056] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.129834][ T2056] EXT4-fs (loop1): Test dummy encryption mode enabled [ 448.136692][ T2056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 448.153207][ T287] EXT4-fs (loop4): unmounting filesystem. [ 448.174171][ T2056] EXT4-fs (loop1): 1 truncate cleaned up [ 448.192540][ T2056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 448.242605][ T2056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=2056 comm=syz.1.509 [ 448.267220][ T478] usb 2-1: USB disconnect, device number 18 [ 448.280418][ T2080] loop4: detected capacity change from 0 to 512 [ 448.291552][ T2080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 448.300861][ T2080] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.538946][ T611] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 448.640286][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 448.719458][ T339] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 448.729444][ T611] usb 4-1: Using ep0 maxpacket: 16 [ 448.735748][ T611] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.746971][ T611] usb 4-1: config 0 interface 0 has no altsetting 0 [ 448.753919][ T611] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 448.763059][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.772925][ T611] usb 4-1: config 0 descriptor?? [ 448.819556][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 448.825890][ T6] usb 7-1: config 1 interface 0 has no altsetting 0 [ 448.833996][ T6] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 448.843100][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.851193][ T6] usb 7-1: Product: syz [ 448.855381][ T6] usb 7-1: Manufacturer: syz [ 448.860013][ T6] usb 7-1: SerialNumber: syz [ 448.900593][ T339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.910753][ T339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.920419][ T339] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 448.929977][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 448.938003][ T339] usb 5-1: SerialNumber: syz [ 448.954991][ T285] EXT4-fs (loop1): unmounting filesystem. [ 449.072372][ T2076] loop6: detected capacity change from 0 to 1024 [ 449.084592][ T2088] FAULT_INJECTION: forcing a failure. [ 449.084592][ T2088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.098242][ T2088] CPU: 1 PID: 2088 Comm: syz.5.520 Not tainted syzkaller #0 [ 449.105566][ T2088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.115639][ T2088] Call Trace: [ 449.118947][ T2088] [ 449.121897][ T2088] __dump_stack+0x21/0x24 [ 449.126257][ T2088] dump_stack_lvl+0xee/0x150 [ 449.130872][ T2088] ? __cfi_dump_stack_lvl+0x8/0x8 [ 449.135930][ T2088] dump_stack+0x15/0x24 [ 449.140113][ T2088] should_fail_ex+0x3d4/0x520 [ 449.144818][ T2088] should_fail+0xb/0x10 [ 449.148999][ T2088] should_fail_usercopy+0x1a/0x20 [ 449.154054][ T2088] _copy_to_user+0x1e/0x90 [ 449.158500][ T2088] simple_read_from_buffer+0xe9/0x160 [ 449.163898][ T2088] proc_fail_nth_read+0x19a/0x210 [ 449.168961][ T2088] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 449.174531][ T2088] ? security_file_permission+0x94/0xb0 [ 449.180104][ T2088] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 449.185669][ T2088] vfs_read+0x26e/0x8c0 [ 449.189852][ T2088] ? __cfi_vfs_read+0x10/0x10 [ 449.194549][ T2088] ? __kasan_check_write+0x14/0x20 [ 449.199679][ T2088] ? mutex_lock+0x8d/0x1a0 [ 