last executing test programs: 5.973866371s ago: executing program 1 (id=8080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 5.757708998s ago: executing program 1 (id=8082): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r4, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) 4.849673073s ago: executing program 2 (id=8087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x16000) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r6, r7, 0x6}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="4400000001020500000000000000000002008900300002802c00018014000300fe8000000000000000000000000000ff0700"], 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000001a3c0)={0xffffffffffffffff, 0xe0, &(0x7f000001a2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f000001a100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f000001a180)=[0x0], 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a240), 0x8, 0x86, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x84bb198f3dbdeaf8, 0x21, 0x0, 0x1ff, 0x184c, 0xffffffffffffffff, 0x1, '\x00', 0x0, r5, 0x4, 0x3, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c020000130000022abd7000fddbdf251200000008001500", @ANYBLOB="7e3a7cc90a9774301ec68ba6230d2e158687bd03151c91b1373151880ea5b1c8d9a28a192105082382e29471e36641cf473a2384656cc84470f11f2bad36d02a3dd4bccdad15b689206985fdaf5a43606b4fbaebf005e412d470f635b11971d738d2966b612adcadde23d9810004978f98929c3e23989183aa7e1e6de8745c755108a409607953ac6c9062315a48c05b59e232529e1a9d9c57e826db4874754f42b6a9061f92b3bd0d40cc9b88258d188d303f6f3d328d8c99c2a2d8a236", @ANYRES32=r4, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040801) 4.824941795s ago: executing program 1 (id=8088): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xfffffff8, 0x5, 0x3ff, 0x420, r0, 0xfffffff8, '\x00', 0x0, r3, 0x4, 0x5, 0x0, 0xf}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.010339952s ago: executing program 2 (id=8090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x900000000000000}, 0x38) 3.997490313s ago: executing program 2 (id=8091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000008900fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 3.945632667s ago: executing program 2 (id=8092): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x0, 0xb}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x2000, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002680)="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", 0x2000, &(0x7f0000006ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f000000bf00)={{}, "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"}) 3.945445837s ago: executing program 2 (id=8093): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xfffffff8, 0x5, 0x3ff, 0x420, r0, 0xfffffff8, '\x00', 0x0, r3, 0x4, 0x5, 0x0, 0xf}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.390464462s ago: executing program 4 (id=8094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nodelalloc}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@broadcast, @multicast1}, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x623}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") 2.711752138s ago: executing program 3 (id=8097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x84}]}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000004b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li") truncate(&(0x7f0000000000)='./file2\x00', 0x2328) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r7, &(0x7f0000000000)='./file0\x00', 0x5) 2.517468594s ago: executing program 4 (id=8098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r4, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) 2.516967774s ago: executing program 1 (id=8099): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xd0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = getpgid(0x0) process_vm_readv(r4, &(0x7f00000004c0)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0x80, 0x0) 2.477649217s ago: executing program 0 (id=8095): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000503a001d1100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/87, 0x57}], 0x1, 0x0) 2.425664212s ago: executing program 0 (id=8100): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x40000000, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8956d8dacd28e4f, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4bf514d54e26bcda}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) sendto$packet(r2, &(0x7f0000000d00)="3f033608260812002c0035069075aaa9116dc2290f0086dd1327c9167c643c4a1b7880610cc96672fc4db0e011bc27d0fbc50ddf15116c3051c057c93508d40301f71548a3f6000089bd07fefbf9a0b2c5361b5dc314448ae1b38eb84fdf89b0cbc887b2ae0b7d0bd58755ca721e4944a38b4b1f0fac", 0x47, 0xa0c4, &(0x7f0000000540)={0x11, 0xc, r3}, 0x14) r4 = syz_pidfd_open(0x0, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x14020000) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000700)={[], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@obj_user={'obj_user', 0x3d, '8-'}}, {@measure}]}, 0xfe, 0x4a1, &(0x7f00000001c0)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x2040, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x375, &(0x7f0000000880)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x4, &(0x7f00000006c0)={0x0, 0x9c}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0xfec) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8=1,utf8=1,shortname=lower,codepage=936,iocharset=iso8859-3,utf8=0,shortname=win95,shortname=win95,nonumtail=0,nonumtaiL=0,shortname=win95,uni_xlate=1,utf8=0,shortname=mixed,s\x00\x00rtname=lower,shortname=lower,\x00'], 0x1, 0x2bf, &(0x7f00000027c0)="$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") 2.114175007s ago: executing program 0 (id=8101): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x22200, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x0, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0xfffffc36) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.860666158s ago: executing program 3 (id=8102): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000001580)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYBLOB="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"], 0x41, 0x304, &(0x7f0000001880)="$eJzs3M9rE1sUwPGTNG3SlDZZPB6v7/HoRTe6Gdq4V4K0IAaU2og/QJg2Ew0Zk5CJlRSxceXWf8PQZTdS0PoHdOPOlRtx043gpqA1ksykSdpJG1ObtOT7gXJP594zP3In4czAzPadV4/TSUtL6gXxBpR4RUqyKxKuRo6lcRHxiEdqzYi9MGA3Jbk49u3j/0pEorHY7LxSc9GFSxGl1MTU26fP1s5tFsZur09s+GUr/GD7a+Tz1t9bk9s/Fx6lLJWyVCZbULpazH4q6IumoRIpK60pddM0dMtQqYxl5O3+bMHZrORyRaVnEuPBXN6wLKVniiptFFUhqwr5otIf6qmM0jRNjQdlcOxM1Zrc7+bFy/PzerTLjS51mYc/bvPQ3ny+/uV5X2ntiZdPbp8AAMBpVa///c31/05r/e9xWm9z/e8oSala/9+6e+96B/X/xkib+j97oP53ri+kpT9pZqn/uxU4uCheHuq+/scZkR8VKa9J4xv94v7adC2g/gcAAAAAAAAAAAAAAAAAAAAA4CzYqVRClUolVG29YsfVP7/zwEj9/37vJ05G8/zbc+2rzjrzPyCaHtwLiJgvl+PLcbu1+6NJSYkphkxLSH7UzgeHHc9di816VE1Y3pmrTv7qcnyoNX9GQhJ2z5+x81Vr/rAEm/MjEpK/3PMjrvkjcuF8U74mIfmwJFkxJVE7rxv5z2eUunojti9/VBIuT8wBAAAAAHAWaWqP6/W7prXrt/M7uT8w7Xp97pN/ff09dgAAAAAABoVVXEnrpmnkjwxeOxlHDv7iDOx4zccNhjs9Cn/na35TCzzt1hzY++ie/NPDI20E9XcyHzp41BnU0uXcnlnt/T4fO5jqy9Z91ZO+aUmw7eCJIbcP/LDA77yVubpkt7JvzOX1/74XV65MHjHLJxT09GcIAAAAQA80iv5+7wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOrF68T6/cxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfFrwAAAP//CgoTZA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185875, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 1.769700705s ago: executing program 3 (id=8103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1b, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x12000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6d800000, 0x0, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500000}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0xfffffffb, 0xfffffc01}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x4, 0xe}, {0x4, 0x5, 0x3, 0x6}, {0x0, 0x1, 0x10, 0xa}, {0x0, 0x4, 0xe, 0xb}], 0x10, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c1600000000070009000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414000000000010000000000000000000000007000000"], 0x30}, 0x0) 1.769518775s ago: executing program 3 (id=8104): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r4, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) 1.614537148s ago: executing program 1 (id=8105): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x22200, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x0, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0xfffffc36) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5db, &(0x7f0000000300)="$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") 1.571300511s ago: executing program 4 (id=8106): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) getitimer(0x0, &(0x7f00000003c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000340)) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xb0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "12f8ad357ebb2d0bc34e5beccabf602b8c00", "4ceef9ddabd01b9dc5ef339c6d1e1c4bb7d706bd8c46565d8eb6fc8a3338e2792c34722647698634a5a3fa6e0601a63e", "a852d8001e63559b9555ba6da1eb84cb43ef71bd041a4ce7cd5533b2", {"734a5cce3d303391cf113a001f247df1", "ec6a5851d09eafe24849040ec6b3dc5f"}}}}}}}, 0x0) 1.496872998s ago: executing program 4 (id=8107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xa1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/185, 0xb9}], 0x1, 0x9000000, 0x0) sysinfo(&(0x7f00000003c0)=""/67) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x0, 0x0) 1.032689985s ago: executing program 0 (id=8108): mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB]) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='context=']) (fail_nth: 13) 988.896969ms ago: executing program 2 (id=8109): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xfffffff8, 0x5, 0x3ff, 0x420, r0, 0xfffffff8, '\x00', 0x0, r3, 0x4, 0x5, 0x0, 0xf}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 843.806201ms ago: executing program 3 (id=8110): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080010}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a000000000000611193000000000085000000000000009500000000000000a4df529bc4180ac4b8382924bb0872623a2937f01b9e56bf797eb6"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7, 0xa, 0x5, 0x4, 0x2, 0x3, 0x4, 0x26a, 0x38, 0x132, 0x8000, 0x40, 0x20, 0x1, 0x0, 0x75be, 0x11}, [{0x2, 0x6, 0xb00, 0x3557, 0x9, 0x55af, 0xf, 0x1}, {0x10000000, 0x9, 0x1, 0xffff, 0x5, 0x4, 0x1, 0x9}], "975a762b96cc0b7fa335eabfb29afc6b0a1aca35cc204d41629a4a72567b02f21e7bd94aea14c23486b88604f57ff10a7abc63b483721d7b72b941cf9295c127fa0a3c3a730c2b2ef7bda4655ebb456fdd06cffbee5808e65de07c23347eb7d165714fd87b826dce252cb3ccdef532ce77ef1f3fdec285a07e6c2e9b3d7aa66fe07307c27129013d8821827c1cbf1340ed50f8f30767e03de55d56170aca40a1272b01ef2c04433d5273685829976efc87297682321d7907eddd53a23d0a35a3"}, 0x138) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 432.441844ms ago: executing program 3 (id=8111): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@quota}, {@noflush_merge}, {@quota}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@whint_mode_fs}, {@extent_cache}, {@fastboot}]}, 0x1, 0x5500, &(0x7f0000003040)="$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") (fail_nth: 15) 431.981605ms ago: executing program 4 (id=8112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x797, &(0x7f0000001c40)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x85}, [@initr0]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000b40), 0x0, 0x0, 0x4e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001fcffff0000000020000000181000005669e6f1cd219f9f3fea9454f611ee937388d55d48fb6ae9abec5fb23fe0f51785e17ad1ce25a75c96a211e1a32e6ed840532f", @ANYRES32, @ANYBLOB], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xdb, &(0x7f0000000f80)=""/219, 0x0, 0x6d, '\x00', r3, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x8, 0x0, 0xfb4c2b9}, 0x10, 0x0, r2, 0xc, &(0x7f0000001200)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x4, 0x7, 0x2}, {0x0, 0x80000000, 0xb, 0x2}, {0x3, 0x0, 0xe}, {0x2, 0x3, 0x8, 0x1}, {0x0, 0x2, 0x6, 0xb}, {0x2, 0x1, 0x2, 0xa}, {0x5, 0x5, 0x10}, {0x0, 0x2, 0x9}, {0x5, 0x5, 0xd}, {0x4, 0x5, 0xe, 0x4}, {0x0, 0x5, 0xa, 0xc}, {0x0, 0x0, 0x0, 0x4}]}, 0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0xfffffff8, 0xf, 0x8, 0x1020, r1, 0x101, '\x00', r3, r4, 0x1, 0x2}, 0x48) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000180)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x13, r8, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) dup2(r5, 0xffffffffffffffff) 415.019596ms ago: executing program 1 (id=8113): mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB]) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x74, &(0x7f0000000880)=ANY=[@ANYBLOB='context=']) 159.473687ms ago: executing program 0 (id=8114): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (rerun: 64) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x40, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) unshare(0x2040400) (async) ppoll(&(0x7f0000000480)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) fadvise64(r4, 0x1fffffe, 0x2, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x9, 0x6, 0x10000, 0x810, 0x1, 0x401, '\x00', 0x0, r4, 0x2, 0x5, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) (async) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=""/2) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r11}, 0x10) (async, rerun: 64) setitimer(0x2, 0x0, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 45.695887ms ago: executing program 0 (id=8115): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xd0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = getpgid(0x0) process_vm_readv(r4, &(0x7f00000004c0)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') lseek(0xffffffffffffffff, 0x80, 0x0) 0s ago: executing program 4 (id=8116): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xe, 0x2, 0x1000, 0x89, 0x30}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x7}, 0x38) keyctl$read(0xb, r1, &(0x7f0000000200)=""/43, 0x2b) socket(0x10, 0x3, 0x0) r3 = gettid() prlimit64(r3, 0x3, &(0x7f0000000000)={0x800000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x80000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000140)=0x13) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) sync() write$UHID_INPUT(r6, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0xfffffffffffffca8}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000000)) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "dadd1000b1df022dace17a32d21100"}) kernel console output (not intermixed with test programs): 53.803182][ T2220] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.822074][ T2220] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1053.839645][ T2220] usb 1-1: config 1 has no interface number 0 [ 1053.852077][ T2220] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1054.039935][ T2220] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1054.048990][ T2220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.056903][ T2220] usb 1-1: Product: syz [ 1054.062414][ T2220] usb 1-1: Manufacturer: syz [ 1054.066957][ T2220] usb 1-1: SerialNumber: syz [ 1054.097538][T27644] fuse: Unknown parameter 'group_i00000000000000000000' [ 1054.130087][ T2220] usb 1-1: selecting invalid altsetting 1 [ 1054.145438][ T25] usb 2-1: USB disconnect, device number 74 [ 1054.339649][ T2220] cdc_ncm 1-1:1.1: bind() failure [ 1054.350312][ T2220] usb 1-1: USB disconnect, device number 82 [ 1054.992195][T27661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871488 (1073742976 ns) > initial count (34 ns). Using initial count to start timer. [ 1055.124207][ T24] audit: type=1326 audit(2536871317.132:11545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27674 comm="syz.1.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e84e3bd9 code=0x7ffc0000 [ 1055.157135][ T24] audit: type=1326 audit(2536871317.132:11546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27674 comm="syz.1.