last executing test programs: 8.29189523s ago: executing program 1 (id=1268): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x5581, &(0x7f000000bbc0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8.101233308s ago: executing program 1 (id=1270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40804) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 7.160962629s ago: executing program 1 (id=1272): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020003402505a1a440000182030109025c0002010000000904710101020d0000052406000105248300000d240f0100000000000001000006241a00000a0905810300020007000904010000020d00000904010102020d0000090582020002000000090503020086add8f8"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0xfffffdce, {0x3, 0x7, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x1000, 0x5, 0x81, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x144, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7d, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 7.015002535s ago: executing program 2 (id=1273): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='tlb_flush\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 6.921352549s ago: executing program 2 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(0xffffffffffffffff, r6, 0x0, 0x7ffff004) 6.082178686s ago: executing program 3 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x2000000000000050, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) 6.055184417s ago: executing program 3 (id=1279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x12, 0x11, 0x67, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) setitimer(0x0, &(0x7f0000000040), 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 5.935332402s ago: executing program 2 (id=1280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0xfffffffffffffdd9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 5.281374321s ago: executing program 2 (id=1281): syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000140)='./file2\x00', 0x810418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x1d6, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'}) socket(0x10, 0x80002, 0x0) stat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000480)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) fcntl$setpipe(r2, 0x407, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 5.134945417s ago: executing program 3 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 5.121024197s ago: executing program 3 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff004) 4.296038893s ago: executing program 2 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 3) 3.91963221s ago: executing program 3 (id=1286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000840)=r0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x24000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @loopback, 0x0}, &(0x7f0000000400)=0xc) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000780)={0x2, 0x9}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6a55d3e, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x71, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x1, 0x800}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r7], &(0x7f0000000680)=[{0x5, 0x5, 0xa, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x48a85cb7}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 3.373342283s ago: executing program 2 (id=1292): io_uring_setup(0x343f, &(0x7f0000000140)={0x0, 0xfffdfffe, 0x0, 0x0, 0xfffffff9}) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c600000000000001090224000100000003090400000103000100092100000801220700090581"], 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) io_setup(0x7, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}, {{@in=@remote, 0x4d6, 0x33}, 0x2, @in=@empty, 0x3505, 0x0, 0x1, 0xae, 0x4, 0x40, 0x200}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x2, 0x1, 0x6a, 0x7ff, 0x8, 0x5}, {{@in=@empty, 0x4d5, 0xff}, 0x2, @in=@private=0xa010102, 0x3506, 0x2, 0x2, 0x9, 0x9, 0xfffffffc, 0xe2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.177008932s ago: executing program 1 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D1o1HcYB/DvJbk7o2A6OLnUOHQSiuJohirJVbEQTqUQHOwbIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLlXsjdQSmWJpTi5zPc87vj4fn+H/ivvwv/a0Mpdk/Ncru8/+nf9jfHeueFnGlMTh1vNpvN00khZ1PMeHH3SpKRDE7N/iSlvjk3v9+59u1vHxYbT0+9eu/cg6WhzZnlvJNkV39zRv/qUcr/bFO2w62Jh2OLV+YqV1tfKvX1jY+T2y8nq6snl5ZXThSPfd76/XLyqNvfeTFGczG1XMqX+WTkjaO+7h0LA/kLrfzaxIUnlfr6d43nBzf2Vobvnj/yet/atfuHkvlWxHTaL3tP6V8u3pe/2Jc/P359Zrl+9MCdPTcO1+49rr4Y/r3Z0Y0sbk0uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb41br48pc5Wpt4sKTSn39m59/+uj2y8nq6sml5ZUTpWPPun2PunWkWy+mlkspJpnNbL7I3JtHzhT68yceji1u5v+xM3l+cGNvpXH3/JHXU2vX7h9qdxUy3SpDW7HxoMH8+vr8+PWZ5frRA3f23Dhcu/e4+mK40zdbzmftdUtJeesfAwAAAAAAAAAAAAAAAAAAgLfc5NTxfdMfVE8nhZzdkeTXr9q37Jvl0R/Tvnnfsb9bn5WT3Ulu7uj8F0Dj6alXpXMPln7pXopfSDkLSXb9sHomeXcz5/JgbLE3mf/SnwEAAP//BjCR7Q==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x2800) sendto$inet6(r4, &(0x7f0000000300)="18e739cc0b5639770ad3b4e3922ceb9a9b7d7cecc21a820c7a7e7befa7e301d8f6eecd12d1730075cf3d37ffaa3bf3a4eb35431f6c36b9e1d4a569f8785b4f12702daf027c23d05ff93cbf19a40255fe28b8ebc00df2a892054710807ff9cfd7409d6ea6b709d5fb3d70b0bcd1851ccadb50966d016302d7323b369248061746e924741296e8956c4681beeebe2b02ab89ce194e3fb1683f9f777e86463132b4140589ca2d229b4c9ec9c47e4043440580f04d7aa907a4c57b41c2e8855b3ab5e44e4a33935c8ec5da63ca1814f521216b1b85d36c5578e0382f9bcf080dd7f92fd742694d675ac9e32cc5ed5fa3", 0xee, 0x4000000, &(0x7f0000000400)={0xa, 0x4e21, 0xe58a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='gfs2meta\x00', 0xb73c7b6cafefb64e, &(0x7f00000005c0)='\x00') 2.53588196s ago: executing program 3 (id=1294): io_uring_setup(0x343f, &(0x7f0000000140)={0x0, 0xfffdfffe, 0x0, 0x0, 0xfffffff9}) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c600000000000001090224000100000003090400000103000100092100000801220700090581"], 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x4008800) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}, {{@in=@remote, 0x4d6, 0x33}, 0x2, @in=@empty, 0x3505, 0x0, 0x1, 0xae, 0x4, 0x40, 0x200}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x2, 0x1, 0x6a, 0x7ff, 0x8, 0x5}, {{@in=@empty, 0x4d5, 0xff}, 0x2, @in=@private=0xa010102, 0x3506, 0x2, 0x2, 0x9, 0x9, 0xfffffffc, 0xe2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.837209041s ago: executing program 1 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x2800) sendto$inet6(r4, &(0x7f0000000300)="18e739cc0b5639770ad3b4e3922ceb9a9b7d7cecc21a820c7a7e7befa7e301d8f6eecd12d1730075cf3d37ffaa3bf3a4eb35431f6c36b9e1d4a569f8785b4f12702daf027c23d05ff93cbf19a40255fe28b8ebc00df2a892054710807ff9cfd7409d6ea6b709d5fb3d70b0bcd1851ccadb50966d016302d7323b369248061746e924741296e8956c4681beeebe2b02ab89ce194e3fb1683f9f777e86463132b4140589ca2d229b4c9ec9c47e4043440580f04d", 0xb3, 0x4000000, &(0x7f0000000400)={0xa, 0x4e21, 0xe58a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='gfs2meta\x00', 0xb73c7b6cafefb64e, &(0x7f00000005c0)='\x00') clock_gettime(0x2, 0x0) 1.671681388s ago: executing program 0 (id=1296): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 1.61756947s ago: executing program 0 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000feffffff000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000002b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2a}, 0x94) 191.156972ms ago: executing program 0 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="40ee00"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 97.560446ms ago: executing program 4 (id=1301): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x1) 97.391176ms ago: executing program 4 (id=1302): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 97.110396ms ago: executing program 4 (id=1303): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000201"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 96.861576ms ago: executing program 0 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0xff, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x100008, 0x4, 0xc, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) 10.35057ms ago: executing program 4 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.09326ms ago: executing program 0 (id=1306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 9.92473ms ago: executing program 4 (id=1307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x3}, {0x6, 0xa}]}) 9.73463ms ago: executing program 0 (id=1308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 309.14µs ago: executing program 1 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=1310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): ket: 16 [ 254.553900][ T2981] loop3: detected capacity change from 0 to 2048 [ 255.419786][ T2981] loop3: p1 < > p4 [ 255.439738][ T463] usb 1-1: USB disconnect, device number 17 [ 255.565042][ T2981] loop3: p4 size 8388608 extends beyond EOD, truncated [ 255.875505][ T2411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.891187][ T2411] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 255.901007][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 255.921994][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.930023][ T19] usb 3-1: Product: syz [ 255.934264][ T2411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.942700][ T19] usb 3-1: Manufacturer: syz [ 255.948654][ T2411] usb 5-1: config 0 descriptor?? [ 255.953660][ T19] usb 3-1: SerialNumber: syz [ 255.959619][ T2411] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 255.967507][ T19] usb 3-1: config 0 descriptor?? [ 255.974095][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 255.983200][ T19] usb 3-1: Detected FT-X [ 256.454822][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 256.462114][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 257.229464][ T3006] SELinux: security_context_str_to_sid () failed with errno=-22 [ 257.592037][ T19] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 257.599380][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.608500][ T19] usb 3-1: USB disconnect, device number 15 [ 257.615229][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.625008][ T19] ftdi_sio 3-1:0.0: device disconnected [ 257.798367][ T3015] binder: 3011:3015 ioctl 4008af13 200000000780 returned -22 [ 257.814559][ T3022] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 258.201150][ T3031] loop0: detected capacity change from 0 to 256 [ 258.215584][ T3031] FAT-fs (loop0): Directory bread(block 64) failed [ 258.222296][ T3031] FAT-fs (loop0): Directory bread(block 65) failed [ 258.228960][ T3031] FAT-fs (loop0): Directory bread(block 66) failed [ 258.235677][ T3031] FAT-fs (loop0): Directory bread(block 67) failed [ 258.242548][ T3031] FAT-fs (loop0): Directory bread(block 68) failed [ 258.249288][ T3031] FAT-fs (loop0): Directory bread(block 69) failed [ 258.255974][ T3031] FAT-fs (loop0): Directory bread(block 70) failed [ 258.262619][ T3031] FAT-fs (loop0): Directory bread(block 71) failed [ 258.269309][ T3031] FAT-fs (loop0): Directory bread(block 72) failed [ 258.275955][ T3031] FAT-fs (loop0): Directory bread(block 73) failed [ 258.487681][ T2411] usb 5-1: USB disconnect, device number 17 [ 258.500612][ T463] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 258.560600][ T3041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.775'. [ 258.847832][ T3046] loop4: detected capacity change from 0 to 2048 [ 258.894884][ T3046] loop4: p1 < > p4 [ 258.914371][ T3046] loop4: p4 size 8388608 extends beyond EOD, truncated [ 258.926577][ T463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.047756][ T463] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 259.160898][ T463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.179384][ T3047] binder: 3043:3047 ioctl 4008af13 200000000780 returned -22 [ 259.266736][ T463] usb 2-1: config 0 descriptor?? [ 259.342343][ T463] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 259.815036][ T3058] SELinux: security_context_str_to_sid () failed with errno=-22 [ 260.112474][ T3066] device pim6reg1 entered promiscuous mode [ 260.401387][ T3075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.786'. [ 260.922605][ T3079] loop4: detected capacity change from 0 to 2048 [ 261.025386][ T3079] loop4: p1 < > p4 [ 261.035658][ T3079] loop4: p4 size 8388608 extends beyond EOD, truncated [ 261.047965][ T3079] overlayfs: failed to get inode (-116) [ 261.096734][ T3079] overlayfs: failed to get inode (-116) [ 261.102834][ T3079] overlayfs: failed to get inode (-116) [ 261.743772][ T2411] usb 2-1: USB disconnect, device number 15 [ 262.853076][ T342] kworker/u4:4: attempt to access beyond end of device [ 262.853076][ T342] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 262.901213][ T3095] FAULT_INJECTION: forcing a failure. [ 262.901213][ T3095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.914491][ T3095] CPU: 0 PID: 3095 Comm: syz.0.792 Not tainted syzkaller #0 [ 262.921804][ T3095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.931892][ T3095] Call Trace: [ 262.935196][ T3095] [ 262.938142][ T3095] __dump_stack+0x21/0x24 [ 262.942502][ T3095] dump_stack_lvl+0xee/0x150 [ 262.947116][ T3095] ? __cfi_dump_stack_lvl+0x8/0x8 [ 262.952170][ T3095] ? avc_has_extended_perms+0x95f/0xdc0 [ 262.957756][ T3095] dump_stack+0x15/0x24 [ 262.961991][ T3095] should_fail_ex+0x3d4/0x520 [ 262.966706][ T3095] should_fail+0xb/0x10 [ 262.970878][ T3095] should_fail_usercopy+0x1a/0x20 [ 262.975906][ T3095] _copy_from_user+0x1e/0xc0 [ 262.980500][ T3095] user_termio_to_kernel_termios+0x98/0x2a0 [ 262.986398][ T3095] ? __cfi_user_termio_to_kernel_termios+0x10/0x10 [ 262.992904][ T3095] ? down_read+0xa0/0xf0 [ 262.997152][ T3095] ? yield_to+0xf0/0x530 [ 263.001394][ T3095] ? __tty_check_change+0x7a/0x2c0 [ 263.006548][ T3095] set_termios+0x1a7/0x6d0 [ 263.010959][ T3095] ? tty_mode_ioctl+0x600/0x600 [ 263.015809][ T3095] ? ioctl_has_perm+0x391/0x4c0 [ 263.020692][ T3095] tty_mode_ioctl+0x496/0x600 [ 263.025364][ T3095] ? security_file_permission+0x94/0xb0 [ 263.031026][ T3095] ? __cfi_tty_mode_ioctl+0x10/0x10 [ 263.036242][ T3095] ? vfs_write+0x9d6/0xca0 [ 263.040666][ T3095] ? slab_free_freelist_hook+0xc2/0x190 [ 263.046218][ T3095] ? __kasan_check_write+0x14/0x20 [ 263.051338][ T3095] ? __cfi_ldsem_down_read+0x10/0x10 [ 263.056619][ T3095] ? mutex_unlock+0x89/0x220 [ 263.061227][ T3095] ? __cfi_mutex_unlock+0x10/0x10 [ 263.066265][ T3095] n_tty_ioctl_helper+0x9f/0x310 [ 263.071207][ T3095] n_tty_ioctl+0x13e/0x2c0 [ 263.075634][ T3095] ? __cfi_n_tty_ioctl+0x10/0x10 [ 263.080666][ T3095] tty_ioctl+0x8ef/0xc60 [ 263.084918][ T3095] ? __cfi_tty_ioctl+0x10/0x10 [ 263.089684][ T3095] __se_sys_ioctl+0x12f/0x1b0 [ 263.094361][ T3095] __x64_sys_ioctl+0x7b/0x90 [ 263.098952][ T3095] x64_sys_call+0x58b/0x9a0 [ 263.103455][ T3095] do_syscall_64+0x4c/0xa0 [ 263.107877][ T3095] ? clear_bhb_loop+0x30/0x80 [ 263.112647][ T3095] ? clear_bhb_loop+0x30/0x80 [ 263.117341][ T3095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.123248][ T3095] RIP: 0033:0x7f96e078f749 [ 263.127682][ T3095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.147286][ T3095] RSP: 002b:00007f96e160d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.155700][ T3095] RAX: ffffffffffffffda RBX: 00007f96e09e5fa0 RCX: 00007f96e078f749 [ 263.163665][ T3095] RDX: 0000000000000000 RSI: 0000000000005408 RDI: 0000000000000003 [ 263.171650][ T3095] RBP: 