last executing test programs: 5.384804573s ago: executing program 2 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff0000000000040000040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = fsopen(&(0x7f0000000140)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x04', 0x0, r2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r3, &(0x7f00000000c0)="97", 0x1, 0x0) copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0x32, 0x1, 0x0) open(&(0x7f0000000140)='.\x00', 0x8a080, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$eJzs3b+LHHUUAPA3d7O74w/YLaxEcEALq5BLa7NBEhCvMmyhFnqYBOR2ERI48AeOqcTOxtK/QBD8H2xt7CwF/wA7IwRGZnbmdtZM9u7k9sTc59PkZb7vzffN7HA3V9y7D15aHN7O4+6Dz3+LLEtiZxrTeJjEJHai9WWsmX4TAMD/2cOyjD/KpZ7lX79+Ql0SEdmWewMAtuOE7/+NdBX+eCFtAQBbdOudd9+6vr9/4+08z+Lm4qujWfWTffXvcv363fgo5nEnrsY4HkXULwqDqN8WqvBmWZZFmlcm8eqiOJpVlYv3f27O/9PzTbAX45jU0fHbRl3/5v6NvXypU19UfTzb7D+t9r8W43jhuHit/lpPfcyG8dornf6vxDh++TA+jnncrptY1X+xl+dvlN/++dl7VXtVfVIczUZ13kq5225eXODnAwAAAAAAAAAAAAAAAAAAAADA0+lKMztnFPX8nupQM39n91H1n0Hkrcn6fJ5lfdKeqDsfqCzLoozv2vk6V/M8L5vEVX0aL6bdwYIAAAAAAAAAAAAAAAAAAABwed3/5NPDg/n8zr1zCdppAGlE/HUr4t+eZ9o58nJsTh41ex7M5ztNuJ6Tdo/EbpuTRGxso7qIc7otJwXPPNZzE3z/Q29VuvbBpdFZyk7edNC/13kG7dN1eJD038PRcc/Z8iGpB0GscoZxyr2GT1oq4yyP37B3aXzmax8+VwfFhpxINjX2+u/LO9ccSf55FcP6rvaWD5qgU76ek53qeY5sWf7414rEtA4AAAAAAAAAAAAAAAAAANiq1W//9iw+2Fi6U4621hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXKjV3/8/Q1A0xadIHsa9+//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAJ/B0AAP//eWdglQ==") setrlimit(0x6, &(0x7f0000000100)={0x1, 0x8}) (fail_nth: 1) 4.927627955s ago: executing program 2 (id=1412): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xf}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0) r3 = open(&(0x7f0000000000)='./mnt\x00', 0x14927e, 0x109) fallocate(r3, 0x0, 0x0, 0x1001f0) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x1008, 0x0, 0x149, 0xc, 0x10001}}, 0x50) 4.927138205s ago: executing program 2 (id=1413): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}]}) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$eJzs3UFom+UbAPAn/dKm/bP924MgCsKnN0HLNgXRix2jg2EuU8LUgxjcptLUwYrB7tCsXsSj4FFP3jzowcNuXgRFdvPg1QkyFQ+628CxT77kS/KlSWqZdLP4+x3Cs/d9nvd9v+Rl+ZqSt6+uxNrZ2Th/48b1mJ+vRHXlxErcrMRSJNF3OcbNTWgDAA6Gm1kWf2Q9EV/upaSy/6sCAPZT9/3/9cOllne/3i0/8+4PAAde8fP/Qrkt2ZEzP634wr4tCwDYR6Of/0fEI2MppV/1V8fuDQCAg+eFl15+7ng94vk0nY9Yf6/daDfimWH/8fPxZrTiXByJxbgV0btRyB8q3ceTp+qrR9I07cTPS9HIK9qNiPVOu9G7UziedOtrcTQWY6moL+42sixLTn5RXz2adkXE5U53/livtBuzsVDM/8P/4lwcizTuG6uPOFVfPZYWAzTW+/WzEdvDzy3y9S/HYnz3WlyIVpyNvLZ/W1Nf3Tqapiey+qHKsL7TbtS6eT1TPwEBAAAAAAAAAAAAAAAAAAAAAIA7spwOLA3Oz8mG5/csL0/o756P06svzgfa7p0PlNWyyLLf33m88X4SI+cD7Tifp9NuVGPm3l46AAAAAAAAAAAAAAAAAAAA/GtsbM5Fs9U6d3Fj89JaOehc3NiciYi85a1vP/tqIUZzFooBRqtGgmqRUupKh1VZ0k/OkpGcIkjyySvVXsunVwYrLufUBlcxcRm16V2t1uGHf/po2PJQ0h/59jAniYnXdSnZsYxysP7/3pKmPy27BMf+JudalmXTyrdeGa+KSkR16lLvMMjy4JvrbzzwxEZ/E2Q9jz62eObah5/8utZs5TPnWq25ixu3srVm8e/Jm216kJT2T6XYbJXyTqg2n7x9+tCUkbdHW5rJ97+9+OAHV4uWmd1fpuzM1WHL2xNykt6kn+/smusF+TIHXc/mQf4cjY8zO2HzTwqein/0wt3/8UrzytaPv+y1qvSfhIM6AAAAAAAAAAAAAAAAAADgrih9V7xQfNl3dreqp0/v/8oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O4Z/v3/QRAz2zta9hb82Yl+y5nod9XyAWOuNOPSPbxaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+q/4KAAD//1UBZGs=") ftruncate(0xffffffffffffffff, 0x6) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='io_uring_cqring_wait\x00', r1}, 0x18) r5 = syz_io_uring_setup(0x3d1a, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000040)) io_uring_enter(r5, 0x0, 0x235c, 0x3, 0x0, 0x0) io_setup(0x2c7, &(0x7f0000000200)=0x0) r7 = eventfd2(0xb27, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0185879, &(0x7f0000000b40)={@desc={0x4100, 0x0, @desc1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r11, &(0x7f0000000140)='./file0/file0\x00', 0xa4b40, 0x0) io_submit(r6, 0x5, &(0x7f0000000cc0)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0xff7e, r3, &(0x7f0000000640)="6cc31aba40398bfe5d1cc3dcb277bfcd200ad6ca87dae3932f84c892b35b7113b68506a4466bd4207d6b8e52fabd557880241943ae32cbe4a586a4124abf84f9e8f4114b52a1a35813ce05435cda80229c60d238d8af3c946fe8f30103442ba5c6f2cbb61c940fb93f43590cb2cffc0a235d1ffdd26194ece0f61c45e8dfed45ca235c550368903e0e0f78032ea59c1c3578978520f2ab7a8ef5b7a5bd56dab0dc487ddb0d1b0a73acb0f7c8473fc95aad4af3d5dbaafbf3664275d2434d276b540e18e4e7591a5f33f56a3c91820870fa1ef0ccc7fdc5187b2754276793d2a2cb855fa895d216668f07486e6260a964b3", 