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3e84e3bd9 code=0x7ffc0000 [ 1055.193075][ T24] audit: type=1326 audit(2536871317.132:11547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27674 comm="syz.1.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e84e3bd9 code=0x7ffc0000 [ 1055.832773][T27686] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1055.888952][T27686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1055.943758][T26757] attempt to access beyond end of device [ 1055.943758][T26757] loop4: rw=2049, want=45112, limit=40427 [ 1056.260075][T27707] FAULT_INJECTION: forcing a failure. [ 1056.260075][T27707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.274222][T27707] CPU: 0 PID: 27707 Comm: syz.0.7737 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1056.285409][T27707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1056.295293][T27707] Call Trace: [ 1056.298424][T27707] dump_stack_lvl+0x1e2/0x24b [ 1056.302937][T27707] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1056.308229][T27707] dump_stack+0x15/0x17 [ 1056.312223][T27707] should_fail+0x3c6/0x510 [ 1056.316483][T27707] should_fail_usercopy+0x1a/0x20 [ 1056.321330][T27707] _copy_to_user+0x20/0x90 [ 1056.325665][T27707] simple_read_from_buffer+0xc7/0x150 [ 1056.330970][T27707] proc_fail_nth_read+0x1a3/0x210 [ 1056.335834][T27707] ? security_file_permission+0x7b/0xb0 [ 1056.341287][T27707] ? proc_fault_inject_write+0x390/0x390 [ 1056.346761][T27707] ? security_file_permission+0x86/0xb0 [ 1056.352221][T27707] ? rw_verify_area+0x1c3/0x360 [ 1056.356904][T27707] ? __switch_to_asm+0x34/0x60 [ 1056.361506][T27707] ? proc_fault_inject_write+0x390/0x390 [ 1056.366987][T27707] vfs_read+0x204/0xbb0 [ 1056.371084][T27707] ? kernel_read+0x70/0x70 [ 1056.375333][T27707] ? __kasan_check_write+0x14/0x20 [ 1056.380320][T27707] ? mutex_lock+0xa5/0x110 [ 1056.384551][T27707] ? mutex_trylock+0xa0/0xa0 [ 1056.388980][T27707] ? __fdget_pos+0x2e7/0x3a0 [ 1056.393489][T27707] ? ksys_read+0x77/0x2c0 [ 1056.397639][T27707] ksys_read+0x199/0x2c0 [ 1056.401722][T27707] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1056.407357][T27707] ? vfs_write+0xe70/0xe70 [ 1056.411623][T27707] __x64_sys_read+0x7b/0x90 [ 1056.415951][T27707] do_syscall_64+0x34/0x70 [ 1056.420207][T27707] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1056.425947][T27707] RIP: 0033:0x7f9c567f16bc [ 1056.430196][T27707] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1056.439588][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1056.449724][T27707] RSP: 002b:00007f9c55a74040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1056.449738][T27707] RAX: ffffffffffffffda RBX: 00007f9c56980f60 RCX: 00007f9c567f16bc [ 1056.449744][T27707] RDX: 000000000000000f RSI: 00007f9c55a740b0 RDI: 000000000000000a [ 1056.449750][T27707] RBP: 00007f9c55a740a0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.449756][T27707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.449762][T27707] R13: 000000000000000b R14: 00007f9c56980f60 R15: 00007ffeb1cb3b78 [ 1056.890196][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.943654][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.005624][ T25] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1057.062377][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.116318][ T25] usb 5-1: config 0 descriptor?? [ 1057.199927][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7743'. [ 1057.210262][T27726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=27726 comm=syz.2.7743 [ 1057.326185][T27740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27740 comm=syz.3.7747 [ 1057.340880][T27740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7747'. [ 1057.431085][T27718] udc-core: couldn't find an available UDC or it's busy [ 1057.437942][T27718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1057.565188][T27750] udc-core: couldn't find an available UDC or it's busy [ 1057.583155][T27750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1058.972345][T27773] input: syz0 as /devices/virtual/input/input98 [ 1059.028234][T27773] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1059.329766][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 1059.335968][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 1059.389520][ T25] usb 5-1: USB disconnect, device number 51 [ 1059.955279][T10090] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1060.329608][T10090] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.339588][T10090] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.369569][ T2220] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1060.449708][T10090] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.458642][T10090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.466506][T10090] usb 3-1: SerialNumber: syz [ 1060.729837][ T2220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.752625][ T2220] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.790238][T10090] usb 3-1: 0:2 : does not exist [ 1060.859730][ T2220] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.868693][ T2220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.876531][ T2220] usb 2-1: SerialNumber: syz [ 1061.139630][T22663] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1061.160609][ T2220] usb 2-1: 0:2 : does not exist [ 1061.165389][ T2220] usb 2-1: unit 5: unexpected type 0x03 [ 1061.170854][ T2220] usb 2-1: unit 255 not found! [ 1061.176974][ T2220] usb 2-1: USB disconnect, device number 75 [ 1061.184075][T21027] udevd[21027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1061.211200][ T25] usb 3-1: USB disconnect, device number 65 [ 1061.499734][T22663] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1061.509281][T22663] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1061.629582][T19826] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1061.632625][T22663] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1061.645911][T22663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.653920][T22663] usb 5-1: SerialNumber: syz [ 1061.679673][T27811] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1061.911103][T27811] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1061.999672][T19826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.010534][T19826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.020058][T19826] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1062.028908][T19826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.037328][T19826] usb 1-1: config 0 descriptor?? [ 1062.049630][ T54] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1062.281065][T27814] udc-core: couldn't find an available UDC or it's busy [ 1062.287967][T27814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1062.320109][ T54] usb 3-1: device descriptor read/64, error -71 [ 1062.370981][T22663] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1062.413233][T27827] udc-core: couldn't find an available UDC or it's busy [ 1062.428867][T27827] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1062.578987][T10090] usb 5-1: USB disconnect, device number 52 [ 1062.586281][T10090] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 1062.916027][ T54] usb 3-1: device descriptor read/64, error -71 [ 1063.219573][ T54] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1063.489644][ T54] usb 3-1: device descriptor read/64, error -71 [ 1063.749551][ T658] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1063.879596][ T54] usb 3-1: device descriptor read/64, error -71 [ 1063.999682][ T54] usb usb3-port1: attempt power cycle [ 1064.139677][ T658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.181390][ T658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.191060][ T658] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 1064.199941][ T658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.208259][ T658] usb 5-1: config 0 descriptor?? [ 1064.409545][ T54] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1064.508347][T19826] usbhid 1-1:0.0: can't add hid device: -71 [ 1064.524247][T19826] usbhid: probe of 1-1:0.0 failed with error -71 [ 1064.572259][T27892] udc-core: couldn't find an available UDC or it's busy [ 1064.579826][ T54] usb 3-1: device descriptor read/8, error -71 [ 1064.624540][T27892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1064.647922][T19826] usb 1-1: USB disconnect, device number 83 [ 1064.740232][ T658] usbhid 5-1:0.0: can't add hid device: -71 [ 1064.746066][ T658] usbhid: probe of 5-1:0.0 failed with error -71 [ 1064.763214][ T658] usb 5-1: USB disconnect, device number 53 [ 1065.118248][ T54] usb 3-1: device descriptor read/8, error -71 [ 1065.349568][T19826] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1065.413070][T27933] fuse: Unknown parameter 'use00000000000000000000' [ 1065.499606][T22663] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1065.570567][T27938] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1065.759829][T19826] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1065.769386][T19826] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1065.950258][T19826] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.969882][ T24] kauditd_printk_skb: 66 callbacks suppressed [ 1065.969946][ T24] audit: type=1400 audit(2536871327.892:11614): avc: denied { shutdown } for pid=27944 comm="syz.2.7795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1066.002266][T19826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1066.051975][T19826] usb 1-1: SerialNumber: syz [ 1066.150170][T27919] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1066.239704][T22663] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1066.253298][T22663] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1066.304427][ T24] audit: type=1107 audit(2536871328.312:11615): pid=27954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1066.339806][T22663] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.350174][T22663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1066.358383][T22663] usb 2-1: SerialNumber: syz [ 1066.374458][T27919] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1066.390152][T27931] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1066.553488][T27965] fuse: Unknown parameter 'use00000000000000000000' [ 1066.611710][T27931] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1066.831201][T19826] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1067.031860][T10091] usb 1-1: USB disconnect, device number 84 [ 1067.040805][T22663] cdc_ether 2-1:1.0 wwan1: register 'cdc_ether' at usb-dummy_hcd.1-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1067.050291][T10091] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 1067.298753][ T658] usb 2-1: USB disconnect, device number 76 [ 1067.310382][ T658] cdc_ether 2-1:1.0 wwan1: unregister 'cdc_ether' usb-dummy_hcd.1-1, Mobile Broadband Network Device [ 1067.335042][T28025] FAULT_INJECTION: forcing a failure. [ 1067.335042][T28025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1067.351808][T28025] CPU: 1 PID: 28025 Comm: syz.3.7804 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1067.362994][T28025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1067.372881][T28025] Call Trace: [ 1067.376018][T28025] dump_stack_lvl+0x1e2/0x24b [ 1067.380531][T28025] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1067.385821][T28025] dump_stack+0x15/0x17 [ 1067.389810][T28025] should_fail+0x3c6/0x510 [ 1067.394068][T28025] should_fail_alloc_page+0x52/0x60 [ 1067.399096][T28025] __alloc_pages_nodemask+0x1b3/0xaf0 [ 1067.404402][T28025] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1067.409865][T28025] ? pgprot_writethrough+0x20/0x20 [ 1067.414812][T28025] ? __kasan_check_write+0x14/0x20 [ 1067.419755][T28025] ? _raw_spin_lock+0xa4/0x1b0 [ 1067.424353][T28025] ? _raw_spin_trylock_bh+0x190/0x190 [ 1067.429565][T28025] pte_alloc_one+0x1f/0xc0 [ 1067.433819][T28025] __pte_alloc+0x75/0x2c0 [ 1067.437983][T28025] ? __kasan_check_write+0x14/0x20 [ 1067.442933][T28025] ? _raw_spin_lock+0xa4/0x1b0 [ 1067.447531][T28025] ? free_pgtables+0x3c0/0x3c0 [ 1067.452142][T28025] ? pfn_modify_allowed+0x27a/0x2b0 [ 1067.457182][T28025] remap_pfn_range+0x8f8/0xb20 [ 1067.461792][T28025] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 1067.467154][T28025] ? memset_erms+0x9/0x10 [ 1067.471322][T28025] usbdev_mmap+0x565/0x750 [ 1067.475574][T28025] ? usbdev_ioctl+0x5e10/0x5e10 [ 1067.480269][T28025] mmap_region+0x12f6/0x1af0 [ 1067.484686][T28025] ? match_file+0x140/0x140 [ 1067.489033][T28025] ? locks_verify_locked+0x100/0x100 [ 1067.494151][T28025] ? file_mmap_ok+0x104/0x150 [ 1067.498662][T28025] do_mmap+0x800/0xeb0 [ 1067.502571][T28025] vm_mmap_pgoff+0x201/0x390 [ 1067.506999][T28025] ? account_locked_vm+0x1a0/0x1a0 [ 1067.511945][T28025] ksys_mmap_pgoff+0x16f/0x1f0 [ 1067.516543][T28025] __x64_sys_mmap+0x103/0x120 [ 1067.521053][T28025] do_syscall_64+0x34/0x70 [ 1067.525308][T28025] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1067.531031][T28025] RIP: 0033:0x7f59c980bbd9 [ 1067.535285][T28025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.554808][T28025] RSP: 002b:00007f59c8a8d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1067.563048][T28025] RAX: ffffffffffffffda RBX: 00007f59c9999f60 RCX: 00007f59c980bbd9 [ 1067.570858][T28025] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1067.579113][T28025] RBP: 00007f59c8a8d0a0 R08: 0000000000000006 R09: 0000000000000000 [ 1067.586926][T28025] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 [ 1067.594728][T28025] R13: 000000000000000b R14: 00007f59c9999f60 R15: 00007ffe6b0d8498 [ 1067.689670][T28051] FAULT_INJECTION: forcing a failure. [ 1067.689670][T28051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1067.702965][T28051] CPU: 1 PID: 28051 Comm: syz.2.7806 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1067.714122][T28051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1067.724013][T28051] Call Trace: [ 1067.727149][T28051] dump_stack_lvl+0x1e2/0x24b [ 1067.731659][T28051] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1067.736955][T28051] dump_stack+0x15/0x17 [ 1067.740944][T28051] should_fail+0x3c6/0x510 [ 1067.745371][T28051] should_fail_alloc_page+0x52/0x60 [ 1067.750408][T28051] __alloc_pages_nodemask+0x1b3/0xaf0 [ 1067.755613][T28051] ? do_syscall_64+0x34/0x70 [ 1067.760046][T28051] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1067.765941][T28051] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1067.771322][T28051] ? avc_has_perm_noaudit+0x117/0x240 [ 1067.776615][T28051] shmem_alloc_page+0x257/0x420 [ 1067.781303][T28051] ? put_page+0xd0/0xd0 [ 1067.785295][T28051] ? slab_post_alloc_hook+0x61/0x2f0 [ 1067.790429][T28051] ? percpu_counter_add_batch+0x13d/0x160 [ 1067.795989][T28051] ? __kasan_check_read+0x11/0x20 [ 1067.800847][T28051] ? __vm_enough_memory+0x119/0x2f0 [ 1067.805874][T28051] ? security_vm_enough_memory_mm+0x94/0xa0 [ 1067.811593][T28051] shmem_alloc_and_acct_page+0x395/0x8e0 [ 1067.817062][T28051] ? shmem_swapin_page+0x1950/0x1950 [ 1067.822184][T28051] ? find_get_entry+0x44c/0x4c0 [ 1067.826871][T28051] ? page_cache_prev_miss+0x410/0x410 [ 1067.832076][T28051] ? pagevec_add_and_need_flush+0x1fe/0x430 [ 1067.837909][T28051] ? __kasan_check_write+0x14/0x20 [ 1067.842848][T28051] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1067.847794][T28051] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1067.853176][T28051] ? find_lock_entry+0x1df/0x200 [ 1067.857948][T28051] shmem_getpage_gfp+0x891/0x2480 [ 1067.862816][T28051] ? iov_iter_advance+0x258/0xb20 [ 1067.867668][T28051] ? shmem_getpage+0xa0/0xa0 [ 1067.872096][T28051] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 1067.877825][T28051] shmem_write_begin+0xca/0x1b0 [ 1067.882515][T28051] generic_perform_write+0x2cd/0x570 [ 1067.887666][T28051] ? grab_cache_page_write_begin+0xa0/0xa0 [ 1067.893289][T28051] ? file_remove_privs+0x570/0x570 [ 1067.898229][T28051] ? vmf_allows_speculation+0x6f0/0x6f0 [ 1067.903608][T28051] ? __kasan_check_write+0x14/0x20 [ 