00007f96e160d090 R08: 0000000000000000 R09: 0000000000000000 [ 263.179620][ T3095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.187600][ T3095] R13: 00007f96e09e6038 R14: 00007f96e09e5fa0 R15: 00007ffea40b8148 [ 263.195604][ T3095] [ 263.261452][ T463] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 263.304403][ T3108] netlink: 44 bytes leftover after parsing attributes in process `syz.1.797'. [ 263.706744][ T3111] loop4: detected capacity change from 0 to 2048 [ 263.735829][ T3111] loop4: p1 < > p4 [ 263.742175][ T3111] loop4: p4 size 8388608 extends beyond EOD, truncated [ 263.822239][ T463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.851418][ T463] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 263.942092][ T3116] loop1: detected capacity change from 0 to 512 [ 263.949113][ T3116] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 263.977051][ T3116] EXT4-fs (loop1): 1 truncate cleaned up [ 263.982928][ T3116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 263.996503][ T463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.005602][ T463] usb 4-1: config 0 descriptor?? [ 264.012800][ T463] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 265.989679][ T283] EXT4-fs (loop1): unmounting filesystem. [ 266.052586][ T2411] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 266.067406][ T3130] loop1: detected capacity change from 0 to 256 [ 266.079569][ T3130] FAT-fs (loop1): Directory bread(block 64) failed [ 266.086220][ T3130] FAT-fs (loop1): Directory bread(block 65) failed [ 266.092791][ T3130] FAT-fs (loop1): Directory bread(block 66) failed [ 266.099908][ T3130] FAT-fs (loop1): Directory bread(block 67) failed [ 266.106677][ T3130] FAT-fs (loop1): Directory bread(block 68) failed [ 266.113205][ T3130] FAT-fs (loop1): Directory bread(block 69) failed [ 266.120064][ T3130] FAT-fs (loop1): Directory bread(block 70) failed [ 266.126598][ T3130] FAT-fs (loop1): Directory bread(block 71) failed [ 266.133201][ T3130] FAT-fs (loop1): Directory bread(block 72) failed [ 266.139893][ T3130] FAT-fs (loop1): Directory bread(block 73) failed [ 266.247063][ T2411] usb 1-1: Using ep0 maxpacket: 16 [ 266.254935][ T2411] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 266.269812][ T2411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.311694][ T381] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 266.320001][ T2411] usb 1-1: Product: syz [ 266.324379][ T2411] usb 1-1: Manufacturer: syz [ 266.329069][ T2411] usb 1-1: SerialNumber: syz [ 266.334662][ T2411] usb 1-1: config 0 descriptor?? [ 266.340827][ T2411] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 266.348640][ T2411] usb 1-1: Detected FT-X [ 266.739693][ T3113] syz.0.799[3113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.739812][ T3113] syz.0.799[3113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.753991][ T3113] x_tables: duplicate underflow at hook 4 [ 266.785462][ T2411] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 266.794735][ T2411] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 266.806107][ T2411] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 266.813432][ T2411] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 266.822440][ T2411] usb 1-1: USB disconnect, device number 18 [ 266.829094][ T2411] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 266.838734][ T2411] ftdi_sio 1-1:0.0: device disconnected [ 266.845629][ T381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.856045][ T381] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 266.865254][ T381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.873993][ T381] usb 3-1: config 0 descriptor?? [ 266.886010][ T381] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 267.127093][ T2411] usb 4-1: USB disconnect, device number 14 [ 267.254541][ T3142] device pim6reg1 entered promiscuous mode [ 267.283509][ T3146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.808'. [ 267.637695][ T3155] FAULT_INJECTION: forcing a failure. [ 267.637695][ T3155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.652366][ T3156] FAULT_INJECTION: forcing a failure. [ 267.652366][ T3156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.665552][ T3155] CPU: 1 PID: 3155 Comm: syz.0.810 Not tainted syzkaller #0 [ 267.672869][ T3155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.682948][ T3155] Call Trace: [ 267.686242][ T3155] [ 267.689197][ T3155] __dump_stack+0x21/0x24 [ 267.693555][ T3155] dump_stack_lvl+0xee/0x150 [ 267.698178][ T3155] ? __cfi_dump_stack_lvl+0x8/0x8 [ 267.703227][ T3155] dump_stack+0x15/0x24 [ 267.707414][ T3155] should_fail_ex+0x3d4/0x520 [ 267.712118][ T3155] should_fail+0xb/0x10 [ 267.716302][ T3155] should_fail_usercopy+0x1a/0x20 [ 267.721357][ T3155] _copy_from_iter+0x190/0xfd0 [ 267.726155][ T3155] ? __cfi__copy_from_iter+0x10/0x10 [ 267.731461][ T3155] copy_page_from_iter+0x1d2/0x2b0 [ 267.736588][ T3155] ? skb_page_frag_refill+0x221/0x3a0 [ 267.741977][ T3155] tun_get_user+0x807/0x3320 [ 267.746662][ T3155] ? tun_do_read+0x1c20/0x1c20 [ 267.751462][ T3155] ? __kasan_check_write+0x14/0x20 [ 267.756598][ T3155] ? ref_tracker_alloc+0x30f/0x430 [ 267.761725][ T3155] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 267.767471][ T3155] ? avc_policy_seqno+0x1b/0x70 [ 267.772360][ T3155] ? selinux_file_permission+0x2a5/0x510 [ 267.778017][ T3155] tun_chr_write_iter+0x1fb/0x300 [ 267.783182][ T3155] vfs_write+0x5db/0xca0 [ 267.787456][ T3155] ? slab_free_freelist_hook+0xc2/0x190 [ 267.793028][ T3155] ? __cfi_vfs_write+0x10/0x10 [ 267.797826][ T3155] ? __fget_files+0x2d5/0x330 [ 267.802527][ T3155] ? __fdget_pos+0x1f2/0x380 [ 267.807142][ T3155] ? ksys_write+0x71/0x240 [ 267.811590][ T3155] ksys_write+0x140/0x240 [ 267.815942][ T3155] ? __cfi_ksys_write+0x10/0x10 [ 267.820809][ T3155] ? debug_smp_processor_id+0x17/0x20 [ 267.826203][ T3155] __x64_sys_write+0x7b/0x90 [ 267.830815][ T3155] x64_sys_call+0x27b/0x9a0 [ 267.835337][ T3155] do_syscall_64+0x4c/0xa0 [ 267.839782][ T3155] ? clear_bhb_loop+0x30/0x80 [ 267.844763][ T3155] ? clear_bhb_loop+0x30/0x80 [ 267.849464][ T3155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.855462][ T3155] RIP: 0033:0x7f96e078e1ff [ 267.859882][ T3155] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 267.879497][ T3155] RSP: 002b:00007f96e160d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.887947][ T3155] RAX: ffffffffffffffda RBX: 00007f96e09e5fa0 RCX: 00007f96e078e1ff [ 267.895923][ T3155] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 267.903895][ T3155] RBP: 00007f96e160d090 R08: 0000000000000000 R09: 0000000000000000 [ 267.911864][ T3155] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 267.919835][ T3155] R13: 00007f96e09e6038 R14: 00007f96e09e5fa0 R15: 00007ffea40b8148 [ 267.927812][ T3155] [ 267.931388][ T882] kworker/u4:7: attempt to access beyond end of device [ 267.931388][ T882] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 267.944974][ T3156] CPU: 0 PID: 3156 Comm: syz.3.811 Not tainted syzkaller #0 [ 267.952285][ T3156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.962375][ T3156] Call Trace: [ 267.965662][ T3156] [ 267.968593][ T3156] __dump_stack+0x21/0x24 [ 267.972936][ T3156] dump_stack_lvl+0xee/0x150 [ 267.977528][ T3156] ? __cfi_dump_stack_lvl+0x8/0x8 [ 267.982559][ T3156] dump_stack+0x15/0x24 [ 267.986716][ T3156] should_fail_ex+0x3d4/0x520 [ 267.991497][ T3156] should_fail+0xb/0x10 [ 267.995666][ T3156] should_fail_usercopy+0x1a/0x20 [ 268.000711][ T3156] _copy_from_iter+0x190/0xfd0 [ 268.005495][ T3156] ? __cfi__copy_from_iter+0x10/0x10 [ 268.010795][ T3156] copy_page_from_iter+0x1d2/0x2b0 [ 268.015913][ T3156] ? skb_page_frag_refill+0x221/0x3a0 [ 268.021301][ T3156] tun_get_user+0x807/0x3320 [ 268.025904][ T3156] ? tun_do_read+0x1c20/0x1c20 [ 268.030678][ T3156] ? __kasan_check_write+0x14/0x20 [ 268.035806][ T3156] ? ref_tracker_alloc+0x30f/0x430 [ 268.040922][ T3156] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 268.046387][ T3156] ? avc_policy_seqno+0x1b/0x70 [ 268.051262][ T3156] ? selinux_file_permission+0x2a5/0x510 [ 268.056919][ T3156] tun_chr_write_iter+0x1fb/0x300 [ 268.062080][ T3156] vfs_write+0x5db/0xca0 [ 268.066370][ T3156] ? slab_free_freelist_hook+0xc2/0x190 [ 268.071939][ T3156] ? __cfi_vfs_write+0x10/0x10 [ 268.076746][ T3156] ? __fget_files+0x2d5/0x330 [ 268.081436][ T3156] ? __fdget_pos+0x1f2/0x380 [ 268.086037][ T3156] ? ksys_write+0x71/0x240 [ 268.090465][ T3156] ksys_write+0x140/0x240 [ 268.094803][ T3156] ? __cfi_ksys_write+0x10/0x10 [ 268.099660][ T3156] ? debug_smp_processor_id+0x17/0x20 [ 268.105070][ T3156] __x64_sys_write+0x7b/0x90 [ 268.109661][ T3156] x64_sys_call+0x27b/0x9a0 [ 268.114187][ T3156] do_syscall_64+0x4c/0xa0 [ 268.118614][ T3156] ? clear_bhb_loop+0x30/0x80 [ 268.123305][ T3156] ? clear_bhb_loop+0x30/0x80 [ 268.127997][ T3156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.133900][ T3156] RIP: 0033:0x7f803ff8e1ff [ 268.138314][ T3156] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 268.157917][ T3156] RSP: 002b:00007f8040e8d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 268.166335][ T3156] RAX: ffffffffffffffda RBX: 00007f80401e5fa0 RCX: 00007f803ff8e1ff [ 268.174395][ T3156] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 268.182366][ T3156] RBP: 00007f8040e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 268.190342][ T3156] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 268.198326][ T3156] R13: 00007f80401e6038 R14: 00007f80401e5fa0 R15: 00007fff6c19a9c8 [ 268.206309][ T3156] [ 268.212691][ T3150] binder: 3148:3150 ioctl 4008af13 200000000780 returned -22 [ 268.366433][ T28] audit: type=1400 audit(1764031001.834:227): avc: denied { sys_module } for pid=3172 comm="syz.3.817" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 268.375650][ T3173] Invalid ELF header magic: != ELF [ 268.387766][ T28] audit: type=1400 audit(1764031001.834:228): avc: denied { module_load } for pid=3172 comm="syz.3.817" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 268.553976][ T3176] loop0: detected capacity change from 0 to 2048 [ 268.593532][ T3176] loop0: p1 < > p4 [ 268.600796][ T3176] loop0: p4 size 8388608 extends beyond EOD, truncated [ 268.611879][ T3176] overlayfs: failed to get inode (-116) [ 268.652028][ T3176] overlayfs: failed to get inode (-116) [ 268.658057][ T3176] overlayfs: failed to get inode (-116) [ 269.428105][ T1391] usb 3-1: USB disconnect, device number 16 [ 269.526423][ T28] audit: type=1400 audit(1764031002.905:229): avc: denied { setopt } for pid=3186 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.547965][ T28] audit: type=1400 audit(1764031002.924:230): avc: denied { ioctl } for pid=3186 comm="syz.4.819" path="socket:[26312]" dev="sockfs" ino=26312 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.837689][ T3188] syz.4.819 uses obsolete (PF_INET,SOCK_PACKET) [ 269.846896][ T3188] loop4: detected capacity change from 0 to 128 [ 269.941004][ T28] audit: type=1400 audit(1764031003.200:231): avc: denied { read write } for pid=3186 comm="syz.4.819" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.974061][ T28] audit: type=1400 audit(1764031003.200:232): avc: denied { open } for pid=3186 comm="syz.4.819" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 270.038705][ T28] audit: type=1400 audit(1764031003.200:233): avc: denied { ioctl } for pid=3186 comm="syz.4.819" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 270.097948][ T28] audit: type=1400 audit(1764031003.210:234): avc: denied { bind } for pid=3186 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.209655][ T28] audit: type=1400 audit(1764031003.210:235): avc: denied { write } for pid=3186 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.229502][ T28] audit: type=1400 audit(1764031003.219:236): avc: denied { read } for pid=3181 comm="syz.2.821" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.344881][ T3210] loop0: detected capacity change from 0 to 256 [ 271.366183][ T3210] FAT-fs (loop0): Directory bread(block 64) failed [ 271.382527][ T3210] FAT-fs (loop0): Directory bread(block 65) failed [ 271.389399][ T3210] FAT-fs (loop0): Directory bread(block 66) failed [ 271.404220][ T3210] FAT-fs (loop0): Directory bread(block 67) failed [ 271.410845][ T3210] FAT-fs (loop0): Directory bread(block 68) failed [ 271.417612][ T3210] FAT-fs (loop0): Directory bread(block 69) failed [ 271.424160][ T3210] FAT-fs (loop0): Directory bread(block 70) failed [ 271.471037][ T3214] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 271.481287][ T3214] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 271.501691][ T3210] FAT-fs (loop0): Directory bread(block 71) failed [ 271.508309][ T3210] FAT-fs (loop0): Directory bread(block 72) failed [ 271.523424][ T3210] FAT-fs (loop0): Directory bread(block 73) failed [ 271.664209][ T381] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 271.736956][ T3220] loop2: detected capacity change from 0 to 1024 [ 271.744101][ T3220] EXT4-fs: Ignoring removed orlov option [ 271.749882][ T3220] ext4: Bad value for 'min_batch_time' [ 271.891756][ T381] usb 5-1: Using ep0 maxpacket: 16 [ 271.900564][ T381] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 271.930519][ T381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.945851][ T381] usb 5-1: Product: syz [ 271.950040][ T381] usb 5-1: Manufacturer: syz [ 271.954645][ T381] usb 5-1: SerialNumber: syz [ 271.981381][ T381] usb 5-1: config 0 descriptor?? [ 271.992933][ T381] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 272.021963][ T381] usb 5-1: Detected FT-X [ 272.207233][ T3208] syz.4.828[3208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.207325][ T3208] syz.4.828[3208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.243936][ T3208] x_tables: duplicate underflow at hook 4 [ 272.305941][ T381] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 272.325086][ T381] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 272.335906][ T381] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 272.357607][ T381] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 272.390814][ T381] usb 5-1: USB disconnect, device number 18 [ 272.397373][ T381] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 272.428380][ T381] ftdi_sio 5-1:0.0: device disconnected [ 275.670576][ T3259] loop4: detected capacity change from 0 to 2048 [ 275.750503][ T3259] loop4: p1 < > p4 [ 275.756846][ T3259] loop4: p4 size 8388608 extends beyond EOD, truncated [ 275.780475][ T3261] overlayfs: failed to get inode (-116) [ 275.786602][ T3261] overlayfs: failed to get inode (-116) [ 275.801728][ T3259] overlayfs: failed to get inode (-116) [ 276.523337][ T381] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 276.563307][ T337] kworker/u4:3: attempt to access beyond end of device [ 276.563307][ T337] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 277.503226][ T381] usb 2-1: config 1 has an invalid interface number: 113 but max is 1 [ 277.511612][ T381] usb 2-1: config 1 has no interface number 0 [ 277.517885][ T381] usb 2-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.529342][ T381] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 277.540698][ T381] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 277.552148][ T381] usb 2-1: config 1 interface 113 has no altsetting 0 [ 277.561062][ T381] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.570585][ T381] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 277.578787][ T381] usb 2-1: