last executing test programs: 17.574911164s ago: executing program 1 (id=573): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000006800090300000000000000000b00e6ff2b00000004000b000c000200"], 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) timer_create(0x7, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x10, 0x80, 0x7, 0x6, {{0x3b, 0x4, 0x2, 0x2e, 0xec, 0x66, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0x48, 0x1, 0xe, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@rand_addr=0x64010100, 0x4}, {@remote}, {@broadcast, 0x1}, {@loopback, 0xfff}, {@remote, 0x8}, {@multicast2, 0x8}, {@loopback, 0x10001}]}, @cipso={0x86, 0x46, 0x3, [{0x2, 0x11, "f3c9b77147c4bc5a967a0a7fcefc24"}, {0x1, 0x2}, {0x6, 0xc, "c205188751ea10c655cd"}, {0x6, 0xe, "666c828aecd2892e4dbf9b42"}, {0x5, 0x6, "00fa184c"}, {0x2, 0xd, "48cd9d101d316a9091e06a"}]}, @lsrr={0x83, 0x7, 0xb5, [@multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x7f, 0x3, 0x6, [{@multicast1, 0x4}, {@multicast2, 0x8}, {@local, 0x9}]}, @lsrr={0x83, 0xf, 0xda, [@local, @local, @multicast2]}, @generic={0x44, 0x12, "112c4f6c72ffa5a7c14370e4b909123a"}]}}}}}) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000480)) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @random="5dbbabeb925a"}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x64}}, 0x4000) syz_usb_disconnect(r0) syz_emit_ethernet(0x104, &(0x7f0000000800)={@multicast, @random="e3c7c4c23878", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0xce, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3, "be89825e10ca53609af750b700d566e3f95505fa688bfa288d7355abf761ae88b36fbc820f7ea303d4fa700f873ca8b49da3ddd12f64e0458b158aa2488a031bd8416c6778609b737a1f107f1b05c74bf70409839ec95d8f257567add1f7da2ec527ab658f576c4b1af3775730bbf4087ba3fec5070190edf69bf487aae72a268cda894be2bc384b89cff3417e48a01d78fe8759ee3415faea1ebf7ef464c96b0d028e06c5704d29defb598b450e06fdebb3934c0e606c0ab11469a2021864d60173934da54f"}}}}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\x00\x00\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049\r\x197|\x7f\x03%\x9c\x88\xf8f\xf4b\x97\xb5\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8', 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x4b4b, &(0x7f0000000000)) 11.820128167s ago: executing program 1 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x2180}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 10.827541857s ago: executing program 1 (id=584): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) 3.738464859s ago: executing program 2 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3.641324297s ago: executing program 4 (id=618): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000701) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000300000000000086dd6100272400303afffc000000000000000000000000000001ff02000000000000000000000000000101049078000000006d2318d30f4e00002001000000000000000000000000000106000000000000000000000000000001"], 0x0) socket(0x1d, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000007, 0xffffffff, 0x4, 0x1fe, 0x9}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r7}, 0x18) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240000, 0x1a2) sched_setscheduler(0x0, 0x2, 0x0) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 3.265186587s ago: executing program 0 (id=619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 3.093667961s ago: executing program 0 (id=621): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) (fail_nth: 1) 3.064818763s ago: executing program 4 (id=622): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00*\x00\x00Z,\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000077340000000000000c0000009500000000000000c76e9b20248ab3cf5bf8e6597e27f22f536b8e62c86300e8a78ee6672e4f6aed48b129fb830d6c28f5e0", @ANYRESDEC, @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0xffffffffffffffff, 0xc400) lseek(r7, 0x0, 0x4) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000d5d79409d3e52ce1ac4557a7fcfc6891983b004d186c2ad6581b6cdd83f7da7b43317512088dfb9060fdb1e35e1559e98f3250206d170000000000000000000076577ff725dba6d046c4b138d5c3c3acc5e871e993ca13232f67fb0eb34b1a59f4b5f1f51aea152ecabd333962781df28d19e5a98ea368d093c1127ff570f1702117e8543b7ba890b5aaed74c20a6694", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0xa4805400, 0x0, 0x14, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.772281227s ago: executing program 2 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x2180}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2.715470681s ago: executing program 0 (id=624): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff7ffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x14, 0xb, 0x8, 0x0, 0x0, 0x5, 0x10}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.645504947s ago: executing program 3 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 2.644824967s ago: executing program 4 (id=629): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x7}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0xa00c1, 0x9c37611dc13d0da6) fchown(r5, 0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x42000000) 2.635108368s ago: executing program 3 (id=630): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'bridge0\x00', @local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRESDEC=r4], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="1a00000004000000be7000005c80000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000f0ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x5ad00ea84eb3ba9a, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff9e, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.541783605s ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce2266"], 0x280) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550d, &(0x7f0000000a40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.531487646s ago: executing program 3 (id=632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 2.471351851s ago: executing program 3 (id=633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r3}, 0x10) (async, rerun: 32) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) (async, rerun: 32) write$cgroup_int(r0, &(0x7f00000001c0)=0x7, 0x12) (async, rerun: 32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = dup2(r4, 0xffffffffffffffff) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@initdev}, &(0x7f0000000280)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000280)={'sit0\x00', 0x0}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x139c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1368, 0x2, [@TCA_MATCHALL_ACT={0xa18, 0x2, [@m_ife={0xc8, 0xd, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff1b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x3fc, 0x3, 0xab, 0x5}}}, @TCA_IFE_SMAC={0xa}]}, {0x16, 0x6, "ca96f73706b3bd8a9e25fd6316dd4b379c43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x54, 0x6, 0x0, 0x0, {{0xc}, {0x4}, {0x25, 0x6, "abb327dd6db421d1053fb4e04eedfebbf047a10ff2c00d3b4a37de09f772c25c5c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x8f8, 0x16, 0x0, 0x0, {{0xb}, {0x86c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xa, 0x7, 0xa58, 0x1, 0x4, 0xffffffff, 0x7, 0x8000, 0xfffffff7, 0x8, 0x4, 0x3, 0x4a99790e, 0x1, 0x9, 0xffff49d2, 0x37ea, 0x5, 0x5, 0xfffffff8, 0x7, 0xf, 0x3, 0x2, 0x101, 0xfffffff2, 0x3, 0x5, 0x5df, 0x1, 0x3, 0x7f, 0xcf5, 0x6be, 0x1ff, 0x8, 0x2, 0x5, 0x401, 0xb, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x1, 0x0, 0x3, 0x6, 0xbe, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x400, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x4e45, 0x7ff, 0x3ff, 0x65f, 0x9, 0x7d, 0x8, 0x7, 0x8000, 0x80, 0x6, 0x0, 0x8000, 0x9, 0x5, 0x7, 0xfff, 0x6, 0x81, 0xf4, 0x1ff, 0x6, 0x5, 0x6, 0x5, 0xffff, 0x2, 0x8, 0x2, 0xfffffff8, 0x5, 0x7, 0x7, 0x6, 0x1, 0x9, 0x58e, 0xdfb, 0x2, 0x3, 0xffff8001, 0x7455, 0x995a, 0x1, 0x1000, 0x1, 0x7fff, 0x8, 0x81, 0x9, 0x7f, 0x97d3, 0x3, 0xa, 0x0, 0x8, 0x40, 0x7fff, 0x8, 0xf, 0x1, 0x2, 0x5, 0x100, 0x0, 0x6, 0x2, 0x0, 0x10000, 0x6fd, 0x3, 0x800, 0x550, 0x9, 0x95, 0x6, 0x10, 0xffff6b02, 0x0, 0x101, 0x9, 0x6, 0x1, 0xf9, 0x6, 0xfffffffb, 0x9, 0x10001, 0xd4b, 0x4, 0x0, 0x100, 0x7, 0x1, 0xdf6, 0x8, 0x7f, 0x8e, 0xff, 0x4, 0x8, 0x6, 0xa12, 0x7, 0x3, 0x0, 0xa, 0x8000, 0x2, 0x8, 0x5, 0x0, 0x3, 0x7, 0x4ac5, 0x5, 0x9, 0xcc7, 0x8, 0x3, 0x3, 0x1ff, 0xe8, 0x3ff, 0x5, 0x3b8, 0x0, 0x80000000, 0x4, 0xa, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x5, 0xdb, 0x4, 0x9, 0x4, 0x46, 0x2, 0x4, 0x1, 0x781, 0x7ff, 0xffffff4a, 0x80000001, 0x5, 0x1ff, 0x5, 0x1, 0xf, 0x9, 0x0, 0x5, 0x152a, 0xe, 0x2, 0x80000001, 0x4, 0x2, 0x8, 0x1ff, 0x401, 0xffff4065, 0x5, 0xf, 0x7, 0x9, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x80, 0x2, 0x7, 0x0, 0x9, 0xf, 0x3, 0xf73, 0x4, 0x4, 0x8, 0xd, 0x3, 0x3, 0x1, 0x8ac, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7fffffff, 0x2, 0x7f, 0xb7e, 0x0, 0x3, 0x2, 0x2, 0x2, 0xc19, 0x1, 0x1, 0x126f29d5, 0x0, 0x5, 0x2, 0x2, 0x3, 0xcc19, 0x9, 0x200, 0x8, 0x8, 0x0, 0x8, 0x6, 0x1, 0xb, 0x7, 0x3, 0x200, 0x6, 0x7, 0x6526a70a, 0x401, 0x3, 0x8, 0x5, 0x9, 0x7fff, 0x4, 0x0, 0x1, 0x3ff, 0x100, 0x7, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x1, 0x3, 0xebe, 0x0, 0x4731719a, 0x2, 0xbdb, 0xc, 0x5, 0x0, 0x5, 0x5, 0x1, 0x5, 0x3, 0x4, 0x6, 0x1, 0xffffffff, 0x3, 0x461, 0x2, 0x3, 0x2, 0x40, 0x1, 0x7788, 0x4, 0x4, 0x9, 0x3, 0x4, 0xf, 0x4, 0x1, 0x80000001, 0x41, 0x9, 0x3, 0xb, 0xc, 0xff, 0x3, 0x7, 0x80, 0x3, 0x2, 0x9, 0x7, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0xff, 0xb059, 0x4, 0x3, 0x0, 0xe56b, 0x4, 0x10001, 0x80, 0x101, 0x10001, 0x5, 0xfffff801, 0x9572, 0x401, 0x7, 0x6f30, 0x7, 0x5, 0x6, 0xff, 0x7, 0xe, 0x6, 0x3, 0xb8, 0x6, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0xfffd, 0x80000000, 0x9270, 0x8, 0x0, 0x5, 0x10000, 0x8, 0x81a, 0x400, 0x2, 0x7, 0x100, 0x9a4, 0xff, 0x7, 0xf, 0x6, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x7, 0x7, 0x9, 0x5, 0x1, 0xb, 0x6, 0x7, 0xb, 0x81, 0x2, 0x36c, 0x800, 0x3, 0x800, 0x7ff, 0x1, 0x8, 0x7ff, 0x6, 0x9, 0x9, 0xffe0000, 0x10, 0x45, 0xfffffff6, 0x5, 0xfffffeab, 0x7, 0x2, 0x69, 0x7, 0x81, 0x2, 0x6, 0x9, 0xfff, 0x9, 0x3, 0x3aa, 0x7, 0x7f, 0x4, 0x8001, 0x16645508, 0x0, 0x8, 0x5, 0xb8, 0x9, 0x6, 0x4, 0xc, 0x3, 0x4, 0x8, 0x200, 0x8000, 0x3, 0x1, 0x401, 0x7, 0x0, 0x0, 0xe7a6, 0x9, 0xbad449bc, 0x5, 0x1, 0x2, 0x3, 0xffa, 0xe, 0x7, 0xe, 0x5, 0x1, 0x5, 0x7ff, 0x800, 0x2, 0x6, 0x8, 0x102, 0x3c5, 0xc, 0x5, 0x4, 0x1ff, 0x37fb, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x20000000, 0x8f5b, 0x1, 0x9, {0x5, 0x2, 0x7, 0x3}, {0xc, 0x2, 0xff, 0x2, 0x2, 0x7}, 0x7, 0x0, 0x1}}]]}, {0x64, 0x6, "8eeb0f42c51369ff5723abc46891f64f2a1f64b3267e7c97f4f3d90a0c7d62be724a70b2c3eb7956ab9ea45ccf922446afdaa4f240339bed2c135ceff58dc86310f74505c14874ea0c91ac38bcd5490b5edd4d596ea793c923c098ba71fb7643"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x914, 0x2, [@m_police={0x910, 0x6, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xfc5b, 0x5, 0x8, 0x1, 0xa, 0x1, 0x0, 0x4, 0xdf, 0x8000, 0x80000000, 0x0, 0x9, 0x0, 0xce7, 0x10, 0x7e4, 0xb, 0x7, 0x7, 0x1000, 0xb36, 0x10000, 0x9, 0x1, 0x7ff, 0xe, 0x4062, 0x0, 0x4, 0x8001, 0xd9b, 0x5, 0x5, 0x3, 0x6, 0x6, 0x80000001, 0x7be, 0x4, 0x79, 0x6, 0x8, 0x5, 0xffff, 0x4ea, 0x4, 0x0, 0x7f, 0xd702, 0x800, 0x8, 0xf, 0xadb2, 0xa7f0, 0x5, 0x17dca32e, 0x7, 0xfffffffc, 0x8, 0xf, 0xd, 0x9b, 0x0, 0x7, 0x8, 0x5a7b, 0xffff8000, 0x100, 0x200, 0x2, 0x0, 0x6, 0x5, 0xc, 0x7, 0x1, 0x4, 0x7, 0x7, 0x2, 0x5, 0x1, 0xc64f, 0x3, 0x9, 0x20000, 0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0xffff, 0x6e82, 0x8dd0, 0x3, 0x2, 0x4, 0x1, 0x26, 0xa7ce, 0x4, 0x6, 0x4, 0x4, 0xa0000, 0xffffff01, 0xfffff20e, 0x6, 0x2, 0x3, 0x21bb, 0x5, 0x400, 0x7, 0x6, 0xed, 0x7, 0x4, 0x5, 0x6, 0x1ff, 0xfffffff9, 0x5, 0x0, 0x9, 0xf, 0xe, 0xfffffffa, 0xfffffffa, 0x80000000, 0x0, 0x7, 0x482, 0x0, 0xc935, 0x298bd4a6, 0xe, 0x9, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xfff, 0x213, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6cd7778a, 0x4, 0x0, 0x1a, 0x0, 0xfff, 0x1, 0x4, 0x3, 0xbd, 0xffffffff, 0x2, 0xfffffff1, 0x10001, 0x2, 0x0, 0x1, 0x7f, 0xe0, 0x4, 0x2, 0x1000, 0x0, 0x6, 0xe, 0xfffffff8, 0x7, 0xaff0, 0xffffffff, 0x7a96, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x893, 0x9, 0x5, 0x4, 0x1, 0x7, 0x5, 0x4, 0x7cf, 0x2, 0x2, 0x8000, 0x80000001, 0x87, 0x2, 0x7, 0xfff, 0x2, 0x5, 0x1, 0x9, 0xca8, 0x0, 0x81, 0x9, 0x0, 0x2, 0x3ff, 0x9, 0x101, 0x7fffffff, 0x209e, 0x0, 0x8, 0x0, 0x7, 0x7, 0x1000, 0x28d, 0xfffffffe, 0x0, 0x707, 0x4, 0x0, 0x200, 0x3, 0x2, 0xf, 0x5, 0x100, 0x9, 0x73, 0x0, 0x4, 0x20000001, 0x10000, 0x7fff, 0x68, 0x2, 0x81, 0x52, 0x200, 0x4, 0x27]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfafa, 0x3, 0x23b, 0x8, 0x3, 0x3, 0x532c, 0x6, 0x0, 0x8, 0xa8e, 0x1, 0x81, 0x897, 0x3, 0x1, 0x80, 0x0, 0xf, 0x5, 0x0, 0x8, 0x2e5, 0x9, 0x7, 0x2, 0x6, 0x800, 0xfffffff7, 0x3, 0xb, 0xfffffffb, 0x8, 0x830, 0x1, 0x5, 0x2, 0xf20, 0xb9, 0x8, 0x59c, 0x7, 0xff, 0x2, 0x7ff, 0x1, 0xc5d1, 0x80, 0x2, 0x4, 0x7ff, 0x7, 0x43c, 0x4, 0x8fa3, 0x69565e33, 0x5, 0x9368, 0x2, 0x123a, 0xe, 0x6c7, 0x2, 0x7, 0x4, 0x5, 0x7, 0x5, 0x267, 0xffff, 0x6, 0xb2, 0x6, 0x97b, 0x40, 0x3, 0x7, 0x7, 0x1, 0x1, 0x2, 0x2, 0x1000, 0xfffffff7, 0xf, 0x4, 0x4e, 0x40, 0x4, 0xffff, 0xff, 0xb1a, 0x988, 0x401, 0x2, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0xffffdefe, 0x2, 0x80000000, 0x5, 0x54, 0xe0000, 0x1, 0xe92, 0x2, 0x0, 0x0, 0x1, 0x3, 0xf7a6, 0x0, 0x100, 0x0, 0x10, 0x4, 0x4, 0x2, 0x8, 0x23421d05, 0x1, 0x9, 0xf95e, 0xd0, 0xdbf, 0x0, 0x8, 0x800, 0xffff, 0x5, 0x7, 0xfffffffa, 0x81, 0x7, 0x3, 0x5, 0x40, 0x3, 0xce3, 0x1, 0x4, 0x5, 0x3, 0x8, 0xdd, 0x4, 0x9, 0x6, 0x8, 0x88a, 0x9, 0x50f, 0xffffffff, 0xffffffff, 0x1ff, 0x3, 0xffff, 0x1, 0x400, 0x4, 0x7a, 0x5, 0xff, 0x5, 0x0, 0xed2c, 0xffffffff, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x1, 0x100, 0x1, 0x71, 0x5, 0x3, 0x5, 0x9, 0x59, 0x7, 0x400, 0x6, 0x0, 0x80000003, 0xfffffff8, 0xb, 0x6, 0xaf, 0x400, 0x5, 0x0, 0x1, 0x2, 0xe8d, 0x0, 0x8, 0x600000, 0x3, 0x2, 0x80, 0xa6e, 0x6, 0x6, 0xa17, 0x6, 0x7, 0x1, 0x4, 0x5, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0x400, 0x3ff, 0x10001, 0x0, 0x200, 0xfffffffb, 0x1, 0x9, 0x8, 0x7, 0x4, 0x8f, 0xffffffff, 0x2, 0x3, 0x1, 0x8b, 0x8001, 0x0, 0x100, 0x6, 0x8, 0x9, 0x5e9, 0x7, 0xd, 0x5, 0x3, 0xea5a, 0x400, 0x1, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x800, 0x2, 0x10000, {0x2, 0x2, 0x200, 0x45de, 0xfff, 0x8}, {0x81, 0x0, 0x40, 0x852, 0x1, 0x9}, 0x0, 0x8000, 0x9}}]]}, {0x68, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491f14c1907"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x139c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001081800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b00000000"], 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="316f82faff29f96a2093a917017b4cd300", 0x11}], 0x1}}], 0x1, 0x4084) 2.443924573s ago: executing program 3 (id=634): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = dup(r1) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d21"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 2.247693919s ago: executing program 0 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (fail_nth: 1) 1.782767156s ago: executing program 0 (id=636): syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200", 0x12) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x10120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040600) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000}, 0x8}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904", @ANYRES16], 0x0) (fail_nth: 1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) 1.782193676s ago: executing program 4 (id=637): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7fff, 0x8, 0x400, 0x80000001, 0x17, "2fd4691cfebc685812aa872571fd490484ee93"}) ioctl$KDSIGACCEPT(r0, 0x5607, 0x1) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc000, &(0x7f00000000c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {}, {@subsystem='cpu'}, {@name={'name', 0x3d, ',:'}}, {}, {@xattr}, {@cpuset_v2_mode}], [{@hash}, {@permit_directio}]}) 1.765591638s ago: executing program 2 (id=638): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000001c0)='\x00', 