1067.908555][T28051] __generic_file_write_iter+0x23c/0x560 [ 1067.914018][T28051] ? generic_write_checks+0x3b9/0x470 [ 1067.919241][T28051] generic_file_write_iter+0xaf/0x1c0 [ 1067.924439][T28051] vfs_write+0xb55/0xe70 [ 1067.928514][T28051] ? kernel_write+0x3d0/0x3d0 [ 1067.933024][T28051] ? from_kuid+0x18d/0x6f0 [ 1067.937281][T28051] ? __fdget_pos+0x209/0x3a0 [ 1067.941705][T28051] ? ksys_write+0x77/0x2c0 [ 1067.945958][T28051] ksys_write+0x199/0x2c0 [ 1067.950125][T28051] ? bpf_trace_run1+0x210/0x210 [ 1067.954848][T28051] ? __ia32_sys_read+0x90/0x90 [ 1067.959414][T28051] ? debug_smp_processor_id+0x17/0x20 [ 1067.964646][T28051] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1067.970618][T28051] ? __bpf_trace_sys_enter+0x62/0x70 [ 1067.975733][T28051] __x64_sys_write+0x7b/0x90 [ 1067.980154][T28051] do_syscall_64+0x34/0x70 [ 1067.984407][T28051] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1067.990147][T28051] RIP: 0033:0x7f71579ad75f [ 1067.994400][T28051] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1068.013919][T28051] RSP: 002b:00007f7156c2fe00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1068.022159][T28051] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f71579ad75f [ 1068.029970][T28051] RDX: 0000000000080000 RSI: 00007f714e810000 RDI: 000000000000000b [ 1068.037781][T28051] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005ba [ 1068.045593][T28051] R10: 00000000000003c8 R11: 0000000000000293 R12: 000000000000000b [ 1068.053402][T28051] R13: 00007f7156c2ff00 R14: 00007f7156c2fec0 R15: 00007f714e810000 [ 1068.151456][ T24] audit: type=1107 audit(2536871330.162:11616): pid=28058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1068.209580][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1068.484390][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1068.609762][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.640124][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.666072][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1068.704345][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.780446][ T25] hub 4-1:4.0: USB hub found [ 1069.138972][ T25] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1069.419719][ T658] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1069.459831][T22663] usb 4-1: USB disconnect, device number 47 [ 1070.179734][ T658] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1070.185515][T28103] netlink: 'syz.3.7821': attribute type 3 has an invalid length. [ 1070.189242][ T658] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1070.289648][ T658] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.302845][ T658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1070.323316][ T658] usb 5-1: SerialNumber: syz [ 1070.349717][T28077] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1070.571154][T28077] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1070.880170][T20964] Bluetooth: hci0: Frame reassembly failed (-84) [ 1071.122095][ T658] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1071.321435][T22663] usb 5-1: USB disconnect, device number 54 [ 1071.333700][T22663] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 1071.865912][T28180] 9pnet: Insufficient options for proto=fd [ 1072.279723][ T24] audit: type=1326 audit(2536871334.282:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.304151][ T24] audit: type=1326 audit(2536871334.282:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.328110][ T24] audit: type=1326 audit(2536871334.312:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.353793][ T24] audit: type=1326 audit(2536871334.312:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.377611][ T24] audit: type=1326 audit(2536871334.312:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.408666][ T24] audit: type=1326 audit(2536871334.312:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.432583][ T24] audit: type=1326 audit(2536871334.312:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.456496][ T24] audit: type=1326 audit(2536871334.312:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.480129][ T24] audit: type=1326 audit(2536871334.312:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.503932][ T24] audit: type=1326 audit(2536871334.312:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28195 comm="syz.3.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c980bbd9 code=0x7ffc0000 [ 1072.669530][T10091] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1072.679579][ T54] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1072.909525][T10091] usb 5-1: Using ep0 maxpacket: 16 [ 1072.939551][T22663] Bluetooth: hci0: command 0x1003 tx timeout [ 1072.945607][T20659] Bluetooth: hci0: sending frame failed (-49) [ 1073.029628][T10091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.040491][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.051229][T10091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.060728][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.070291][T10091] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1073.079094][T10091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.086984][ T54] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1073.095784][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.104273][T10091] usb 5-1: config 0 descriptor?? [ 1073.109562][ T54] usb 4-1: config 0 descriptor?? [ 1073.419905][T28201] exfat: Bad value for 'uid' [ 1073.599656][T10091] usbhid 5-1:0.0: can't add hid device: -71 [ 1073.605524][T10091] usbhid: probe of 5-1:0.0 failed with error -71 [ 1073.612955][T10091] usb 5-1: USB disconnect, device number 55 [ 1073.639593][T22663] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1073.889602][ T54] usbhid 4-1:0.0: can't add hid device: -71 [ 1073.895542][ T54] usbhid: probe of 4-1:0.0 failed with error -71 [ 1073.903093][ T54] usb 4-1: USB disconnect, device number 48 [ 1074.029672][T22663] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1074.039367][T22663] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1074.075986][T28234] fuse: Unknown parameter 'user_id00000000000000000000' [ 1074.079641][ T25] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1074.149727][T22663] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.158568][T22663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1074.166518][T22663] usb 1-1: SerialNumber: syz [ 1074.189647][T28218] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1074.359646][T19826] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1074.415522][T28218] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1074.449706][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1074.459186][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1074.549687][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.558632][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1074.566821][ T25] usb 3-1: SerialNumber: syz [ 1074.599786][T28230] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1074.719608][T19826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.730343][T19826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9727, setting to 1024 [ 1074.741172][T19826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1074.753821][T19826] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1074.762684][T19826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.771073][T19826] usb 5-1: config 0 descriptor?? [ 1074.789612][T28236] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1074.821577][T28230] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1074.861137][T22663] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1075.019555][T10091] Bluetooth: hci0: command 0x1001 tx timeout [ 1075.025610][T20659] Bluetooth: hci0: sending frame failed (-49) [ 1075.061566][ T288] usb 1-1: USB disconnect, device number 85 [ 1075.080033][ T288] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 1075.250605][T19826] plantronics 0003:047F:FFFF.0120: No inputs registered, leaving [ 1075.259865][T19826] plantronics 0003:047F:FFFF.0120: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1075.280775][ T25] cdc_ether 3-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.2-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1075.461090][T19826] usb 5-1: USB disconnect, device number 56 [ 1075.485101][ T25] usb 3-1: USB disconnect, device number 70 [ 1075.499943][ T25] cdc_ether 3-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.2-1, Mobile Broadband Network Device [ 1075.954822][T28341] fuse: blksize only supported for fuseblk [ 1076.099846][T28345] fuse: Unknown parameter 'user_id00000000000000000000' [ 1076.539603][ T288] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1076.909642][T22663] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1076.917149][ T288] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1076.926621][ T288] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1077.049652][ T288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.059021][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.069270][ T288] usb 3-1: SerialNumber: syz [ 1077.089695][T28358] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1077.100002][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 1077.209091][T28375] fuse: Bad value for 'fd' [ 1077.259709][ T658] Bluetooth: hci1: command 0x1003 tx timeout [ 1077.265608][ T9797] Bluetooth: hci1: sending frame failed (-49) [ 1077.299680][T22663] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1077.309150][T22663] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1077.321690][T28358] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1077.409751][T22663] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.418747][T22663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.426765][T22663] usb 1-1: SerialNumber: syz [ 1077.449680][T28361] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1077.489659][T10090] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1077.671189][T28361] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1077.739864][T10090] usb 5-1: Using ep0 maxpacket: 32 [ 1077.770872][ T288] cdc_ether 3-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.2-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1077.869681][T10090] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.880823][T10090] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.973009][ T658] usb 3-1: USB disconnect, device number 71 [ 1077.980801][ T658] cdc_ether 3-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.2-1, Mobile Broadband Network Device [ 1078.039642][T10090] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1078.048648][T10090] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1078.057427][T10090] usb 5-1: Product: syz [ 1078.061564][T10090] usb 5-1: Manufacturer: syz [ 1078.100848][T22663] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1078.130187][T10090] hub 5-1:4.0: USB hub found [ 1078.315381][ T25] usb 1-1: USB disconnect, device number 86 [ 1078.339902][ T25] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 1078.339966][T10090] hub 5-1:4.0: 2 ports detected [ 1078.779598][T10091] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1078.949598][T10090] hub 5-1:4.0: set hub depth failed [ 1078.991809][T10090] usb 5-1: USB disconnect, device number 57 [ 1079.019710][T10091] usb 3-1: Using ep0 maxpacket: 16 [ 1079.139622][T10091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1079.150805][T10091] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1079.159659][T10091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.168368][T10091] usb 3-1: config 0 descriptor?? [ 1079.339577][T10090] Bluetooth: hci1: command 0x1001 tx timeout [ 1079.345462][ T9797] Bluetooth: hci1: sending frame failed (-49) [ 1079.411185][T28477] udc-core: couldn't find an available UDC or it's busy [ 1079.417975][T28477] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1079.689986][T28477] udc-core: couldn't find an available UDC or it's busy [ 1079.696959][T28477] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1079.758999][T10091] hid (null): unknown global tag 0xe2 [ 1079.765509][T10091] hid-generic 0003:0158:0100.0121: unknown main item tag 0x1 [ 1079.772761][T10091] hid-generic 0003:0158:0100.0121: unexpected long global item [ 1079.780507][T10091] hid-generic: probe of 0003:0158:0100.0121 failed with error -22 [ 1079.939297][ T25] usb 3-1: USB disconnect, device number 72 [ 1079.969531][T19826] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1080.209649][T19826] usb 1-1: Using ep0 maxpacket: 16 [ 1080.489655][T19826] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1080.498613][T19826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.507025][T19826] usb 1-1: Product: syz [ 1080.511264][T19826] usb 1-1: Manufacturer: syz [ 1080.515614][T19826] usb 1-1: SerialNumber: syz [ 1080.521057][T19826] usb 1-1: config 0 descriptor?? [ 1080.799748][T19826] r8152 1-1:0.0: Unknown version 0x0000 [ 1080.809232][T19826] usb 1-1: USB disconnect, device number 87 [ 1080.995634][T28513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.002671][T28513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.010094][T28513] device bridge_slave_0 entered promiscuous mode [ 1081.017130][T28513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.024059][T28513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.031503][T28513] device bridge_slave_1 entered promiscuous mode [ 1081.068429][T28513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.075530][T28513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.082632][T28513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.089366][T28513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.110187][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.117683][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.125124][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.136237][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.144973][T19826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.151938][T19826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.162330][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.170417][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.177243][T10091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.189601][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.198842][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.216729][T28513] device veth0_vlan entered promiscuous mode [ 1081.223575][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1081.232257][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1081.240253][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1081.247447][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1081.260272][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1081.269236][T28513] device veth1_macvtap entered promiscuous mode [ 1081.280344][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.288912][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.299597][T19826] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1081.419641][ T288] Bluetooth: hci1: command 0x1009 tx timeout [ 1081.450793][ T9] device bridge_slave_1 left promiscuous mode [ 1081.456804][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.464397][ T9] device bridge_slave_0 left promiscuous mode [ 1081.470962][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.478527][ T9] device veth1_macvtap left promiscuous mode [ 1081.484744][ T9] device veth0_vlan left promiscuous mode [ 1081.549659][T19826] usb 3-1: Using ep0 maxpacket: 32 [ 1081.589701][T10091] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1081.669703][T19826] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.681319][T19826] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.809721][T19826] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1081.818828][T19826] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1081.827080][T19826] usb 3-1: Product: syz [ 1081.831141][T19826] usb 3-1: Manufacturer: syz [ 1081.849632][T10091] usb 