Product: syz [ 277.583247][ T381] usb 2-1: Manufacturer: syz [ 277.587893][ T381] usb 2-1: SerialNumber: syz [ 277.656682][ T2411] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 277.811433][ T381] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 277.818819][ T381] cdc_ncm 2-1:1.1: bind() failure [ 278.346651][ T2411] usb 5-1: Using ep0 maxpacket: 16 [ 278.354483][ T2411] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 278.363654][ T2411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.371741][ T2411] usb 5-1: Product: syz [ 278.375983][ T2411] usb 5-1: Manufacturer: syz [ 278.380589][ T2411] usb 5-1: SerialNumber: syz [ 278.385964][ T2411] usb 5-1: config 0 descriptor?? [ 278.391870][ T2411] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 278.399661][ T2411] usb 5-1: Detected FT-X [ 278.618215][ T3269] syz.4.843[3269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.618332][ T3269] syz.4.843[3269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.633133][ T3269] x_tables: duplicate underflow at hook 4 [ 278.657541][ T2411] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 278.670560][ T2411] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 278.672243][ T3298] loop0: detected capacity change from 0 to 512 [ 278.677815][ T2411] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 278.684538][ T3298] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.691779][ T2411] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.698561][ T3298] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.706603][ T2411] usb 5-1: USB disconnect, device number 19 [ 278.717943][ T2411] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.727635][ T2411] ftdi_sio 5-1:0.0: device disconnected [ 278.735253][ T3298] EXT4-fs (loop0): Test dummy encryption mode enabled [ 278.742419][ T3298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 278.754201][ T3298] EXT4-fs (loop0): 1 truncate cleaned up [ 278.759918][ T3298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 278.790772][ T3298] fscrypt: AES-256-XTS using blk-crypto-fallback [ 278.803161][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 278.803175][ T28] audit: type=1400 audit(1764031011.471:239): avc: denied { append } for pid=3297 comm="syz.0.855" path="/164/bus/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.847265][ T1391] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 279.042284][ T1391] usb 4-1: Using ep0 maxpacket: 16 [ 279.052384][ T1391] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 279.061947][ T1391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.070515][ T1391] usb 4-1: Product: syz [ 279.075120][ T1391] usb 4-1: Manufacturer: syz [ 279.079829][ T1391] usb 4-1: SerialNumber: syz [ 279.087141][ T1391] usb 4-1: config 0 descriptor?? [ 279.113054][ T1391] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 279.120838][ T1391] usb 4-1: Detected FT-X [ 279.139797][ T463] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 279.241779][ T381] usb 2-1: USB disconnect, device number 16 [ 279.332029][ T3287] syz.3.850[3287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.332108][ T3287] syz.3.850[3287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.351484][ T3287] x_tables: duplicate underflow at hook 4 [ 279.356479][ T463] usb 1-1: Using ep0 maxpacket: 32 [ 279.376450][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 279.387398][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 279.406212][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.419130][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.429093][ T1391] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 279.436065][ T463] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 279.447416][ T1391] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 279.455475][ T463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.465356][ T1391] usb 4-1: USB disconnect, device number 15 [ 279.474016][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 279.485118][ T463] usb 1-1: config 0 descriptor?? [ 279.490619][ T1391] ftdi_sio 4-1:0.0: device disconnected [ 279.937030][ T463] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 279.992864][ T3325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.862'. [ 280.390284][ T2411] usb 1-1: USB disconnect, device number 19 [ 280.699936][ T463] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 280.873325][ T381] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 280.917711][ T463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.927555][ T463] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 280.936791][ T463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.946481][ T463] usb 2-1: config 0 descriptor?? [ 280.952241][ T463] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 281.069396][ T381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.079317][ T381] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 281.088367][ T381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.096991][ T381] usb 4-1: config 0 descriptor?? [ 281.102763][ T381] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 281.122449][ T19] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 281.280286][ T282] EXT4-fs (loop0): unmounting filesystem. [ 281.375369][ T3352] SELinux: security_context_str_to_sid () failed with errno=-22 [ 281.542754][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.552624][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 281.561752][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.570434][ T19] usb 3-1: config 0 descriptor?? [ 281.643431][ T3362] SELinux: security_context_str_to_sid () failed with errno=-22 [ 281.838400][ T19] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 282.048337][ T3365] SELinux: security_context_str_to_sid () failed with errno=-22 [ 283.336546][ T28] audit: type=1400 audit(1764031015.661:240): avc: denied { accept } for pid=3380 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.875755][ T463] usb 4-1: USB disconnect, device number 16 [ 283.888083][ T19] usb 2-1: USB disconnect, device number 17 [ 285.151772][ T1391] usb 3-1: USB disconnect, device number 17 [ 285.199725][ T3407] loop0: detected capacity change from 0 to 256 [ 285.220876][ T3407] FAT-fs (loop0): Directory bread(block 64) failed [ 285.227519][ T3407] FAT-fs (loop0): Directory bread(block 65) failed [ 285.236547][ T3407] FAT-fs (loop0): Directory bread(block 66) failed [ 285.243238][ T3407] FAT-fs (loop0): Directory bread(block 67) failed [ 285.249846][ T3407] FAT-fs (loop0): Directory bread(block 68) failed [ 285.256810][ T3407] FAT-fs (loop0): Directory bread(block 69) failed [ 285.263519][ T3407] FAT-fs (loop0): Directory bread(block 70) failed [ 285.270133][ T3407] FAT-fs (loop0): Directory bread(block 71) failed [ 285.276844][ T3407] FAT-fs (loop0): Directory bread(block 72) failed [ 285.283467][ T3407] FAT-fs (loop0): Directory bread(block 73) failed [ 285.759524][ T19] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 285.966484][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.979884][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 285.995033][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.010526][ T19] usb 4-1: config 0 descriptor?? [ 286.021916][ T19] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 287.114171][ T1391] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 287.449645][ T1391] usb 5-1: Using ep0 maxpacket: 16 [ 287.457531][ T1391] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 287.467096][ T1391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.471317][ T19] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 287.475408][ T1391] usb 5-1: Product: syz [ 287.486966][ T1391] usb 5-1: Manufacturer: syz [ 287.491617][ T1391] usb 5-1: SerialNumber: syz [ 287.497191][ T1391] usb 5-1: config 0 descriptor?? [ 287.503335][ T1391] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 287.511342][ T1391] usb 5-1: Detected FT-X [ 287.635066][ T8] kworker/u4:0: attempt to access beyond end of device [ 287.635066][ T8] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 287.689183][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.699873][ T19] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 287.708960][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.717859][ T19] usb 2-1: config 0 descriptor?? [ 287.723810][ T19] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 287.724814][ T3420] syz.4.891[3420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.731533][ T3420] syz.4.891[3420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.745878][ T3420] x_tables: duplicate underflow at hook 4 [ 287.763616][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 287.770789][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 287.777960][ T1391] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 287.784984][ T1391] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 287.793970][ T1391] usb 5-1: USB disconnect, device number 20 [ 287.800569][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 287.810133][ T1391] ftdi_sio 5-1:0.0: device disconnected [ 288.114780][ T3439] SELinux: security_context_str_to_sid () failed with errno=-22 [ 288.634711][ T19] usb 4-1: USB disconnect, device number 17 [ 289.472762][ T1391] usb 2-1: USB disconnect, device number 18 [ 290.211766][ T463] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 290.418277][ T1391] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.451876][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.461789][ T463] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 290.470935][ T463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.479893][ T463] usb 3-1: config 0 descriptor?? [ 290.486136][ T463] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 290.634890][ T1391] usb 1-1: Using ep0 maxpacket: 16 [ 290.642691][ T1391] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 290.652204][ T1391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.678441][ T19] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 290.695611][ T1391] usb 1-1: Product: syz [ 290.700166][ T1391] usb 1-1: Manufacturer: syz [ 290.712795][ T1391] usb 1-1: SerialNumber: syz [ 290.778390][ T1391] usb 1-1: config 0 descriptor?? [ 290.784405][ T1391] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 290.792251][ T1391] usb 1-1: Detected FT-X [ 291.410607][ T3482] SELinux: security_context_str_to_sid () failed with errno=-22 [ 291.411008][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.430767][ T3473] syz.0.908[3473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.430854][ T3473] syz.0.908[3473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.445123][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 291.445521][ T3473] x_tables: duplicate underflow at hook 4 [ 291.456515][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.913093][ T19] usb 4-1: config 0 descriptor?? [ 291.921971][ T19] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 291.930482][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 291.937627][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 291.944974][ T1391] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 291.989682][ T1391] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 292.077968][ T1391] usb 1-1: USB disconnect, device number 20 [ 292.098402][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 292.119424][ T1391] ftdi_sio 1-1:0.0: device disconnected [ 292.235392][ T3495] loop4: detected capacity change from 0 to 2048 [ 292.563280][ T3495] loop4: p1 < > p4 [ 292.572010][ T3495] loop4: p4 size 8388608 extends beyond EOD, truncated [ 292.584043][ T3495] overlayfs: failed to get inode (-116) [ 292.823430][ T19] usb 3-1: USB disconnect, device number 18 [ 293.663996][ T1391] usb 4-1: USB disconnect, device number 18 [ 294.860258][ T647] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 294.871851][ T3511] overlayfs: failed to get inode (-116) [ 294.877497][ T3511] overlayfs: failed to get inode (-116) [ 295.056474][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.070742][ T647] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 295.080141][ T647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.094693][ T647] usb 5-1: config 0 descriptor?? [ 295.162837][ T3522] FAULT_INJECTION: forcing a failure. [ 295.162837][ T3522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.176013][ T3522] CPU: 0 PID: 3522 Comm: syz.0.921 Not tainted syzkaller #0 [ 295.183320][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.193374][ T3522] Call Trace: [ 295.196682][ T3522] [ 295.199634][ T3522] __dump_stack+0x21/0x24 [ 295.203985][ T3522] dump_stack_lvl+0xee/0x150 [ 295.208608][ T3522] ? __cfi_dump_stack_lvl+0x8/0x8 [ 295.213649][ T3522] ? memcpy+0x56/0x70 [ 295.217659][ T3522] dump_stack+0x15/0x24 [ 295.221830][ T3522] should_fail_ex+0x3d4/0x520 [ 295.226543][ T3522] should_fail+0xb/0x10 [ 295.230712][ T3522] should_fail_usercopy+0x1a/0x20 [ 295.235752][ T3522] strncpy_from_user+0x24/0x2d0 [ 295.240604][ T3522] bpf_prog_load+0x1bb/0x15a0 [ 295.245294][ T3522] ? map_freeze+0x390/0x390 [ 295.249801][ T3522] ? selinux_bpf+0xc7/0xf0 [ 295.254394][ T3522] ? security_bpf+0x93/0xb0 [ 295.258911][ T3522] __sys_bpf+0x504/0x780 [ 295.263161][ T3522] ? bpf_link_show_fdinfo+0x320/0x320 [ 295.268542][ T3522] ? __cfi_ksys_write+0x10/0x10 [ 295.273397][ T3522] ? debug_smp_processor_id+0x17/0x20 [ 295.278771][ T3522] __x64_sys_bpf+0x7c/0x90 [ 295.283199][ T3522] x64_sys_call+0x488/0x9a0 [ 295.287712][ T3522] do_syscall_64+0x4c/0xa0 [ 295.292127][ T3522] ? clear_bhb_loop+0x30/0x80 [ 295.296810][ T3522] ? clear_bhb_loop+0x30/0x80 [ 295.301501][ T3522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.307410][ T3522] RIP: 0033:0x7f96e078f749 [ 295.311833][ T3522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.331441][ T3522] RSP: 002b:00007f96e15cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.339860][ T3522] RAX: ffffffffffffffda RBX: 00007f96e09e6180 RCX: 00007f96e078f749 [ 295.347835][ T3522] RDX: 0000000000000024 RSI: 0000200000000440 RDI: 0000000000000005 [ 295.355811][ T3522] RBP: 00007f96e15cb090 R08: 0000000000000000 R09: 0000000000000000 [ 295.363897][ T3522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.371886][ T3522] R13: 00007f96e09e6218 R14: 00007f96e09e6180 R15: 00007ffea40b8148 [ 295.379863][ T3522] [ 295.776885][ T647] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 295.847064][ T3525] SELinux: security_context_str_to_sid () failed with errno=-22 [ 297.069161][ T3539] overlayfs: failed to get inode (-116) [ 297.075254][ T3539] overlayfs: failed to get inode (-116) [ 297.774576][ T647] usb 5-1: USB disconnect, device number 21 [ 298.111701][ T3548] loop4: detected capacity change from 0 to 2048 [ 298.145128][ T3548] loop4: p1 < > p4 [ 298.151607][ T3548] loop4: p4 size 8388608 extends beyond EOD, truncated [ 298.159471][ T3548] overlayfs: failed to get inode (-116) [ 298.273107][ T1391] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 299.573136][ T1391] usb 1-1: Using ep0 maxpacket: 16 [ 299.580934][ T1391] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 299.605638][ T1391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.613661][ T1391] usb 1-1: Product: syz [ 299.627282][ T1391] usb 1-1: Manufacturer: syz [ 299.631916][ T1391] usb 1-1: SerialNumber: syz [ 299.637292][ T1391] usb 1-1: config 0 descriptor?? [ 299.713171][ T1391] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 299.721205][ T1391] usb 1-1: Detected FT-X [ 299.754533][ T3565] FAULT_INJECTION: forcing a failure. [ 299.754533][ T3565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.767831][ T3565] CPU: 1 PID: 3565 Comm: syz.3.936 Not tainted syzkaller #0 [ 299.775144][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.785215][ T3565] Call Trace: [ 299.788507][ T3565] [ 299.791432][ T3565] __dump_stack+0x21/0x24 [ 299.795760][ T3565] dump_stack_lvl+0xee/0x150 [ 299.800443][ T3565] ? __cfi_dump_stack_lvl+0x8/0x8 [ 299.805479][ T3565] dump_stack+0x15/0x24 [ 299.809659][ T3565] should_fail_ex+0x3d4/0x520 [ 299.814355][ T3565] should_fail+0xb/0x10 [ 299.818515][ T3565] should_fail_usercopy+0x1a/0x20 [ 299.823540][ T3565] _copy_from_user+0x1e/0xc0 [ 299.828131][ T3565] iovec_from_user+0x1aa/0x2e0 [ 299.832896][ T3565] ? _parse_integer+0x2a/0x40 [ 299.837577][ T3565] __import_iovec+0x71/0x470 [ 299.842191][ T3565] import_iovec+0x7c/0xb0 [ 299.846543][ T3565] ___sys_sendmsg+0x1e4/0x290 [ 299.851252][ T3565] ? __sys_sendmsg+0x270/0x270 [ 299.856040][ T3565] ? __kasan_check_write+0x14/0x20 [ 299.861175][ T3565] ? proc_fail_nth_write+0x17a/0x1f0 [ 299.866484][ T3565] ? vfs_write+0x9d6/0xca0 [ 299.870933][ T3565] ? __fdget+0x19c/0x220 [ 299.875191][ T3565] __x64_sys_sendmsg+0x1f0/0x2c0 [ 299.880159][ T3565] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 299.885669][ T3565] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 299.891781][ T3565] x64_sys_call+0x171/0x9a0 [ 299.896291][ T3565] do_syscall_64+0x4c/0xa0 [ 299.900709][ T3565] ? clear_bhb_loop+0x30/0x80 [ 299.905405][ T3565] ? clear_bhb_loop+0x30/0x80 [ 299.910105][ T3565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.916013][ T3565] RIP: 0033:0x7f803ff8f749 [ 299.920430][ T3565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.940037][ T3565] RSP: 002b:00007f8040e8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.948466][ T3565] RAX: ffffffffffffffda RBX: 00007f80401e5fa0 RCX: 00007f803ff8f749 [ 299.956437][ T3565] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 299.964412][ T3565] RBP: 00007f8040e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 299.972382][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.980367][ T3565] R13: 00007f80401e6038 R14: 00007f80401e5fa0 R15: 00007fff6c19a9c8 [ 299.988351][ T3565] [ 300.030431][ T3544] x_tables: duplicate underflow at hook 4 [ 300.056203][ T3566] binder: 3564:3566 ioctl 4008af13 200000000780 returned -22 [ 300.118710][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 300.126972][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 300.136789][ T1391] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 300.145561][ T1391] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 300.154320][ T1391] usb 1-1: USB disconnect, device number 21 [ 300.160862][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 300.170344][ T1391] ftdi_sio 1-1:0.0: device disconnected [ 300.940249][ T3577] overlayfs: failed to get inode (-116) [ 300.947079][ T3577] overlayfs: failed to get inode (-116) [ 301.009806][ T3581] overlayfs: failed to get inode (-116) [ 301.015830][ T3581] overlayfs: failed to get inode (-116) [ 301.612070][ T28] audit: type=1400 audit(1764031032.524:241): avc: denied { listen } for pid=3582 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.748200][ T3585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.942'. [ 301.768310][ T28] audit: type=1400 audit(1764031032.672:242): avc: denied { map } for pid=3584 comm="syz.3.942" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.913334][ T19] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 302.054218][ T2411] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 302.119178][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 302.127017][ T19] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 303.282725][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.290944][ T19] usb 5-1: Product: syz [ 303.295118][ T19] usb 5-1: Manufacturer: syz [ 303.300749][ T19] usb 5-1: SerialNumber: syz [ 303.307368][ T19] usb 5-1: config 0 descriptor?? [ 303.322740][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 303.330514][ T19] usb 5-1: Detected FT-X [ 303.368709][ T28] audit: type=1400 audit(1764031034.149:243): avc: denied { append } for pid=3602 comm="syz.0.948" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.398436][ T2411] usb 4-1: not running at top speed; connect to a high speed hub [ 303.409224][ T2411] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 303.417468][ T2411] usb 4-1: config 95 has no interface number 0 [ 303.428251][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 303.436784][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 303.457763][ T19] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 303.472935][ T2411] usb 4-1: config 95 interface 1 has no altsetting 0 [ 303.483451][ T19] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 303.496955][ T2411] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 303.506726][ T19] usb 5-1: USB disconnect, device number 22 [ 303.513048][ T2411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.521543][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 303.530917][ T2411] usb 4-1: Product: syz [ 303.535609][ T19] ftdi_sio 5-1:0.0: device disconnected [ 303.541609][ T2411] usb 4-1: Manufacturer: syz [ 303.547366][ T2411] usb 4-1: SerialNumber: syz [ 304.060615][ T2411] usb 4-1: USB disconnect, device number 19 [ 304.801095][ T3628] overlayfs: failed to get inode (-116) [ 304.808542][ T3628] overlayfs: failed to get inode (-116) [ 305.547790][ T1391] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 305.581352][ T28] audit: type=1400 audit(1764031036.188:244): avc: denied { write } for pid=3631 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 305.633571][ T28] audit: type=1400 audit(1764031036.225:245): avc: denied { read write } for pid=3633 comm="syz.4.960" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.748777][ T28] audit: type=1400 audit(1764031036.225:246): avc: denied { open } for pid=3633 comm="syz.4.960" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.773075][ T1391] usb 2-1: Using ep0 maxpacket: 16 [ 305.774913][ T28] audit: type=1400 audit(1764031036.225:247): avc: denied { ioctl } for pid=3633 comm="syz.4.960" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.780944][ T1391] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 305.813433][ T1391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.839348][ T1391] usb 2-1: Product: syz [ 305.843608][ T1391] usb 2-1: Manufacturer: syz [ 305.848671][ T1391] usb 2-1: SerialNumber: syz [ 305.868755][ T1391] usb 2-1: config 0 descriptor?? [ 305.879514][ T1391] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 305.897559][ T1391] usb 2-1: Detected FT-X [ 306.092861][ T3622] syz.1.955[3622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.092939][ T3622] syz.1.955[3622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.106177][ T3622] x_tables: duplicate underflow at hook 4 [ 308.163752][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 308.191166][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 308.206129][ T1391] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 308.235631][ T1391] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 308.368946][ T1391] usb 2-1: USB disconnect, device number 19 [ 308.598352][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 308.609462][ T1391] ftdi_sio 2-1:0.0: device disconnected [ 308.771510][ T287] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 309.054335][ T287] usb 4-1: config 1 has an invalid interface number: 113 but max is 1 [ 309.062613][ T287] usb 4-1: config 1 has no interface number 0 [ 309.068774][ T287] usb 4-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.080076][ T287] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 309.091170][ T287] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 309.101163][ T287] usb 4-1: config 1 interface 113 has no altsetting 0 [ 309.109509][ T287] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.118701][ T287] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 309.126909][ T287] usb 4-1: Product: syz [ 309.139792][ T2411] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 309.158480][ T287] usb 4-1: Manufacturer: syz [ 309.163217][ T287] usb 4-1: SerialNumber: syz [ 309.167811][ T3693] FAULT_INJECTION: forcing a failure. [ 309.167811][ T3693] name failslab, interval 1, probability 0, space 0, times 0 [ 309.180714][ T3693] CPU: 1 PID: 3693 Comm: syz.4.977 Not tainted syzkaller #0 [ 309.188043][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.198094][ T3693] Call Trace: [ 309.201369][ T3693] [ 309.204296][ T3693] __dump_stack+0x21/0x24 [ 309.208632][ T3693] dump_stack_lvl+0xee/0x150 [ 309.213240][ T3693] ? __cfi_dump_stack_lvl+0x8/0x8 [ 309.218381][ T3693] ? _copy_from_iter+0x205/0xfd0 [ 309.223345][ T3693] dump_stack+0x15/0x24 [ 309.227503][ T3693] should_fail_ex+0x3d4/0x520 [ 309.232194][ T3693] ? build_skb+0x2a/0x220 [ 309.236530][ T3693] __should_failslab+0xac/0xf0 [ 309.241322][ T3693] should_failslab+0x9/0x20 [ 309.245821][ T3693] kmem_cache_alloc+0x3b/0x330 [ 309.250589][ T3693] build_skb+0x2a/0x220 [ 309.254744][ T3693] ? tun_get_user+0x855/0x3320 [ 309.259507][ T3693] tun_get_user+0x86e/0x3320 [ 309.264098][ T3693] ? tun_do_read+0x1c20/0x1c20 [ 309.268874][ T3693] ? __kasan_check_write+0x14/0x20 [ 309.273979][ T3693] ? ref_tracker_alloc+0x30f/0x430 [ 309.279090][ T3693] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 309.284554][ T3693] ? avc_policy_seqno+0x1b/0x70 [ 309.289408][ T3693] ? selinux_file_permission+0x2a5/0x510 [ 309.295038][ T3693] tun_chr_write_iter+0x1fb/0x300 [ 309.300068][ T3693] vfs_write+0x5db/0xca0 [ 309.304341][ T3693] ? slab_free_freelist_hook+0xc2/0x190 [ 309.309895][ T3693] ? __cfi_vfs_write+0x10/0x10 [ 309.314674][ T3693] ? __fget_files+0x2d5/0x330 [ 309.319347][ T3693] ? __fdget_pos+0x1f2/0x380 [ 309.323943][ T3693] ? ksys_write+0x71/0x240 [ 309.328356][ T3693] ksys_write+0x140/0x240 [ 309.332681][ T3693] ? __cfi_ksys_write+0x10/0x10 [ 309.337527][ T3693] ? debug_smp_processor_id+0x17/0x20 [ 309.342983][ T3693] __x64_sys_write+0x7b/0x90 [ 309.347567][ T3693] x64_sys_call+0x27b/0x9a0 [ 309.352344][ T3693] do_syscall_64+0x4c/0xa0 [ 309.356754][ T3693] ? clear_bhb_loop+0x30/0x80 [ 309.361451][ T3693] ? clear_bhb_loop+0x30/0x80 [ 309.366139][ T3693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.372038][ T3693] RIP: 0033:0x7fe53df8e1ff [ 309.376445][ T3693] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 309.390436][ T2411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 309.396071][ T3693] RSP: 002b:00007fe53ee40000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 309.396099][ T3693] RAX: ffffffffffffffda RBX: 00007fe53e1e5fa0 RCX: 00007fe53df8e1ff [ 309.407072][ T2411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 65456, setting to 64 [ 309.415349][ T3693] RDX: 000000000000001f RSI: 0000200000000940 RDI: 00000000000000c8 [ 309.415377][ T3693] RBP: 00007fe53ee40090 R08: 0000000000000000 R09: 0000000000000000 [ 309.415389][ T3693] R10: 000000000000001f R11: 0000000000000293 R12: 0000000000000001 [ 309.415401][ T3693] R13: 00007fe53e1e6038 R14: 00007fe53e1e5fa0 R15: 00007ffeded357c8 [ 309.415423][ T3693] [ 309.425205][ T2411] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 309.444404][ T287] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 309.454208][ T2411] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 309.494437][ T2411] usb 1-1: Product: syz [ 309.498847][ T2411] usb 1-1: Manufacturer: syz [ 309.503539][ T2411] usb 1-1: SerialNumber: syz [ 309.509432][ T287] cdc_ncm 4-1:1.1: bind() failure [ 309.511489][ T2411] usb 1-1: config 0 descriptor?? [ 309.520092][ T3685] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 309.747474][ T287] usb 1-1: USB disconnect, device number 22 [ 309.854871][ T19] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 310.049957][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 310.057870][ T19] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 310.066984][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.075151][ T19] usb 5-1: Product: syz [ 310.079359][ T19] usb 5-1: Manufacturer: syz [ 310.084010][ T19] usb 5-1: SerialNumber: syz [ 310.089348][ T19] usb 5-1: config 0 descriptor?? [ 310.095208][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 310.102949][ T19] usb 5-1: Detected FT-X [ 310.314902][ T3697] syz.4.979[3697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.315006][ T3697] syz.4.979[3697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.328934][ T3697] x_tables: duplicate underflow at hook 4 [ 310.347820][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 310.355512][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 310.363233][ T19] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 310.372968][ T19] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.386120][ T19] usb 5-1: USB disconnect, device number 23 [ 310.392793][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.402874][ T19] ftdi_sio 5-1:0.0: device disconnected [ 311.122459][ T287] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 311.330435][ T287] usb 3-1: Using ep0 maxpacket: 16 [ 312.011864][ T3725] FAULT_INJECTION: forcing a failure. [ 312.011864][ T3725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.025143][ T3725] CPU: 1 PID: 3725 Comm: syz.0.986 Not tainted syzkaller #0 [ 312.032541][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.042600][ T3725] Call Trace: [ 312.045882][ T3725] [ 312.048901][ T3725] __dump_stack+0x21/0x24 [ 312.053243][ T3725] dump_stack_lvl+0xee/0x150 [ 312.057840][ T3725] ? __cfi_dump_stack_lvl+0x8/0x8 [ 312.062870][ T3725] ? memcpy+0x56/0x70 [ 312.067112][ T3725] dump_stack+0x15/0x24 [ 312.071348][ T3725] should_fail_ex+0x3d4/0x520 [ 312.076031][ T3725] should_fail+0xb/0x10 [ 312.080202][ T3725] should_fail_usercopy+0x1a/0x20 [ 312.085321][ T3725] strncpy_from_user+0x24/0x2d0 [ 312.090174][ T3725] bpf_prog_load+0x1bb/0x15a0 [ 312.094856][ T3725] ? map_freeze+0x390/0x390 [ 312.099380][ T3725] ? selinux_bpf+0xc7/0xf0 [ 312.103810][ T3725] ? security_bpf+0x93/0xb0 [ 312.108319][ T3725] __sys_bpf+0x504/0x780 [ 312.112560][ T3725] ? bpf_link_show_fdinfo+0x320/0x320 [ 312.117933][ T3725] ? __cfi_ksys_write+0x10/0x10 [ 312.122801][ T3725] ? debug_smp_processor_id+0x17/0x20 [ 312.128173][ T3725] __x64_sys_bpf+0x7c/0x90 [ 312.132602][ T3725] x64_sys_call+0x488/0x9a0 [ 312.137108][ T3725] do_syscall_64+0x4c/0xa0 [ 312.141530][ T3725] ? clear_bhb_loop+0x30/0x80 [ 312.146222][ T3725] ? clear_bhb_loop+0x30/0x80 [ 312.150906][ T3725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.156806][ T3725] RIP: 0033:0x7f96e078f749 [ 312.161265][ T3725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.180867][ T3725] RSP: 002b:00007f96e15cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.189375][ T3725] RAX: ffffffffffffffda RBX: 00007f96e09e6180 RCX: 00007f96e078f749 [ 312.197346][ T3725] RDX: 0000000000000024 RSI: 0000200000000440 RDI: 0000000000000005 [ 312.205317][ T3725] RBP: 00007f96e15cb090 R08: 0000000000000000 R09: 0000000000000000 [ 312.213295][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.221270][ T3725] R13: 00007f96e09e6218 R14: 00007f96e09e6180 R15: 00007ffea40b8148 [ 312.229302][ T3725] [ 312.497328][ T287] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 312.506645][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.514750][ T287] usb 3-1: Product: syz [ 312.519026][ T287] usb 3-1: Manufacturer: syz [ 312.523925][ T287] usb 3-1: SerialNumber: syz [ 312.529219][ T287] usb 3-1: config 0 descriptor?? [ 312.535413][ T287] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 312.988478][ T3731] overlayfs: failed to get inode (-116) [ 312.994534][ T3731] overlayfs: failed to get inode (-116) [ 313.312918][ T3713] syz.2.983[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.312990][ T3713] syz.2.983[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.329970][ T3713] x_tables: duplicate underflow at hook 4 [ 313.365580][ T287] usb 3-1: Detected FT-X [ 313.369991][ T463] usb 4-1: USB disconnect, device number 20 [ 313.376674][ T287] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 313.384536][ T287] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 313.391641][ T287] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 313.631918][ T1391] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 313.652549][ T287] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 313.840151][ T287] usb 3-1: USB disconnect, device number 19 [ 313.857557][ T287] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 313.868075][ T287] ftdi_sio 3-1:0.0: device disconnected [ 313.936949][ T1391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.947545][ T1391] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 313.957029][ T1391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.977172][ T1391] usb 5-1: config 0 descriptor?? [ 313.992916][ T1391] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 314.468077][ T3744] SELinux: security_context_str_to_sid () failed with errno=-22 [ 314.502826][ T19] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 315.403908][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.427003][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 315.457916][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.490271][ T19] usb 1-1: config 0 descriptor?? [ 315.511108][ T19] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 316.469757][ T3757] SELinux: security_context_str_to_sid () failed with errno=-22 [ 316.981851][ T287] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 317.009630][ T1391] usb 5-1: USB disconnect, device number 24 [ 317.397926][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.440417][ T287] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 317.495498][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.504677][ T287] usb 4-1: config 0 descriptor?? [ 317.510669][ T287] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 318.298582][ T287] usb 1-1: USB disconnect, device number 23 [ 319.449453][ T19] usb 4-1: USB disconnect, device number 21 [ 319.698476][ T287] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 319.911013][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.962332][ T287] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 319.989260][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.010835][ T287] usb 5-1: config 0 descriptor?? [ 320.022272][ T287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 320.480952][ T3801] SELinux: security_context_str_to_sid () failed with errno=-22 [ 321.176660][ T287] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 321.666454][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.711520][ T287] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 321.759406][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.845557][ T287] usb 4-1: config 0 descriptor?? [ 321.854842][ T287] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 322.304944][ T3824] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 322.439513][ T3828] SELinux: security_context_str_to_sid () failed with errno=-22 [ 322.656462][ T287] usb 5-1: USB disconnect, device number 25 [ 323.950265][ T287] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 324.235703][ T1391] usb 4-1: USB disconnect, device number 22 [ 324.268803][ T287] usb 2-1: config 1 has an invalid interface number: 113 but max is 1 [ 324.286272][ T287] usb 2-1: config 1 has no interface number 0 [ 324.292501][ T287] usb 2-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.364585][ T287] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 324.413081][ T287] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 324.423114][ T287] usb 2-1: config 1 interface 113 has no altsetting 0 [ 324.438897][ T287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.447968][ T287] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 324.508535][ T287] usb 2-1: Product: syz [ 324.512815][ T287] usb 2-1: Manufacturer: syz [ 324.606736][ T3858] overlayfs: failed to get inode (-116) [ 324.618459][ T3858] overlayfs: failed to get inode (-116) [ 324.776947][ T287] usb 2-1: SerialNumber: syz [ 325.863907][ T287] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 325.944504][ T287] cdc_ncm 2-1:1.1: bind() failure [ 326.689521][ T3870] netlink: 'syz.0.1026': attribute type 4 has an invalid length. [ 327.308762][ T287] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 327.516385][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.526362][ T287] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 327.535479][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.545866][ T287] usb 5-1: config 0 descriptor?? [ 327.553464][ T287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 327.590499][ T287] usb 2-1: USB disconnect, device number 20 [ 327.614716][ T3896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1035'. [ 327.805440][ T28] audit: type=1400 audit(1764031056.688:248): avc: denied { accept } for pid=3881 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.511532][ T19] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 329.530832][ T3907] netlink: 'syz.1.1038': attribute type 4 has an invalid length. [ 329.725977][ T19] usb 1-1: config 1 has an invalid interface number: 113 but max is 1 [ 329.734279][ T19] usb 1-1: config 1 has no interface number 0 [ 329.740623][ T19] usb 1-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.973862][ T1391] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 330.169103][ T1391] usb 4-1: Using ep0 maxpacket: 16 [ 330.176889][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 330.188055][ T19] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 330.198230][ T19] usb 1-1: config 1 interface 113 has no altsetting 0 [ 330.205660][ T19] usb 1-1: string descriptor 0 read error: -71 [ 330.212035][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.216027][ T1391] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 330.227794][ T19] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 330.234618][ T1391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.248167][ T1391] usb 4-1: Product: syz [ 330.248579][ T19] usb 1-1: can't set config #1, error -71 [ 330.252406][ T1391] usb 4-1: Manufacturer: syz [ 330.262415][ T19] usb 1-1: USB disconnect, device number 24 [ 330.262949][ T1391] usb 4-1: SerialNumber: syz [ 330.276926][ T1391] usb 4-1: config 0 descriptor?? [ 330.285637][ T1391] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 330.293791][ T1391] usb 4-1: Detected FT-X [ 330.512783][ T3905] syz.3.1037[3905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.513110][ T3905] syz.3.1037[3905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.530578][ T3905] x_tables: duplicate underflow at hook 4 [ 330.549747][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 330.557815][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 330.626570][ T1391] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 330.634206][ T1391] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 330.643938][ T1391] usb 4-1: USB disconnect, device number 23 [ 330.646653][ T19] usb 5-1: USB disconnect, device number 26 [ 330.651026][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 330.676138][ T1391] ftdi_sio 4-1:0.0: device disconnected [ 332.054516][ T3951] netlink: 'syz.4.1051': attribute type 4 has an invalid length. [ 332.496251][ T28] audit: type=1400 audit(1764031061.026:249): avc: denied { execute } for pid=3955 comm="syz.0.1053" path=2F6D656D66643AA3991F21FE131BEC995640098C68691F53F140CCB159671B9F9D1292F0EBF7A7AF49E66F219475E139E705202864656C6574656429 dev="tmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 332.544001][ T3960] FAULT_INJECTION: forcing a failure. [ 332.544001][ T3960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.563281][ T3960] CPU: 0 PID: 3960 Comm: syz.0.1053 Not tainted syzkaller #0 [ 332.570726][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.580810][ T3960] Call Trace: [ 332.584114][ T3960] [ 332.587065][ T3960] __dump_stack+0x21/0x24 [ 332.591434][ T3960] dump_stack_lvl+0xee/0x150 [ 332.596058][ T3960] ? __cfi_dump_stack_lvl+0x8/0x8 [ 332.601122][ T3960] dump_stack+0x15/0x24 [ 332.605324][ T3960] should_fail_ex+0x3d4/0x520 [ 332.610053][ T3960] should_fail+0xb/0x10 [ 332.614244][ T3960] should_fail_usercopy+0x1a/0x20 [ 332.619320][ T3960] _copy_to_user+0x1e/0x90 [ 332.623779][ T3960] simple_read_from_buffer+0xe9/0x160 [ 332.629273][ T3960] proc_fail_nth_read+0x19a/0x210 [ 332.634345][ T3960] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 332.639923][ T3960] ? security_file_permission+0x94/0xb0 [ 332.645502][ T3960] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 332.651157][ T3960] vfs_read+0x26e/0x8c0 [ 332.655433][ T3960] ? __cfi_vfs_read+0x10/0x10 [ 332.660135][ T3960] ? __kasan_check_write+0x14/0x20 [ 332.665336][ T3960] ? mutex_lock+0x8d/0x1a0 [ 332.669788][ T3960] ? __cfi_mutex_lock+0x10/0x10 [ 332.674673][ T3960] ? __fdget_pos+0x2cd/0x380 [ 332.679289][ T3960] ? ksys_read+0x71/0x240 [ 332.683686][ T3960] ksys_read+0x140/0x240 [ 332.687968][ T3960] ? __cfi_ksys_read+0x10/0x10 [ 332.692766][ T3960] ? fpregs_restore_userregs+0x128/0x260 [ 332.698436][ T3960] __x64_sys_read+0x7b/0x90 [ 332.703065][ T3960] x64_sys_call+0x2f/0x9a0 [ 332.707546][ T3960] do_syscall_64+0x4c/0xa0 [ 332.711994][ T3960] ? clear_bhb_loop+0x30/0x80 [ 332.716706][ T3960] ? clear_bhb_loop+0x30/0x80 [ 332.721417][ T3960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.727340][ T3960] RIP: 0033:0x7f96e078e15c [ 332.731794][ T3960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.751428][ T3960] RSP: 002b:00007f96e15ec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.759877][ T3960] RAX: ffffffffffffffda RBX: 00007f96e09e6090 RCX: 00007f96e078e15c [ 332.767878][ T3960] RDX: 000000000000000f RSI: 00007f96e15ec0a0 RDI: 0000000000000004 [ 332.775872][ T3960] RBP: 00007f96e15ec090 R08: 0000000000000000 R09: 0000000000000000 [ 332.783882][ T3960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.791877][ T3960] R13: 00007f96e09e6128 R14: 00007f96e09e6090 R15: 00007ffea40b8148 [ 332.799883][ T3960] [ 333.592758][ T3976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3976 comm=syz.4.1056 [ 334.174228][ T2411] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 335.338253][ T28] audit: type=1400 audit(1764031063.657:250): avc: denied { ioctl } for pid=3984 comm="syz.4.1063" path="socket:[29172]" dev="sockfs" ino=29172 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 335.421543][ T2411] usb 2-1: Using ep0 maxpacket: 16 [ 335.594683][ T2411] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 335.603854][ T2411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.604105][ T3998] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 335.611934][ T2411] usb 2-1: Product: syz [ 335.623875][ T2411] usb 2-1: Manufacturer: syz [ 335.628512][ T2411] usb 2-1: SerialNumber: syz [ 335.633893][ T2411] usb 2-1: config 0 descriptor?? [ 335.639699][ T2411] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 335.647474][ T2411] usb 2-1: Detected FT-X [ 335.988465][ T3973] syz.1.1059[3973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.988572][ T3973] syz.1.1059[3973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.001365][ T3973] x_tables: duplicate underflow at hook 4 [ 336.033162][ T2411] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 336.040277][ T2411] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 336.047452][ T2411] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 336.054517][ T2411] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 336.063736][ T2411] usb 2-1: USB disconnect, device number 21 [ 336.070247][ T2411] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 336.079984][ T2411] ftdi_sio 2-1:0.0: device disconnected [ 338.273598][ T28] audit: type=1400 audit(1764031065.457:251): avc: denied { bind } for pid=4030 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 338.955123][ T1391] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 338.962904][ T287] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 339.411477][ T4058] overlayfs: failed to get inode (-116) [ 339.417266][ T4058] overlayfs: failed to get inode (-116) [ 340.158241][ T1391] usb 3-1: Using ep0 maxpacket: 16 [ 340.170199][ T287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.182024][ T1391] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 340.197464][ T287] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 340.206974][ T1391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.220131][ T1391] usb 3-1: Product: syz [ 340.225694][ T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.235048][ T1391] usb 3-1: Manufacturer: syz [ 340.239665][ T1391] usb 3-1: SerialNumber: syz [ 340.245703][ T287] usb 1-1: config 0 descriptor?? [ 340.251785][ T1391] usb 3-1: config 0 descriptor?? [ 340.258486][ T287] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 340.267266][ T1391] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 340.275501][ T1391] usb 3-1: Detected FT-X [ 340.440296][ T463] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 340.498784][ T4046] syz.2.1081[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.499703][ T4046] syz.2.1081[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.550207][ T4046] x_tables: duplicate underflow at hook 4 [ 340.616739][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 340.624042][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 340.631189][ T1391] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 340.638267][ T1391] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 340.646332][ T463] usb 4-1: Using ep0 maxpacket: 16 [ 340.662496][ T463] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 340.676195][ T1391] usb 3-1: USB disconnect, device number 20 [ 340.696027][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 340.709694][ T463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.718419][ T463] usb 4-1: Product: syz [ 340.723925][ T1391] ftdi_sio 3-1:0.0: device disconnected [ 340.729703][ T463] usb 4-1: Manufacturer: syz [ 340.740879][ T463] usb 4-1: SerialNumber: syz [ 340.800577][ T463] usb 4-1: config 0 descriptor?? [ 340.836103][ T463] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 340.903814][ T463] usb 4-1: Detected FT-X [ 341.048325][ T4063] syz.3.1087[4063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.048410][ T4063] syz.3.1087[4063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.069254][ T4063] x_tables: duplicate underflow at hook 4 [ 341.099487][ T463] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 341.109855][ T463] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 341.137550][ T463] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 341.166987][ T463] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 341.196038][ T463] usb 4-1: USB disconnect, device number 24 [ 341.211184][ T463] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 341.220931][ T463] ftdi_sio 4-1:0.0: device disconnected [ 341.227685][ T4088] syz.2.1095[4088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.227917][ T4088] syz.2.1095[4088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.242217][ T4088] syz.2.1095[4088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.253739][ T4088] syz.2.1095[4088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.266009][ T4088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4088 comm=syz.2.1095 [ 342.067445][ T2411] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 342.103259][ T463] usb 1-1: USB disconnect, device number 25 [ 342.113447][ T28] audit: type=1400 audit(1764031069.906:252): avc: denied { connect } for pid=4100 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.588005][ T28] audit: type=1400 audit(1764031070.349:253): avc: denied { read } for pid=4113 comm="syz.1.