0x1, 0x8000c61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d80)=ANY=[], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) r9 = openat$cgroup(r7, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000500), 0x12) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r11, 0x4c80, 0x7000000) r12 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r12, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) 1.654486887s ago: executing program 4 (id=639): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.653828997s ago: executing program 4 (id=640): syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200", 0x12) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x10120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040600) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000}, 0x8}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904", @ANYRES16], 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) 1.637966168s ago: executing program 2 (id=641): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff7ffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x14, 0xb, 0x8, 0x0, 0x0, 0x5, 0x10}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.227326481s ago: executing program 3 (id=642): syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000306000000020000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200", 0x12) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x10120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040600) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000}, 0x8}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904", @ANYRES16], 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) 1.101802151s ago: executing program 2 (id=643): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x7}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0xa00c1, 0x9c37611dc13d0da6) fchown(r5, 0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x42000000) 252.09731ms ago: executing program 1 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 250.47482ms ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce2266"], 0x280) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550d, &(0x7f0000000a40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 238.452201ms ago: executing program 1 (id=646): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x140) statx(r0, &(0x7f0000002b40)='./file0\x00', 0x100, 0x40, &(0x7f0000002b80)) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@inlinecrypt}]}, 0x2, 0x476, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@remote}, {@multicast2, 0x9}]}, @ssrr={0x89, 0xb, 0x77, [@loopback, @empty]}, @generic={0x83, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0x79) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$incfs(r4, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000340)={{}, {0x7}, 0x90, 0x0, 0x0, 0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) listen(r8, 0x3) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg") 0s ago: executing program 1 (id=647): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xad, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x77, 0x11, 0xf0be3aa8ff0ec226, @remote, @mcast2, {[], {0x4e20, 0x4e23, 0x4d, 0x0, @wg=@data={0x4, 0x1, 0x401, "1aa703c9c74cbeb17472e514ba056ec7ee457d1033df6a573f80c6228f6f45d0ba86a158ea6f2f4ca28075bffe83dcc3af87e9b12e089cf13b2c4ac12b073dc5e4f5fc7e114741df0b329e3711ca251361836b84ddc660a789f0b8f4d29701"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0d00000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f4ffffff000800000000000000000000000000000000007c39b9c8ab05c6bbd97d00a4f3cab2db57279b74f520c906ff975600000000007ac6647e08c0b42df14bfb"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000100)=""/7, 0x2}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") close_range(r2, r6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): ds from problematic bidirectional printer [ 125.742034][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.752347][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.827366][ T1621] FAULT_INJECTION: forcing a failure. [ 125.827366][ T1621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.840495][ T1621] CPU: 1 PID: 1621 Comm: syz.3.337 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 125.850603][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.860693][ T1621] Call Trace: [ 125.863972][ T1621] [ 125.866911][ T1621] __dump_stack+0x21/0x30 [ 125.871241][ T1621] dump_stack_lvl+0xee/0x150 [ 125.875830][ T1621] ? show_regs_print_info+0x20/0x20 [ 125.881030][ T1621] dump_stack+0x15/0x20 [ 125.885184][ T1621] should_fail+0x3c1/0x510 [ 125.889624][ T1621] should_fail_usercopy+0x1a/0x20 [ 125.894648][ T1621] _copy_from_user+0x20/0xd0 [ 125.899239][ T1621] do_ipt_set_ctl+0x5dd/0xce0 [ 125.903917][ T1621] ? __schedule+0xb76/0x14c0 [ 125.908514][ T1621] ? ipt_unregister_table_exit+0x220/0x220 [ 125.914332][ T1621] ? release_firmware_map_entry+0x190/0x190 [ 125.914804][ T1599] loop2: detected capacity change from 0 to 512 [ 125.920244][ T1621] ? __cond_resched+0xb0/0xb0 [ 125.920266][ T1621] ? ip4_datagram_release_cb+0x599/0x770 [ 125.920290][ T1621] ? __kasan_check_write+0x14/0x20 [ 125.941901][ T1621] ? mutex_unlock+0x89/0x220 [ 125.946489][ T1621] ? __mutex_lock_slowpath+0x10/0x10 [ 125.951788][ T1621] ? sysvec_reschedule_ipi+0x78/0x80 [ 125.957102][ T1621] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 125.962730][ T1621] nf_setsockopt+0x272/0x2a0 [ 125.967318][ T1621] ip_setsockopt+0x25e6/0x3520 [ 125.972073][ T1621] ? ipv4_pktinfo_prepare+0x580/0x580 [ 125.977435][ T1621] ? update_rt_migration+0x3a0/0x3a0 [ 125.982728][ T1621] ? _raw_spin_unlock+0x4d/0x70 [ 125.987572][ T1621] ? update_rt_migration+0x3a0/0x3a0 [ 125.992871][ T1621] ? finish_task_switch+0x16b/0x780 [ 125.998058][ T1621] ? __switch_to_asm+0x3a/0x60 [ 126.002811][ T1621] ? __schedule+0xb76/0x14c0 [ 126.007404][ T1621] ? memcpy+0x56/0x70 [ 126.011407][ T1621] ? avc_has_perm_noaudit+0x2f4/0x460 [ 126.016767][ T1621] ? avc_denied+0x1b0/0x1b0 [ 126.021271][ T1621] ? preempt_schedule_irq+0xbb/0x110 [ 126.026551][ T1621] ? __cond_resched+0xb0/0xb0 [ 126.031224][ T1621] ? avc_has_perm+0x158/0x240 [ 126.035890][ T1621] ? irqentry_exit_cond_resched+0x29/0x30 [ 126.041596][ T1621] ? avc_has_perm_noaudit+0x460/0x460 [ 126.046971][ T1621] ? selinux_socket_setsockopt+0x21c/0x300 [ 126.052823][ T1621] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 126.058625][ T1621] ? __kasan_check_write+0x14/0x20 [ 126.063724][ T1621] ? push_rt_task+0x35f/0x5b0 [ 126.068398][ T1621] ? __fget_files+0x2c4/0x320 [ 126.073077][ T1621] udp_setsockopt+0x8a/0xa0 [ 126.077572][ T1621] sock_common_setsockopt+0xa0/0xb0 [ 126.082763][ T1621] ? sock_common_recvmsg+0x1b0/0x1b0 [ 126.088038][ T1621] __sys_setsockopt+0x2f0/0x460 [ 126.092877][ T1621] ? __ia32_sys_recv+0xb0/0xb0 [ 126.097634][ T1621] ? ksys_write+0x1eb/0x240 [ 126.102124][ T1621] ? __kasan_check_write+0x14/0x20 [ 126.107228][ T1621] __x64_sys_setsockopt+0xbf/0xd0 [ 126.112244][ T1621] x64_sys_call+0x982/0x9a0 [ 126.116740][ T1621] do_syscall_64+0x4c/0xa0 [ 126.121146][ T1621] ? clear_bhb_loop+0x50/0xa0 [ 126.125813][ T1621] ? clear_bhb_loop+0x50/0xa0 [ 126.130490][ T1621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.136420][ T1621] RIP: 0033:0x7fd6b502fbe9 [ 126.140826][ T1621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.160417][ T1621] RSP: 002b:00007fd6b3a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.168819][ T1621] RAX: ffffffffffffffda RBX: 00007fd6b5267180 RCX: 00007fd6b502fbe9 [ 126.176778][ T1621] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a [ 126.184735][ T1621] RBP: 00007fd6b3a56090 R08: 0000000000000490 R09: 0000000000000000 [ 126.192698][ T1621] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 126.200657][ T1621] R13: 00007fd6b5267218 R14: 00007fd6b5267180 R15: 00007ffd22a9edc8 [ 126.208621][ T1621] [ 126.211837][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 126.211848][ T30] audit: type=1400 audit(1756592675.855:289): avc: denied { setopt } for pid=1598 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.242074][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.254704][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.263059][ T6] usb 5-1: SerialNumber: syz [ 126.273910][ T1599] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 126.287932][ T1599] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.346989][ T1630] loop0: detected capacity change from 0 to 256 [ 126.503274][ T756] usblp 3-1:0.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 126.517425][ T756] usb 3-1: USB disconnect, device number 6 [ 126.524426][ T756] usblp0: removed [ 126.543032][ T6] usb 5-1: 0:2 : does not exist [ 126.554259][ T6] usb 5-1: USB disconnect, device number 3 [ 126.794088][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.911531][ T1641] syz.3.340 (1641) used greatest stack depth: 21920 bytes left [ 127.037756][ T1645] loop3: detected capacity change from 0 to 4096 [ 127.129643][ T1645] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.158923][ T1652] FAULT_INJECTION: forcing a failure. [ 127.158923][ T1652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.172206][ T1652] CPU: 1 PID: 1652 Comm: syz.2.345 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 127.182278][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.192324][ T1652] Call Trace: [ 127.195597][ T1652] [ 127.198519][ T1652] __dump_stack+0x21/0x30 [ 127.202846][ T1652] dump_stack_lvl+0xee/0x150 [ 127.207431][ T1652] ? show_regs_print_info+0x20/0x20 [ 127.212620][ T1652] ? stack_trace_save+0x98/0xe0 [ 127.217458][ T1652] ? __stack_depot_save+0x34/0x480 [ 127.222557][ T1652] dump_stack+0x15/0x20 [ 127.226700][ T1652] should_fail+0x3c1/0x510 [ 127.231104][ T1652] should_fail_usercopy+0x1a/0x20 [ 127.236114][ T1652] _copy_from_user+0x20/0xd0 [ 127.240708][ T1652] __copy_msghdr_from_user+0xaf/0x5e0 [ 127.246071][ T1652] ? _kstrtoull+0x3c0/0x4d0 [ 127.250567][ T1652] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 127.255841][ T1652] ? kstrtouint_from_user+0x1a0/0x200 [ 127.261207][ T1652] ___sys_sendmsg+0x156/0x260 [ 127.265876][ T1652] ? __sys_sendmsg+0x250/0x250 [ 127.270635][ T1652] ? __fdget+0x1a1/0x230 [ 127.274870][ T1652] __x64_sys_sendmsg+0x1e2/0x2a0 [ 127.279801][ T1652] ? ___sys_sendmsg+0x260/0x260 [ 127.284638][ T1652] ? ksys_write+0x1eb/0x240 [ 127.289142][ T1652] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 127.295199][ T1652] x64_sys_call+0x4b/0x9a0 [ 127.299618][ T1652] do_syscall_64+0x4c/0xa0 [ 127.304020][ T1652] ? clear_bhb_loop+0x50/0xa0 [ 127.308689][ T1652] ? clear_bhb_loop+0x50/0xa0 [ 127.313353][ T1652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.319240][ T1652] RIP: 0033:0x7f33691f3be9 [ 127.323643][ T1652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.343241][ T1652] RSP: 002b:00007f3367c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.351643][ T1652] RAX: ffffffffffffffda RBX: 00007f336942afa0 RCX: 00007f33691f3be9 [ 127.359606][ T1652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 127.367563][ T1652] RBP: 00007f3367c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.375521][ T1652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.383481][ T1652] R13: 00007f336942b038 R14: 00007f336942afa0 R15: 00007ffc28a6b208 [ 127.391445][ T1652] [ 127.984809][ T1655] loop4: detected capacity change from 0 to 8192 [ 127.988590][ T1653] loop1: detected capacity change from 0 to 512 [ 128.016993][ T30] audit: type=1326 audit(1756592677.955:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.047176][ T30] audit: type=1326 audit(1756592677.985:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.070637][ T30] audit: type=1326 audit(1756592677.985:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.117485][ T1664] loop0: detected capacity change from 0 to 512 [ 128.123493][ T30] audit: type=1326 audit(1756592677.985:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.125044][ T1653] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 128.147078][ T30] audit: type=1326 audit(1756592677.985:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.164538][ T1653] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.185527][ T30] audit: type=1326 audit(1756592677.985:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.233137][ T1664] EXT4-fs (loop0): Ignoring removed oldalloc option [ 128.262874][ T30] audit: type=1326 audit(1756592678.045:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.294598][ T30] audit: type=1326 audit(1756592678.045:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.295270][ T1666] input: syz1 as /devices/virtual/input/input23 [ 128.319499][ T1664] EXT4-fs (loop0): 1 truncate cleaned up [ 128.330097][ T1664] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 128.358093][ T1670] FAULT_INJECTION: forcing a failure. [ 128.358093][ T1670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.374058][ T1670] CPU: 0 PID: 1670 Comm: syz.3.349 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 128.384137][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.394205][ T1670] Call Trace: [ 128.397495][ T1670] [ 128.400429][ T1670] __dump_stack+0x21/0x30 [ 128.404768][ T1670] dump_stack_lvl+0xee/0x150 [ 128.409366][ T1670] ? show_regs_print_info+0x20/0x20 [ 128.414577][ T1670] dump_stack+0x15/0x20 [ 128.417819][ T30] audit: type=1326 audit(1756592678.055:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 128.418735][ T1670] should_fail+0x3c1/0x510 [ 128.446325][ T1670] should_fail_usercopy+0x1a/0x20 [ 128.451350][ T1670] _copy_to_user+0x20/0x90 [ 128.455766][ T1670] simple_read_from_buffer+0xe9/0x160 [ 128.461163][ T1670] proc_fail_nth_read+0x19a/0x210 [ 128.466186][ T1670] ? proc_fault_inject_write+0x2f0/0x2f0 [ 128.471816][ T1670] ? security_file_permission+0x83/0xa0 [ 128.477356][ T1670] ? proc_fault_inject_write+0x2f0/0x2f0 [ 128.482992][ T1670] vfs_read+0x282/0xbe0 [ 128.487144][ T1670] ? __kasan_check_write+0x14/0x20 [ 128.492250][ T1670] ? kernel_read+0x1f0/0x1f0 [ 128.496828][ T1670] ? __kasan_check_write+0x14/0x20 [ 128.501930][ T1670] ? mutex_lock+0x95/0x1a0 [ 128.506346][ T1670] ? wait_for_completion_killable_timeout+0x10/0x10 [ 128.512922][ T1670] ? __fget_files+0x2c4/0x320 [ 128.517592][ T1670] ? __fdget_pos+0x2d2/0x380 [ 128.522179][ T1670] ? ksys_read+0x71/0x240 [ 128.526501][ T1670] ksys_read+0x140/0x240 [ 128.530728][ T1670] ? vfs_write+0xf70/0xf70 [ 128.535137][ T1670] ? debug_smp_processor_id+0x17/0x20 [ 128.540503][ T1670] __x64_sys_read+0x7b/0x90 [ 128.544998][ T1670] x64_sys_call+0x96d/0x9a0 [ 128.549492][ T1670] do_syscall_64+0x4c/0xa0 [ 128.553895][ T1670] ? clear_bhb_loop+0x50/0xa0 [ 128.558562][ T1670] ? clear_bhb_loop+0x50/0xa0 [ 128.563230][ T1670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.569128][ T1670] RIP: 0033:0x7fd6b502e5fc [ 128.573534][ T1670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.593127][ T1670] RSP: 002b:00007fd6b3a98030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.601530][ T1670] RAX: ffffffffffffffda RBX: 00007fd6b5266fa0 RCX: 00007fd6b502e5fc [ 128.609488][ T1670] RDX: 000000000000000f RSI: 00007fd6b3a980a0 RDI: 0000000000000006 [ 128.617446][ T1670] RBP: 00007fd6b3a98090 R08: 0000000000000000 R09: 0000000000000000 [ 128.625406][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.633364][ T1670] R13: 00007fd6b5267038 R14: 00007fd6b5266fa0 R15: 00007ffd22a9edc8 [ 128.641325][ T1670] [ 128.764830][ T1683] loop1: detected capacity change from 0 to 4096 [ 128.818786][ T1683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.170727][ T1684] loop4: detected capacity change from 0 to 131072 [ 129.477362][ T1688] loop0: detected capacity change from 0 to 131072 [ 129.578417][ T1684] F2FS-fs (loop4): Unrecognized mount option "test_dumy_encryption=v1" or missing value [ 129.578427][ T1688] F2FS-fs (loop0): Test dummy encryption mode enabled [ 129.636024][ T1688] F2FS-fs (loop0): invalid crc value [ 129.779943][ T1688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.873937][ T1688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.906994][ T1701] FAULT_INJECTION: forcing a failure. [ 129.906994][ T1701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.920096][ T1701] CPU: 1 PID: 1701 Comm: syz.2.355 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 129.930169][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.940259][ T1701] Call Trace: [ 129.943538][ T1701] [ 129.946467][ T1701] __dump_stack+0x21/0x30 [ 129.950801][ T1701] dump_stack_lvl+0xee/0x150 [ 129.955395][ T1701] ? show_regs_print_info+0x20/0x20 [ 129.960632][ T1701] dump_stack+0x15/0x20 [ 129.964790][ T1701] should_fail+0x3c1/0x510 [ 129.969206][ T1701] should_fail_usercopy+0x1a/0x20 [ 129.974219][ T1701] _copy_to_user+0x20/0x90 [ 129.978626][ T1701] simple_read_from_buffer+0xe9/0x160 [ 129.983998][ T1701] proc_fail_nth_read+0x19a/0x210 [ 129.989041][ T1701] ? proc_fault_inject_write+0x2f0/0x2f0 [ 129.994669][ T1701] ? security_file_permission+0x83/0xa0 [ 130.000216][ T1701] ? proc_fault_inject_write+0x2f0/0x2f0 [ 130.005836][ T1701] vfs_read+0x282/0xbe0 [ 130.009992][ T1701] ? kernel_read+0x1f0/0x1f0 [ 130.014569][ T1701] ? __kasan_check_write+0x14/0x20 [ 130.019668][ T1701] ? mutex_lock+0x95/0x1a0 [ 130.024080][ T1701] ? wait_for_completion_killable_timeout+0x10/0x10 [ 130.030659][ T1701] ? __fget_files+0x2c4/0x320 [ 130.035327][ T1701] ? __fdget_pos+0x2d2/0x380 [ 130.039908][ T1701] ? ksys_read+0x71/0x240 [ 130.044226][ T1701] ksys_read+0x140/0x240 [ 130.048454][ T1701] ? vfs_write+0xf70/0xf70 [ 130.052858][ T1701] ? debug_smp_processor_id+0x17/0x20 [ 130.058218][ T1701] __x64_sys_read+0x7b/0x90 [ 130.062735][ T1701] x64_sys_call+0x96d/0x9a0 [ 130.067226][ T1701] do_syscall_64+0x4c/0xa0 [ 130.071629][ T1701] ? clear_bhb_loop+0x50/0xa0 [ 130.076293][ T1701] ? clear_bhb_loop+0x50/0xa0 [ 130.080958][ T1701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.086874][ T1701] RIP: 0033:0x7f33691f25fc [ 130.091280][ T1701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.110897][ T1701] RSP: 002b:00007f3367c3b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.119297][ T1701] RAX: ffffffffffffffda RBX: 00007f336942b090 RCX: 00007f33691f25fc [ 130.127257][ T1701] RDX: 000000000000000f RSI: 00007f3367c3b0a0 RDI: 000000000000000a [ 130.135216][ T1701] RBP: 00007f3367c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 130.143174][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.151131][ T1701] R13: 00007f336942b128 R14: 00007f336942b090 R15: 00007ffc28a6b208 [ 130.159115][ T1701] [ 130.352368][ T1707] loop4: detected capacity change from 0 to 4096 [ 130.455942][ T1707] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.552284][ T1713] FAULT_INJECTION: forcing a failure. [ 130.552284][ T1713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.637870][ T1713] CPU: 1 PID: 1713 Comm: syz.4.361 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 130.647996][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.658065][ T1713] Call Trace: [ 130.661352][ T1713] [ 130.664285][ T1713] __dump_stack+0x21/0x30 [ 130.668660][ T1713] dump_stack_lvl+0xee/0x150 [ 130.673259][ T1713] ? show_regs_print_info+0x20/0x20 [ 130.678467][ T1713] dump_stack+0x15/0x20 [ 130.682629][ T1713] should_fail+0x3c1/0x510 [ 130.687053][ T1713] should_fail_usercopy+0x1a/0x20 [ 130.692082][ T1713] _copy_to_user+0x20/0x90 [ 130.696521][ T1713] simple_read_from_buffer+0xe9/0x160 [ 130.701901][ T1713] proc_fail_nth_read+0x19a/0x210 [ 130.706945][ T1713] ? proc_fault_inject_write+0x2f0/0x2f0 [ 130.712612][ T1713] ? security_file_permission+0x83/0xa0 [ 130.718177][ T1713] ? proc_fault_inject_write+0x2f0/0x2f0 [ 130.723822][ T1713] vfs_read+0x282/0xbe0 [ 130.727990][ T1713] ? kernel_read+0x1f0/0x1f0 [ 130.732590][ T1713] ? __kasan_check_write+0x14/0x20 [ 130.737714][ T1713] ? mutex_lock+0x95/0x1a0 [ 130.742140][ T1713] ? wait_for_completion_killable_timeout+0x10/0x10 [ 130.748863][ T1713] ? __fget_files+0x2c4/0x320 [ 130.753575][ T1713] ? __fdget_pos+0x2d2/0x380 [ 130.758171][ T1713] ? ksys_read+0x71/0x240 [ 130.762496][ T1713] ksys_read+0x140/0x240 [ 130.766736][ T1713] ? vfs_write+0xf70/0xf70 [ 130.771154][ T1713] ? debug_smp_processor_id+0x17/0x20 [ 130.776529][ T1713] __x64_sys_read+0x7b/0x90 [ 130.781035][ T1713] x64_sys_call+0x96d/0x9a0 [ 130.785575][ T1713] do_syscall_64+0x4c/0xa0 [ 130.789995][ T1713] ? clear_bhb_loop+0x50/0xa0 [ 130.794674][ T1713] ? clear_bhb_loop+0x50/0xa0 [ 130.799358][ T1713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.805253][ T1713] RIP: 0033:0x7f7c98e175fc [ 130.809670][ T1713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.829271][ T1713] RSP: 002b:00007f7c97860030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.837686][ T1713] RAX: ffffffffffffffda RBX: 00007f7c99050090 RCX: 00007f7c98e175fc [ 130.845657][ T1713] RDX: 000000000000000f RSI: 00007f7c978600a0 RDI: 0000000000000007 [ 130.853626][ T1713] RBP: 00007f7c97860090 R08: 0000000000000000 R09: 0000000000000000 [ 130.861605][ T1713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.869570][ T1713] R13: 00007f7c99050128 R14: 00007f7c99050090 R15: 00007ffe63a63b18 [ 130.877548][ T1713] [ 130.908462][ T1720] loop4: detected capacity change from 0 to 512 [ 130.962998][ T1720] EXT4-fs (loop4): Ignoring removed oldalloc option [ 130.983193][ T1720] EXT4-fs (loop4): 1 truncate cleaned up [ 130.988958][ T1720] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 131.019419][ T1717] loop3: detected capacity change from 0 to 40427 [ 131.039215][ T1717] F2FS-fs (loop3): invalid crc value [ 131.071160][ T1717] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.115442][ T1727] loop4: detected capacity change from 0 to 256 [ 131.131019][ T1717] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.177232][ T1727] FAT-fs (loop4): Directory bread(block 64) failed [ 131.192040][ T1727] FAT-fs (loop4): Directory bread(block 65) failed [ 131.205721][ T1727] FAT-fs (loop4): Directory bread(block 66) failed [ 131.221999][ T1727] FAT-fs (loop4): Directory bread(block 67) failed [ 131.248575][ T1727] FAT-fs (loop4): Directory bread(block 68) failed [ 131.258225][ T1727] FAT-fs (loop4): Directory bread(block 69) failed [ 131.278524][ T1727] FAT-fs (loop4): Directory bread(block 70) failed [ 131.285946][ T284] attempt to access beyond end of device [ 131.285946][ T284] loop3: rw=2049, want=45104, limit=40427 [ 131.292012][ T1727] FAT-fs (loop4): Directory bread(block 71) failed [ 131.433030][ T1732] loop2: detected capacity change from 0 to 4096 [ 131.542202][ T1727] FAT-fs (loop4): Directory bread(block 72) failed [ 131.575588][ T1727] FAT-fs (loop4): Directory bread(block 73) failed [ 131.607570][ T1732] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.336230][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 133.336242][ T30] audit: type=1400 audit(1756592683.275:304): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.371380][ T30] audit: type=1326 audit(1756592683.305:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 133.395142][ T30] audit: type=1326 audit(1756592683.305:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 133.418480][ T30] audit: type=1326 audit(1756592683.305:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 133.518916][ T1750] loop4: detected capacity change from 0 to 4096 [ 133.623048][ T30] audit: type=1326 audit(1756592683.305:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 133.709167][ T1750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.517743][ T1755] loop1: detected capacity change from 0 to 4096 [ 134.594871][ T1755] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.688441][ T30] audit: type=1326 audit(1756592683.385:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 134.720666][ T1763] loop3: detected capacity change from 0 to 512 [ 134.754900][ T1763] EXT4-fs (loop3): Ignoring removed oldalloc option [ 134.775439][ T1763] EXT4-fs (loop3): 1 truncate cleaned up [ 134.785299][ T30] audit: type=1326 audit(1756592683.385:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 134.810689][ T1763] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 134.967507][ T286] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 134.970544][ T30] audit: type=1326 audit(1756592683.385:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 134.999071][ T30] audit: type=1326 audit(1756592683.385:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 135.023237][ T30] audit: type=1326 audit(1756592683.385:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b502fbe9 code=0x7ffc0000 [ 135.305293][ T1772] loop4: detected capacity change from 0 to 512 [ 135.316946][ T1772] EXT4-fs (loop4): Ignoring removed bh option [ 135.328105][ T1772] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.341336][ T1772] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.350796][ T1772] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 135.362073][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.431398][ T286] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 135.440777][ T286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.449931][ T1772] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 135.459435][ T286] usb 1-1: config 0 descriptor?? [ 135.465395][ T1772] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 135.474083][ T1772] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 135.541691][ T1779] FAULT_INJECTION: forcing a failure. [ 135.541691][ T1779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.554937][ T1779] CPU: 1 PID: 1779 Comm: syz.3.378 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 135.565005][ T1779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.575057][ T1779] Call Trace: [ 135.578331][ T1779] [ 135.581257][ T1779] __dump_stack+0x21/0x30 [ 135.585587][ T1779] dump_stack_lvl+0xee/0x150 [ 135.590178][ T1779] ? show_regs_print_info+0x20/0x20 [ 135.595386][ T1779] ? irqentry_exit_cond_resched+0x29/0x30 [ 135.601111][ T1779] dump_stack+0x15/0x20 [ 135.605265][ T1779] should_fail+0x3c1/0x510 [ 135.609679][ T1779] should_fail_usercopy+0x1a/0x20 [ 135.614699][ T1779] _copy_from_user+0x20/0xd0 [ 135.619327][ T1779] get_user_ifreq+0x6c/0x180 [ 135.623917][ T1779] inet_ioctl+0x296/0x400 [ 135.628245][ T1779] ? inet_shutdown+0x3d0/0x3d0 [ 135.633008][ T1779] ? ioctl_has_perm+0x394/0x4d0 [ 135.637861][ T1779] sock_do_ioctl+0xf0/0x300 [ 135.642372][ T1779] ? sock_show_fdinfo+0xa0/0xa0 [ 135.647234][ T1779] ? selinux_file_ioctl+0x377/0x480 [ 135.652436][ T1779] ? __switch_to_asm+0x3a/0x60 [ 135.657204][ T1779] sock_ioctl+0x4bc/0x6b0 [ 135.661539][ T1779] ? sock_poll+0x3d0/0x3d0 [ 135.665958][ T1779] ? __fget_files+0x2c4/0x320 [ 135.670642][ T1779] ? security_file_ioctl+0x84/0xa0 [ 135.675761][ T1779] ? sock_poll+0x3d0/0x3d0 [ 135.680198][ T1779] __se_sys_ioctl+0x121/0x1a0 [ 135.683876][ T1774] loop1: detected capacity change from 0 to 40427 [ 135.684878][ T1779] __x64_sys_ioctl+0x7b/0x90 [ 135.695863][ T1779] x64_sys_call+0x2f/0x9a0 [ 135.700285][ T1779] do_syscall_64+0x4c/0xa0 [ 135.704701][ T1779] ? clear_bhb_loop+0x50/0xa0 [ 135.709376][ T1779] ? clear_bhb_loop+0x50/0xa0 [ 135.714046][ T1779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.719934][ T1779] RIP: 0033:0x7fd6b502fbe9 [ 135.724341][ T1779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.743937][ T1779] RSP: 002b:00007fd6b3a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.752338][ T1779] RAX: ffffffffffffffda RBX: 00007fd6b5267180 RCX: 00007fd6b502fbe9 [ 135.760308][ T1779] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 000000000000000a [ 135.768265][ T1779] RBP: 00007fd6b3a56090 R08: 0000000000000000 R09: 0000000000000000 [ 135.776228][ T1779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.784193][ T1779] R13: 00007fd6b5267218 R14: 00007fd6b5267180 R15: 00007ffd22a9edc8 [ 135.792157][ T1779] [ 135.826354][ T1772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.374: bg 0: block 353: padding at end of block bitmap is not set [ 135.875526][ T1774] F2FS-fs (loop1): invalid crc value [ 135.981915][ T1774] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.041936][ T1761] UDC core: couldn't find an available UDC or it's busy: -16 [ 136.053293][ T1761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.080997][ T1774] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.188447][ T1777] loop3: detected capacity change from 0 to 131072 [ 136.217638][ T283] attempt to access beyond end of device [ 136.217638][ T283] loop1: rw=2049, want=45104, limit=40427 [ 136.233070][ T286] hid-generic 0003:057E:200E.0002: unbalanced collection at end of report description [ 136.243194][ T1777] F2FS-fs (loop3): Test dummy encryption mode enabled [ 136.251221][ T1777] F2FS-fs (loop3): invalid crc value [ 136.258884][ T286] hid-generic: probe of 0003:057E:200E.0002 failed with error -22 [ 136.281841][ T1777] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.310998][ T1777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.409072][ T1796] loop4: detected capacity change from 0 to 16 [ 136.464634][ T6] usb 1-1: USB disconnect, device number 6 [ 136.538953][ T1796] erofs: (device loop4): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 138.084856][ T1813] loop1: detected capacity change from 0 to 4096 [ 138.602264][ T1814] loop0: detected capacity change from 0 to 4096 [ 139.045750][ T1814] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.109438][ T1813] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.633758][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 139.633772][ T30] audit: type=1400 audit(1756592689.575:324): avc: denied { setopt } for pid=1830 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.765640][ T1833] netlink: 68 bytes leftover after parsing attributes in process `syz.1.389'. [ 139.829201][ T1833] loop1: detected capacity change from 0 to 2048 [ 139.923728][ T1833] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.899459][ T1839] loop0: detected capacity change from 0 to 512 [ 140.932646][ T30] audit: type=1400 audit(1756592690.875:325): avc: denied { write } for pid=1840 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.979731][ T1839] EXT4-fs (loop0): Ignoring removed oldalloc option [ 141.015059][ T1844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.393'. [ 141.025070][ T1839] EXT4-fs (loop0): 1 truncate cleaned up [ 141.030720][ T1839] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 141.080237][ T1837] loop2: detected capacity change from 0 to 40427 [ 141.089536][ T1837] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 141.134842][ T1837] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 141.997843][ T1858] loop1: detected capacity change from 0 to 8192 [ 145.469670][ T1857] loop4: detected capacity change from 0 to 4096 [ 145.606967][ T1837] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 145.855950][ T1868] loop1: detected capacity change from 0 to 4096 [ 146.462756][ T1868] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.068774][ T30] audit: type=1326 audit(1756592697.005:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.091250][ T1876] loop3: detected capacity change from 0 to 40427 [ 147.098733][ T30] audit: type=1326 audit(1756592697.035:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.126427][ T1887] loop2: detected capacity change from 0 to 2048 [ 147.137410][ T30] audit: type=1326 audit(1756592697.035:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.161213][ T30] audit: type=1326 audit(1756592697.035:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.187538][ T30] audit: type=1326 audit(1756592697.035:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.231192][ T1876] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 147.236848][ T1890] loop4: detected capacity change from 0 to 8192 [ 147.252096][ T30] audit: type=1326 audit(1756592697.035:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.254797][ T1894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.406'. [ 147.288362][ T30] audit: type=1326 audit(1756592697.035:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.294462][ T1876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.325235][ T30] audit: type=1326 audit(1756592697.035:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.341996][ T332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.348826][ T30] audit: type=1326 audit(1756592697.065:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.383883][ T30] audit: type=1326 audit(1756592697.065:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33691f3be9 code=0x7ffc0000 [ 147.431570][ T1876] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.461289][ T1876] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.461309][ T1876] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.485731][ T1876] overlayfs: missing 'lowerdir' [ 147.543979][ T1890] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 147.551749][ T1890] FAT-fs (loop4): Filesystem has been set read-only [ 147.593207][ T1901] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 147.625564][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 147.722048][ T332] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 147.725841][ T1910] loop0: detected capacity change from 0 to 4096 [ 147.739137][ T332] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 147.784885][ T1910] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.056837][ T1916] loop3: detected capacity change from 0 to 4096 [ 148.366519][ T1918] FAULT_INJECTION: forcing a failure. [ 148.366519][ T1918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.468517][ T1918] CPU: 0 PID: 1918 Comm: syz.2.412 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 148.478709][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.488763][ T1918] Call Trace: [ 148.492041][ T1918] [ 148.494975][ T1918] __dump_stack+0x21/0x30 [ 148.499306][ T1918] dump_stack_lvl+0xee/0x150 [ 148.503895][ T1918] ? show_regs_print_info+0x20/0x20 [ 148.509094][ T1918] dump_stack+0x15/0x20 [ 148.513249][ T1918] should_fail+0x3c1/0x510 [ 148.517664][ T1918] should_fail_usercopy+0x1a/0x20 [ 148.522686][ T1918] _copy_from_user+0x20/0xd0 [ 148.527284][ T1918] __sys_bpf+0x233/0x730 [ 148.531528][ T1918] ? bpf_link_show_fdinfo+0x310/0x310 [ 148.536901][ T1918] ? __kasan_check_write+0x14/0x20 [ 148.542011][ T1918] ? switch_fpu_return+0x15d/0x2c0 [ 148.547125][ T1918] __x64_sys_bpf+0x7c/0x90 [ 148.551539][ T1918] x64_sys_call+0x4b9/0x9a0 [ 148.556038][ T1918] do_syscall_64+0x4c/0xa0 [ 148.560460][ T1918] ? clear_bhb_loop+0x50/0xa0 [ 148.565135][ T1918] ? clear_bhb_loop+0x50/0xa0 [ 148.569810][ T1918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.575702][ T1918] RIP: 0033:0x7f33691f3be9 [ 148.580118][ T1918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.599721][ T1918] RSP: 002b:00007f3367c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.608141][ T1918] RAX: ffffffffffffffda RBX: 00007f336942afa0 RCX: 00007f33691f3be9 [ 148.616114][ T1918] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000015 [ 148.624084][ T1918] RBP: 00007f3367c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 148.632056][ T1918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.640032][ T1918] R13: 00007f336942b038 R14: 00007f336942afa0 R15: 00007ffc28a6b208 [ 148.648012][ T1918] [ 148.702059][ T1916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.840455][ T1909] loop4: detected capacity change from 0 to 40427 [ 149.783171][ T1927] loop0: detected capacity change from 0 to 4096 [ 150.001077][ T1927] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.217379][ T1909] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 150.337924][ T332] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 150.347106][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.355128][ T332] usb 2-1: Product: syz [ 150.359292][ T332] usb 2-1: Manufacturer: syz [ 150.424247][ T1909] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.439361][ T1933] netlink: 68 bytes leftover after parsing attributes in process `syz.1.417'. [ 150.448323][ T332] usb 2-1: SerialNumber: syz [ 150.466865][ T332] usb 2-1: config 0 descriptor?? [ 150.713169][ T1909] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 150.742415][ T332] usb 2-1: can't set config #0, error -71 [ 150.771487][ T332] usb 2-1: USB disconnect, device number 7 [ 150.921160][ T1948] loop1: detected capacity change from 0 to 8192 [ 150.930734][ T1951] FAULT_INJECTION: forcing a failure. [ 150.930734][ T1951] name failslab, interval 1, probability 0, space 0, times 1 [ 150.986091][ T1951] CPU: 0 PID: 1951 Comm: syz.4.422 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 150.996279][ T1951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.006340][ T1951] Call Trace: [ 151.009626][ T1951] [ 151.012565][ T1951] __dump_stack+0x21/0x30 [ 151.016912][ T1951] dump_stack_lvl+0xee/0x150 [ 151.021517][ T1951] ? show_regs_print_info+0x20/0x20 [ 151.026733][ T1951] ? avc_has_perm+0x158/0x240 [ 151.031418][ T1951] ? security_file_permission+0x79/0xa0 [ 151.036976][ T1951] dump_stack+0x15/0x20 [ 151.041158][ T1951] should_fail+0x3c1/0x510 [ 151.045602][ T1951] __should_failslab+0xa4/0xe0 [ 151.050393][ T1951] should_failslab+0x9/0x20 [ 151.054909][ T1951] slab_pre_alloc_hook+0x3b/0xe0 [ 151.059859][ T1951] ? sock_alloc_inode+0x1b/0xb0 [ 151.064718][ T1951] kmem_cache_alloc+0x44/0x260 [ 151.069492][ T1951] ? sockfs_init_fs_context+0xb0/0xb0 [ 151.074872][ T1951] sock_alloc_inode+0x1b/0xb0 [ 151.079553][ T1951] ? sockfs_init_fs_context+0xb0/0xb0 [ 151.084928][ T1951] new_inode_pseudo+0x62/0x210 [ 151.089705][ T1951] __sock_create+0x12c/0x7a0 [ 151.094309][ T1951] __sys_socketpair+0x1a1/0x590 [ 151.099168][ T1951] __x64_sys_socketpair+0x9b/0xb0 [ 151.104198][ T1951] x64_sys_call+0x36/0x9a0 [ 151.108620][ T1951] do_syscall_64+0x4c/0xa0 [ 151.113046][ T1951] ? clear_bhb_loop+0x50/0xa0 [ 151.117741][ T1951] ? clear_bhb_loop+0x50/0xa0 [ 151.122459][ T1951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.128364][ T1951] RIP: 0033:0x7f7c98e18be9 [ 151.132785][ T1951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.152434][ T1951] RSP: 002b:00007f7c97881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 151.160851][ T1951] RAX: ffffffffffffffda RBX: 00007f7c9904ffa0 RCX: 00007f7c98e18be9 [ 151.168833][ T1951] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 151.176807][ T1951] RBP: 00007f7c97881090 R08: 0000000000000000 R09: 0000000000000000 [ 151.184790][ T1951] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 151.192776][ T1951] R13: 00007f7c99050038 R14: 00007f7c9904ffa0 R15: 00007ffe63a63b18 [ 151.200761][ T1951] [ 151.212441][ T378] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.345740][ T1951] socket: no more sockets [ 151.353273][ T1948] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 151.368492][ T1948] FAT-fs (loop1): Filesystem has been set read-only [ 151.382948][ T1955] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 151.646686][ T1968] loop4: detected capacity change from 0 to 4096 [ 152.168255][ T1968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.420886][ T378] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.462088][ T378] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 153.492053][ T378] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.522401][ T378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.638988][ T378] usb 1-1: invalid MIDI out EP 0 [ 153.646319][ T378] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 153.653826][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 153.660185][ T1981] netlink: 68 bytes leftover after parsing attributes in process `syz.3.430'. [ 153.822347][ T497] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.003937][ T378] usb 1-1: USB disconnect, device number 7 [ 154.021781][ T1989] FAULT_INJECTION: forcing a failure. [ 154.021781][ T1989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.035113][ T1989] CPU: 0 PID: 1989 Comm: syz.4.433 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 154.045187][ T1989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.055245][ T1989] Call Trace: [ 154.058542][ T1989] [ 154.061473][ T1989] __dump_stack+0x21/0x30 [ 154.065813][ T1989] dump_stack_lvl+0xee/0x150 [ 154.070408][ T1989] ? show_regs_print_info+0x20/0x20 [ 154.075617][ T1989] ? kstrtouint_from_user+0x1a0/0x200 [ 154.080993][ T1989] dump_stack+0x15/0x20 [ 154.085182][ T1989] should_fail+0x3c1/0x510 [ 154.089599][ T1989] should_fail_usercopy+0x1a/0x20 [ 154.094626][ T1989] _copy_from_user+0x20/0xd0 [ 154.099218][ T1989] sock_setsockopt+0x28a/0x2270 [ 154.104053][ T1989] ? proc_fail_nth_read+0x210/0x210 [ 154.109236][ T1989] ? __sock_set_mark+0x160/0x160 [ 154.114164][ T1989] ? selinux_socket_setsockopt+0x21c/0x300 [ 154.119955][ T1989] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 154.125746][ T1989] ? vfs_write+0xc17/0xf70 [ 154.130146][ T1989] ? __fget_files+0x2c4/0x320 [ 154.134806][ T1989] ? security_socket_setsockopt+0x82/0xa0 [ 154.140512][ T1989] __sys_setsockopt+0x268/0x460 [ 154.145359][ T1989] ? __kasan_check_write+0x14/0x20 [ 154.150491][ T1989] ? __ia32_sys_recv+0xb0/0xb0 [ 154.155238][ T1989] ? ksys_write+0x1eb/0x240 [ 154.159723][ T1989] ? __ia32_sys_read+0x90/0x90 [ 154.164479][ T1989] __x64_sys_setsockopt+0xbf/0xd0 [ 154.169486][ T1989] x64_sys_call+0x982/0x9a0 [ 154.173970][ T1989] do_syscall_64+0x4c/0xa0 [ 154.178368][ T1989] ? clear_bhb_loop+0x50/0xa0 [ 154.183027][ T1989] ? clear_bhb_loop+0x50/0xa0 [ 154.187689][ T1989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.193564][ T1989] RIP: 0033:0x7f7c98e18be9 [ 154.197961][ T1989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.217548][ T1989] RSP: 002b:00007f7c97881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.225944][ T1989] RAX: ffffffffffffffda RBX: 00007f7c9904ffa0 RCX: 00007f7c98e18be9 [ 154.233899][ T1989] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000005 [ 154.241851][ T1989] RBP: 00007f7c97881090 R08: 0000000000000004 R09: 0000000000000000 [ 154.249815][ T1989] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 154.257769][ T1989] R13: 00007f7c99050038 R14: 00007f7c9904ffa0 R15: 00007ffe63a63b18 [ 154.265730][ T1989] [ 155.167498][ T1993] loop3: detected capacity change from 0 to 8192 [ 155.460775][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 155.460845][ T30] audit: type=1326 audit(1756592704.345:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 155.762179][ T497] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.790055][ T497] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.320255][ T497] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.330793][ T30] audit: type=1326 audit(1756592704.345:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.340225][ T497] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.354333][ T30] audit: type=1326 audit(1756592704.345:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.365155][ T497] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.388248][ T30] audit: type=1326 audit(1756592704.345:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.465841][ T30] audit: type=1326 audit(1756592704.345:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.499989][ T30] audit: type=1326 audit(1756592704.345:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.537723][ T30] audit: type=1326 audit(1756592704.345:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.562077][ T497] usb 2-1: string descriptor 0 read error: -71 [ 156.582065][ T497] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.583335][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 156.601286][ T497] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.647280][ T30] audit: type=1326 audit(1756592704.345:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 156.672392][ T497] usb 2-1: can't set config #1, error -71 [ 156.692342][ T497] usb 2-1: USB disconnect, device number 8 [ 156.721204][ T2017] netlink: 68 bytes leftover after parsing attributes in process `syz.2.442'. [ 156.826809][ T2018] loop3: detected capacity change from 0 to 4096 [ 157.022289][ T2018] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.773017][ T30] audit: type=1326 audit(1756592704.345:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 157.799590][ T30] audit: type=1326 audit(1756592704.345:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 157.920762][ T2030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 158.430169][ T2036] loop3: detected capacity change from 0 to 8192 [ 158.785015][ T2044] FAULT_INJECTION: forcing a failure. [ 158.785015][ T2044] name failslab, interval 1, probability 0, space 0, times 0 [ 158.797726][ T2044] CPU: 1 PID: 2044 Comm: syz.4.450 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 158.807890][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.817944][ T2044] Call Trace: [ 158.821222][ T2044] [ 158.824148][ T2044] __dump_stack+0x21/0x30 [ 158.828500][ T2044] dump_stack_lvl+0xee/0x150 [ 158.833083][ T2044] ? show_regs_print_info+0x20/0x20 [ 158.838279][ T2044] ? do_sys_openat2+0x6a7/0x7b0 [ 158.843120][ T2044] ? x64_sys_call+0x219/0x9a0 [ 158.847796][ T2044] dump_stack+0x15/0x20 [ 158.851940][ T2044] should_fail+0x3c1/0x510 [ 158.856353][ T2044] __should_failslab+0xa4/0xe0 [ 158.861109][ T2044] should_failslab+0x9/0x20 [ 158.865599][ T2044] slab_pre_alloc_hook+0x3b/0xe0 [ 158.870526][ T2044] ? __sigqueue_alloc+0x137/0x210 [ 158.875542][ T2044] kmem_cache_alloc+0x44/0x260 [ 158.880297][ T2044] __sigqueue_alloc+0x137/0x210 [ 158.885163][ T2044] __send_signal+0x212/0xc30 [ 158.889752][ T2044] send_signal+0x422/0x580 [ 158.894160][ T2044] force_sig_info_to_task+0x31c/0x3f0 [ 158.899520][ T2044] force_sig+0xb7/0x100 [ 158.903664][ T2044] ? send_sig+0x70/0x70 [ 158.907818][ T2044] ? show_signal+0x1b0/0x1b0 [ 158.912414][ T2044] ? ksys_write+0x1eb/0x240 [ 158.916910][ T2044] ? __ia32_sys_read+0x90/0x90 [ 158.921662][ T2044] exc_general_protection+0xee/0x270 [ 158.926938][ T2044] ? debug_smp_processor_id+0x17/0x20 [ 158.932302][ T2044] ? do_syscall_64+0x58/0xa0 [ 158.936881][ T2044] asm_exc_general_protection+0x27/0x30 [ 158.942414][ T2044] RIP: 0033:0x7f7c98df1739 [ 158.946815][ T2044] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 158.966406][ T2044] RSP: 002b:00007f7c978807c8 EFLAGS: 00010283 [ 158.972460][ T2044] RAX: 0000000000000999 RBX: 00007f7c97880d30 RCX: 00007f7c99012120 [ 158.980419][ T2044] RDX: 9999999999999999 RSI: 00007f7c98e9bb31 RDI: 9999999999999999 [ 158.988379][ T2044] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 158.996336][ T2044] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 159.004295][ T2044] R13: 00007f7c97880eb0 R14: 9999999999999999 R15: 0000000000000000 [ 159.012259][ T2044] [ 159.156254][ T2055] netlink: 136 bytes leftover after parsing attributes in process `syz.2.453'. [ 159.179643][ T2058] loop0: detected capacity change from 0 to 4096 [ 159.237629][ T2058] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.274856][ T2055] loop2: detected capacity change from 0 to 8192 [ 159.356115][ T2057] loop3: detected capacity change from 0 to 40427 [ 159.363847][ T2055] loop2: p1 p2[DM] p4 [ 159.368032][ T2055] loop2: p1 size 196608 extends beyond EOD, truncated [ 159.381358][ T2055] loop2: p2 start 4292936063 is beyond EOD, truncated [ 159.396518][ T2055] loop2: p4 size 50331648 extends beyond EOD, truncated [ 159.410748][ T2053] loop4: detected capacity change from 0 to 40427 [ 159.430567][ T2060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2060 comm=syz.2.453 [ 159.454258][ T2057] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 159.462455][ T2053] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.471988][ T2057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.482664][ T101] loop2: p1 p2[DM] p4 [ 159.487866][ T101] loop2: p1 size 196608 extends beyond EOD, truncated [ 159.498406][ T2053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.510225][ T101] loop2: p2 start 4292936063 is beyond EOD, truncated [ 159.519369][ T101] loop2: p4 size 50331648 extends beyond EOD, truncated [ 159.528885][ T2057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.529465][ T2053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.546753][ T2070] loop1: detected capacity change from 0 to 256 [ 159.578758][ T2053] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.586067][ T2053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.594502][ T2057] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.601592][ T2057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.624602][ T2057] overlayfs: missing 'lowerdir' [ 159.626928][ T2053] overlayfs: missing 'lowerdir' [ 159.635269][ T2070] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 159.646177][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 159.658197][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.756964][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.782519][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 159.913046][ T2083] loop3: detected capacity change from 0 to 4096 [ 159.954763][ T2083] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.010048][ T756] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.023129][ T2089] FAULT_INJECTION: forcing a failure. [ 160.023129][ T2089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.038111][ T2089] CPU: 0 PID: 2089 Comm: syz.4.463 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 160.048201][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.058260][ T2089] Call Trace: [ 160.061527][ T2089] [ 160.064446][ T2089] __dump_stack+0x21/0x30 [ 160.068766][ T2089] dump_stack_lvl+0xee/0x150 [ 160.073368][ T2089] ? show_regs_print_info+0x20/0x20 [ 160.078554][ T2089] dump_stack+0x15/0x20 [ 160.082696][ T2089] should_fail+0x3c1/0x510 [ 160.087126][ T2089] should_fail_usercopy+0x1a/0x20 [ 160.092155][ T2089] _copy_from_user+0x20/0xd0 [ 160.096787][ T2089] sock_do_ioctl+0x175/0x300 [ 160.101382][ T2089] ? sock_show_fdinfo+0xa0/0xa0 [ 160.106232][ T2089] ? selinux_file_ioctl+0x377/0x480 [ 160.111419][ T2089] sock_ioctl+0x4bc/0x6b0 [ 160.115737][ T2089] ? sock_poll+0x3d0/0x3d0 [ 160.120140][ T2089] ? __fget_files+0x2c4/0x320 [ 160.124807][ T2089] ? security_file_ioctl+0x84/0xa0 [ 160.129904][ T2089] ? sock_poll+0x3d0/0x3d0 [ 160.134306][ T2089] __se_sys_ioctl+0x121/0x1a0 [ 160.138976][ T2089] __x64_sys_ioctl+0x7b/0x90 [ 160.143551][ T2089] x64_sys_call+0x2f/0x9a0 [ 160.147982][ T2089] do_syscall_64+0x4c/0xa0 [ 160.152395][ T2089] ? clear_bhb_loop+0x50/0xa0 [ 160.157061][ T2089] ? clear_bhb_loop+0x50/0xa0 [ 160.161724][ T2089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.167605][ T2089] RIP: 0033:0x7f7c98e18be9 [ 160.172036][ T2089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.191684][ T2089] RSP: 002b:00007f7c97881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.200096][ T2089] RAX: ffffffffffffffda RBX: 00007f7c9904ffa0 RCX: 00007f7c98e18be9 [ 160.208056][ T2089] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000009 [ 160.216035][ T2089] RBP: 00007f7c97881090 R08: 0000000000000000 R09: 0000000000000000 [ 160.223992][ T2089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.231945][ T2089] R13: 00007f7c99050038 R14: 00007f7c9904ffa0 R15: 00007ffe63a63b18 [ 160.239912][ T2089] [ 160.676867][ T2109] loop0: detected capacity change from 0 to 8192 [ 161.222696][ T756] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.312033][ T756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.366918][ T756] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.381015][ T756] usb 3-1: config 1 interface 0 has no altsetting 0 [ 161.463163][ T2112] loop3: detected capacity change from 0 to 40427 [ 161.472014][ T2112] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 161.479807][ T2112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 161.500022][ T2112] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.542019][ T756] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.544084][ T2112] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.551399][ T756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.558470][ T2112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.571463][ T756] usb 3-1: Product: syz [ 161.580778][ T2121] loop1: detected capacity change from 0 to 512 [ 161.592531][ T756] usb 3-1: Manufacturer: syz [ 161.597385][ T756] usb 3-1: SerialNumber: syz [ 161.605201][ T2112] overlayfs: missing 'lowerdir' [ 161.639859][ T2126] loop0: detected capacity change from 0 to 4096 [ 161.647215][ T2121] EXT4-fs (loop1): Test dummy encryption mode enabled [ 161.654036][ T2121] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.665895][ T2121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.473: bg 0: block 167: padding at end of block bitmap is not set [ 161.680323][ T2121] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 161.693568][ T2121] EXT4-fs (loop1): 1 truncate cleaned up [ 161.699223][ T2121] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,block_validity,debug_want_extra_isize=0x0000000000000068,barrier,nobarrier,quota,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 161.730007][ T2126] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.983449][ T756] usb 3-1: bad CDC descriptors [ 161.992676][ T756] usb 3-1: USB disconnect, device number 7 [ 162.395105][ T2145] FAULT_INJECTION: forcing a failure. [ 162.395105][ T2145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.408781][ T2145] CPU: 1 PID: 2145 Comm: syz.1.478 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 162.418858][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.428906][ T2145] Call Trace: [ 162.432174][ T2145] [ 162.435113][ T2145] __dump_stack+0x21/0x30 [ 162.439464][ T2145] dump_stack_lvl+0xee/0x150 [ 162.444042][ T2145] ? show_regs_print_info+0x20/0x20 [ 162.449229][ T2145] ? vfs_write+0xc17/0xf70 [ 162.453675][ T2145] dump_stack+0x15/0x20 [ 162.457824][ T2145] should_fail+0x3c1/0x510 [ 162.462233][ T2145] should_fail_usercopy+0x1a/0x20 [ 162.467249][ T2145] _copy_from_user+0x20/0xd0 [ 162.471840][ T2145] __sys_bpf+0x233/0x730 [ 162.476084][ T2145] ? bpf_link_show_fdinfo+0x310/0x310 [ 162.481451][ T2145] ? debug_smp_processor_id+0x17/0x20 [ 162.486814][ T2145] __x64_sys_bpf+0x7c/0x90 [ 162.491222][ T2145] x64_sys_call+0x4b9/0x9a0 [ 162.495726][ T2145] do_syscall_64+0x4c/0xa0 [ 162.500139][ T2145] ? clear_bhb_loop+0x50/0xa0 [ 162.504805][ T2145] ? clear_bhb_loop+0x50/0xa0 [ 162.509493][ T2145] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.515379][ T2145] RIP: 0033:0x7fb83e6d3be9 [ 162.519788][ T2145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.539381][ T2145] RSP: 002b:00007fb83d13c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.547783][ T2145] RAX: ffffffffffffffda RBX: 00007fb83e90afa0 RCX: 00007fb83e6d3be9 [ 162.555776][ T2145] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 162.563739][ T2145] RBP: 00007fb83d13c090 R08: 0000000000000000 R09: 0000000000000000 [ 162.571696][ T2145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.579670][ T2145] R13: 00007fb83e90b038 R14: 00007fb83e90afa0 R15: 00007ffd1ec27018 [ 162.587653][ T2145] [ 162.656587][ T2156] loop4: detected capacity change from 0 to 4096 [ 162.800465][ T2159] loop1: detected capacity change from 0 to 4096 [ 162.954696][ T2156] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.990799][ T2159] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.733292][ T2170] loop2: detected capacity change from 0 to 4096 [ 163.826783][ T2170] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.812127][ T2178] FAULT_INJECTION: forcing a failure. [ 164.812127][ T2178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.819969][ T2181] loop4: detected capacity change from 0 to 512 [ 164.825180][ T2178] CPU: 1 PID: 2178 Comm: syz.1.487 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 164.825201][ T2178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.825212][ T2178] Call Trace: [ 164.825217][ T2178] [ 164.825224][ T2178] __dump_stack+0x21/0x30 [ 164.862110][ T2178] dump_stack_lvl+0xee/0x150 [ 164.866725][ T2178] ? show_regs_print_info+0x20/0x20 [ 164.871924][ T2178] dump_stack+0x15/0x20 [ 164.876092][ T2178] should_fail+0x3c1/0x510 [ 164.880498][ T2178] should_fail_usercopy+0x1a/0x20 [ 164.885512][ T2178] strncpy_from_user+0x24/0x2e0 [ 164.890355][ T2178] strncpy_from_user_nofault+0x73/0x150 [ 164.895899][ T2178] bpf_probe_read_compat_str+0xe6/0x180 [ 164.901475][ T2178] bpf_prog_b30c44fe0b3f1f57+0x3d/0x2f4 [ 164.907019][ T2178] bpf_trace_run3+0xcc/0x1e0 [ 164.911601][ T2178] ? bpf_trace_run2+0x1b0/0x1b0 [ 164.916445][ T2178] ? __kasan_check_write+0x14/0x20 [ 164.921555][ T2178] ? _raw_spin_lock+0x8e/0xe0 [ 164.926242][ T2178] ? _raw_spin_trylock_bh+0x130/0x130 [ 164.931604][ T2178] __bpf_trace_workqueue_queue_work+0x2d/0x40 [ 164.937663][ T2178] __queue_work+0xb32/0xc60 [ 164.942158][ T2178] queue_work_on+0xd2/0x140 [ 164.946654][ T2178] ? wq_worker_last_func+0x50/0x50 [ 164.951755][ T2178] bpf_map_put+0x1cf/0x240 [ 164.956163][ T2178] bpf_map_release+0x118/0x130 [ 164.960944][ T2178] ? bpf_map_mmap+0x420/0x420 [ 164.965632][ T2178] __fput+0x20b/0x8b0 [ 164.969604][ T2178] ____fput+0x15/0x20 [ 164.973572][ T2178] task_work_run+0x127/0x190 [ 164.978148][ T2178] exit_to_user_mode_loop+0xd0/0xe0 [ 164.983332][ T2178] exit_to_user_mode_prepare+0x5a/0xa0 [ 164.988787][ T2178] syscall_exit_to_user_mode+0x1a/0x30 [ 164.994234][ T2178] do_syscall_64+0x58/0xa0 [ 164.998636][ T2178] ? clear_bhb_loop+0x50/0xa0 [ 165.003305][ T2178] ? clear_bhb_loop+0x50/0xa0 [ 165.007973][ T2178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.013857][ T2178] RIP: 0033:0x7fb83e6d3be9 [ 165.018262][ T2178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.037879][ T2178] RSP: 002b:00007fb83d13c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 165.046287][ T2178] RAX: 0000000000000000 RBX: 00007fb83e90afa0 RCX: 00007fb83e6d3be9 [ 165.054293][ T2178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 165.062254][ T2178] RBP: 00007fb83d13c090 R08: 0000000000000000 R09: 0000000000000000 [ 165.070217][ T2178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.078177][ T2178] R13: 00007fb83e90b038 R14: 00007fb83e90afa0 R15: 00007ffd1ec27018 [ 165.086144][ T2178] [ 165.108774][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 165.108788][ T30] audit: type=1400 audit(1756592715.045:404): avc: denied { create } for pid=2186 comm="syz.1.490" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.111264][ T2181] EXT4-fs (loop4): Ignoring removed oldalloc option [ 165.150211][ T2181] EXT4-fs (loop4): 1 truncate cleaned up [ 165.156024][ T2181] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 165.207845][ T2191] loop2: detected capacity change from 0 to 4096 [ 165.248866][ T2191] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.318870][ T2194] overlayfs: './file0' not a directory [ 165.330196][ T2194] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.341309][ T2194] FAT-fs (loop3): unable to read boot sector [ 165.402062][ T30] audit: type=1400 audit(1756592715.255:405): avc: denied { mounton } for pid=2186 comm="syz.1.490" path="/104/file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.478090][ T30] audit: type=1400 audit(1756592715.295:406): avc: denied { bind } for pid=2186 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.492191][ T2194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.490'. [ 165.507855][ T2194] netlink: 'syz.1.490': attribute type 8 has an invalid length. [ 165.515583][ T2194] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 165.561527][ T30] audit: type=1400 audit(1756592715.495:407): avc: denied { read } for pid=2196 comm="syz.4.492" name="file0" dev="incremental-fs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.597416][ T30] audit: type=1400 audit(1756592715.505:408): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.637391][ T30] audit: type=1400 audit(1756592715.505:409): avc: denied { open } for pid=2196 comm="syz.4.492" path="/110/file0/file0" dev="incremental-fs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.671778][ T30] audit: type=1400 audit(1756592715.505:410): avc: denied { write } for pid=2196 comm="syz.4.492" path="/110/file0/file0" dev="incremental-fs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.931962][ T1522] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.939478][ T39] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.962021][ T497] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.331998][ T1522] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.342036][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.349778][ T497] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.360737][ T497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.371702][ T497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.381514][ T497] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 166.412027][ T1522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.422246][ T1522] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.435182][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.445325][ T1522] usb 2-1: config 1 interface 0 has no altsetting 0 [ 166.451987][ T39] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.465561][ T39] usb 4-1: config 1 interface 0 has no altsetting 0 [ 166.482037][ T497] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 166.491058][ T497] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 166.499169][ T497] usb 5-1: Manufacturer: syz [ 166.504537][ T497] usb 5-1: config 0 descriptor?? [ 166.622049][ T1522] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.631139][ T1522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.639211][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.648304][ T1522] usb 2-1: Product: syz [ 166.652487][ T1522] usb 2-1: Manufacturer: syz [ 166.657075][ T1522] usb 2-1: SerialNumber: syz [ 166.661886][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.669895][ T39] usb 4-1: Product: syz [ 166.674309][ T39] usb 4-1: Manufacturer: syz [ 166.678917][ T39] usb 4-1: SerialNumber: syz [ 167.025596][ T2212] loop2: detected capacity change from 0 to 4096 [ 167.182832][ T2212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.672836][ T497] appleir 0003:05AC:8243.0003: item fetching failed at offset 0/1 [ 167.680912][ T497] appleir 0003:05AC:8243.0003: parse failed [ 167.686993][ T497] appleir: probe of 0003:05AC:8243.0003 failed with error -22 [ 167.696295][ T497] usb 5-1: USB disconnect, device number 4 [ 167.742210][ T39] usb 4-1: bad CDC descriptors [ 167.747219][ T1522] usb 2-1: bad CDC descriptors [ 167.767127][ T1522] usb 2-1: USB disconnect, device number 9 [ 167.773080][ T39] usb 4-1: USB disconnect, device number 6 [ 168.021978][ T411] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.215157][ T2222] loop1: detected capacity change from 0 to 256 [ 168.245289][ T2222] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.255966][ T2222] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 168.336377][ T2222] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.531967][ T756] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.542116][ T411] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.550732][ T411] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.565025][ T411] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.574128][ T411] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.585115][ T411] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.712010][ T411] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.721248][ T411] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.730502][ T411] usb 3-1: Product: syz [ 168.734870][ T411] usb 3-1: Manufacturer: syz [ 168.783749][ T411] cdc_wdm 3-1:1.0: skipping garbage [ 168.793828][ T411] cdc_wdm 3-1:1.0: skipping garbage [ 168.800133][ T411] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 168.852445][ T30] audit: type=1400 audit(1756592718.795:411): avc: denied { watch watch_reads } for pid=2229 comm="syz.1.504" path="/109/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.876166][ T2231] process 'syz.1.504' launched './file0' with NULL argv: empty string added [ 168.885265][ T30] audit: type=1400 