2-1: Using ep0 maxpacket: 16 [ 1081.870204][T19826] hub 3-1:4.0: USB hub found [ 1082.089670][T19826] hub 3-1:4.0: 2 ports detected [ 1082.129706][T10091] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1082.138607][T10091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.146592][T10091] usb 2-1: Product: syz [ 1082.150646][T10091] usb 2-1: Manufacturer: syz [ 1082.155001][T10091] usb 2-1: SerialNumber: syz [ 1082.160142][T10091] usb 2-1: config 0 descriptor?? [ 1082.464905][T28523] FAULT_INJECTION: forcing a failure. [ 1082.464905][T28523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.487695][T28523] CPU: 0 PID: 28523 Comm: syz.1.7891 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1082.498990][T28523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1082.508866][T28523] Call Trace: [ 1082.511997][T28523] dump_stack_lvl+0x1e2/0x24b [ 1082.516511][T28523] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1082.521804][T28523] ? __check_object_size+0x73/0x3c0 [ 1082.526830][T28523] dump_stack+0x15/0x17 [ 1082.530824][T28523] should_fail+0x3c6/0x510 [ 1082.535080][T28523] should_fail_usercopy+0x1a/0x20 [ 1082.539944][T28523] _copy_to_user+0x20/0x90 [ 1082.544197][T28523] simple_read_from_buffer+0xc7/0x150 [ 1082.549396][T28523] proc_fail_nth_read+0x1a3/0x210 [ 1082.554273][T28523] ? security_file_permission+0x7b/0xb0 [ 1082.559726][T28523] ? proc_fault_inject_write+0x390/0x390 [ 1082.565189][T28523] ? security_file_permission+0x86/0xb0 [ 1082.570615][T28523] ? rw_verify_area+0x1c3/0x360 [ 1082.575346][T28523] ? proc_fault_inject_write+0x390/0x390 [ 1082.581166][T28523] vfs_read+0x204/0xbb0 [ 1082.585156][T28523] ? irqentry_exit+0x4f/0x60 [ 1082.589580][T28523] ? kernel_read+0x70/0x70 [ 1082.593845][T28523] ? __kasan_check_write+0x14/0x20 [ 1082.598786][T28523] ? mutex_lock+0xa5/0x110 [ 1082.603042][T28523] ? mutex_trylock+0xa0/0xa0 [ 1082.607467][T28523] ? kasan_check_range+0x88/0x2a0 [ 1082.612331][T28523] ? __fdget_pos+0x2e7/0x3a0 [ 1082.616755][T28523] ? ksys_read+0x77/0x2c0 [ 1082.620920][T28523] ksys_read+0x199/0x2c0 [ 1082.624996][T28523] ? vfs_write+0xe70/0xe70 [ 1082.629258][T28523] ? fpu__clear_all+0x20/0x20 [ 1082.633774][T28523] ? __kasan_check_read+0x11/0x20 [ 1082.638625][T28523] __x64_sys_read+0x7b/0x90 [ 1082.642964][T28523] do_syscall_64+0x34/0x70 [ 1082.647223][T28523] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1082.652940][T28523] RIP: 0033:0x7f00df9ea6bc [ 1082.657198][T28523] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1082.676642][T28523] RSP: 002b:00007f00dec6d040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.684879][T28523] RAX: ffffffffffffffda RBX: 00007f00dfb79f60 RCX: 00007f00df9ea6bc [ 1082.692686][T28523] RDX: 000000000000000f RSI: 00007f00dec6d0b0 RDI: 0000000000000009 [ 1082.700497][T28523] RBP: 00007f00dec6d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.708310][T28523] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 1082.716121][T28523] R13: 000000000000000b R14: 00007f00dfb79f60 R15: 00007ffc2210ebc8 [ 1082.744069][T10091] r8152 2-1:0.0: Unknown version 0x0000 [ 1082.756938][T10091] usb 2-1: USB disconnect, device number 77 [ 1082.769576][T19826] hub 3-1:4.0: set hub depth failed [ 1082.774879][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 1082.810771][T19826] usb 3-1: USB disconnect, device number 73 [ 1084.584327][T28595] fuse: Bad value for 'fd' [ 1084.840323][T22663] Bluetooth: hci0: command 0x1003 tx timeout [ 1084.847729][ T9797] Bluetooth: hci0: sending frame failed (-49) [ 1085.286442][T28613] tipc: Started in network mode [ 1085.291250][T28613] tipc: Own node identity ac1414aa, cluster identity 4711 [ 1085.298260][T28613] tipc: New replicast peer: 100.1.1.1 [ 1085.303568][T28613] tipc: Enabled bearer , priority 10 [ 1085.324672][T28611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.332582][T28611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.360086][T28611] device bridge_slave_0 entered promiscuous mode [ 1085.367208][T28611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.374483][T28611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.382100][T28611] device bridge_slave_1 entered promiscuous mode [ 1085.422212][T28611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.429086][T28611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.436330][T28611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.443190][T28611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.712021][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.719314][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.726719][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1085.734742][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1085.751101][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1085.759307][T22663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.766196][T22663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.773835][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1085.783187][T22663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.790047][T22663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.797235][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1085.805285][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1085.828194][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.842673][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.850981][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.858440][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.867867][T28611] device veth0_vlan entered promiscuous mode [ 1085.909656][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1085.920484][T28611] device veth1_macvtap entered promiscuous mode [ 1085.933515][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1085.961287][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1086.429579][T10091] tipc: 32-bit node address hash set to aa1414ac [ 1086.562593][T20964] device bridge_slave_1 left promiscuous mode [ 1086.571137][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.593713][T20964] device bridge_slave_0 left promiscuous mode [ 1086.613110][T20964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.638512][T20964] device veth1_macvtap left promiscuous mode [ 1086.664037][T20964] device veth0_vlan left promiscuous mode [ 1086.719852][ T658] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1086.870786][T22663] Bluetooth: hci0: command 0x1001 tx timeout [ 1086.879780][T20659] Bluetooth: hci0: sending frame failed (-49) [ 1086.969527][ T658] usb 3-1: Using ep0 maxpacket: 32 [ 1087.089606][ T658] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.131143][ T658] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.439949][ T658] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1087.448952][ T658] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1087.457403][ T658] usb 3-1: Product: syz [ 1087.461555][ T658] usb 3-1: Manufacturer: syz [ 1087.502374][ T658] hub 3-1:4.0: USB hub found [ 1087.709872][ T658] hub 3-1:4.0: 2 ports detected [ 1088.059891][ T658] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1088.066174][ T658] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1088.115629][ T658] usb 3-1: USB disconnect, device number 74 [ 1088.540166][T28699] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 1088.639053][T28702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.646366][T28702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.653783][T28702] device bridge_slave_0 entered promiscuous mode [ 1088.660936][T28702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.667874][T28702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.675370][T28702] device bridge_slave_1 entered promiscuous mode [ 1088.682120][T20964] tipc: Disabling bearer [ 1088.687343][T20964] tipc: Left network mode [ 1088.734984][T28702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.741838][T28702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.748977][T28702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.755827][T28702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.775993][ T2220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1088.783521][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.791530][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.803376][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1088.811383][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.818226][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.829645][ T25] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1089.002146][T10090] Bluetooth: hci0: command 0x1009 tx timeout [ 1089.009389][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.017448][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.024393][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.047144][T28702] device veth0_vlan entered promiscuous mode [ 1089.054232][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1089.062875][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1089.070775][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.078024][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1089.085402][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1089.093210][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1089.109639][ T25] usb 5-1: device descriptor read/64, error -71 [ 1089.116348][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1089.126322][T28702] device veth1_macvtap entered promiscuous mode [ 1089.146717][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1089.158889][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1089.340158][T28717] ÿÿÿÿÿÿ: renamed from syzkaller0 [ 1089.409521][T10090] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1089.452111][T20964] device veth1_macvtap left promiscuous mode [ 1089.509742][ T25] usb 5-1: device descriptor read/64, error -71 [ 1089.779581][ T25] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1089.820019][T10090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.830819][T10090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.840431][T10090] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1089.849258][T10090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.860375][T10090] usb 4-1: config 0 descriptor?? [ 1090.049583][ T25] usb 5-1: device descriptor read/64, error -71 [ 1090.096494][ T24] kauditd_printk_skb: 99 callbacks suppressed [ 1090.096507][ T24] audit: type=1400 audit(2536871352.102:11726): avc: denied { ioctl } for pid=28721 comm="syz.0.7952" path="socket:[132817]" dev="sockfs" ino=132817 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1090.134079][T28711] udc-core: couldn't find an available UDC or it's busy [ 1090.141219][T28711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1090.348899][T28711] udc-core: couldn't find an available UDC or it's busy [ 1090.355752][T28711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1090.369547][ T54] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1090.439589][ T25] usb 5-1: device descriptor read/64, error -71 [ 1090.469435][T28725] FAULT_INJECTION: forcing a failure. [ 1090.469435][T28725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.482380][T28725] CPU: 0 PID: 28725 Comm: syz.2.7953 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1090.493566][T28725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1090.503450][T28725] Call Trace: [ 1090.506581][T28725] dump_stack_lvl+0x1e2/0x24b [ 1090.511096][T28725] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1090.516388][T28725] ? shmem_getpage_gfp+0x2230/0x2480 [ 1090.521510][T28725] dump_stack+0x15/0x17 [ 1090.525500][T28725] should_fail+0x3c6/0x510 [ 1090.529755][T28725] should_fail_usercopy+0x1a/0x20 [ 1090.534615][T28725] iov_iter_copy_from_user_atomic+0x391/0xd80 [ 1090.540528][T28725] ? shmem_getpage+0xa0/0xa0 [ 1090.545048][T28725] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 1090.550769][T28725] ? memzero_page+0x100/0x100 [ 1090.555288][T28725] generic_perform_write+0x34c/0x570 [ 1090.559673][ T25] usb usb5-port1: attempt power cycle [ 1090.560412][T28725] ? grab_cache_page_write_begin+0xa0/0xa0 [ 1090.571278][T28725] ? file_remove_privs+0x570/0x570 [ 1090.576201][T28725] ? __kasan_check_write+0x14/0x20 [ 1090.581150][T28725] __generic_file_write_iter+0x23c/0x560 [ 1090.586613][T28725] ? generic_write_checks+0x393/0x470 [ 1090.591828][T28725] generic_file_write_iter+0xaf/0x1c0 [ 1090.597204][T28725] vfs_write+0xb55/0xe70 [ 1090.601283][T28725] ? kernel_write+0x3d0/0x3d0 [ 1090.605968][T28725] ? mutex_trylock+0xa0/0xa0 [ 1090.610392][T28725] ? __fdget_pos+0x2e7/0x3a0 [ 1090.614816][T28725] ? ksys_write+0x77/0x2c0 [ 1090.619067][T28725] ksys_write+0x199/0x2c0 [ 1090.623240][T28725] ? bpf_trace_run1+0x210/0x210 [ 1090.627922][T28725] ? __ia32_sys_read+0x90/0x90 [ 1090.632523][T28725] ? __bpf_trace_sys_enter+0x62/0x70 [ 1090.637656][T28725] __x64_sys_write+0x7b/0x90 [ 1090.642079][T28725] do_syscall_64+0x34/0x70 [ 1090.646323][T28725] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1090.652055][T28725] RIP: 0033:0x7f71579aebd9 [ 1090.656303][T28725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.675750][T28725] RSP: 002b:00007f7156c30048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1090.683988][T28725] RAX: ffffffffffffffda RBX: 00007f7157b3cf60 RCX: 00007f71579aebd9 [ 1090.691801][T28725] RDX: 00000000ffffff6a RSI: 0000000020000000 RDI: 0000000000000005 [ 1090.699610][T28725] RBP: 00007f7156c300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.707423][T28725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.715232][T28725] R13: 000000000000000b R14: 00007f7157b3cf60 R15: 00007ffc3d418b98 [ 1090.726924][T10090] logitech-djreceiver 0003:046D:C71B.0122: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input0 [ 1090.769595][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1090.779407][ T54] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1090.789337][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1090.798969][ T54] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1090.959754][ T54] usb 1-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 1090.969008][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.978099][ T54] usb 1-1: Product: syz [ 1090.982918][ T54] usb 1-1: Manufacturer: syz [ 1090.987501][ T54] usb 1-1: SerialNumber: syz [ 1090.995897][ T54] usb 1-1: config 0 descriptor?? [ 1091.009612][ T25] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1091.041632][ T54] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1091.051596][ T54] usb 1-1: Detected FT-X [ 1091.055796][ T54] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 1091.063287][ T54] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 1091.179590][ T25] usb 5-1: device descriptor read/8, error -71 [ 1091.249617][ T54] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1091.269624][ T54] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1091.289646][ T54] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1091.296730][ T54] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1091.305992][ T54] usb 1-1: USB disconnect, device number 88 [ 1091.312653][ T54] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1091.322082][ T54] ftdi_sio 1-1:0.0: device disconnected [ 1091.449649][ T25] usb 5-1: device descriptor read/8, error -71 [ 1091.667838][ T24] audit: type=1326 audit(2536871353.672:11727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71579aebd9 code=0x7ffc0000 [ 1091.668885][T28742] FAULT_INJECTION: forcing a failure. [ 1091.668885][T28742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1091.704363][T28742] CPU: 1 PID: 28742 Comm: syz.2.7958 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1091.709887][ T24] audit: type=1326 audit(2536871353.672:11728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71579aebd9 code=0x7ffc0000 [ 1091.715522][T28742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1091.715527][T28742] Call Trace: [ 1091.715543][T28742] dump_stack_lvl+0x1e2/0x24b [ 