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.590620][ T2411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.617100][ T2411] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 342.626288][ T2411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.634936][ T2411] usb 3-1: config 0 descriptor?? [ 342.640730][ T2411] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 342.644874][ T4117] xt_nat: multiple ranges no longer supported [ 343.031232][ T463] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 343.056388][ T4128] SELinux: security_context_str_to_sid () failed with errno=-22 [ 343.278424][ T463] usb 2-1: Using ep0 maxpacket: 16 [ 343.289174][ T463] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 343.366506][ T463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.439375][ T463] usb 2-1: Product: syz [ 343.478033][ T463] usb 2-1: Manufacturer: syz [ 343.520590][ T463] usb 2-1: SerialNumber: syz [ 343.574861][ T463] usb 2-1: config 0 descriptor?? [ 343.649857][ T463] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 343.661798][ T463] usb 2-1: Detected FT-X [ 343.868341][ T4119] syz.1.1106[4119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.868431][ T4119] syz.1.1106[4119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.880886][ T4125] syz.3.1108 (4125) used greatest stack depth: 19520 bytes left [ 343.903241][ T4119] x_tables: duplicate underflow at hook 4 [ 343.909983][ T463] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 343.920484][ T463] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 343.972778][ T463] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 343.979929][ T463] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 343.989079][ T463] usb 2-1: USB disconnect, device number 22 [ 343.993573][ T2411] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 343.995891][ T463] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 344.012014][ T463] ftdi_sio 2-1:0.0: device disconnected [ 344.352228][ T2411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 344.363243][ T2411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.372980][ T2411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 344.384114][ T2411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 344.397110][ T2411] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 344.406286][ T2411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.414328][ T2411] usb 5-1: Product: syz [ 344.418560][ T2411] usb 5-1: Manufacturer: syz [ 344.423206][ T2411] usb 5-1: SerialNumber: syz [ 344.428523][ T2411] usb 5-1: config 0 descriptor?? [ 344.434736][ T2411] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 344.445123][ T2411] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 344.456008][ T28] audit: type=1400 audit(1764031072.065:254): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1165 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.478576][ T28] audit: type=1400 audit(1764031072.065:255): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1165 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.055163][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 345.065129][ T463] usb 3-1: USB disconnect, device number 21 [ 345.079403][ T1391] usb 5-1: USB disconnect, device number 27 [ 345.092703][ T1391] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 346.660687][ T4171] overlayfs: failed to resolve './file0': -2 [ 346.691299][ T1391] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 346.929637][ T2411] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 346.941610][ T1391] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 346.950717][ T1391] usb 1-1: config 1 has no interface number 1 [ 346.957042][ T1391] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 347.014841][ T1391] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.023971][ T1391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.032117][ T1391] usb 1-1: Product: syz [ 347.036297][ T1391] usb 1-1: Manufacturer: syz [ 347.040933][ T1391] usb 1-1: SerialNumber: syz [ 347.321484][ T19] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 347.359146][ T2411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.369087][ T2411] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 347.378324][ T2411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.390941][ T2411] usb 3-1: config 0 descriptor?? [ 347.395973][ T381] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 347.404539][ T2411] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 347.526646][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.536627][ T19] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 347.545715][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.554514][ T19] usb 5-1: config 0 descriptor?? [ 347.560469][ T19] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 347.601300][ T381] usb 2-1: Using ep0 maxpacket: 16 [ 347.609268][ T381] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 347.618425][ T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.626505][ T381] usb 2-1: Product: syz [ 347.630798][ T381] usb 2-1: Manufacturer: syz [ 347.635484][ T381] usb 2-1: SerialNumber: syz [ 347.644068][ T381] usb 2-1: config 0 descriptor?? [ 347.650224][ T381] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 347.658358][ T381] usb 2-1: Detected FT-X [ 348.899666][ T4189] SELinux: security_context_str_to_sid () failed with errno=-22 [ 348.930983][ T4180] x_tables: duplicate underflow at hook 4 [ 348.966204][ T381] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 348.973358][ T381] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 348.980802][ T381] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 348.988177][ T381] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 348.997177][ T381] usb 2-1: USB disconnect, device number 23 [ 349.004090][ T381] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 349.013907][ T381] ftdi_sio 2-1:0.0: device disconnected [ 349.106493][ T1391] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 349.114538][ T1391] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 349.124478][ T1391] usb 1-1: failed to enable PITCH for EP 0x82 [ 349.131050][ T1391] usb 1-1: 2:1: cannot set freq 16568004 to ep 0x82 [ 349.140369][ T1391] usb 1-1: USB disconnect, device number 26 [ 350.332273][ T381] usb 5-1: USB disconnect, device number 28 [ 350.347059][ T1391] usb 3-1: USB disconnect, device number 22 [ 350.542045][ T4244] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 350.764930][ T19] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 350.905734][ T2411] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 350.981592][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 350.989394][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 351.117030][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.312117][ T19] usb 1-1: Product: syz [ 351.316392][ T19] usb 1-1: Manufacturer: syz [ 351.321055][ T19] usb 1-1: SerialNumber: syz [ 351.339352][ T19] usb 1-1: config 0 descriptor?? [ 351.345154][ T2411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.355298][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 351.362843][ T2411] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 351.372273][ T19] usb 1-1: Detected FT-X [ 351.376666][ T2411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.393498][ T2411] usb 4-1: config 0 descriptor?? [ 351.404687][ T2411] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 351.569161][ T4230] x_tables: duplicate underflow at hook 4 [ 351.602222][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 351.609318][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 351.623638][ T19] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 352.356753][ T4270] SELinux: security_context_str_to_sid () failed with errno=-22 [ 353.117962][ T19] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 353.133595][ T19] usb 1-1: USB disconnect, device number 27 [ 353.144932][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 353.177121][ T19] ftdi_sio 1-1:0.0: device disconnected [ 353.403706][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 355.113989][ T1391] usb 4-1: USB disconnect, device number 25 [ 355.138431][ T4295] overlayfs: failed to set xattr on upper [ 355.174152][ T4295] overlayfs: ...falling back to index=off,metacopy=off. [ 355.193109][ T4295] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 356.994580][ T19] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 357.002327][ T2411] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 357.211288][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 357.217809][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.229034][ T2411] usb 2-1: config 1 has an invalid interface number: 113 but max is 1 [ 357.254675][ T2411] usb 2-1: config 1 has no interface number 0 [ 357.260992][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.271090][ T2411] usb 2-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.285460][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 357.297957][ T2411] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 357.319610][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.328337][ T2411] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 357.342108][ T19] usb 3-1: config 0 descriptor?? [ 357.353103][ T19] hub 3-1:0.0: USB hub found [ 357.363224][ T2411] usb 2-1: config 1 interface 113 has no altsetting 0 [ 357.385985][ T2411] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.395095][ T2411] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 357.417137][ T2411] usb 2-1: Product: syz [ 357.421374][ T2411] usb 2-1: Manufacturer: syz [ 357.426004][ T2411] usb 2-1: SerialNumber: syz [ 357.572891][ T19] hub 3-1:0.0: 1 port detected [ 357.670017][ T2411] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 357.676868][ T2411] cdc_ncm 2-1:1.1: bind() failure [ 357.797474][ T4295] overlayfs: unrecognized mount option "verity=off" or missing value [ 357.819231][ T19] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 357.825723][ T19] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 357.840666][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 357.846688][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 357.894216][ T19] usb 3-1: USB disconnect, device number 23 [ 358.208086][ T1391] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 358.404268][ T1391] usb 1-1: config 1 has an invalid interface number: 113 but max is 1 [ 358.412558][ T1391] usb 1-1: config 1 has no interface number 0 [ 358.418723][ T1391] usb 1-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.429859][ T1391] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 358.440952][ T1391] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 358.450950][ T1391] usb 1-1: config 1 interface 113 has no altsetting 0 [ 358.459379][ T1391] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.468063][ T2411] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 358.468505][ T1391] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 358.484728][ T1391] usb 1-1: Product: syz [ 358.489107][ T1391] usb 1-1: Manufacturer: syz [ 358.493951][ T1391] usb 1-1: SerialNumber: syz [ 358.675037][ T2411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.684915][ T2411] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 358.693968][ T2411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.702662][ T2411] usb 4-1: config 0 descriptor?? [ 358.708470][ T2411] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 358.718514][ T1391] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 358.725342][ T1391] cdc_ncm 1-1:1.1: bind() failure [ 358.803887][ T19] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 358.992795][ T2411] usb 2-1: USB disconnect, device number 24 [ 358.999330][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 359.007540][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 359.025884][ T4343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1181'. [ 359.035281][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.139371][ T4345] SELinux: security_context_str_to_sid () failed with errno=-22 [ 359.998676][ T19] usb 3-1: Product: syz [ 360.003081][ T19] usb 3-1: Manufacturer: syz [ 360.007787][ T19] usb 3-1: SerialNumber: syz [ 360.013151][ T19] usb 3-1: config 0 descriptor?? [ 360.019697][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 360.027667][ T19] usb 3-1: Detected FT-X [ 360.163047][ T4351] overlayfs: failed to get inode (-116) [ 360.168768][ T4351] overlayfs: failed to get inode (-116) [ 361.285084][ T340] usb 1-1: USB disconnect, device number 28 [ 361.303256][ T1391] usb 4-1: USB disconnect, device number 26 [ 361.315625][ T4336] x_tables: duplicate underflow at hook 4 [ 361.715303][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 361.882996][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 361.895112][ T19] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 361.907900][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 361.916714][ T19] usb 3-1: USB disconnect, device number 24 [ 361.929094][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 361.939214][ T19] ftdi_sio 3-1:0.0: device disconnected [ 362.284154][ T340] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 362.487512][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 362.493928][ T4389] netlink: 'syz.1.1197': attribute type 4 has an invalid length. [ 362.503929][ T340] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 362.513344][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.521618][ T340] usb 1-1: Product: syz [ 362.525858][ T340] usb 1-1: Manufacturer: syz [ 362.530526][ T340] usb 1-1: SerialNumber: syz [ 362.536184][ T340] usb 1-1: config 0 descriptor?? [ 362.552752][ T340] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 362.560617][ T340] usb 1-1: Detected FT-X [ 362.595896][ T19] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 362.762530][ T4358] syz.0.1185[4358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.762624][ T4358] syz.0.1185[4358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.775431][ T4358] x_tables: duplicate underflow at hook 4 [ 363.083945][ T340] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 363.090838][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 363.096174][ T340] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 363.103545][ T340] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 363.112719][ T340] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 363.122110][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 363.131778][ T340] usb 1-1: USB disconnect, device number 29 [ 363.137926][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.146595][ T340] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 363.156041][ T19] usb 3-1: Product: syz [ 363.160441][ T19] usb 3-1: Manufacturer: syz [ 363.165231][ T340] ftdi_sio 1-1:0.0: device disconnected [ 363.171287][ T19] usb 3-1: SerialNumber: syz [ 363.177798][ T19] usb 3-1: config 0 descriptor?? [ 363.463625][ T4387] x_tables: duplicate underflow at hook 4 [ 363.495105][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 363.648407][ T19] usb 3-1: Detected FT-X [ 363.653045][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 363.662867][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 363.671771][ T19] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 363.679020][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 363.688334][ T19] usb 3-1: USB disconnect, device number 25 [ 363.696419][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 363.706031][ T19] ftdi_sio 3-1:0.0: device disconnected [ 363.837142][ T4417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1208'. [ 363.909053][ T4419] capability: warning: `syz.4.1209' uses 32-bit capabilities (legacy support in use) [ 363.961011][ T1391] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 364.166870][ T340] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 364.177668][ T1391] usb 1-1: Using ep0 maxpacket: 16 [ 364.185482][ T1391] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 364.194839][ T1391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.203634][ T1391] usb 1-1: Product: syz [ 364.207993][ T1391] usb 1-1: Manufacturer: syz [ 364.213042][ T1391] usb 1-1: SerialNumber: syz [ 364.218328][ T1391] usb 1-1: config 0 descriptor?? [ 364.223354][ T463] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 364.231904][ T1391] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 364.239580][ T1391] usb 1-1: Detected FT-X [ 364.340294][ T287] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 364.361881][ T340] usb 2-1: Using ep0 maxpacket: 16 [ 364.369883][ T340] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 364.379010][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.387163][ T340] usb 2-1: Product: syz [ 364.391454][ T340] usb 2-1: Manufacturer: syz [ 364.396105][ T340] usb 2-1: SerialNumber: syz [ 364.401558][ T340] usb 2-1: config 0 descriptor?? [ 364.407870][ T340] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 364.415647][ T340] usb 2-1: Detected FT-X [ 364.450903][ T463] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.451855][ T4403] syz.0.1201[4403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.459145][ T463] usb 5-1: config 0 has no interface number 0 [ 364.459217][ T4403] syz.0.1201[4403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.471040][ T463] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 364.492235][ T4403] x_tables: duplicate underflow at hook 4 [ 364.498110][ T463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.511590][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 364.518709][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 364.526360][ T463] usb 5-1: config 0 descriptor?? [ 364.531401][ T1391] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 364.538916][ T463] usb 5-1: bad CDC descriptors [ 364.544885][ T1391] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 364.554261][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.564228][ T1391] usb 1-1: USB disconnect, device number 30 [ 364.570185][ T287] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 364.579675][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.587835][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.597403][ T1391] ftdi_sio 1-1:0.0: device disconnected [ 364.603976][ T287] usb 4-1: config 0 descriptor?? [ 364.609804][ T287] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 364.625891][ T4423] syz.1.1211[4423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.625967][ T4423] syz.1.1211[4423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.639225][ T4423] x_tables: duplicate underflow at hook 4 [ 364.657283][ T340] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 364.664347][ T340] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 364.671471][ T340] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 364.678571][ T340] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 364.687472][ T340] usb 2-1: USB disconnect, device number 25 [ 364.693840][ T340] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 364.703318][ T340] ftdi_sio 2-1:0.0: device disconnected [ 364.810367][ T19] usb 5-1: USB disconnect, device number 29 [ 365.300054][ T4445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1220'. [ 365.811548][ T19] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 365.892713][ T340] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 366.053107][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.063410][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 366.072437][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.300219][ T19] usb 1-1: config 0 descriptor?? [ 366.306197][ T19] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 366.322835][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 366.330970][ T340] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 366.340177][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.348249][ T340] usb 3-1: Product: syz [ 366.352524][ T340] usb 3-1: Manufacturer: syz [ 366.357170][ T340] usb 3-1: SerialNumber: syz [ 366.362315][ T340] usb 3-1: config 0 descriptor?? [ 366.368233][ T340] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 366.375918][ T340] usb 3-1: Detected FT-X [ 366.587905][ T4460] syz.2.1225[4460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.587994][ T4460] syz.2.1225[4460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.601960][ T4460] x_tables: duplicate underflow at hook 4 [ 366.625820][ T340] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 366.632922][ T340] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 366.640049][ T340] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 366.647024][ T340] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 366.655819][ T340] usb 3-1: USB disconnect, device number 26 [ 366.662295][ T340] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 366.671938][ T340] ftdi_sio 3-1:0.0: device disconnected [ 367.265444][ T1391] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 367.324547][ T340] usb 4-1: USB disconnect, device number 27 [ 367.337444][ T4481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1231'. [ 367.471286][ T1391] usb 5-1: Using ep0 maxpacket: 16 [ 367.479100][ T1391] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 367.488571][ T1391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.497014][ T1391] usb 5-1: Product: syz [ 367.501289][ T1391] usb 5-1: Manufacturer: syz [ 367.511649][ T1391] usb 5-1: SerialNumber: syz [ 367.521635][ T1391] usb 5-1: config 0 descriptor?? [ 367.532735][ T1391] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 367.540714][ T1391] usb 5-1: Detected FT-X [ 368.036352][ T4477] syz.4.1230[4477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.036851][ T4477] syz.4.1230[4477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.620250][ T463] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 369.639491][ T28] audit: type=1400 audit(1764031094.107:256): avc: denied { connect } for pid=4502 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 369.682904][ T4477] x_tables: duplicate underflow at hook 4 [ 369.698702][ T28] audit: type=1400 audit(1764031094.171:257): avc: denied { write } for pid=4502 comm="syz.1.1239" path="socket:[31332]" dev="sockfs" ino=31332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 369.733191][ T287] usb 1-1: USB disconnect, device number 31 [ 369.786060][ T1391] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 369.796130][ T1391] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 369.804996][ T1391] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 369.812378][ T1391] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 369.821435][ T1391] usb 5-1: USB disconnect, device number 30 [ 369.828375][ T1391] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 369.838112][ T1391] ftdi_sio 5-1:0.0: device disconnected [ 369.931764][ T463] usb 3-1: config 1 has an invalid interface number: 113 but max is 1 [ 369.940158][ T463] usb 3-1: config 1 has no interface number 0 [ 369.946601][ T463] usb 3-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.958433][ T463] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 369.969944][ T463] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 369.980152][ T463] usb 3-1: config 1 interface 113 has no altsetting 0 [ 369.991275][ T463] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.000490][ T463] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 370.009098][ T463] usb 3-1: Product: syz [ 370.013541][ T463] usb 3-1: Manufacturer: syz [ 370.018382][ T463] usb 3-1: SerialNumber: syz [ 370.242934][ T463] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 370.249903][ T463] cdc_ncm 3-1:1.1: bind() failure [ 370.285028][ T4517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1243'. [ 371.684217][ T463] usb 3-1: USB disconnect, device number 27 [ 371.892413][ T4554] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1255'. [ 373.410191][ T463] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 373.625115][ T463] usb 2-1: Using ep0 maxpacket: 16 [ 373.633048][ T463] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 373.643181][ T463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.651983][ T463] usb 2-1: Product: syz [ 373.656300][ T463] usb 2-1: Manufacturer: syz [ 373.661660][ T463] usb 2-1: SerialNumber: syz [ 373.668982][ T463] usb 2-1: config 0 descriptor?? [ 373.677274][ T463] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 373.686661][ T463] usb 2-1: Detected FT-X [ 373.812449][ T1391] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 373.947273][ T4558] syz.1.1256[4558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.947350][ T4558] syz.1.1256[4558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.989799][ T4558] x_tables: duplicate underflow at hook 4 [ 374.008142][ T463] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 374.015314][ T463] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 374.022764][ T463] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 374.029929][ T463] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 374.038796][ T463] usb 2-1: USB disconnect, device number 26 [ 374.045556][ T463] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 374.055332][ T463] ftdi_sio 2-1:0.0: device disconnected [ 374.092124][ T1391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.102145][ T1391] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 374.111178][ T1391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.119878][ T1391] usb 4-1: config 0 descriptor?? [ 374.125822][ T1391] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 374.329379][ T340] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 374.455136][ T4588] netlink: 'syz.0.1266': attribute type 4 has an invalid length. [ 374.463800][ T4590] SELinux: security_context_str_to_sid () failed with errno=-22 [ 374.524354][ T340] usb 5-1: Using ep0 maxpacket: 32 [ 374.530701][ T340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.542647][ T340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.552506][ T340] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 374.561651][ T340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.570564][ T340] usb 5-1: config 0 descriptor?? [ 374.748200][ T4595] overlayfs: failed to resolve './file0': -2 [ 374.925279][ T19] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 375.092157][ T4586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.106338][ T4586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.205290][ T340] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 375.212113][ T340] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 375.218916][ T340] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 375.225680][ T340] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 375.232438][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 375.243290][ T340] elo 0003:04E7:0009.0002: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 375.255114][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 375.265034][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.273130][ T19] usb 1-1: Product: syz [ 375.277434][ T19] usb 1-1: Manufacturer: syz [ 375.282090][ T19] usb 1-1: SerialNumber: syz [ 375.287647][ T19] usb 1-1: config 0 descriptor?? [ 375.293966][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 375.301824][ T19] usb 1-1: Detected FT-X [ 375.376143][ T340] usb 5-1: USB disconnect, device number 31 [ 375.512283][ T4598] syz.0.1269[4598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.512360][ T4598] syz.0.1269[4598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.525283][ T4598] x_tables: duplicate underflow at hook 4 [ 375.543564][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 375.550933][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 375.558091][ T19] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 375.565327][ T19] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 375.574069][ T19] usb 1-1: USB disconnect, device number 32 [ 375.580793][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 375.590283][ T19] ftdi_sio 1-1:0.0: device disconnected [ 376.008672][ T1391] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 376.227224][ T1391] usb 2-1: config 1 has an invalid interface number: 113 but max is 1 [ 376.236222][ T463] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 376.377397][ T1391] usb 2-1: config 1 has no interface number 0 [ 376.383905][ T1391] usb 2-1: config 1 interface 113 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.395150][ T1391] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34304, setting to 1024 [ 376.406371][ T1391] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 376.416622][ T1391] usb 2-1: config 1 interface 113 has no altsetting 0 [ 376.426465][ T1391] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.435745][ T1391] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 376.444208][ T1391] usb 2-1: Product: syz [ 376.450037][ T1391] usb 2-1: Manufacturer: syz [ 376.454875][ T1391] usb 2-1: SerialNumber: syz [ 376.583932][ T463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.593809][ T463] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 376.602879][ T463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.611631][ T463] usb 5-1: config 0 descriptor?? [ 376.617472][ T463] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 376.678736][ T1391] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 376.685725][ T1391] cdc_ncm 2-1:1.1: bind() failure [ 376.745372][ T19] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 376.779697][ T340] usb 4-1: USB disconnect, device number 