audit(1756592718.835:412): avc: denied { execute } for pid=2229 comm="syz.1.504" name="file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.907434][ T30] audit: type=1400 audit(1756592718.835:413): avc: denied { execute_no_trans } for pid=2229 comm="syz.1.504" path="/109/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.942032][ T756] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.022036][ T756] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.037677][ T756] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.050791][ T756] usb 4-1: config 1 interface 0 has no altsetting 0 [ 169.190685][ T387] usb 3-1: USB disconnect, device number 8 [ 169.212004][ T756] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.221200][ T756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.229261][ T756] usb 4-1: Product: syz [ 169.233630][ T756] usb 4-1: Manufacturer: syz [ 169.238282][ T756] usb 4-1: SerialNumber: syz [ 169.252126][ T2237] loop4: detected capacity change from 0 to 4096 [ 169.320794][ T2237] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.622323][ T756] usb 4-1: bad CDC descriptors [ 169.627852][ T756] usb 4-1: USB disconnect, device number 7 [ 169.905097][ T2243] loop1: detected capacity change from 0 to 4096 [ 170.115174][ T2243] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.583767][ T2249] input: syz1 as /devices/virtual/input/input25 [ 171.642335][ T2254] loop2: detected capacity change from 0 to 4096 [ 171.948489][ T2255] loop4: detected capacity change from 0 to 4096 [ 172.051165][ T2255] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.628905][ T2254] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.681261][ T2260] FAULT_INJECTION: forcing a failure. [ 172.681261][ T2260] name failslab, interval 1, probability 0, space 0, times 0 [ 172.696897][ T2260] CPU: 1 PID: 2260 Comm: syz.3.511 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 172.706980][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.717036][ T2260] Call Trace: [ 172.720311][ T2260] [ 172.723234][ T2260] __dump_stack+0x21/0x30 [ 172.727536][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 172.727569][ T2260] dump_stack_lvl+0xee/0x150 [ 172.740889][ T2260] ? show_regs_print_info+0x20/0x20 [ 172.746092][ T2260] ? kstrtol_from_user+0x260/0x260 [ 172.751210][ T2260] dump_stack+0x15/0x20 [ 172.755381][ T2260] should_fail+0x3c1/0x510 [ 172.759802][ T2260] __should_failslab+0xa4/0xe0 [ 172.764575][ T2260] should_failslab+0x9/0x20 [ 172.769087][ T2260] slab_pre_alloc_hook+0x3b/0xe0 [ 172.774027][ T2260] ? vm_area_dup+0x26/0x210 [ 172.778566][ T2260] kmem_cache_alloc+0x44/0x260 [ 172.783317][ T2260] vm_area_dup+0x26/0x210 [ 172.787649][ T2260] __split_vma+0xac/0x3e0 [ 172.791977][ T2260] split_vma+0x7c/0xd0 [ 172.796034][ T2260] mlock_fixup+0x3fe/0x490 [ 172.800435][ T2260] ? vmacache_update+0xb7/0x120 [ 172.805270][ T2260] apply_vma_lock_flags+0x1b7/0x2a0 [ 172.810468][ T2260] do_mlock+0x414/0x580 [ 172.814624][ T2260] ? __bpf_trace_sys_enter+0x62/0x70 [ 172.819909][ T2260] __x64_sys_mlock2+0xb1/0xd0 [ 172.824578][ T2260] x64_sys_call+0x23c/0x9a0 [ 172.829080][ T2260] do_syscall_64+0x4c/0xa0 [ 172.833488][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 172.838211][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 172.842875][ T2260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.848752][ T2260] RIP: 0033:0x7fd6b502fbe9 [ 172.853167][ T2260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.872774][ T2260] RSP: 002b:00007fd6b3a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 172.881178][ T2260] RAX: ffffffffffffffda RBX: 00007fd6b5266fa0 RCX: 00007fd6b502fbe9 [ 172.889143][ T2260] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000004000 [ 172.897118][ T2260] RBP: 00007fd6b3a98090 R08: 0000000000000000 R09: 0000000000000000 [ 172.905078][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.913041][ T2260] R13: 00007fd6b5267038 R14: 00007fd6b5266fa0 R15: 00007ffd22a9edc8 [ 172.921003][ T2260] [ 173.311999][ T2267] loop1: detected capacity change from 0 to 4096 [ 173.470754][ T2267] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.716973][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 174.733351][ T2288] input: syz1 as /devices/virtual/input/input26 [ 174.807241][ T30] audit: type=1400 audit(1756592724.745:414): avc: denied { getopt } for pid=2292 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.860720][ T30] audit: type=1400 audit(1756592724.775:415): avc: denied { write } for pid=2292 comm="syz.1.522" path="socket:[22061]" dev="sockfs" ino=22061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.040891][ T30] audit: type=1400 audit(1756592724.775:416): avc: denied { read } for pid=2292 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.401856][ T2307] FAULT_INJECTION: forcing a failure. [ 175.401856][ T2307] name failslab, interval 1, probability 0, space 0, times 0 [ 175.414564][ T2307] CPU: 0 PID: 2307 Comm: syz.0.526 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 175.424629][ T2307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.434685][ T2307] Call Trace: [ 175.437969][ T2307] [ 175.440900][ T2307] __dump_stack+0x21/0x30 [ 175.445243][ T2307] dump_stack_lvl+0xee/0x150 [ 175.449839][ T2307] ? show_regs_print_info+0x20/0x20 [ 175.455041][ T2307] dump_stack+0x15/0x20 [ 175.459202][ T2307] should_fail+0x3c1/0x510 [ 175.463626][ T2307] __should_failslab+0xa4/0xe0 [ 175.468397][ T2307] should_failslab+0x9/0x20 [ 175.472900][ T2307] slab_pre_alloc_hook+0x3b/0xe0 [ 175.477851][ T2307] ? sock_alloc_inode+0x1b/0xb0 [ 175.482696][ T2307] kmem_cache_alloc+0x44/0x260 [ 175.487453][ T2307] ? sockfs_init_fs_context+0xb0/0xb0 [ 175.492823][ T2307] sock_alloc_inode+0x1b/0xb0 [ 175.497492][ T2307] ? sockfs_init_fs_context+0xb0/0xb0 [ 175.502861][ T2307] new_inode_pseudo+0x62/0x210 [ 175.507620][ T2307] do_accept+0x157/0x670 [ 175.511852][ T2307] ? _raw_spin_trylock_bh+0x130/0x130 [ 175.517215][ T2307] ? __ia32_sys_listen+0x280/0x280 [ 175.522322][ T2307] __sys_accept4+0x10d/0x180 [ 175.526906][ T2307] __x64_sys_accept+0x7d/0x90 [ 175.531576][ T2307] x64_sys_call+0x75/0x9a0 [ 175.535980][ T2307] do_syscall_64+0x4c/0xa0 [ 175.540385][ T2307] ? clear_bhb_loop+0x50/0xa0 [ 175.545052][ T2307] ? clear_bhb_loop+0x50/0xa0 [ 175.549720][ T2307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.555633][ T2307] RIP: 0033:0x7f38d8e90be9 [ 175.560038][ T2307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.579631][ T2307] RSP: 002b:00007f38d78f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 175.588034][ T2307] RAX: ffffffffffffffda RBX: 00007f38d90c7fa0 RCX: 00007f38d8e90be9 [ 175.595997][ T2307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.603956][ T2307] RBP: 00007f38d78f9090 R08: 0000000000000000 R09: 0000000000000000 [ 175.611915][ T2307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.619880][ T2307] R13: 00007f38d90c8038 R14: 00007f38d90c7fa0 R15: 00007fffacbe60b8 [ 175.627847][ T2307] [ 175.636712][ T2310] loop3: detected capacity change from 0 to 512 [ 175.688991][ T2310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.700374][ T2310] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.728357][ T30] audit: type=1400 audit(1756592725.665:417): avc: denied { create } for pid=2315 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.755379][ T30] audit: type=1400 audit(1756592725.695:418): avc: denied { setattr } for pid=2308 comm="syz.3.527" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.797136][ T30] audit: type=1400 audit(1756592725.695:419): avc: denied { write } for pid=2308 comm="syz.3.527" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.965713][ T30] audit: type=1400 audit(1756592725.695:420): avc: denied { open } for pid=2308 comm="syz.3.527" path=2F202864656C6574656429 dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.022281][ T30] audit: type=1400 audit(1756592725.695:421): avc: denied { link } for pid=2308 comm="syz.3.527" name="#21" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.061885][ T30] audit: type=1400 audit(1756592725.735:422): avc: denied { setopt } for pid=2315 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.111467][ T2330] loop1: detected capacity change from 0 to 256 [ 176.127123][ T2330] FAT-fs (loop1): Directory bread(block 64) failed [ 176.140400][ T2330] FAT-fs (loop1): Directory bread(block 65) failed [ 176.146892][ T2309] syz.3.527 (2309) used greatest stack depth: 21088 bytes left [ 176.152544][ T2330] FAT-fs (loop1): Directory bread(block 66) failed [ 176.164934][ T30] audit: type=1400 audit(1756592725.765:423): avc: denied { map } for pid=2315 comm="syz.0.530" path="socket:[22087]" dev="sockfs" ino=22087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.169051][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 176.188042][ T2330] FAT-fs (loop1): Directory bread(block 67) failed [ 176.204380][ T2330] FAT-fs (loop1): Directory bread(block 68) failed [ 176.211228][ T2330] FAT-fs (loop1): Directory bread(block 69) failed [ 176.218409][ T2330] FAT-fs (loop1): Directory bread(block 70) failed [ 176.225169][ T2330] FAT-fs (loop1): Directory bread(block 71) failed [ 176.231907][ T2330] FAT-fs (loop1): Directory bread(block 72) failed [ 176.238582][ T2330] FAT-fs (loop1): Directory bread(block 73) failed [ 176.582744][ T2339] loop2: detected capacity change from 0 to 4096 [ 176.706196][ T2339] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.166417][ T2344] loop0: detected capacity change from 0 to 4096 [ 177.422500][ T378] Bluetooth: hci0: command 0x1003 tx timeout [ 177.428719][ T2151] Bluetooth: hci0: sending frame failed (-49) [ 177.898717][ T2347] FAULT_INJECTION: forcing a failure. [ 177.898717][ T2347] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 177.921393][ T2344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.922493][ T2347] CPU: 1 PID: 2347 Comm: syz.2.538 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 177.942398][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.952450][ T2347] Call Trace: [ 177.955736][ T2347] [ 177.958662][ T2347] __dump_stack+0x21/0x30 [ 177.962979][ T2347] dump_stack_lvl+0xee/0x150 [ 177.967556][ T2347] ? show_regs_print_info+0x20/0x20 [ 177.972751][ T2347] dump_stack+0x15/0x20 [ 177.976897][ T2347] should_fail+0x3c1/0x510 [ 177.981302][ T2347] should_fail_alloc_page+0x55/0x80 [ 177.986492][ T2347] prepare_alloc_pages+0x156/0x600 [ 177.991597][ T2347] ? __alloc_pages_bulk+0xab0/0xab0 [ 177.996782][ T2347] ? 0xffffffffa0028980 [ 178.000923][ T2347] __alloc_pages+0x10a/0x440 [ 178.005503][ T2347] ? prep_new_page+0x110/0x110 [ 178.010264][ T2347] skb_page_frag_refill+0x202/0x3a0 [ 178.015450][ T2347] tun_get_user+0x785/0x33c0 [ 178.020049][ T2347] ? tun_do_read+0x1c40/0x1c40 [ 178.024806][ T2347] ? kstrtouint_from_user+0x1a0/0x200 [ 178.030190][ T2347] ? kstrtol_from_user+0x260/0x260 [ 178.035291][ T2347] ? slab_debugfs_next+0x20/0x30 [ 178.040217][ T2347] ? bpf_probe_read_user_str+0x68/0x70 [ 178.045683][ T2347] ? avc_policy_seqno+0x1b/0x70 [ 178.050523][ T2347] ? selinux_file_permission+0x2aa/0x510 [ 178.056147][ T2347] tun_chr_write_iter+0x1eb/0x2e0 [ 178.061160][ T2347] vfs_write+0x802/0xf70 [ 178.065390][ T2347] ? file_end_write+0x1b0/0x1b0 [ 178.070227][ T2347] ? __fget_files+0x2c4/0x320 [ 178.074897][ T2347] ? __fdget_pos+0x1f7/0x380 [ 178.079487][ T2347] ? ksys_write+0x71/0x240 [ 178.083899][ T2347] ksys_write+0x140/0x240 [ 178.088243][ T2347] ? __ia32_sys_read+0x90/0x90 [ 178.093008][ T2347] ? debug_smp_processor_id+0x17/0x20 [ 178.098369][ T2347] __x64_sys_write+0x7b/0x90 [ 178.102945][ T2347] x64_sys_call+0x8ef/0x9a0 [ 178.107436][ T2347] do_syscall_64+0x4c/0xa0 [ 178.111839][ T2347] ? clear_bhb_loop+0x50/0xa0 [ 178.116506][ T2347] ? clear_bhb_loop+0x50/0xa0 [ 178.121170][ T2347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.127052][ T2347] RIP: 0033:0x7f33691f269f [ 178.131456][ T2347] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 178.151051][ T2347] RSP: 002b:00007f3367c5c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 178.159452][ T2347] RAX: ffffffffffffffda RBX: 00007f336942afa0 RCX: 00007f33691f269f [ 178.167411][ T2347] RDX: 000000000000002a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 178.175368][ T2347] RBP: 00007f3367c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 178.183325][ T2347] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 178.191286][ T2347] R13: 00007f336942b038 R14: 00007f336942afa0 R15: 00007ffc28a6b208 [ 178.199249][ T2347] [ 178.284760][ T2355] input: syz1 as /devices/virtual/input/input27 [ 178.347484][ T2358] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 178.355925][ T2358] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.925170][ T2370] loop0: detected capacity change from 0 to 4096 [ 178.974948][ T2370] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.609326][ T509] Bluetooth: hci0: command 0x1001 tx timeout [ 179.622038][ T2151] Bluetooth: hci0: sending frame failed (-49) [ 179.710671][ T2378] capability: warning: `syz.2.547' uses 32-bit capabilities (legacy support in use) [ 179.732421][ T2380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 180.150115][ T2022] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.164732][ T2374] loop1: detected capacity change from 0 to 40427 [ 180.177414][ T2378] loop2: detected capacity change from 0 to 40427 [ 180.240677][ T2378] F2FS-fs (loop2): fault_injection options not supported [ 180.247963][ T2378] F2FS-fs (loop2): Unrecognized mount option "fault_typ„=00000000000000000004" or missing value [ 180.285305][ T2374] F2FS-fs (loop1): invalid crc value [ 180.293128][ T2374] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.293740][ T2378] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 180.313306][ T2378] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 180.347454][ T2374] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.405772][ T2390] FAULT_INJECTION: forcing a failure. [ 180.405772][ T2390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.420422][ T2390] CPU: 1 PID: 2390 Comm: syz.2.550 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 180.430512][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.440572][ T2390] Call Trace: [ 180.443850][ T2390] [ 180.446783][ T2390] __dump_stack+0x21/0x30 [ 180.451143][ T2390] dump_stack_lvl+0xee/0x150 [ 180.455735][ T2390] ? show_regs_print_info+0x20/0x20 [ 180.460923][ T2390] ? avc_has_perm+0x158/0x240 [ 180.465591][ T2390] dump_stack+0x15/0x20 [ 180.469728][ T2390] should_fail+0x3c1/0x510 [ 180.474129][ T2390] should_fail_alloc_page+0x55/0x80 [ 180.479314][ T2390] prepare_alloc_pages+0x156/0x600 [ 180.484408][ T2390] ? __alloc_pages_bulk+0xab0/0xab0 [ 180.489592][ T2390] ? 