1091.715563][T28742] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1091.759531][ T24] audit: type=1326 audit(2536871353.672:11729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71579aebd9 code=0x7ffc0000 [ 1091.761796][T28742] ? try_charge+0x1144/0x15f0 [ 1091.789608][T28742] dump_stack+0x15/0x17 [ 1091.793565][T28742] should_fail+0x3c6/0x510 [ 1091.797067][ T24] audit: type=1326 audit(2536871353.672:11730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71579aebd9 code=0x7ffc0000 [ 1091.797817][T28742] should_fail_alloc_page+0x52/0x60 [ 1091.821604][ T24] audit: type=1326 audit(2536871353.672:11731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71579aebd9 code=0x7ffc0000 [ 1091.826196][T28742] __alloc_pages_nodemask+0x1b3/0xaf0 [ 1091.854765][T28742] ? __kasan_check_read+0x11/0x20 [ 1091.859617][T28742] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1091.859652][ T24] audit: type=1326 audit(2536871353.672:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71579ad610 code=0x7ffc0000 [ 1091.865004][T28742] ? __mod_node_page_state+0xac/0xf0 [ 1091.893559][T28742] ? lru_cache_add+0x15e/0x380 [ 1091.894612][ T24] audit: type=1326 audit(2536871353.672:11733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71579ad75f code=0x7ffc0000 [ 1091.898232][T28742] ? __lru_cache_add_inactive_or_unevictable+0x37/0x160 [ 1091.898252][T28742] handle_pte_fault+0x1782/0x3e30 [ 1091.921780][ T24] audit: type=1326 audit(2536871353.672:11734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f71579aebd9 code=0x7ffc0000 [ 1091.928176][T28742] ? vmf_allows_speculation+0x6f0/0x6f0 [ 1091.928193][T28742] ? __this_cpu_preempt_check+0x13/0x20 [ 1091.967152][T28742] handle_mm_fault+0x11d6/0x1a10 [ 1091.971916][T28742] ? _raw_spin_unlock+0x4d/0x70 [ 1091.976613][T28742] ? can_reuse_spf_vma+0xe0/0xe0 [ 1091.981375][T28742] ? follow_page+0x230/0x230 [ 1091.985796][T28742] ? vmacache_update+0xb7/0x120 [ 1091.990485][T28742] ? find_extend_vma+0xc8/0x260 [ 1091.995184][T28742] __get_user_pages+0xb31/0x11b0 [ 1091.999954][T28742] ? populate_vma_page_range+0xf0/0xf0 [ 1092.005240][T28742] __gup_longterm_locked+0x1cf/0xbb0 [ 1092.010369][T28742] ? get_user_pages+0x4d0/0x4d0 [ 1092.015048][T28742] pin_user_pages+0x127/0x2d0 [ 1092.019575][T28742] ? pin_user_pages_remote+0x80/0x80 [ 1092.024785][T28742] ? kmalloc_order_trace+0x18/0x90 [ 1092.029726][T28742] ? __kmalloc+0x1f1/0x330 [ 1092.033976][T28742] xdp_umem_create+0x8d7/0xe60 [ 1092.038583][T28742] xsk_setsockopt+0x708/0x920 [ 1092.043083][T28742] ? xsk_poll+0x4a0/0x4a0 [ 1092.047250][T28742] ? security_socket_setsockopt+0x82/0xb0 [ 1092.052800][T28742] ? xsk_poll+0x4a0/0x4a0 [ 1092.056969][T28742] __sys_setsockopt+0x502/0x870 [ 1092.061663][T28742] ? __ia32_sys_recv+0xb0/0xb0 [ 1092.066265][T28742] ? __secure_computing+0xf0/0x300 [ 1092.071386][T28742] __x64_sys_setsockopt+0xbf/0xd0 [ 1092.076248][T28742] do_syscall_64+0x34/0x70 [ 1092.080570][T28742] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1092.086295][T28742] RIP: 0033:0x7f71579aebd9 [ 1092.090547][T28742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.110002][T28742] RSP: 002b:00007f7156c30048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1092.118234][T28742] RAX: ffffffffffffffda RBX: 00007f7157b3cf60 RCX: 00007f71579aebd9 [ 1092.126047][T28742] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1092.133854][T28742] RBP: 00007f7156c300a0 R08: 00000000000000eb R09: 0000000000000000 [ 1092.141682][T28742] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1092.149487][T28742] R13: 000000000000000b R14: 00007f7157b3cf60 R15: 00007ffc3d418b98 [ 1092.157772][ T288] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 1092.167816][ T24] audit: type=1326 audit(2536871354.172:11735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28741 comm="syz.2.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f71579ad6bc code=0x7ffc0000 [ 1092.265638][T28757] FAULT_INJECTION: forcing a failure. [ 1092.265638][T28757] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.279118][T28757] CPU: 0 PID: 28757 Comm: syz.3.7961 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1092.290301][T28757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1092.300186][T28757] Call Trace: [ 1092.303320][T28757] dump_stack_lvl+0x1e2/0x24b [ 1092.307826][T28757] ? panic+0x812/0x812 [ 1092.311741][T28757] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1092.317040][T28757] ? __wake_up_bit+0x190/0x190 [ 1092.321634][T28757] ? _raw_spin_lock+0xa4/0x1b0 [ 1092.326225][T28757] ? inode_test+0x180/0x180 [ 1092.330562][T28757] dump_stack+0x15/0x17 [ 1092.334645][T28757] should_fail+0x3c6/0x510 [ 1092.338898][T28757] ? __d_alloc+0x2d/0x6c0 [ 1092.343063][T28757] __should_failslab+0xa4/0xe0 [ 1092.347928][T28757] should_failslab+0x9/0x20 [ 1092.352266][T28757] kmem_cache_alloc+0x3d/0x2e0 [ 1092.356893][T28757] ? open_or_create_special_dir+0x1d0/0x1d0 [ 1092.362596][T28757] __d_alloc+0x2d/0x6c0 [ 1092.366583][T28757] ? up_write+0x59/0x120 [ 1092.370661][T28757] d_make_root+0x4a/0xe0 [ 1092.374739][T28757] incfs_mount_fs+0x5dc/0xa10 [ 1092.379253][T28757] ? incfs_unlink+0x80/0x80 [ 1092.383599][T28757] ? vfs_parse_fs_string+0x18c/0x220 [ 1092.388759][T28757] ? cap_capable+0x1ce/0x270 [ 1092.393150][T28757] legacy_get_tree+0xf1/0x190 [ 1092.397669][T28757] ? incfs_unlink+0x80/0x80 [ 1092.401996][T28757] vfs_get_tree+0x88/0x290 [ 1092.406249][T28757] do_new_mount+0x2ba/0xb30 [ 1092.410589][T28757] ? do_move_mount_old+0x160/0x160 [ 1092.415535][T28757] ? security_capable+0x87/0xb0 [ 1092.420239][T28757] ? ns_capable+0x89/0xe0 [ 1092.424394][T28757] path_mount+0x56f/0xcb0 [ 1092.428564][T28757] __se_sys_mount+0x2c4/0x3b0 [ 1092.433074][T28757] ? __x64_sys_mount+0xd0/0xd0 [ 1092.437675][T28757] __x64_sys_mount+0xbf/0xd0 [ 1092.442096][T28757] do_syscall_64+0x34/0x70 [ 1092.446347][T28757] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1092.452087][T28757] RIP: 0033:0x7f498224bbd9 [ 1092.456342][T28757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.475775][T28757] RSP: 002b:00007f49814ac048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1092.484013][T28757] RAX: ffffffffffffffda RBX: 00007f49823da038 RCX: 00007f498224bbd9 [ 1092.491833][T28757] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000020000140 [ 1092.499637][T28757] RBP: 00007f49814ac0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.507447][T28757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1092.515289][T28757] R13: 000000000000006e R14: 00007f49823da038 R15: 00007ffdba5f6b08 [ 1092.525481][T28757] incfs: mount failed -12 [ 1092.577876][T28762] FAULT_INJECTION: forcing a failure. [ 1092.577876][T28762] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.590492][T28762] CPU: 1 PID: 28762 Comm: syz.0.7964 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1092.601840][T28762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1092.611724][T28762] Call Trace: [ 1092.614859][T28762] dump_stack_lvl+0x1e2/0x24b [ 1092.619367][T28762] ? panic+0x812/0x812 [ 1092.623273][T28762] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1092.628565][T28762] dump_stack+0x15/0x17 [ 1092.632561][T28762] should_fail+0x3c6/0x510 [ 1092.636899][T28762] ? audit_log_start+0x4ae/0x9b0 [ 1092.641686][T28762] __should_failslab+0xa4/0xe0 [ 1092.646278][T28762] should_failslab+0x9/0x20 [ 1092.650783][T28762] __kmalloc_track_caller+0x5f/0x320 [ 1092.655904][T28762] ? kmem_cache_alloc+0x168/0x2e0 [ 1092.660770][T28762] ? __alloc_skb+0x80/0x510 [ 1092.665107][T28762] ? audit_log_start+0x4ae/0x9b0 [ 1092.669877][T28762] __alloc_skb+0xbc/0x510 [ 1092.674050][T28762] audit_log_start+0x4ae/0x9b0 [ 1092.678645][T28762] ? _kstrtoull+0x3a0/0x4a0 [ 1092.682988][T28762] ? audit_serial+0x30/0x30 [ 1092.687410][T28762] ? kstrtol_from_user+0x310/0x310 [ 1092.692362][T28762] ? memset+0x35/0x40 [ 1092.696183][T28762] ? __fsnotify_parent+0x4b9/0x6c0 [ 1092.701130][T28762] audit_seccomp+0x61/0x1e0 [ 1092.705461][T28762] __seccomp_filter+0xd03/0x1e10 [ 1092.710237][T28762] ? vfs_write+0x854/0xe70 [ 1092.714485][T28762] ? __secure_computing+0x300/0x300 [ 1092.719520][T28762] ? kernel_write+0x3d0/0x3d0 [ 1092.724037][T28762] ? __kasan_check_write+0x14/0x20 [ 1092.728978][T28762] ? mutex_lock+0xa5/0x110 [ 1092.733231][T28762] ? mutex_trylock+0xa0/0xa0 [ 1092.737663][T28762] ? fput_many+0x160/0x1b0 [ 1092.742001][T28762] ? fput+0x1a/0x20 [ 1092.745644][T28762] ? ksys_write+0x260/0x2c0 [ 1092.749983][T28762] ? __ia32_sys_read+0x90/0x90 [ 1092.754585][T28762] __secure_computing+0xf0/0x300 [ 1092.759360][T28762] syscall_enter_from_user_mode+0xbf/0x1a0 [ 1092.765004][T28762] do_syscall_64+0x13/0x70 [ 1092.769254][T28762] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1092.774980][T28762] RIP: 0033:0x7f1fedf80bd9 [ 1092.779234][T28762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.798764][T28762] RSP: 002b:00007f1fed202048 EFLAGS: 00000246 ORIG_RAX: 0000000000000115 [ 1092.807008][T28762] RAX: ffffffffffffffda RBX: 00007f1fee10ef60 RCX: 00007f1fedf80bd9 [ 1092.814816][T28762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1092.822715][T28762] RBP: 00007f1fed2020a0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.830525][T28762] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1092.838336][T28762] R13: 000000000000000b R14: 00007f1fee10ef60 R15: 00007ffdc39e28b8 [ 1092.857555][T20959] tipc: Disabling bearer [ 1092.867231][T20959] tipc: Left network mode [ 1092.956268][T28769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.963316][T28769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.970590][T28769] device bridge_slave_0 entered promiscuous mode [ 1092.979710][T28769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.986573][T28769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.993947][T28769] device bridge_slave_1 entered promiscuous mode [ 1093.132015][T26757] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 1093.212334][T26757] FAT-fs (loop4): Filesystem has been set read-only [ 1093.279876][T26757] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 1093.343237][T28772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.350679][T28772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.367473][T28772] device bridge_slave_0 entered promiscuous mode [ 1093.389776][T28772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.396633][T28772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.404424][T28772] device bridge_slave_1 entered promiscuous mode [ 1093.417785][T28769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.424749][T28769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.431852][T28769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.438620][T28769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.522507][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1093.531483][T22924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.542938][T28787] fuse: Bad value for 'user_id' [ 1093.547765][T22924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.572599][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1093.580982][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1093.588931][T22924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.595775][T22924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.603165][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1093.611501][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1093.619444][T22924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.626292][T22924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.640297][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1093.648185][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1093.656368][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1093.664814][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1093.696835][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1093.704981][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1093.720457][T20959] device bridge_slave_1 left promiscuous mode [ 1093.726406][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.734203][T20959] device bridge_slave_0 left promiscuous mode [ 1093.740722][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.748536][T20959] device veth1_macvtap left promiscuous mode [ 1093.773336][T28794] binder: 28793:28794 unknown command 0 [ 1093.778703][T28794] binder: 28793:28794 ioctl c0306201 20000480 returned -22 [ 1093.901602][T28769] device veth0_vlan entered promiscuous mode [ 1093.908392][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1093.916356][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1093.930681][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1093.937941][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1093.960340][T28785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.967183][T28785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.974922][T28785] device bridge_slave_0 entered promiscuous mode [ 1093.982330][T28785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.989166][T28785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.996460][T28785] device bridge_slave_1 entered promiscuous mode [ 1094.009663][ T288] usb 4-1: device descriptor read/64, error -71 [ 1094.028251][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1094.036345][T22663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1094.046928][T28769] device veth1_macvtap entered promiscuous mode [ 1094.079723][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1094.087539][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1094.096091][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1094.109996][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1094.118575][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1094.127280][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1094.134977][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1094.142378][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1094.150648][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1094.158547][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.165390][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.172714][ T6608] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1094.180453][ T288] usb 4-1: device reset changed ep0 maxpacket size! [ 1094.186960][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1094.195068][ T658] usb 4-1: USB disconnect, device number 49 [ 1094.202814][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1094.211712][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.218629][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.234096][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1094.269009][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1094.277413][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1094.311227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1094.320457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1094.328232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1094.337824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.346233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1094.354446][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.361302][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.368664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1094.376593][ T658] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1094.384890][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.391761][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.401801][T28772] device veth0_vlan entered promiscuous mode [ 1094.410035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1094.417543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1094.437716][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1094.445105][ T6608] usb 1-1: Using ep0 maxpacket: 16 [ 1094.450896][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1094.458168][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1094.469134][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.480050][T28772] device veth1_macvtap