28 [ 377.275022][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 377.309572][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 377.318658][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.341613][ T19] usb 1-1: Product: syz [ 377.345825][ T19] usb 1-1: Manufacturer: syz [ 377.350434][ T19] usb 1-1: SerialNumber: syz [ 377.375073][ T19] usb 1-1: config 0 descriptor?? [ 377.382908][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 377.392185][ T19] usb 1-1: Detected FT-X [ 377.609193][ T4621] x_tables: duplicate underflow at hook 4 [ 377.619365][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 377.627881][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 377.635234][ T19] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 377.642443][ T19] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 377.651561][ T19] usb 1-1: USB disconnect, device number 33 [ 377.658508][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 377.668199][ T19] ftdi_sio 1-1:0.0: device disconnected [ 378.359134][ T4647] netlink: 'syz.0.1284': attribute type 4 has an invalid length. [ 378.367071][ T4647] netlink: 'syz.0.1284': attribute type 5 has an invalid length. [ 378.375009][ T4647] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1284'. [ 378.622647][ T4651] FAULT_INJECTION: forcing a failure. [ 378.622647][ T4651] name failslab, interval 1, probability 0, space 0, times 0 [ 378.635341][ T4651] CPU: 1 PID: 4651 Comm: syz.2.1285 Not tainted syzkaller #0 [ 378.642737][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.652889][ T4651] Call Trace: [ 378.656193][ T4651] [ 378.659165][ T4651] __dump_stack+0x21/0x24 [ 378.663617][ T4651] dump_stack_lvl+0xee/0x150 [ 378.668233][ T4651] ? __cfi_dump_stack_lvl+0x8/0x8 [ 378.673290][ T4651] dump_stack+0x15/0x24 [ 378.677469][ T4651] should_fail_ex+0x3d4/0x520 [ 378.682187][ T4651] __should_failslab+0xac/0xf0 [ 378.686982][ T4651] should_failslab+0x9/0x20 [ 378.691513][ T4651] kmem_cache_alloc_node+0x42/0x340 [ 378.696748][ T4651] ? __alloc_skb+0xea/0x4b0 [ 378.701288][ T4651] __alloc_skb+0xea/0x4b0 [ 378.705658][ T4651] ? sk_page_frag_refill+0x59/0x100 [ 378.710900][ T4651] __ip_append_data+0x241c/0x35a0 [ 378.716051][ T4651] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 378.721631][ T4651] ? ip_setup_cork+0x850/0x850 [ 378.726427][ T4651] ? lock_sock_nested+0x1ec/0x280 [ 378.731485][ T4651] ip_append_data+0x125/0x1a0 [ 378.736186][ T4651] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 378.741758][ T4651] udp_sendmsg+0x517/0x20c0 [ 378.746290][ T4651] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 378.751949][ T4651] ? avc_has_perm+0x158/0x240 [ 378.756656][ T4651] ? __cfi_udp_sendmsg+0x10/0x10 [ 378.761627][ T4651] ? __fget_files+0x2d5/0x330 [ 378.766339][ T4651] ? inet_send_prepare+0x60/0x4d0 [ 378.771387][ T4651] inet_sendmsg+0xb6/0xd0 [ 378.775743][ T4651] __sys_sendto+0x464/0x5e0 [ 378.780271][ T4651] ? slab_free_freelist_hook+0xc2/0x190 [ 378.785848][ T4651] ? __cfi___sys_sendto+0x10/0x10 [ 378.790916][ T4651] ? ksys_write+0x1eb/0x240 [ 378.795436][ T4651] ? __cfi_ksys_write+0x10/0x10 [ 378.800396][ T4651] __x64_sys_sendto+0xe5/0x100 [ 378.805361][ T4651] x64_sys_call+0x83/0x9a0 [ 378.809800][ T4651] do_syscall_64+0x4c/0xa0 [ 378.814249][ T4651] ? clear_bhb_loop+0x30/0x80 [ 378.818957][ T4651] ? clear_bhb_loop+0x30/0x80 [ 378.823666][ T4651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.829589][ T4651] RIP: 0033:0x7f81a838f749 [ 378.834031][ T4651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.853762][ T4651] RSP: 002b:00007f81a9235038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 378.862206][ T4651] RAX: ffffffffffffffda RBX: 00007f81a85e6090 RCX: 00007f81a838f749 [ 378.870208][ T4651] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000005 [ 378.878202][ T4651] RBP: 00007f81a9235090 R08: 0000000000000000 R09: 0000000011000a00 [ 378.886190][ T4651] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 378.894179][ T4651] R13: 00007f81a85e6128 R14: 00007f81a85e6090 R15: 00007ffe3e590138 [ 378.902178][ T4651] [ 379.253888][ T1391] usb 5-1: USB disconnect, device number 32 [ 379.682286][ T340] usb 2-1: USB disconnect, device number 27 [ 379.746670][ T19] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 381.014050][ T1391] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 381.047683][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.068237][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 381.088784][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.151186][ T19] usb 3-1: config 0 descriptor?? [ 381.168438][ T19] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 381.232699][ T1391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.714237][ T1391] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 382.852046][ T1391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.863097][ T1391] usb 4-1: config 0 descriptor?? [ 491.230645][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 491.237664][ C1] (detected by 1, t=10002 jiffies, g=22957, q=162 ncpus=2) [ 491.244966][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294983795-4294973792), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 491.258359][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g22957 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 491.269569][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 491.279553][ C1] rcu: RCU grace-period kthread stack dump: [ 491.285448][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 491.296239][ C1] Call Trace: [ 491.299533][ C1] [ 491.302481][ C1] __schedule+0xb87/0x14e0 [ 491.307011][ C1] ? __sched_text_start+0x8/0x8 [ 491.311882][ C1] schedule+0xbd/0x170 [ 491.315965][ C1] schedule_timeout+0x12c/0x2e0 [ 491.320872][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 491.326262][ C1] ? __cfi_process_timeout+0x10/0x10 [ 491.331656][ C1] ? prepare_to_swait_event+0x308/0x320 [ 491.337247][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 491.342124][ C1] ? rcu_gp_init+0xf10/0xf10 [ 491.346735][ C1] rcu_gp_kthread+0x95/0x370 [ 491.351343][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 491.356561][ C1] ? __kasan_check_read+0x11/0x20 [ 491.361606][ C1] ? __kthread_parkme+0x142/0x180 [ 491.366647][ C1] kthread+0x281/0x320 [ 491.370732][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 491.375948][ C1] ? __cfi_kthread+0x10/0x10 [ 491.380647][ C1] ret_from_fork+0x1f/0x30 [ 491.385087][ C1] [ 491.388120][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 491.394451][ C1] CPU: 1 PID: 4674 Comm: syz.2.1292 Not tainted syzkaller #0 [ 491.401837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.411902][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 491.418340][ C1] Code: c0 d3 ed 86 e8 8c 41 c0 fc 4c 89 f7 48 83 3d f1 75 f9 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 86 59 57 fc 65 8b 05 d7 0f 0e 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 491.437961][ C1] RSP: 0018:ffffc900001b0a60 EFLAGS: 00000206 [ 491.444059][ C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000 [ 491.452136][ C1] RDX: 0000000000000100 RSI: 0000000000000a02 RDI: 0000000000000001 [ 491.460207][ C1] RBP: ffffc900001b0a70 R08: dffffc0000000000 R09: ffff88810db66af0 [ 491.468193][ C1] R10: ffffed1021b6cd61 R11: 1ffff11021b6cd5e R12: 1ffff1102741ebe1 [ 491.476190][ C1] R13: dffffc0000000000 R14: 0000000000000007 R15: dffffc0000000000 [ 491.484176][ C1] FS: 00007f81a92566c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 491.493386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.500243][ C1] CR2: 00007f96e160cf98 CR3: 0000000122afb000 CR4: 00000000003506a0 [ 491.508323][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.516307][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 491.524290][ C1] Call Trace: [ 491.527685][ C1] [ 491.530555][ C1] dummy_timer+0x2d10/0x2ea0 [ 491.535211][ C1] ? __kasan_check_write+0x14/0x20 [ 491.540349][ C1] ? __hrtimer_run_queues+0x991/0x9f0 [ 491.545760][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 491.550718][ C1] ? timerqueue_del+0xd3/0x120 [ 491.555522][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 491.560497][ C1] __hrtimer_run_queues+0x3cd/0x9f0 [ 491.565727][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 491.570872][ C1] hrtimer_run_softirq+0x19b/0x260 [ 491.576014][ C1] handle_softirqs+0x1d7/0x600 [ 491.580797][ C1] ? irqtime_account_irq+0xc4/0x240 [ 491.586016][ C1] __irq_exit_rcu+0x52/0xf0 [ 491.590534][ C1] irq_exit_rcu+0x9/0x10 [ 491.594795][ C1] sysvec_irq_work+0xa6/0xc0 [ 491.599406][ C1] [ 491.602346][ C1] [ 491.605288][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 491.610250][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 491.616176][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 fa 10 57 01 5d c3 0f 1f 84 00 00 00 00 [ 491.635799][ C1] RSP: 0018:ffffc90012db7c20 EFLAGS: 00000246 [ 491.641908][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 491.649910][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 491.657918][ C1] RBP: ffffc90012db7c20 R08: dffffc0000000000 R09: fffff520025b6f81 [ 491.665912][ C1] R10: 0000000000000000 R11: ffffffff81343740 R12: 0000000000000000 [ 491.673902][ C1] R13: dffffc0000000001 R14: ffffffff86495b60 R15: dffffc0000000000 [ 491.681980][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 491.687820][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 491.692878][ C1] arch_irq_work_raise+0x98/0xf0 [ 491.697836][ C1] __irq_work_queue_local+0x115/0x190 [ 491.703231][ C1] irq_work_queue+0x9e/0x150 [ 491.707843][ C1] bpf_send_signal_common+0x2b2/0x420 [ 491.713242][ C1] ? __set_printk_clr_event+0x80/0x80 [ 491.718675][ C1] bpf_send_signal+0x19/0x20 [ 491.723281][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 491.728752][ C1] bpf_trace_run2+0xff/0x250 [ 491.733386][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 491.738701][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 491.743829][ C1] trace_sys_enter+0x3d/0x50 [ 491.748431][ C1] syscall_trace_enter+0xf3/0x150 [ 491.753493][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 491.759243][ C1] do_syscall_64+0x24/0xa0 [ 491.763690][ C1] ? clear_bhb_loop+0x30/0x80 [ 491.768394][ C1] ? clear_bhb_loop+0x30/0x80 [ 491.773095][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.779021][ C1] RIP: 0033:0x7f81a832b829 [ 491.783460][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 491.803079][ C1] RSP: 002b:00007f81a9255b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 491.811512][ C1] RAX: ffffffffffffffda RBX: 00007f81a85e5fa8 RCX: 00007f81a832b829 [ 491.819510][ C1] RDX: 00007f81a9255b40 RSI: 00007f81a9255c70 RDI: 0000000000000011 [ 491.827507][ C1] RBP: 00007f81a85e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 491.835509][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.843506][ C1] R13: 00007f81a85e6038 R14: 00007ffe3e590050 R15: 00007ffe3e590138 [ 491.851503][ C1] [ 606.485366][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 206s! [ 606.494340][ C0] Showing busy workqueues and worker pools: [ 606.500273][ C0] workqueue events: flags=0x0 [ 606.504979][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 606.505025][ C0] pending: free_work, psi_avgs_work, key_garbage_collector, rht_deferred_worker [ 606.505105][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 606.505145][ C0] pending: vmstat_shepherd, kfree_rcu_monitor [ 606.505190][ C0] workqueue events_long: flags=0x0 [ 606.541429][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 606.541482][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 606.541556][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 606.541595][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 606.541647][ C0] workqueue events_unbound: flags=0x2 [ 606.576626][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 606.576669][ C0] pending: toggle_allocation_gate, linkwatch_event, flush_memcg_stats_dwork [ 606.576748][ C0] workqueue events_power_efficient: flags=0x80 [ 606.599361][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 606.599409][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, gc_worker, neigh_periodic_work, reg_check_chans_work [ 606.599526][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 606.599566][ C0] pending: neigh_managed_work, neigh_periodic_work, check_lifetime [ 606.599639][ C0] workqueue mm_percpu_wq: flags=0x8 [ 606.640542][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 606.640590][ C0] pending: vmstat_update [ 606.640624][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 606.640663][ C0] pending: vmstat_update [ 606.640696][ C0] workqueue writeback: flags=0x4a [ 606.670328][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 606.670371][ C0] pending: wb_workfn [ 606.670406][ C0] workqueue usb_hub_wq: flags=0x4 [ 606.686986][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 606.687033][ C0] in-flight: 1391:hub_event hub_event [ 606.687100][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 606.687138][ C0] pending: hub_event [ 606.687250][ C0] workqueue dm_bufio_cache: flags=0x8 [ 606.718212][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 606.718261][ C0] pending: work_fn [ 606.718356][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 606.735748][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 606.735800][ C0] pending: addrconf_verify_work [ 606.735831][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 606.735886][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 606.735926][ C0] pending: addrconf_verify_work [ 606.735949][ C0] inactive: addrconf_verify_work [ 606.736039][ C0] workqueue wg-kex-wg1: flags=0x6 [ 606.780840][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.780887][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.780942][ C0] workqueue wg-kex-wg2: flags=0x6 [ 606.802237][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.802279][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.802331][ C0] workqueue wg-kex-wg1: flags=0x6 [ 606.823600][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.823640][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.823692][ C0] workqueue wg-kex-wg2: flags=0x6 [ 606.844960][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.845006][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.845058][ C0] workqueue wg-kex-wg1: flags=0x6 [ 606.866410][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.866453][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.866504][ C0] workqueue wg-kex-wg2: flags=0x6 [ 606.887761][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.887801][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.887854][ C0] workqueue wg-kex-wg1: flags=0x6 [ 606.909132][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.909174][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.909232][ C0] workqueue wg-kex-wg1: flags=0x6 [ 606.930498][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.930538][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.930589][ C0] workqueue wg-kex-wg2: flags=0x6 [ 606.951858][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.951899][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.951949][ C0] workqueue wg-kex-wg2: flags=0x6 [ 606.973232][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 606.973274][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 606.973328][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=206s workers=5 idle: 463 287 647 39