449.204137][ T2088] ? __cfi_mutex_lock+0x10/0x10 [ 449.209012][ T2088] ? __fdget_pos+0x2cd/0x380 [ 449.213616][ T2088] ? ksys_read+0x71/0x240 [ 449.217970][ T2088] ksys_read+0x140/0x240 [ 449.222242][ T2088] ? __cfi_ksys_read+0x10/0x10 [ 449.227026][ T2088] ? __bpf_trace_sys_enter+0x62/0x70 [ 449.232326][ T2088] __x64_sys_read+0x7b/0x90 [ 449.236862][ T2088] x64_sys_call+0x2f/0x9a0 [ 449.241339][ T2088] do_syscall_64+0x4c/0xa0 [ 449.245771][ T2088] ? clear_bhb_loop+0x30/0x80 [ 449.250479][ T2088] ? clear_bhb_loop+0x30/0x80 [ 449.255183][ T2088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.261189][ T2088] RIP: 0033:0x7fa47498d8dc [ 449.265618][ T2088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 449.285498][ T2088] RSP: 002b:00007fa4733f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.293940][ T2088] RAX: ffffffffffffffda RBX: 00007fa474be5fa0 RCX: 00007fa47498d8dc [ 449.301930][ T2088] RDX: 000000000000000f RSI: 00007fa4733f70a0 RDI: 0000000000000003 [ 449.309916][ T2088] RBP: 00007fa4733f7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.317902][ T2088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.325890][ T2088] R13: 00007fa474be6038 R14: 00007fa474be5fa0 R15: 00007ffe8e2d4078 [ 449.333890][ T2088] [ 449.355163][ T2091] FAULT_INJECTION: forcing a failure. [ 449.355163][ T2091] name failslab, interval 1, probability 0, space 0, times 0 [ 449.367900][ T2091] CPU: 1 PID: 2091 Comm: syz.1.519 Not tainted syzkaller #0 [ 449.375211][ T2091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.385279][ T2091] Call Trace: [ 449.388635][ T2091] [ 449.391587][ T2091] __dump_stack+0x21/0x24 [ 449.395948][ T2091] dump_stack_lvl+0xee/0x150 [ 449.400559][ T2091] ? __cfi_dump_stack_lvl+0x8/0x8 [ 449.405617][ T2091] ? finish_task_switch+0x16b/0x7b0 [ 449.410835][ T2091] ? __switch_to_asm+0x3a/0x60 [ 449.415622][ T2091] dump_stack+0x15/0x24 [ 449.419798][ T2091] should_fail_ex+0x3d4/0x520 [ 449.424499][ T2091] __should_failslab+0xac/0xf0 [ 449.429282][ T2091] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 449.435280][ T2091] should_failslab+0x9/0x20 [ 449.439803][ T2091] __kmem_cache_alloc_node+0x3d/0x2c0 [ 449.445192][ T2091] ? __cfi_mutex_lock+0x10/0x10 [ 449.450061][ T2091] ? delete_node+0x2f4/0xa60 [ 449.454744][ T2091] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 449.460743][ T2091] __kmalloc+0xa1/0x1e0 [ 449.464932][ T2091] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 449.471636][ T2091] tracepoint_probe_unregister+0x1e6/0x8b0 [ 449.477517][ T2091] bpf_probe_unregister+0x61/0x70 [ 449.482678][ T2091] bpf_raw_tp_link_release+0x63/0x90 [ 449.487981][ T2091] bpf_link_free+0x13a/0x390 [ 449.492605][ T2091] ? irqentry_exit+0x37/0x40 [ 449.497220][ T2091] ? sysvec_reschedule_ipi+0x78/0x80 [ 449.502521][ T2091] ? bpf_link_put_deferred+0x20/0x20 [ 449.507924][ T2091] ? __cfi_____fput+0x10/0x10 [ 449.512717][ T2091] bpf_link_release+0x15f/0x170 [ 449.517595][ T2091] ? __cfi_bpf_link_release+0x10/0x10 [ 449.523680][ T2091] __fput+0x1fc/0x8f0 [ 449.527690][ T2091] ? _raw_spin_unlock+0x4c/0x70 [ 449.532562][ T2091] ____fput+0x15/0x20 [ 449.536657][ T2091] task_work_run+0x1db/0x240 [ 449.541270][ T2091] ? __cfi_task_work_run+0x10/0x10 [ 449.546401][ T2091] ? __cfi___close_range+0x10/0x10 [ 449.551528][ T2091] exit_to_user_mode_loop+0x9b/0xb0 [ 449.556750][ T2091] exit_to_user_mode_prepare+0x5a/0xa0 [ 449.562232][ T2091] syscall_exit_to_user_mode+0x1a/0x30 [ 449.568152][ T2091] do_syscall_64+0x58/0xa0 [ 449.572591][ T2091] ? clear_bhb_loop+0x30/0x80 [ 449.577469][ T2091] ? clear_bhb_loop+0x30/0x80 [ 449.582240][ T2091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.588144][ T2091] RIP: 0033:0x7ff1c9b8eec9 [ 449.592565][ T2091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.612189][ T2091] RSP: 002b:00007ff1ca970038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 449.620805][ T2091] RAX: 0000000000000000 RBX: 00007ff1c9de6180 RCX: 00007ff1c9b8eec9 [ 449.628791][ T2091] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 449.636862][ T2091] RBP: 00007ff1ca970090 R08: 0000000000000000 R09: 0000000000000000 [ 449.644838][ T2091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.652815][ T2091] R13: 00007ff1c9de6218 R14: 00007ff1c9de6180 R15: 00007ffcf5539568 [ 449.660800][ T2091] [ 449.664300][ T2091] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 449.676081][ T2091] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 449.682236][ T2091] CPU: 1 PID: 2091 Comm: syz.1.519 Not tainted syzkaller #0 [ 449.689627][ T2091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.699680][ T2091] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 449.705838][ T2091] Code: 80 3c 30 00 74 05 e8 04 74 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 449.725538][ T2091] RSP: 0018:ffffc90000e8f970 EFLAGS: 00010096 [ 449.731617][ T2091] RAX: 1ffff1102421d926 RBX: ffff8881210ec928 RCX: ffff88811325e540 [ 449.739595][ T2091] RDX: ffff88810f883cc0 RSI: 0000000000000001 RDI: ffffc90000e53000 [ 449.747574][ T2091] RBP: ffffc90000e8f9b0 R08: 0000000000000000 R09: fffffbfff0ee4dce [ 449.755540][ T2091] R10: 00000000b720eca3 R11: 1ffffffff0ee4dcd R12: 0000000000000001 [ 449.763592][ T2091] R13: ffff8881210ec928 R14: dffffc0000000000 R15: ffffffff81713a50 [ 449.772002][ T2091] FS: 00007ff1ca9706c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 449.780940][ T2091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.787524][ T2091] CR2: 0000000000000000 CR3: 000000012d226000 CR4: 00000000003506a0 [ 449.795499][ T2091] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.803466][ T2091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.811445][ T2091] Call Trace: [ 449.814728][ T2091] [ 449.817660][ T2091] __schedule+0x1263/0x14e0 [ 449.822168][ T2091] ? release_firmware_map_entry+0x194/0x194 [ 449.828057][ T2091] ? __should_failslab+0xac/0xf0 [ 449.833084][ T2091] preempt_schedule_irq+0x9b/0x110 [ 449.838201][ T2091] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 449.843941][ T2091] ? __kasan_kmalloc+0x24/0xb0 [ 449.848798][ T2091] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 449.854875][ T2091] ? __kmalloc+0xb1/0x1e0 [ 449.859232][ T2091] raw_irqentry_exit_cond_resched+0x29/0x30 [ 449.865131][ T2091] irqentry_exit+0x37/0x40 [ 449.869554][ T2091] sysvec_reschedule_ipi+0x78/0x80 [ 449.874676][ T2091] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 449.880143][ T2091] RIP: 0010:bpf_link_free+0x17c/0x390 [ 449.885523][ T2091] Code: f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fa c5 34 00 4d 8b 36 4c 89 f7 be 08 00 00 00 e8 8a c8 34 00 31 f6 f0 49 ff 0e <41> 0f 94 c7 40 0f 94 c6 bf 02 00 00 00 e8 c2 5a f0 ff 45 84 ff 74 [ 449.905120][ T2091] RSP: 0018:ffffc90000e8fc60 EFLAGS: 00000202 [ 449.911183][ T2091] RAX: 1ffff920001ca601 RBX: ffff8881210ec380 RCX: ffffffff817fc606 [ 449.919149][ T2091] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888115e7a000 [ 449.927113][ T2091] RBP: ffffc90000e8fd08 R08: dffffc0000000000 R09: ffffed1022bcf401 [ 449.935080][ T2091] R10: ffffed1022bcf401 R11: 1ffff11022bcf400 R12: 1ffff1102421d873 [ 449.943058][ T2091] R13: dffffc0000000000 R14: ffff888115e7a000 R15: ffffffff858c5d00 [ 449.951028][ T2091] ? bpf_link_free+0x176/0x390 [ 449.955795][ T2091] ? irqentry_exit+0x37/0x40 [ 449.960400][ T2091] ? sysvec_reschedule_ipi+0x78/0x80 [ 449.965683][ T2091] ? bpf_link_put_deferred+0x20/0x20 [ 449.970975][ T2091] ? __cfi_____fput+0x10/0x10 [ 449.975739][ T2091] bpf_link_release+0x15f/0x170 [ 449.980680][ T2091] ? __cfi_bpf_link_release+0x10/0x10 [ 449.986040][ T2091] __fput+0x1fc/0x8f0 [ 449.990018][ T2091] ? _raw_spin_unlock+0x4c/0x70 [ 449.994863][ T2091] ____fput+0x15/0x20 [ 449.998841][ T2091] task_work_run+0x1db/0x240 [ 450.003443][ T2091] ? __cfi_task_work_run+0x10/0x10 [ 450.008550][ T2091] ? __cfi___close_range+0x10/0x10 [ 450.013671][ T2091] exit_to_user_mode_loop+0x9b/0xb0 [ 450.018863][ T2091] exit_to_user_mode_prepare+0x5a/0xa0 [ 450.024312][ T2091] syscall_exit_to_user_mode+0x1a/0x30 [ 450.029781][ T2091] do_syscall_64+0x58/0xa0 [ 450.034189][ T2091] ? clear_bhb_loop+0x30/0x80 [ 450.038877][ T2091] ? clear_bhb_loop+0x30/0x80 [ 450.043555][ T2091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.049449][ T2091] RIP: 0033:0x7ff1c9b8eec9 [ 450.053860][ T2091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.073898][ T2091] RSP: 002b:00007ff1ca970038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 450.082338][ T2091] RAX: 0000000000000000 RBX: 00007ff1c9de6180 RCX: 00007ff1c9b8eec9 [ 450.090396][ T2091] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 450.098359][ T2091] RBP: 00007ff1ca970090 R08: 0000000000000000 R09: 0000000000000000 [ 450.106409][ T2091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.114381][ T2091] R13: 00007ff1c9de6218 R14: 00007ff1c9de6180 R15: 00007ffcf5539568 [ 450.123011][ T2091] [ 450.126036][ T2091] Modules linked in: [ 450.129937][ T2091] ---[ end trace 0000000000000000 ]--- [ 450.135390][ T2091] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 450.141574][ T2091] Code: 80 3c 30 00 74 05 e8 04 74 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 450.161391][ T2091] RSP: 0018:ffffc90000e8f970 EFLAGS: 00010096 [ 450.167459][ T2091] RAX: 1ffff1102421d926 RBX: ffff8881210ec928 RCX: ffff88811325e540 [ 450.175436][ T2091] RDX: ffff88810f883cc0 RSI: 0000000000000001 RDI: ffffc90000e53000 [ 450.183453][ T2091] RBP: ffffc90000e8f9b0 R08: 0000000000000000 R09: fffffbfff0ee4dce [ 450.191521][ T2091] R10: 00000000b720eca3 R11: 1ffffffff0ee4dcd R12: 0000000000000001 [ 450.199587][ T2091] R13: ffff8881210ec928 R14: dffffc0000000000 R15: ffffffff81713a50 [ 450.207563][ T2091] FS: 00007ff1ca9706c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 450.216487][ T2091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.223066][ T2091] CR2: 0000000000000000 CR3: 000000012d226000 CR4: 00000000003506a0 [ 450.231215][ T2091] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.239190][ T2091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.247218][ T2091] Kernel panic - not syncing: Fatal exception [ 451.410447][ T2091] Shutting down cpus with NMI [ 451.421616][ T2091] Kernel Offset: disabled [ 451.426475][ T2091] Rebooting in 86400 seconds..