entered promiscuous mode [ 1094.487153][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1094.509110][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1094.518118][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1094.526358][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1094.535177][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1094.569728][ T6608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.581567][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1094.591011][ T6608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.601145][ T6608] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1094.614141][ T6608] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1094.623580][ T6608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.631485][ T658] usb 4-1: Using ep0 maxpacket: 16 [ 1094.645056][T28785] device veth0_vlan entered promiscuous mode [ 1094.647547][ T6608] usb 1-1: config 0 descriptor?? [ 1094.656728][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1094.667982][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1094.683002][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 1094.688480][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1094.699546][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1094.726822][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1094.736819][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1094.755002][T28785] device veth1_macvtap entered promiscuous mode [ 1094.767047][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1094.774461][ T658] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.785381][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1094.794019][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1094.819047][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1094.827642][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1094.989706][ T658] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 1094.998807][ T658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.006930][ T658] usb 4-1: Product: syz [ 1095.010962][ T658] usb 4-1: Manufacturer: syz [ 1095.015337][ T658] usb 4-1: SerialNumber: syz [ 1095.022982][ T658] usb 4-1: config 0 descriptor?? [ 1095.063307][ T658] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1095.070974][ T658] usb 4-1: Detected FT-X [ 1095.090479][T20959] device bridge_slave_1 left promiscuous mode [ 1095.096507][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.104305][T20959] device bridge_slave_0 left promiscuous mode [ 1095.110586][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.118746][T20959] device bridge_slave_1 left promiscuous mode [ 1095.124880][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.131907][ T54] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1095.146547][T20959] device bridge_slave_0 left promiscuous mode [ 1095.153132][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.164832][T20959] device veth1_macvtap left promiscuous mode [ 1095.170956][T20959] device veth0_vlan left promiscuous mode [ 1095.185420][T20959] device veth1_macvtap left promiscuous mode [ 1095.197225][T20959] device veth0_vlan left promiscuous mode [ 1095.205312][T28820] fuse: Bad value for 'user_id' [ 1095.261075][T28789] udc-core: couldn't find an available UDC or it's busy [ 1095.275156][T28789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1095.300718][ T658] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1095.329587][ T658] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1095.359753][ T658] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1095.379522][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 1095.380483][ T658] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1095.393790][ T658] usb 4-1: USB disconnect, device number 50 [ 1095.410112][ T658] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1095.429946][ T658] ftdi_sio 4-1:0.0: device disconnected [ 1095.500846][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.512768][T28823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7982'. [ 1095.519535][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.531350][ T54] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1095.540388][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.552054][ T54] usb 5-1: config 0 descriptor?? [ 1095.790991][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.798804][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.805975][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.813086][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.820409][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.827434][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.834662][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.841878][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.848897][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.866443][ T6608] microsoft 0003:045E:07DA.0123: unknown main item tag 0x0 [ 1095.885945][ T6608] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0123/input/input99 [ 1095.913526][ T6608] microsoft 0003:045E:07DA.0123: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1096.035973][T28812] udc-core: couldn't find an available UDC or it's busy [ 1096.044749][T28812] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1096.329592][ T54] usbhid 5-1:0.0: can't add hid device: -71 [ 1096.335560][ T54] usbhid: probe of 5-1:0.0 failed with error -71 [ 1096.346320][ T54] usb 5-1: USB disconnect, device number 62 [ 1096.699708][ T6608] Bluetooth: hci0: command 0x1003 tx timeout [ 1096.705811][T20659] Bluetooth: hci0: sending frame failed (-49) [ 1096.784677][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 1096.784686][ T24] audit: type=1107 audit(2536871358.792:11755): pid=28850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1096.815229][T28853] fuse: Bad value for 'user_id' [ 1097.019803][T28827] usb 1-1: USB disconnect, device number 89 [ 1097.367372][T28867] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1097.377158][T28867] SELinux: failed to load policy [ 1097.421338][T28827] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1097.679548][T28827] usb 1-1: Using ep0 maxpacket: 16 [ 1097.765963][ T24] audit: type=1107 audit(2536871359.772:11756): pid=28881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1097.865285][T28827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.059579][T10091] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1098.067125][T28827] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 1098.076001][T28827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.083769][T28827] usb 1-1: Product: syz [ 1098.087721][T28827] usb 1-1: Manufacturer: syz [ 1098.092373][T28827] usb 1-1: SerialNumber: syz [ 1098.097413][T28827] usb 1-1: config 0 descriptor?? [ 1098.140240][T28827] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1098.147823][T28827] usb 1-1: Detected FT-X [ 1098.340781][T28864] udc-core: couldn't find an available UDC or it's busy [ 1098.347548][T28864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1098.354936][T10091] usb 5-1: Using ep0 maxpacket: 16 [ 1098.369616][T28827] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1098.459745][T28827] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1098.479650][T28827] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1098.486612][T28827] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1098.495564][T28827] usb 1-1: USB disconnect, device number 90 [ 1098.501962][T28827] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1098.511731][T28827] ftdi_sio 1-1:0.0: device disconnected [ 1098.529591][T10091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.540584][T10091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.551784][T10091] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1098.560978][T10091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.569973][T10091] usb 5-1: config 0 descriptor?? [ 1098.779623][T28827] Bluetooth: hci0: command 0x1001 tx timeout [ 1098.785561][T20659] Bluetooth: hci0: sending frame failed (-49) [ 1099.034251][T28884] udc-core: couldn't find an available UDC or it's busy [ 1099.041509][T28884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1099.109743][T10091] usbhid 5-1:0.0: can't add hid device: -71 [ 1099.117547][T10091] usbhid: probe of 5-1:0.0 failed with error -71 [ 1099.127324][T10091] usb 5-1: USB disconnect, device number 63 [ 1099.539549][ T535] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1099.858174][T28911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.865294][T28911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.872802][T28911] device bridge_slave_0 entered promiscuous mode [ 1099.884075][T28911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.891056][T28911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.898396][T28911] device bridge_slave_1 entered promiscuous mode [ 1099.949595][T28911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.956449][T28911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.963573][T28911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.970345][T28911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.990902][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1099.998414][T28827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.006455][T28827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.026619][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1100.036851][T28827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.043714][T28827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.124972][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1100.135682][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.142586][T10091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.183368][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1100.191471][ T535] usb 2-1: Using ep0 maxpacket: 32 [ 1100.197101][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1100.204997][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1100.217015][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1100.225417][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1100.233016][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1100.240958][T28911] device veth0_vlan entered promiscuous mode [ 1100.252954][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1100.262250][T28911] device veth1_macvtap entered promiscuous mode [ 1100.273233][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.285248][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1100.309597][ T535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1100.321721][ T535] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1100.343672][ T24] audit: type=1107 audit(2536871362.352:11757): pid=28923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1100.369311][T28926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8013'. [ 1100.489644][ T535] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1100.498542][ T535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.506619][ T535] usb 2-1: Product: syz [ 1100.510707][ T535] usb 2-1: Manufacturer: syz [ 1100.515089][ T535] usb 2-1: SerialNumber: syz [ 1100.520905][ T9] device bridge_slave_1 left promiscuous mode [ 1100.528525][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.530807][ T535] usb 2-1: config 0 descriptor?? [ 1100.540614][ T9] device bridge_slave_0 left promiscuous mode [ 1100.546660][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.554775][ T9] device veth1_macvtap left promiscuous mode [ 1100.560668][ T9] device veth0_vlan left promiscuous mode [ 1100.580454][ T535] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1100.798577][T28935] FAULT_INJECTION: forcing a failure. [ 1100.798577][T28935] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.811122][T28935] CPU: 0 PID: 28935 Comm: syz.0.8016 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1100.822289][T28935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1100.832178][T28935] Call Trace: [ 1100.835312][T28935] dump_stack_lvl+0x1e2/0x24b [ 1100.839820][T28935] ? panic+0x812/0x812 [ 1100.843725][T28935] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1100.849059][T28935] dump_stack+0x15/0x17 [ 1100.853140][T28935] should_fail+0x3c6/0x510 [ 1100.857368][T28935] ? kobject_get_path+0xbc/0x1f0 [ 1100.862142][T28935] __should_failslab+0xa4/0xe0 [ 1100.866742][T28935] should_failslab+0x9/0x20 [ 1100.871089][T28935] __kmalloc+0x60/0x330 [ 1100.875075][T28935] kobject_get_path+0xbc/0x1f0 [ 1100.879675][T28935] kobject_uevent_env+0x27f/0x700 [ 1100.884539][T28935] kobject_uevent+0x1f/0x30 [ 1100.888873][T28935] __kobject_del+0xee/0x300 [ 1100.893219][T28935] kobject_put+0x1cc/0x260 [ 1100.897468][T28935] netdev_queue_update_kobjects+0x321/0x390 [ 1100.903195][T28935] ? skb_queue_purge+0x19b/0x1b0 [ 1100.907969][T28935] netif_set_real_num_tx_queues+0x16b/0x800 [ 1100.913721][T28935] __tun_detach+0xb78/0x1510 [ 1100.918139][T28935] __tun_chr_ioctl+0xbe4/0x2260 [ 1100.922816][T28935] ? tun_flow_create+0x320/0x320 [ 1100.927585][T28935] ? bpf_probe_read_compat_str+0x15c/0x180 [ 1100.933231][T28935] ? __fget_files+0x31e/0x380 [ 1100.937743][T28935] tun_chr_ioctl+0x2a/0x40 [ 1100.941989][T28935] ? tun_chr_poll+0x670/0x670 [ 1100.946505][T28935] __se_sys_ioctl+0x114/0x190 [ 1100.951019][T28935] __x64_sys_ioctl+0x7b/0x90 [ 1100.955444][T28935] do_syscall_64+0x34/0x70 [ 1100.959698][T28935] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1100.965424][T28935] RIP: 0033:0x7f1fedf80bd9 [ 1100.969691][T28935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.989211][T28935] RSP: 002b:00007f1fed202048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.997450][T28935] RAX: ffffffffffffffda RBX: 00007f1fee10ef60 RCX: 00007f1fedf80bd9 [ 1101.005262][T28935] RDX: 0000000020000100 RSI: 00000000400454d9 RDI: 0000000000000007 [ 1101.013072][T28935] RBP: 00007f1fed2020a0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.020894][T28935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.028696][T28935] R13: 000000000000000b R14: 00007f1fee10ef60 R15: 00007ffdc39e28b8 [ 1101.037186][T10091] Bluetooth: hci0: command 0x1009 tx timeout [ 1101.105667][T10090] usb 2-1: USB disconnect, device number 78 [ 1101.609597][T10090] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1101.680960][ T24] audit: type=1107 audit(2536871363.692:11758): pid=28953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1102.029602][T10090] usb 4-1: Using ep0 maxpacket: 16 [ 1102.251528][T10090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.279578][T10090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.369303][T10090] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1102.435824][T10090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.444835][T10090] usb 4-1: config 0 descriptor?? [ 1102.943170][T28946] udc-core: couldn't find an available UDC or it's busy [ 1102.950020][T28946] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1103.019856][T10090] usbhid 4-1:0.0: can't add hid device: -71 [ 1103.025717][T10090] usbhid: probe of 4-1:0.0 failed with error -71 [ 1103.033121][T10090] usb 4-1: USB disconnect, device number 51 [ 1103.329620][ T24] audit: type=1107 audit(2536871365.342:11759): pid=28991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1103.444944][T28998] FAULT_INJECTION: forcing a failure. [ 1103.444944][T28998] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.457991][T28998] CPU: 0 PID: 28998 Comm: syz.1.8037 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1103.469172][T28998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1103.479147][T28998] Call Trace: [ 1103.482279][T28998] dump_stack_lvl+0x1e2/0x24b [ 1103.486787][T28998] ? panic+0x812/0x812 [ 1103.490694][T28998] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1103.495985][T28998] dump_stack+0x15/0x17 [ 1103.500067][T28998] should_fail+0x3c6/0x510 [ 1103.504318][T28998] ? send_monitor_note+0xfc/0x490 [ 1103.509178][T28998] __should_failslab+0xa4/0xe0 [ 