0xffffffffa002afbc [ 180.493754][ T2390] ? is_bpf_text_address+0x177/0x190 [ 180.499025][ T2390] __alloc_pages+0x10a/0x440 [ 180.503598][ T2390] ? prep_new_page+0x110/0x110 [ 180.508348][ T2390] skb_page_frag_refill+0x202/0x3a0 [ 180.512032][ T2022] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.513529][ T2390] tun_get_user+0x785/0x33c0 [ 180.522213][ T2022] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.526687][ T2390] ? __kasan_poison_slab+0x70/0x70 [ 180.537959][ T2022] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.541921][ T2390] ? kmem_cache_free+0x100/0x320 [ 180.541943][ T2390] ? __x64_sys_openat+0x136/0x160 [ 180.551172][ T2022] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 180.555849][ T2390] ? x64_sys_call+0x219/0x9a0 [ 180.555871][ T2390] ? tun_do_read+0x1c40/0x1c40 [ 180.555891][ T2390] ? kstrtouint_from_user+0x1a0/0x200 [ 180.561205][ T2022] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 180.571802][ T2390] ? kstrtol_from_user+0x260/0x260 [ 180.571825][ T2390] ? avc_policy_seqno+0x1b/0x70 [ 180.571842][ T2390] ? selinux_file_permission+0x2aa/0x510 [ 180.613087][ T2390] tun_chr_write_iter+0x1eb/0x2e0 [ 180.618104][ T2390] vfs_write+0x802/0xf70 [ 180.622329][ T2390] ? file_end_write+0x1b0/0x1b0 [ 180.627160][ T2390] ? __fget_files+0x2c4/0x320 [ 180.631823][ T2390] ? __fdget_pos+0x1f7/0x380 [ 180.636407][ T2390] ? ksys_write+0x71/0x240 [ 180.640806][ T2390] ksys_write+0x140/0x240 [ 180.645121][ T2390] ? __ia32_sys_read+0x90/0x90 [ 180.649868][ T2390] ? debug_smp_processor_id+0x17/0x20 [ 180.655226][ T2390] __x64_sys_write+0x7b/0x90 [ 180.659805][ T2390] x64_sys_call+0x8ef/0x9a0 [ 180.664292][ T2390] do_syscall_64+0x4c/0xa0 [ 180.668701][ T2390] ? clear_bhb_loop+0x50/0xa0 [ 180.673379][ T2390] ? clear_bhb_loop+0x50/0xa0 [ 180.678043][ T2390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.683922][ T2390] RIP: 0033:0x7f33691f269f [ 180.688328][ T2390] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 180.692085][ T2022] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.707921][ T2390] RSP: 002b:00007f3367c5c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 180.707944][ T2390] RAX: ffffffffffffffda RBX: 00007f336942afa0 RCX: 00007f33691f269f [ 180.707957][ T2390] RDX: 000000000000002a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 180.707968][ T2390] RBP: 00007f3367c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.717076][ T2022] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.725377][ T2390] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 180.725390][ T2390] R13: 00007f336942b038 R14: 00007f336942afa0 R15: 00007ffc28a6b208 [ 180.725408][ T2390] [ 180.776800][ T2022] usb 4-1: Product: syz [ 180.780976][ T2022] usb 4-1: Manufacturer: syz [ 180.824641][ T283] attempt to access beyond end of device [ 180.824641][ T283] loop1: rw=2049, want=45104, limit=40427 [ 180.836444][ T2022] cdc_wdm 4-1:1.0: skipping garbage [ 180.841655][ T2022] cdc_wdm 4-1:1.0: skipping garbage [ 180.862103][ T2022] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 181.264581][ T2406] input: syz1 as /devices/virtual/input/input28 [ 181.371964][ T857] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 181.442393][ T509] usb 4-1: USB disconnect, device number 8 [ 181.671971][ T509] Bluetooth: hci0: command 0x1009 tx timeout [ 181.768832][ T2413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 181.781986][ T857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.862025][ T857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.872195][ T857] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.885078][ T857] usb 3-1: config 1 interface 0 has no altsetting 0 [ 182.162399][ T2417] loop0: detected capacity change from 0 to 8192 [ 182.969216][ T2423] loop3: detected capacity change from 0 to 128 [ 182.992957][ T2428] FAULT_INJECTION: forcing a failure. [ 182.992957][ T2428] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.006227][ T2428] CPU: 1 PID: 2428 Comm: syz.3.565 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 183.016332][ T2428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.026418][ T2428] Call Trace: [ 183.029730][ T2428] [ 183.032668][ T2428] __dump_stack+0x21/0x30 [ 183.036996][ T2428] dump_stack_lvl+0xee/0x150 [ 183.041601][ T2428] ? show_regs_print_info+0x20/0x20 [ 183.046790][ T2428] ? avc_has_perm+0x158/0x240 [ 183.051455][ T2428] dump_stack+0x15/0x20 [ 183.055600][ T2428] should_fail+0x3c1/0x510 [ 183.060006][ T2428] should_fail_alloc_page+0x55/0x80 [ 183.065197][ T2428] prepare_alloc_pages+0x156/0x600 [ 183.070298][ T2428] ? __alloc_pages_bulk+0xab0/0xab0 [ 183.075500][ T2428] ? 0xffffffffa002c000 [ 183.079655][ T2428] ? is_bpf_text_address+0x177/0x190 [ 183.084935][ T2428] __alloc_pages+0x10a/0x440 [ 183.089513][ T2428] ? prep_new_page+0x110/0x110 [ 183.094267][ T2428] skb_page_frag_refill+0x202/0x3a0 [ 183.099471][ T2428] tun_get_user+0x785/0x33c0 [ 183.104051][ T2428] ? __kasan_poison_slab+0x70/0x70 [ 183.109238][ T2428] ? kmem_cache_free+0x100/0x320 [ 183.114163][ T2428] ? __x64_sys_openat+0x136/0x160 [ 183.119182][ T2428] ? x64_sys_call+0x219/0x9a0 [ 183.123846][ T2428] ? tun_do_read+0x1c40/0x1c40 [ 183.128596][ T2428] ? kstrtouint_from_user+0x1a0/0x200 [ 183.133954][ T2428] ? kstrtol_from_user+0x260/0x260 [ 183.139073][ T2428] ? avc_policy_seqno+0x1b/0x70 [ 183.143910][ T2428] ? selinux_file_permission+0x2aa/0x510 [ 183.149529][ T2428] tun_chr_write_iter+0x1eb/0x2e0 [ 183.154541][ T2428] vfs_write+0x802/0xf70 [ 183.158777][ T2428] ? file_end_write+0x1b0/0x1b0 [ 183.163641][ T2428] ? __fget_files+0x2c4/0x320 [ 183.168309][ T2428] ? __fdget_pos+0x1f7/0x380 [ 183.172917][ T2428] ? ksys_write+0x71/0x240 [ 183.177318][ T2428] ksys_write+0x140/0x240 [ 183.181634][ T2428] ? __ia32_sys_read+0x90/0x90 [ 183.186384][ T2428] ? debug_smp_processor_id+0x17/0x20 [ 183.191745][ T2428] __x64_sys_write+0x7b/0x90 [ 183.196325][ T2428] x64_sys_call+0x8ef/0x9a0 [ 183.200815][ T2428] do_syscall_64+0x4c/0xa0 [ 183.205219][ T2428] ? clear_bhb_loop+0x50/0xa0 [ 183.209887][ T2428] ? clear_bhb_loop+0x50/0xa0 [ 183.214550][ T2428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.220432][ T2428] RIP: 0033:0x7fd6b502e69f [ 183.224838][ T2428] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 183.244434][ T2428] RSP: 002b:00007fd6b3a98000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.252836][ T2428] RAX: ffffffffffffffda RBX: 00007fd6b5266fa0 RCX: 00007fd6b502e69f [ 183.260795][ T2428] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8 [ 183.268757][ T2428] RBP: 00007fd6b3a98090 R08: 0000000000000000 R09: 0000000000000000 [ 183.276716][ T2428] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 183.284680][ T2428] R13: 00007fd6b5267038 R14: 00007fd6b5266fa0 R15: 00007ffd22a9edc8 [ 183.292642][ T2428] [ 183.485942][ T857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.495134][ T857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.503137][ T857] usb 3-1: Product: syz [ 183.507290][ T857] usb 3-1: Manufacturer: syz [ 183.511917][ T857] usb 3-1: SerialNumber: syz [ 183.941000][ T2450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 183.980284][ T2452] input: syz1 as /devices/virtual/input/input29 [ 183.992197][ T857] usb 3-1: bad CDC descriptors [ 183.997807][ T857] usb 3-1: USB disconnect, device number 9 [ 184.063799][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 184.063813][ T30] audit: type=1400 audit(1756592734.005:429): avc: denied { connect } for pid=2437 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.617065][ T2461] loop3: detected capacity change from 0 to 4096 [ 184.725113][ T2461] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.439415][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.777627][ T2477] loop2: detected capacity change from 0 to 8192 [ 189.815709][ T2478] loop3: detected capacity change from 0 to 4096 [ 190.022673][ T2478] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.261840][ T30] audit: type=1326 audit(1756592740.195:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 190.539621][ T2493] loop2: detected capacity change from 0 to 4096 [ 190.671972][ T2493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.211830][ T333] Bluetooth: hci0: Frame reassembly failed (-84) [ 191.255470][ T30] audit: type=1326 audit(1756592740.585:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 191.291000][ T30] audit: type=1326 audit(1756592740.925:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38d8e8f550 code=0x7ffc0000 [ 191.536632][ T2510] loop4: detected capacity change from 0 to 4096 [ 191.648423][ T2510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.156378][ T30] audit: type=1326 audit(1756592740.935:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.192198][ T30] audit: type=1326 audit(1756592740.935:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.209709][ T2513] loop3: detected capacity change from 0 to 512 [ 192.215606][ T30] audit: type=1326 audit(1756592740.935:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.246370][ T2515] input: syz1 as /devices/virtual/input/input30 [ 192.248356][ T30] audit: type=1326 audit(1756592740.945:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.276355][ T30] audit: type=1326 audit(1756592740.945:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.305450][ T2513] EXT4-fs (loop3): Ignoring removed oldalloc option [ 192.324300][ T30] audit: type=1326 audit(1756592740.945:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.349011][ T30] audit: type=1326 audit(1756592740.955:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f38d8e90be9 code=0x7ffc0000 [ 192.372356][ T2513] EXT4-fs (loop3): 1 truncate cleaned up [ 192.378004][ T2513] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 192.407726][ T2517] xt_bpf: check failed: parse error [ 192.413665][ T2517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.588'. [ 192.610579][ T2526] loop0: detected capacity change from 0 to 4096 [ 192.725900][ T2526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.095597][ T2525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 193.502498][ T6] Bluetooth: hci0: command 0x1003 tx timeout [ 193.508731][ T2151] Bluetooth: hci0: sending frame failed (-49) [ 193.526356][ T2525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'. [ 193.751080][ T2547] FAULT_INJECTION: forcing a failure. [ 193.751080][ T2547] name failslab, interval 1, probability 0, space 0, times 0 [ 193.763819][ T2547] CPU: 1 PID: 2547 Comm: syz.4.595 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 193.773895][ T2547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.783954][ T2547] Call Trace: [ 193.787235][ T2547] [ 193.790167][ T2547] __dump_stack+0x21/0x30 [ 193.794599][ T2547] dump_stack_lvl+0xee/0x150 [ 193.799197][ T2547] ? show_regs_print_info+0x20/0x20 [ 193.804403][ T2547] ? __kasan_check_read+0x11/0x20 [ 193.809615][ T2547] ? preempt_schedule_irq+0xbb/0x110 [ 193.814944][ T2547] dump_stack+0x15/0x20 [ 193.819107][ T2547] should_fail+0x3c1/0x510 [ 193.823530][ T2547] __should_failslab+0xa4/0xe0 [ 193.828311][ T2547] should_failslab+0x9/0x20 [ 193.832814][ T2547] slab_pre_alloc_hook+0x3b/0xe0 [ 193.837759][ T2547] ? getname_flags+0xb9/0x500 [ 193.842444][ T2547] kmem_cache_alloc+0x44/0x260 [ 193.847214][ T2547] getname_flags+0xb9/0x500 [ 193.851728][ T2547] getname+0x19/0x20 [ 193.855627][ T2547] do_sys_openat2+0xd9/0x7b0 [ 193.860222][ T2547] ? __kasan_check_write+0x14/0x20 [ 193.865335][ T2547] ? fput_many+0x15a/0x1a0 [ 193.869758][ T2547] ? do_sys_open+0xe0/0xe0 [ 193.874186][ T2547] ? fput+0x1a/0x20 [ 193.877999][ T2547] ? ksys_write+0x1eb/0x240 [ 193.882509][ T2547] __x64_sys_openat+0x136/0x160 [ 193.887458][ T2547] x64_sys_call+0x219/0x9a0 [ 193.891969][ T2547] do_syscall_64+0x4c/0xa0 [ 193.896395][ T2547] ? clear_bhb_loop+0x50/0xa0 [ 193.901082][ T2547] ? clear_bhb_loop+0x50/0xa0 [ 193.905772][ T2547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.911676][ T2547] RIP: 0033:0x7f7c98e18be9 [ 193.916096][ T2547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.935798][ T2547] RSP: 002b:00007f7c9783f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.944218][ T2547] RAX: ffffffffffffffda RBX: 00007f7c99050180 RCX: 00007f7c98e18be9 [ 193.952192][ T2547] RDX: 0000000000008080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 193.960169][ T2547] RBP: 00007f7c9783f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.968145][ T2547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.976120][ T2547] R13: 00007f7c99050218 R14: 00007f7c99050180 R15: 00007ffe63a63b18 [ 193.984099][ T2547] [ 193.997071][ T2544] loop3: detected capacity change from 0 to 4096 [ 194.460985][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.684903][ T2544] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.477042][ T2556] loop0: detected capacity change from 0 to 4096 [ 195.524214][ T2556] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.582083][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 195.589608][ T2151] Bluetooth: hci0: sending frame failed (-49) [ 195.614588][ T2552] loop4: detected capacity change from 0 to 40427 [ 195.624235][ T2552] F2FS-fs (loop4): invalid crc value [ 195.636305][ T2552] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.670566][ T2552] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.685203][ T6] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.694015][ T6] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.731679][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.740750][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 195.752066][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 195.825938][ T285] attempt to access beyond end of device [ 195.825938][ T285] loop4: rw=2049, want=45104, limit=40427 [ 195.882100][ T6] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.891334][ T6] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.172014][ T6] usb 3-1: Product: syz [ 196.176305][ T6] usb 3-1: Manufacturer: syz [ 196.212347][ T6] cdc_wdm 3-1:1.0: skipping garbage [ 196.217575][ T6] cdc_wdm 3-1:1.0: skipping garbage [ 196.232891][ T6] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 196.383283][ T2586] loop3: detected capacity change from 0 to 4096 [ 196.542117][ T2586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.857407][ T6] usb 3-1: USB disconnect, device number 10 [ 197.485107][ T2583] FAULT_INJECTION: forcing a failure. [ 197.485107][ T2583] name failslab, interval 1, probability 0, space 0, times 0 [ 197.497984][ T2583] CPU: 1 PID: 2583 Comm: syz.4.603 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 197.508061][ T2583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.518115][ T2583] Call Trace: [ 197.521383][ T2583] [ 197.524323][ T2583] __dump_stack+0x21/0x30 [ 197.528653][ T2583] dump_stack_lvl+0xee/0x150 [ 197.533238][ T2583] ? show_regs_print_info+0x20/0x20 [ 197.538425][ T2583] ? file_end_write+0x1b0/0x1b0 [ 197.543286][ T2583] dump_stack+0x15/0x20 [ 197.547432][ T2583] should_fail+0x3c1/0x510 [ 197.551903][ T2583] __should_failslab+0xa4/0xe0 [ 197.556663][ T2583] should_failslab+0x9/0x20 [ 197.561178][ T2583] slab_pre_alloc_hook+0x3b/0xe0 [ 197.566118][ T2583] ? getname_flags+0xb9/0x500 [ 197.570830][ T2583] kmem_cache_alloc+0x44/0x260 [ 197.575605][ T2583] getname_flags+0xb9/0x500 [ 197.580124][ T2583] getname+0x19/0x20 [ 197.584027][ T2583] __x64_sys_execve+0x78/0xb0 [ 197.588719][ T2583] x64_sys_call+0x919/0x9a0 [ 197.593231][ T2583] do_syscall_64+0x4c/0xa0 [ 197.597667][ T2583] ? clear_bhb_loop+0x50/0xa0 [ 197.602360][ T2583] ? clear_bhb_loop+0x50/0xa0 [ 197.607049][ T2583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.612953][ T2583] RIP: 0033:0x7f7c98e18be9 [ 197.617371][ T2583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.636980][ T2583] RSP: 002b:00007f7c97881038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 197.645402][ T2583] RAX: ffffffffffffffda RBX: 00007f7c9904ffa0 RCX: 00007f7c98e18be9 [ 197.653381][ T2583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 197.661342][ T2583] RBP: 00007f7c97881090 R08: 0000000000000000 R09: 0000000000000000 [ 197.669305][ T2583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.677286][ T2583] R13: 00007f7c99050038 R14: 00007f7c9904ffa0 R15: 00007ffe63a63b18 [ 197.681989][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 197.685295][ T2583] [ 197.857222][ T2603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 197.895520][ T2603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 197.908582][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 197.908594][ T30] audit: type=1400 audit(1756592747.845:504): avc: denied { read } for pid=2606 comm="syz.2.611" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.956780][ T2609] loop0: detected capacity change from 0 to 4096 [ 197.958266][ T2603] loop4: detected capacity change from 0 to 256 [ 197.967251][ T30] audit: type=1400 audit(1756592747.875:505): avc: denied { open } for pid=2606 comm="syz.2.611" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.004366][ T30] audit: type=1400 audit(1756592747.875:506): avc: denied { ioctl } for pid=2606 comm="syz.2.611" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.004868][ T2610] loop2: detected capacity change from 0 to 512 [ 198.042417][ T2603] FAT-fs (loop4): Unrecognized mount option "·" or missing value [ 198.098468][ T2609] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.155689][ T2610] FAT-fs (loop2): bread failed, FSINFO block (sector = 769) [ 198.198794][ T2618] overlayfs: missing 'lowerdir' [ 198.330605][ T2616] loop3: detected capacity change from 0 to 40427 [ 198.371889][ T30] audit: type=1326 audit(1756592748.305:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.396042][ T30] audit: type=1326 audit(1756592748.305:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.553598][ T2616] F2FS-fs (loop3): invalid crc value [ 198.577316][ T30] audit: type=1326 audit(1756592748.315:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.602537][ T30] audit: type=1326 audit(1756592748.345:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.626022][ T30] audit: type=1326 audit(1756592748.345:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.649424][ T30] audit: type=1326 audit(1756592748.345:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.650528][ T2616] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.706945][ T30] audit: type=1326 audit(1756592748.505:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c98e18be9 code=0x7ffc0000 [ 198.712156][ T2616] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.832061][ T284] attempt to access beyond end of device [ 198.832061][ T284] loop3: rw=2049, want=45104, limit=40427 [ 198.943731][ T2637] FAULT_INJECTION: forcing a failure. [ 198.943731][ T2637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.957666][ T2637] CPU: 0 PID: 2637 Comm: syz.0.621 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 198.967759][ T2637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.977836][ T2637] Call Trace: [ 198.981134][ T2637] [ 198.984063][ T2637] __dump_stack+0x21/0x30 [ 198.988407][ T2637] dump_stack_lvl+0xee/0x150 [ 198.992996][ T2637] ? show_regs_print_info+0x20/0x20 [ 198.998193][ T2637] ? kstrtouint_from_user+0x1a0/0x200 [ 199.003579][ T2637] dump_stack+0x15/0x20 [ 199.007734][ T2637] should_fail+0x3c1/0x510 [ 199.012148][ T2637] should_fail_usercopy+0x1a/0x20 [ 199.017167][ T2637] _copy_from_user+0x20/0xd0 [ 199.021757][ T2637] iovec_from_user+0x1bc/0x2f0 [ 199.026523][ T2637] ? proc_fail_nth_write+0x17a/0x1f0 [ 199.031826][ T2637] __import_iovec+0x71/0x400 [ 199.036437][ T2637] ? __fget_files+0x2c4/0x320 [ 199.041165][ T2637] import_iovec+0x7c/0xb0 [ 199.045496][ T2637] do_preadv+0x1bd/0x330 [ 199.049769][ T2637] ? vfs_writev+0x540/0x540 [ 199.054268][ T2637] ? __kasan_check_write+0x14/0x20 [ 199.059377][ T2637] ? fput_many+0x15a/0x1a0 [ 199.063790][ T2637] __x64_sys_preadv+0x9e/0xb0 [ 199.068462][ T2637] x64_sys_call+0x4f8/0x9a0 [ 199.072959][ T2637] do_syscall_64+0x4c/0xa0 [ 199.077368][ T2637] ? clear_bhb_loop+0x50/0xa0 [ 199.082065][ T2637] ? clear_bhb_loop+0x50/0xa0 [ 199.086738][ T2637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.092624][ T2637] RIP: 0033:0x7f38d8e90be9 [ 199.097035][ T2637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.116638][ T2637] RSP: 002b:00007f38d78f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 199.125049][ T2637] RAX: ffffffffffffffda RBX: 00007f38d90c7fa0 RCX: 00007f38d8e90be9 [ 199.133017][ T2637] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 199.140981][ T2637] RBP: 00007f38d78f9090 R08: 0000000000000000 R09: 0000000000000000 [ 199.148945][ T2637] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 199.156975][ T2637] R13: 00007f38d90c8038 R14: 00007f38d90c7fa0 R15: 00007fffacbe60b8 [ 199.164949][ T2637] [ 199.259847][ T2646] netlink: 12 bytes leftover after parsing attributes in process `'. [ 199.444161][ T2663] loop4: detected capacity change from 0 to 4096 [ 199.493833][ T2663] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.609711][ T2664] loop0: detected capacity change from 0 to 40427 [ 199.628860][ T2664] F2FS-fs (loop0): invalid crc value [ 199.635619][ T2664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.664842][ T2664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.762124][ T281] attempt to access beyond end of device [ 199.762124][ T281] loop0: rw=2049, want=45104, limit=40427 [ 199.974084][ T2682] FAULT_INJECTION: forcing a failure. [ 199.974084][ T2682] name failslab, interval 1, probability 0, space 0, times 0 [ 199.988405][ T2682] CPU: 0 PID: 2682 Comm: syz.0.635 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 199.998492][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.008555][ T2682] Call Trace: [ 200.012127][ T2682] [ 200.015078][ T2682] __dump_stack+0x21/0x30 [ 200.019432][ T2682] dump_stack_lvl+0xee/0x150 [ 200.024029][ T2682] ? show_regs_print_info+0x20/0x20 [ 200.029237][ T2682] dump_stack+0x15/0x20 [ 200.033401][ T2682] should_fail+0x3c1/0x510 [ 200.037830][ T2682] __should_failslab+0xa4/0xe0 [ 200.042607][ T2682] should_failslab+0x9/0x20 [ 200.047118][ T2682] slab_pre_alloc_hook+0x3b/0xe0 [ 200.052069][ T2682] ? getname_flags+0xb9/0x500 [ 200.056782][ T2682] kmem_cache_alloc+0x44/0x260 [ 200.061557][ T2682] getname_flags+0xb9/0x500 [ 200.066070][ T2682] getname+0x19/0x20 [ 200.069968][ T2682] do_sys_openat2+0xd9/0x7b0 [ 200.074575][ T2682] ? __kasan_check_write+0x14/0x20 [ 200.079701][ T2682] ? fput_many+0x15a/0x1a0 [ 200.084147][ T2682] ? do_sys_open+0xe0/0xe0 [ 200.088576][ T2682] ? fput+0x1a/0x20 [ 200.092391][ T2682] ? ksys_write+0x1eb/0x240 [ 200.096905][ T2682] ? __ia32_sys_read+0x90/0x90 [ 200.101677][ T2682] __x64_sys_openat+0x136/0x160 [ 200.106540][ T2682] x64_sys_call+0x219/0x9a0 [ 200.111066][ T2682] do_syscall_64+0x4c/0xa0 [ 200.115493][ T2682] ? clear_bhb_loop+0x50/0xa0 [ 200.120298][ T2682] ? clear_bhb_loop+0x50/0xa0 [ 200.124984][ T2682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.130944][ T2682] RIP: 0033:0x7f38d8e90be9 [ 200.135467][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.155077][ T2682] RSP: 002b:00007f38d78f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.163483][ T2682] RAX: ffffffffffffffda RBX: 00007f38d90c7fa0 RCX: 00007f38d8e90be9 [ 200.171490][ T2682] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 200.179454][ T2682] RBP: 00007f38d78f9090 R08: 0000000000000000 R09: 0000000000000000 [ 200.187415][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.195379][ T2682] R13: 00007f38d90c8038 R14: 00007f38d90c7fa0 R15: 00007fffacbe60b8 [ 200.203393][ T2682] [ 200.298066][ T2686] loop2: detected capacity change from 0 to 512 [ 200.311644][ T2686] EXT4-fs (loop2): Ignoring removed oldalloc option [ 200.326035][ T2686] EXT4-fs (loop2): 1 truncate cleaned up [ 200.331741][ T2686] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000010001,. Quota mode: writeback. [ 200.453540][ T2698] FAULT_INJECTION: forcing a failure. [ 200.453540][ T2698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.501960][ T2698] CPU: 0 PID: 2698 Comm: syz.0.636 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 200.512064][ T2698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.522122][ T2698] Call Trace: [ 200.525416][ T2698] [ 200.528345][ T2698] __dump_stack+0x21/0x30 [ 200.532681][ T2698] dump_stack_lvl+0xee/0x150 [ 200.537357][ T2698] ? show_regs_print_info+0x20/0x20 [ 200.542550][ T2698] ? avc_has_perm+0x158/0x240 [ 200.547218][ T2698] dump_stack+0x15/0x20 [ 200.551366][ T2698] should_fail+0x3c1/0x510 [ 200.555775][ T2698] should_fail_alloc_page+0x55/0x80 [ 200.560966][ T2698] prepare_alloc_pages+0x156/0x600 [ 200.566071][ T2698] ? __alloc_pages_bulk+0xab0/0xab0 [ 200.571261][ T2698] ? 0xffffffffa00262c8 [ 200.575402][ T2698] ? is_bpf_text_address+0x177/0x190 [ 200.580776][ T2698] __alloc_pages+0x10a/0x440 [ 200.585372][ T2698] ? stack_trace_save+0xe0/0xe0 [ 200.590210][ T2698] ? prep_new_page+0x110/0x110 [ 200.594962][ T2698] ? stack_trace_save+0x98/0xe0 [ 200.599836][ T2698] handle_pte_fault+0xe89/0x2680 [ 200.604779][ T2698] ? kasan_set_track+0x5b/0x70 [ 200.609529][ T2698] ? fault_around_bytes_set+0xc0/0xc0 [ 200.614896][ T2698] ? __kasan_slab_free+0x11/0x20 [ 200.619826][ T2698] ? slab_free_freelist_hook+0xc2/0x190 [ 200.625366][ T2698] ? kmem_cache_free+0x100/0x320 [ 200.630295][ T2698] ? memcpy+0x56/0x70 [ 200.634266][ T2698] do_handle_mm_fault+0x1a6d/0x1d50 [ 200.639457][ T2698] ? numa_migrate_prep+0xd0/0xd0 [ 200.644388][ T2698] ? security_file_permission+0x83/0xa0 [ 200.649931][ T2698] ? find_vma_from_tree+0xfd/0x110 [ 200.655033][ T2698] ? access_error+0x152/0x260 [ 200.659703][ T2698] do_user_addr_fault+0x554/0x1180 [ 200.664815][ T2698] ? do_kern_addr_fault+0x80/0x80 [ 200.669861][ T2698] ? debug_smp_processor_id+0x17/0x20 [ 200.675231][ T2698] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 200.681296][ T2698] ? exit_to_user_mode_prepare+0x39/0xa0 [ 200.686949][ T2698] exc_page_fault+0x51/0xb0 [ 200.691445][ T2698] asm_exc_page_fault+0x27/0x30 [ 200.696285][ T2698] RIP: 0033:0x7f38d8d62236 [ 200.700689][ T2698] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 42 30 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 9c df fe ff 4d 85 f6 0f 84 46 0a 00 [ 200.720284][ T2698] RSP: 002b:00007f38d78b4f70 EFLAGS: 00010202 [ 200.726344][ T2698] RAX: 0000000000000000 RBX: 00007f38d90c8180 RCX: 0000000000000000 [ 200.734388][ T2698] RDX: 0000200000000040 RSI: 0000200000000040 RDI: 00007f38d8f1526f [ 200.742346][ T2698] RBP: 00007f38d78b7090 R08: 00007f38d8d50560 R09: 0000000000000000 [ 200.750306][ T2698] R10: 0000000000000003 R11: 0000200000000040 R12: 0000000000000003 [ 200.758268][ T2698] R13: 000000000000002d R14: 0000200000000040 R15: 00007fffacbe60b8 [ 200.766234][ T2698] [ 200.920721][ T2698] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 201.069816][ T2708] loop2: detected capacity change from 0 to 4096 [ 201.142063][ T411] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.239136][ T2708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.263330][ T60] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.783253][ T2714] loop1: detected capacity change from 0 to 512 [ 201.797186][ T2714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 201.819478][ T2714] System zones: 1-12 [ 201.833402][ T2714] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.646: error while reading EA inode 32 err=-116 [ 201.852132][ T2714] EXT4-fs (loop1): Remounting filesystem read-only [ 201.858750][ T2714] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.646: error while reading EA inode 32 err=-116 [ 201.872228][ T2714] EXT4-fs (loop1): Remounting filesystem read-only [ 201.878858][ T2714] EXT4-fs (loop1): 1 orphan inode deleted [ 201.893249][ T2714] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,inlinecrypt,. Quota mode: none. [ 201.913228][ T857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.993209][ T2717] loop2: detected capacity change from 0 to 40427 [ 202.006852][ T283] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 202.027084][ T283] EXT4-fs (loop1): Remounting filesystem read-only [ 202.034677][ T283] ------------[ cut here ]------------ [ 202.040141][ T283] kernel BUG at fs/namei.c:2933! [ 202.045155][ T283] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 202.051225][ T283] CPU: 0 PID: 283 Comm: syz-executor Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 202.061466][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.071508][ T283] RIP: 0010:may_delete+0x701/0x710 [ 202.076612][ T283] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 f0 51 f5 ff e9 77 fe ff ff e8 26 d7 b6 ff 0f 0b e8 1f d7 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 202.096210][ T283] RSP: 0018:ffffc90000a27c90 EFLAGS: 00010293 [ 202.102278][ T283] RAX: ffffffff81b1d8b1 RBX: ffff88810cf55110 RCX: ffff88811e1d13c0 [ 202.110236][ T283] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 202.118193][ T283] RBP: ffffc90000a27cf8 R08: 0000000000000004 R09: 0000000000000003 [ 202.126149][ T283] R10: fffff52000144f74 R11: 1ffff92000144f74 R12: dffffc0000000000 [ 202.134107][ T283] R13: 0000000000000001 R14: ffff888109bffbe0 R15: 1ffff110219eaa22 [ 202.142061][ T283] FS: 0000555594d58500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 202.150979][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.157545][ T283] CR2: 0000555594d83528 CR3: 0000000127436000 CR4: 00000000003506b0 [ 202.165501][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.173455][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.181426][ T283] Call Trace: [ 202.184690][ T283] [ 202.187606][ T283] vfs_rmdir+0x32/0x460 [ 202.191749][ T283] incfs_kill_sb+0x105/0x220 [ 202.196326][ T283] deactivate_locked_super+0xa0/0x100 [ 202.201683][ T283] deactivate_super+0xaf/0xe0 [ 202.206343][ T283] cleanup_mnt+0x446/0x500 [ 202.210742][ T283] __cleanup_mnt+0x19/0x20 [ 202.215150][ T283] task_work_run+0x127/0x190 [ 202.219721][ T283] exit_to_user_mode_loop+0xd0/0xe0 [ 202.224902][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 202.230383][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 202.235832][ T283] do_syscall_64+0x58/0xa0 [ 202.240235][ T283] ? clear_bhb_loop+0x50/0xa0 [ 202.244900][ T283] ? clear_bhb_loop+0x50/0xa0 [ 202.249567][ T283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.255448][ T283] RIP: 0033:0x7fb83e6d4f17 [ 202.259850][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 202.279452][ T283] RSP: 002b:00007ffd1ec251b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 202.287851][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb83e6d4f17 [ 202.295809][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1ec25270 [ 202.303766][ T283] RBP: 00007ffd1ec25270 R08: 0000000000000000 R09: 0000000000000000 [ 202.311726][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1ec26360 [ 202.319684][ T283] R13: 00007fb83e756c05 R14: 00000000000314df R15: 00007ffd1ec27430 [ 202.327645][ T283] [ 202.330672][ T283] Modules linked in: [ 202.336338][ T283] ---[ end trace 68fd51f6cd0fea63 ]--- [ 202.342118][ T283] RIP: 0010:may_delete+0x701/0x710 [ 202.347478][ T283] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 f0 51 f5 ff e9 77 fe ff ff e8 26 d7 b6 ff 0f 0b e8 1f d7 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 202.351181][ T2717] F2FS-fs (loop2): invalid crc value [ 202.367461][ T283] RSP: 0018:ffffc90000a27c90 EFLAGS: 00010293 [ 202.372548][ T411] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 202.378662][ T283] RAX: ffffffff81b1d8b1 RBX: ffff88810cf55110 RCX: ffff88811e1d13c0 [ 202.386861][ T60] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 202.395164][ T283] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 202.403215][ T411] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.422161][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.422736][ T283] RBP: ffffc90000a27cf8 R08: 0000000000000004 R09: 0000000000000003 [ 202.432469][ T60] usb 1-1: config 0 has no interface number 0 [ 202.446648][ T411] usb 5-1: config 0 has no interface number 0 [ 202.449499][ T283] R10: fffff52000144f74 R11: 1ffff92000144f74 R12: dffffc0000000000 [ 202.452914][ T411] usb 5-1: config 0 interface 255 has no altsetting 0 [ 202.461477][ T283] R13: 0000000000000001 R14: ffff888109bffbe0 R15: 1ffff110219eaa22 [ 202.467832][ T60] usb 1-1: config 0 interface 255 has no altsetting 0 [ 202.475872][ T283] FS: 0000555594d58500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 202.482408][ T411] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 202.482430][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.483349][ T411] usb 5-1: config 0 descriptor?? [ 202.501311][ T2717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.508709][ T60] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 202.517049][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.519719][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.540860][ T283] CR2: 00007f6fb7a00000 CR3: 0000000127436000 CR4: 00000000003506a0 [ 202.547588][ T60] usb 1-1: config 0 descriptor?? [ 202.562046][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.572383][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.574772][ T2717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.581655][ T283] Kernel panic - not syncing: Fatal exception [ 202.594134][ T283] Kernel Offset: disabled [ 202.598458][ T283] Rebooting in 86400 seconds..