1103.513792][T28998] should_failslab+0x9/0x20 [ 1103.518114][T28998] __kmalloc_track_caller+0x5f/0x320 [ 1103.523235][T28998] ? kmem_cache_alloc+0x168/0x2e0 [ 1103.528181][T28998] ? __alloc_skb+0x80/0x510 [ 1103.532520][T28998] ? send_monitor_note+0xfc/0x490 [ 1103.537384][T28998] __alloc_skb+0xbc/0x510 [ 1103.541548][T28998] send_monitor_note+0xfc/0x490 [ 1103.546233][T28998] ? lock_sock_nested+0x26a/0x300 [ 1103.551101][T28998] ? create_monitor_ctrl_open+0x7b0/0x7b0 [ 1103.556673][T28998] ? security_capable+0x87/0xb0 [ 1103.561562][T28998] hci_sock_bind+0x597/0xfb0 [ 1103.565980][T28998] ? hci_sock_release+0x3d0/0x3d0 [ 1103.570839][T28998] ? check_stack_object+0xf4/0x130 [ 1103.576033][T28998] ? security_socket_bind+0x82/0xb0 [ 1103.581052][T28998] __sys_bind+0x314/0x410 [ 1103.585218][T28998] ? fput_many+0x160/0x1b0 [ 1103.589461][T28998] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1103.594617][T28998] ? debug_smp_processor_id+0x17/0x20 [ 1103.599796][T28998] __x64_sys_bind+0x7a/0x90 [ 1103.604131][T28998] do_syscall_64+0x34/0x70 [ 1103.608383][T28998] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1103.614200][T28998] RIP: 0033:0x7f7c8c3d4bd9 [ 1103.618450][T28998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.637990][T28998] RSP: 002b:00007f7c8b656048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1103.646310][T28998] RAX: ffffffffffffffda RBX: 00007f7c8c562f60 RCX: 00007f7c8c3d4bd9 [ 1103.654125][T28998] RDX: 0000000000000006 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1103.661941][T28998] RBP: 00007f7c8b6560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.669745][T28998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.677560][T28998] R13: 000000000000000b R14: 00007f7c8c562f60 R15: 00007ffdfc5d9058 [ 1103.979756][T10091] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1104.399637][T10091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.410410][T10091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.419922][T10091] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1104.428750][T10091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.437477][T10091] usb 5-1: config 0 descriptor?? [ 1104.724072][ T24] audit: type=1107 audit(2536871366.732:11760): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1104.776422][T29022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.783685][T29022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.790920][T29022] device bridge_slave_0 entered promiscuous mode [ 1104.797688][T29022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.804561][T29022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.811650][T29022] device bridge_slave_1 entered promiscuous mode [ 1104.843073][T29022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.849933][T29022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.857002][T29022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.863829][T29022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.882216][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.889320][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.896908][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1104.904288][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1104.913294][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1104.920352][T29009] syz.4.8040[29009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1104.921128][T29009] syz.4.8040[29009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1104.921604][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.950728][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.968969][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.976994][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.983862][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.991325][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.999175][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1105.013003][T29022] device veth0_vlan entered promiscuous mode [ 1105.020996][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1105.029123][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1105.037795][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1105.040342][T10091] elecom 0003:056E:00FE.0124: unknown main item tag 0x0 [ 1105.045152][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1105.051787][T28827] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1105.064878][T29022] device veth1_macvtap entered promiscuous mode [ 1105.068686][T10091] elecom 0003:056E:00FE.0124: unknown main item tag 0x0 [ 1105.073186][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1105.079446][T10091] elecom 0003:056E:00FE.0124: unknown main item tag 0x0 [ 1105.094014][T10091] elecom 0003:056E:00FE.0124: unknown main item tag 0x0 [ 1105.101056][T10091] elecom 0003:056E:00FE.0124: unknown main item tag 0x0 [ 1105.102806][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1105.111497][T10091] elecom 0003:056E:00FE.0124: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 1105.116930][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1105.349674][T28827] usb 4-1: device descriptor read/64, error -71 [ 1105.499582][T22924] Bluetooth: hci1: command 0x1003 tx timeout [ 1105.505902][ T40] Bluetooth: hci1: sending frame failed (-49) [ 1105.750313][T20959] device bridge_slave_1 left promiscuous mode [ 1105.756371][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.763798][T20959] device bridge_slave_0 left promiscuous mode [ 1105.769534][T28827] usb 4-1: device descriptor read/64, error -71 [ 1105.775905][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.783715][T20959] device veth1_macvtap left promiscuous mode [ 1105.789621][T20959] device veth0_vlan left promiscuous mode [ 1105.849364][T29040] 9pnet: Insufficient options for proto=fd [ 1106.039559][T28827] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1106.389542][T28827] usb 4-1: device descriptor read/64, error -71 [ 1106.690014][T29048] fuse: Bad value for 'user_id' [ 1106.716709][T22924] usb 5-1: USB disconnect, device number 64 [ 1106.799544][T28827] usb 4-1: device descriptor read/64, error -71 [ 1106.929623][T28827] usb usb4-port1: attempt power cycle [ 1106.979722][ T6608] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1107.219580][ T6608] usb 3-1: Using ep0 maxpacket: 16 [ 1107.339895][ T6608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.350647][ T6608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.360431][ T6608] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1107.369328][ T6608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.378158][ T6608] usb 3-1: config 0 descriptor?? [ 1107.380686][T28827] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1107.559623][T28827] usb 4-1: device descriptor read/8, error -71 [ 1107.585911][ T768] Bluetooth: hci1: command 0x1001 tx timeout [ 1107.591814][ T9797] Bluetooth: hci1: sending frame failed (-49) [ 1107.777309][T29066] syz.3.8058[29066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1107.777367][T29066] syz.3.8058[29066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1107.789560][T28827] usb 4-1: device descriptor read/8, error -71 [ 1107.842725][T29051] udc-core: couldn't find an available UDC or it's busy [ 1107.849781][T29051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1107.909648][ T6608] usbhid 3-1:0.0: can't add hid device: -71 [ 1107.915459][ T6608] usbhid: probe of 3-1:0.0 failed with error -71 [ 1107.923887][ T6608] usb 3-1: USB disconnect, device number 75 [ 1108.459537][ T54] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1108.811681][T22924] Bluetooth: hci0: command 0x1003 tx timeout [ 1108.817543][ T9797] Bluetooth: hci0: sending frame failed (-49) [ 1108.939761][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.950685][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.960380][ T54] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1108.969257][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.978249][ T54] usb 5-1: config 0 descriptor?? [ 1109.529520][ T54] itetech 0003:258A:6A88.0125: unknown main item tag 0x0 [ 1109.545839][ T54] itetech 0003:258A:6A88.0125: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 1109.659534][T22924] Bluetooth: hci1: command 0x1009 tx timeout [ 1110.601869][ T24] audit: type=1326 audit(2536871372.612:11761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.3.8069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f498224bbd9 code=0x0 [ 1110.859726][ T6608] Bluetooth: hci0: command 0x1001 tx timeout [ 1110.865613][ T9797] Bluetooth: hci0: sending frame failed (-49) [ 1111.187004][ T6608] usb 5-1: USB disconnect, device number 65 [ 1111.346725][T29120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8073'. [ 1111.355576][T29120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8073'. [ 1112.219537][T22924] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1112.479552][T22924] usb 3-1: Using ep0 maxpacket: 32 [ 1112.639639][T22924] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.650477][ T6608] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1112.657802][T22924] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.789642][T22924] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1112.798746][T22924] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1112.806958][T22924] usb 3-1: Product: syz [ 1112.810900][T22924] usb 3-1: Manufacturer: syz [ 1112.850350][T22924] hub 3-1:4.0: USB hub found [ 1112.940294][ T54] Bluetooth: hci0: command 0x1009 tx timeout [ 1113.019665][ T6608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.030409][ T6608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.039926][ T6608] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1113.048945][ T6608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.058007][ T6608] usb 4-1: config 0 descriptor?? [ 1113.062879][T22924] hub 3-1:4.0: 2 ports detected [ 1113.179521][ T20] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1113.419506][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 1113.539629][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.550345][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.560074][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1113.568929][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.577617][ T20] usb 5-1: config 0 descriptor?? [ 1113.594440][ T6608] usbhid 4-1:0.0: can't add hid device: -71 [ 1113.608101][ T6608] usbhid: probe of 4-1:0.0 failed with error -71 [ 1113.614436][T22924] hub 3-1:4.0: set hub depth failed [ 1113.620100][ T20] hub 5-1:0.0: USB hub found [ 1113.625257][ T6608] usb 4-1: USB disconnect, device number 56 [ 1113.660733][T22924] usb 3-1: USB disconnect, device number 76 [ 1113.664414][T29139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.673403][T29139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.680637][T29139] device bridge_slave_0 entered promiscuous mode [ 1113.687431][T29139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.694291][T29139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.701627][T29139] device bridge_slave_1 entered promiscuous mode [ 1113.736179][T29139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.743037][T29139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.750158][T29139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.756907][T29139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.778507][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1113.785895][T28827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.794100][T28827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.805629][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1113.813685][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.820565][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.829721][ T20] hub 5-1:0.0: 1 port detected [ 1113.830129][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.844918][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.851793][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.870662][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1113.878412][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.888121][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.901638][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.909414][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.916791][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1113.926914][T29139] device veth0_vlan entered promiscuous mode [ 1113.937913][T29139] device veth1_macvtap entered promiscuous mode [ 1113.944964][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1113.960717][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1113.972511][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1114.110921][ T24] audit: type=1326 audit(2536871376.122:11762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.142316][ T24] audit: type=1326 audit(2536871376.122:11763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.170125][ T24] audit: type=1326 audit(2536871376.142:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.194801][ T24] audit: type=1326 audit(2536871376.142:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.231533][T20959] device bridge_slave_1 left promiscuous mode [ 1114.235025][ T24] audit: type=1326 audit(2536871376.142:11766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.237868][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.261893][ T24] audit: type=1326 audit(2536871376.142:11767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.291763][ T24] audit: type=1326 audit(2536871376.142:11768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.3.8081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498224bbd9 code=0x7ffc0000 [ 1114.317175][T20959] device bridge_slave_0 left promiscuous mode [ 1114.323646][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.331918][T20959] device veth1_macvtap left promiscuous mode [ 1114.337753][T20959] device veth0_vlan left promiscuous mode [ 1114.343567][T29137] udc-core: couldn't find an available UDC or it's busy [ 1114.350663][T29137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1114.465363][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8079'. [ 1114.602725][T29157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29157 comm=syz.4.8079 [ 1114.809615][ T20] usb 5-1: USB disconnect, device number 66 [ 1114.849571][T22924] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1115.237490][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8087'. [ 1115.246304][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8087'. [ 1115.399637][T22924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.410412][T22924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.419912][T22924] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1115.428756][T22924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.429538][ T54] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1115.437270][T22924] usb 4-1: config 0 descriptor?? [ 1115.720111][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 1115.869719][ T54] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.880704][ T54] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.960671][T22924] itetech 0003:258A:6A88.0126: unknown main item tag 0x0 [ 1115.979924][T22924] itetech 0003:258A:6A88.0126: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 1116.003044][T29185] fuse: Bad value for 'user_id' [ 1116.019754][ T54] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1116.037208][ T54] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1116.045605][ T54] usb 2-1: Product: syz [ 1116.049915][ T54] usb 2-1: Manufacturer: syz [ 1116.090123][ T54] hub 2-1:4.0: USB hub found [ 1116.300186][ T54] hub 2-1:4.0: 2 ports detected [ 1116.309546][ T658] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1116.549527][ T658] usb 3-1: Using ep0 maxpacket: 32 [ 1116.600575][T29189] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1116.611656][T29189] EXT4-fs (loop4): 1 truncate cleaned up [ 1116.617125][T29189] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,nombcache,max_batch_time=0x0000000000000007,,errors=continue [ 1116.669607][ T658] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.682292][ T658] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.879688][ T54] hub 2-1:4.0: set hub depth failed [ 1116.953852][ T54] usb 2-1: USB disconnect, device number 79 [ 1117.049574][ T658] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1117.058533][ T658] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1117.066632][ T658] usb 3-1: Product: syz [ 1117.070785][ T658] usb 3-1: Manufacturer: syz [ 1117.102502][T29196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.109370][T29196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.110118][ T658] hub 3-1:4.0: USB hub found [ 1117.117216][T29196] device bridge_slave_0 entered promiscuous mode [ 1117.128996][T29196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.136001][T29196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.143459][T29196] device bridge_slave_1 entered promiscuous mode [ 1117.181453][T29196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.188316][T29196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.195438][T29196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.202230][T29196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.209874][ T20] usb 4-1: USB disconnect, device number 57 [ 1117.236810][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.246069][T22924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.254765][T22924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.268360][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.276682][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.283539][T10091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.297552][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1117.305852][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.312750][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.320843][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1117.330186][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1117.340775][ T658] hub 3-1:4.0: 2 ports detected [ 1117.360630][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1117.368751][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.376924][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.384930][T22924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1117.395002][T29196] device veth0_vlan entered promiscuous mode [ 1117.405304][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1117.421324][T29196] device veth1_macvtap entered promiscuous mode [ 1117.433076][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1117.449313][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1117.900625][T20959] device bridge_slave_1 left promiscuous mode [ 1117.906660][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.914065][T20959] device bridge_slave_0 left promiscuous mode [ 1117.920214][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.927831][T20959] device veth1_macvtap left promiscuous mode [ 1117.934020][T20959] device veth0_vlan left promiscuous mode [ 1118.159524][ T658] hub 3-1:4.0: set hub depth failed [ 1118.201072][ T658] usb 3-1: USB disconnect, device number 77 [ 1118.679552][ T24] audit: type=1326 audit(2536871380.652:11769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1118.800077][ T24] audit: type=1326 audit(2536871380.652:11770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1118.831880][ T24] audit: type=1326 audit(2536871380.652:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1118.876770][ T24] audit: type=1326 audit(2536871380.652:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1118.907663][ T24] audit: type=1326 audit(2536871380.652:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1118.949232][ T24] audit: type=1326 audit(2536871380.652:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1118.979694][ T24] audit: type=1326 audit(2536871380.662:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1119.003652][ T24] audit: type=1326 audit(2536871380.662:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1119.027657][ T24] audit: type=1326 audit(2536871380.662:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1119.090079][ T24] audit: type=1326 audit(2536871380.662:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.4.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a6862bd9 code=0x7ffc0000 [ 1119.166610][T29245] FAULT_INJECTION: forcing a failure. [ 1119.166610][T29245] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.186966][T29245] CPU: 1 PID: 29245 Comm: syz.0.8108 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1119.198582][T29245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1119.200466][T29248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29248 comm=syz.3.8110 [ 1119.208464][T29245] Call Trace: [ 1119.208482][T29245] dump_stack_lvl+0x1e2/0x24b [ 1119.208494][T29245] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1119.208511][T29245] ? irqentry_exit+0x4f/0x60 [ 1119.238610][T29245] ? sysvec_reschedule_ipi+0x83/0x160 [ 1119.240786][T29247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29247 comm=syz.3.8110 [ 1119.243889][T29245] dump_stack+0x15/0x17 [ 1119.243899][T29245] should_fail+0x3c6/0x510 [ 1119.243916][T29245] ? selinux_add_opt+0xb9/0x370 [ 1119.259858][T22924] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1119.260132][T29245] __should_failslab+0xa4/0xe0 [ 1119.281046][T29245] should_failslab+0x9/0x20 [ 1119.285388][T29245] kmem_cache_alloc_trace+0x3a/0x2e0 [ 1119.290493][T29245] ? kmemdup_nul+0x45/0xa0 [ 1119.294744][T29245] selinux_add_opt+0xb9/0x370 [ 1119.299256][T29245] selinux_sb_eat_lsm_opts+0x8b0/0xad0 [ 1119.304552][T29245] security_sb_eat_lsm_opts+0x6b/0xa0 [ 1119.309761][T29245] legacy_parse_monolithic+0x114/0x1b0 [ 1119.315053][T29245] parse_monolithic_mount_data+0x6c/0x80 [ 1119.320523][T29245] do_new_mount+0x28b/0xb30 [ 1119.324859][T29245] ? do_move_mount_old+0x160/0x160 [ 1119.329806][T29245] ? security_capable+0x87/0xb0 [ 1119.334492][T29245] ? ns_capable+0x89/0xe0 [ 1119.338660][T29245] path_mount+0x56f/0xcb0 [ 1119.342833][T29245] __se_sys_mount+0x2c4/0x3b0 [ 1119.347339][T29245] ? __x64_sys_mount+0xd0/0xd0 [ 1119.351944][T29245] ? fpu__clear_all+0x20/0x20 [ 1119.356455][T29245] __x64_sys_mount+0xbf/0xd0 [ 1119.360881][T29245] do_syscall_64+0x34/0x70 [ 1119.365136][T29245] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1119.370861][T29245] RIP: 0033:0x7f001530abd9 [ 1119.375114][T29245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.394647][T29245] RSP: 002b:00007f001456b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1119.402887][T29245] RAX: ffffffffffffffda RBX: 00007f0015499038 RCX: 00007f001530abd9 [ 1119.410782][T29245] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1119.418602][T29245] RBP: 00007f001456b0a0 R08: 0000000020000880 R09: 0000000000000000 [ 1119.426410][T29245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.434230][T29245] R13: 000000000000006e R14: 00007f0015499038 R15: 00007ffcf7a373e8 [ 1119.494274][T29255] FAULT_INJECTION: forcing a failure. [ 1119.494274][T29255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.508560][T29255] CPU: 0 PID: 29255 Comm: syz.3.8111 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1119.519741][T29255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1119.529630][T29255] Call Trace: [ 1119.532765][T29255] dump_stack_lvl+0x1e2/0x24b [ 1119.537273][T29255] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1119.542565][T29255] dump_stack+0x15/0x17 [ 1119.546550][T29255] should_fail+0x3c6/0x510 [ 1119.550805][T29255] should_fail_alloc_page+0x52/0x60 [ 1119.555834][T29255] __alloc_pages_nodemask+0x1b3/0xaf0 [ 1119.561045][T29255] ? __kasan_check_write+0x14/0x20 [ 1119.565988][T29255] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1119.571372][T29255] ? __pte_map_lock_speculative+0x3f6/0x840 [ 1119.577098][T29255] pte_alloc_one+0x1f/0xc0 [ 1119.581360][T29255] __pte_alloc+0x75/0x2c0 [ 1119.585517][T29255] ? free_pgtables+0x3c0/0x3c0 [ 1119.590117][T29255] ? handle_pte_fault+0x1472/0x3e30 [ 1119.595151][T29255] ? ttwu_do_wakeup+0x380/0x3a0 [ 1119.599839][T29255] handle_pte_fault+0x3451/0x3e30 [ 1119.604698][T29255] ? vmf_allows_speculation+0x6f0/0x6f0 [ 1119.610080][T29255] ? __handle_speculative_fault+0xb9c/0x1ec0 [ 1119.615894][T29255] ? vmf_allows_speculation+0x6f0/0x6f0 [ 1119.621280][T29255] ? __this_cpu_preempt_check+0x13/0x20 [ 1119.626656][T29255] handle_mm_fault+0x11d6/0x1a10 [ 1119.631436][T29255] ? can_reuse_spf_vma+0xe0/0xe0 [ 1119.636208][T29255] ? down_read_trylock+0x179/0x1d0 [ 1119.641152][T29255] ? kvm_sched_clock_read+0x18/0x40 [ 1119.646186][T29255] ? __kasan_check_write+0x14/0x20 [ 1119.651132][T29255] ? put_vma+0x8f/0xb0 [ 1119.655047][T29255] ? can_reuse_spf_vma+0xc5/0xe0 [ 1119.659815][T29255] exc_page_fault+0x2a6/0x5b0 [ 1119.664327][T29255] ? asm_exc_page_fault+0x8/0x30 [ 1119.669099][T29255] asm_exc_page_fault+0x1e/0x30 [ 1119.673786][T29255] RIP: 0033:0x7f49821114f6 [ 1119.678041][T29255] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1119.697655][T29255] RSP: 002b:00007f49814cc4b0 EFLAGS: 00010206 [ 1119.703555][T29255] RAX: 0000000000153001 RBX: 00007f49814cc550 RCX: 0000000000000093 [ 1119.711364][T29255] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f49814cc5f0 [ 1119.719178][T29255] RBP: 0000000000000102 R08: 00007f49790ad000 R09: 0000000000153000 [ 1119.726988][T29255] R10: 0000000000000000 R11: 00007f49814cc560 R12: 0000000000000001 [ 1119.734800][T29255] R13: 00007f49822cbfa0 R14: 0000000000000000 R15: 00007f49814cc5f0 [ 1119.743534][T29255] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1119.786486][T29256] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1119.840292][T29256] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #12: block 5: comm syz.4.8112: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=100663309, rec_len=0, size=56 fake=0 [ 1119.869757][T22924] usb 3-1: Using ep0 maxpacket: 32 [ 1119.872516][T29256] incfs: Can't find or create .index dir in ./file0 [ 1119.900163][T29256] incfs: mount failed -117 [ 1119.925101][T29270] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1119.964885][T20959] ------------[ cut here ]------------ [ 1119.970242][T20959] kernel BUG at fs/ext4/inode.c:2749! [ 1119.989456][T20959] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1119.995383][T20959] CPU: 1 PID: 20959 Comm: kworker/u4:2 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1119.999594][T22924] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.006813][T20959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1120.006832][T20959] Workqueue: writeback wb_workfn (flush-7:4) [ 1120.006852][T20959] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 1120.006869][T20959] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 11 24 22 ff eb 9b e8 1e 4f 8c ff e8 05 24 [ 1120.027284][T22924] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.027465][T20959] RSP: 0018:ffffc90000dd70a0 EFLAGS: 00010293 [ 1120.073740][T20959] RAX: ffffffff81de5b4f RBX: 0000008000000000 RCX: ffff888117f813c0 [ 1120.081530][T20959] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1120.089339][T20959] RBP: ffffc90000dd7490 R08: ffffffff81de25c3 R09: ffffed10244329a4 [ 1120.097154][T20959] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1120.104962][T20959] R13: ffffc90000dd77d0 R14: 000000c410000000 R15: ffffc90000dd7360 [ 1120.112863][T20959] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1120.121630][T20959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1120.128050][T20959] CR2: 00005601b6e10000 CR3: 000000010a906000 CR4: 00000000003506a0 [ 1120.135868][T20959] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1120.143673][T20959] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1120.149601][T22924] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1120.151487][T20959] Call Trace: [ 1120.160440][T22924] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1120.163474][T20959] ? __die_body+0x62/0xb0 [ 1120.163489][T20959] ? die+0x88/0xb0 [ 1120.172895][T22924] usb 3-1: Product: syz [ 1120.175880][T20959] ? do_trap+0x1a4/0x310 [ 1120.175898][T20959] ? ext4_writepages+0x3bdf/0x3c00 [ 1120.179667][T22924] usb 3-1: Manufacturer: syz [ 1120.183431][T20959] ? handle_invalid_op+0x95/0xc0 [ 1120.183441][T20959] ? ext4_writepages+0x3bdf/0x3c00 [ 1120.183458][T20959] ? exc_invalid_op+0x32/0x50 [ 1120.211121][T20959] ? asm_exc_invalid_op+0x12/0x20 [ 1120.215975][T20959] ? ext4_writepages+0x653/0x3c00 [ 1120.220923][T20959] ? ext4_writepages+0x3bdf/0x3c00 [ 1120.225954][T20959] ? ext4_writepages+0x3bdf/0x3c00 [ 1120.230920][T20959] ? unwind_next_frame+0x3cb/0x700 [ 1120.231558][T22924] hub 3-1:4.0: USB hub found [ 1120.235853][T20959] ? ext4_readpage+0x230/0x230 [ 1120.235863][T20959] ? stack_trace_save+0x1c0/0x1c0 [ 1120.235880][T20959] ? ext4_readpage+0x230/0x230 [ 1120.254345][T20959] do_writepages+0x12e/0x270 [ 1120.258767][T20959] ? __writepage+0x130/0x130 [ 1120.263282][T20959] ? __kasan_check_write+0x14/0x20 [ 1120.268222][T20959] ? _raw_spin_lock+0xa4/0x1b0 [ 1120.272823][T20959] ? __kasan_check_write+0x14/0x20 [ 1120.277768][T20959] ? _raw_spin_lock+0xa4/0x1b0 [ 1120.282371][T20959] __writeback_single_inode+0xd7/0xac0 [ 1120.287754][T20959] writeback_sb_inodes+0x99c/0x16b0 [ 1120.292787][T20959] ? _raw_spin_lock+0xa4/0x1b0 [ 1120.297386][T20959] ? queue_io+0x520/0x520 [ 1120.301553][T20959] ? writeback_sb_inodes+0x16b0/0x16b0 [ 1120.306845][T20959] ? queue_io+0x3d3/0x520 [ 1120.311019][T20959] wb_writeback+0x404/0xc60 [ 1120.315367][T20959] ? wb_io_lists_depopulated+0x180/0x180 [ 1120.320820][T20959] ? set_worker_desc+0x158/0x1c0 [ 1120.325684][T20959] ? update_load_avg+0x541/0x1690 [ 1120.330547][T20959] ? __kasan_check_write+0x14/0x20 [ 1120.335491][T20959] wb_workfn+0x3d9/0x1110 [ 1120.339657][T20959] ? inode_wait_for_writeback+0x280/0x280 [ 1120.345214][T20959] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1120.350244][T20959] ? finish_task_switch+0x130/0x5a0 [ 1120.355279][T20959] ? __switch_to_asm+0x34/0x60 [ 1120.359879][T20959] ? __kasan_check_read+0x11/0x20 [ 1120.364734][T20959] ? read_word_at_a_time+0x12/0x20 [ 1120.369679][T20959] ? strscpy+0x9c/0x260 [ 1120.373676][T20959] process_one_work+0x6dc/0xbd0 [ 1120.378364][T20959] worker_thread+0xaea/0x1510 [ 1120.382878][T20959] ? _raw_spin_lock+0x1b0/0x1b0 [ 1120.387566][T20959] kthread+0x34b/0x3d0 [ 1120.391468][T20959] ? worker_clr_flags+0x180/0x180 [ 1120.396423][T20959] ? kthread_blkcg+0xd0/0xd0 [ 1120.400841][T20959] ret_from_fork+0x1f/0x30 [ 1120.405091][T20959] Modules linked in: [ 1120.410870][T20959] ---[ end trace 0c6fe0d512cc3637 ]--- [ 1120.416213][T20959] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 1120.421817][T20959] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 11 24 22 ff eb 9b e8 1e 4f 8c ff e8 05 24 [ 1120.439573][T22924] hub 3-1:4.0: 2 ports detected [ 1120.441539][T20959] RSP: 0018:ffffc90000dd70a0 EFLAGS: 00010293 [ 1120.451992][T20959] RAX: ffffffff81de5b4f RBX: 0000008000000000 RCX: ffff888117f813c0 [ 1120.460393][T20959] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1120.468175][T20959] RBP: ffffc90000dd7490 R08: ffffffff81de25c3 R09: ffffed10244329a4 [ 1120.476090][T20959] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1120.483852][T20959] R13: ffffc90000dd77d0 R14: 000000c410000000 R15: ffffc90000dd7360 [ 1120.491639][T20959] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1120.500425][T20959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1120.506798][T20959] CR2: 000000110c290e6c CR3: 000000010ca55000 CR4: 00000000003506b0 [ 1120.514729][T20959] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1120.522548][T20959] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1120.531881][T20959] Kernel panic - not syncing: Fatal exception [ 1120.537992][T20959] Kernel Offset: disabled [ 1120.542118][T20959] Rebooting in 86400 seconds..