0xf1, 0xfffffffffffffff7, 0x0, 0x4, r7}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000780)="cf2ef3fe4f92e6f4c93d43502ce3a3cd0caeff63abf1fdbb65e16702d29b2b1c98a915d5293ab96bb25ba9d29a06e3ae05b428a25ff7ed71f22453ecd5ac5062e658927d623e905837600b2c8f8727186a29a0b7f710a0a238e9298aa9ef6355221604aab4791e7f7210176c57b75772bb596e1e1b42141354dc18578419cd6172c13a22bf5818bbdf8b66b8fd01b3d3a5a5293e2842ade4073c85635973a767358e04ec6cb04d27e968e91a5bdee9ea9e8724f29bd2e68a8e82de8b2f7a763b41f7", 0xc2, 0x1, 0x0, 0x3, r8}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0xfff7, r9, &(0x7f0000000a80)="7e6571819609884d0c36c2490f", 0xd, 0xfffffffffffffffb, 0x0, 0x3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0xa, r4, &(0x7f0000000b00)="07df42f0ba5301faa257398bbc4e57e6fe7a23d9cd484083f74b66dbeb55b7542cd85bf596d923b977aaf7bbec7c36453ad2de73dc01c730f0368e2fe4b8ec4ed85902cfa0394e9ee4fc15781ef9390886b025d0b0d1a98bd52ab97553ebbda4d1ea105e54cbb146c0083b95b14a7ea878ca7008545b44854d8e73bb3438a3a6f7b4dd763184a22010c3c7770da0f7", 0x8f, 0x7, 0x0, 0x0, r10}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0xe80e, r0, &(0x7f0000000c40)="18432460268043502e67", 0xa, 0x6c, 0x0, 0x1, r11}]) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 4.560546237s ago: executing program 1 (id=1416): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x1f00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x800, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xfffffff9, 0x9}, 0x14) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000040000000000000000000000000000000100"/69], 0xfc}}, 0x0) r7 = socket(0x200000100000011, 0x803, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, r10, 0x0, 0x20000023893) 3.95433094s ago: executing program 2 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000040)={0x8, 0x8}, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_usb_connect(0x2, 0xb6, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x1, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0x5, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x64, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xbbbf}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xa, 0x41, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x27, 0x3, 0x8, [@generic={0x2a, 0x11, "65ec3e0f1c98fb62f50cd59ee1975801a11e4833ff7cfff45fd649154caf05915b1ace2c84139975"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2a, 0x3, 0x1, 0x10, 0x6d}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009ce6e7e6"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000007c0)={0x0, &(0x7f0000000780)}) capget(&(0x7f0000000300)={0x20071026}, 0xffffffffffffffff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d56825c4bf261d1ec069e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3510ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.613581972s ago: executing program 1 (id=1422): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000034d, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x7005, 0x0) readv(r5, &(0x7f00000004c0)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.380089263s ago: executing program 4 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.368015683s ago: executing program 4 (id=1429): socket(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) userfaultfd(0x80801) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.355099733s ago: executing program 4 (id=1430): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="0c04fc15e4fe7679b75ca9f282bcaa1907f470e7bfb983b172fccad78f5b7c9727bddeb125dbc62244131cd8022d5194d40c3125e732514ef2674bf7322c9db315c5a105c990287649731f2cde80e91122c9d228093fc03f42f1fd90fdbd19ae30e80094f0841fac48ed9ea8656c37815755801f8f053e7033978235daebed03a2c0db85d908"], 0x0, 0x553b, &(0x7f000000ac00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x4082, &(0x7f0000000380)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 3.105941774s ago: executing program 0 (id=1431): eventfd(0xfffffffd) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 3.105270525s ago: executing program 0 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000006"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/245, 0xf5}], 0x1}, 0x0) (fail_nth: 1) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 2.829898666s ago: executing program 0 (id=1433): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x1f00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x800, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xfffffff9, 0x9}, 0x14) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000040000000000000000000000000000000100"/69], 0xfc}}, 0x0) r7 = socket(0x200000100000011, 0x803, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, r10, 0x0, 0x20000023893) 2.679794616s ago: executing program 1 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000006"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/245, 0xf5}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 2.580835757s ago: executing program 3 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) 2.564806047s ago: executing program 1 (id=1436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.530803557s ago: executing program 3 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/power/reserved_size', 0x1, 0x0) write$tun(r1, &(0x7f00000005c0)=ANY=[], 0xd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x7e, 0x0, 0x8, r1, 0x7fff, '\x00', 0x0, r1, 0x5, 0x4, 0x5, 0x5, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.529897678s ago: executing program 3 (id=1438): r0 = gettid() r1 = timerfd_create(0x9, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f0000000bc0)="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", &(0x7f0000001bc0)=""/4096}, 0x20) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {r4, r5+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1d, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = eventfd(0x801004) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="7f8f29f555a1ab559daff6b5115af6d311db35a6e54252a8b24b66438f585369d15ca6128a1acb0fef03f0ab6537c612e46005116770a847fa6339b9c4b5075d6e1eb77ae25f0f2303124ff0975038efdaa9304b7d108242c756e09a4e2a619e7872defe01c72f91ec6a7123f61b8b2204964791e30c36f2cea31a9f1ea3beaf514851cb08706091f12c640a9c5068f2f7e73b8eac38f0b931e902b54287d7cd504c9cc210b67b810efab23d8120b467c6587e9cd72d80d740b336e5408073c214a9eb9a2719117523fddd02ecb5b727a9c0812bc7a0991afdff44dd11f327633d58353b977c3cec67b91eac79baf4af2ae2c6e617f235e0", 0xf8}, {&(0x7f0000000580)="e90233eb6596ef18d1402fc29cdcc51f1805e8653869f98b3f19be426478e7738d6a03dfee810998dffb653291ee6dfa659e1fee4c788969742ee7893821530207ff5fdb31534324c9401c1adc", 0x4d}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1, r7]}}, @cred={{0x1c}}], 0x50, 0x8000}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="43054a6b252f4ba8e4f37347f99750246b8f94ee144cb4c709835d02337c55888919731c62f90b3a5e072ebda0a341721e2b096232fcf07bee976fe76d327db0354bd5c523fb6a8acaa4c345e3f501b2f9a9099d95b2591afc3df3dfc0491804c301a542c97e37f1a47ac7338be2aaab590bad08423d44e3e0a96fb6d52fc4855e40116ce0586877e87ef570afa30e7a338d7ab7120eebf55198e7ae2770a550624e7e9a5f6dadc76a39f7493d7feb515ae74aecca385ebae57a07cc83cee92739", 0xc1}], 0x1, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r10}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x98, 0x2004044}}], 0x2, 0x24000050) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r12, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r12, 0xc008aec1, &(0x7f00000001c0)=ANY=[]) writev(r6, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="aba732e9970a72a4", 0x8}], 0x1) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r14}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) 2.398772508s ago: executing program 4 (id=1439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000400)=0x14) 2.00284895s ago: executing program 0 (id=1440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.95797298s ago: executing program 0 (id=1441): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x1f00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x800, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xfffffff9, 0x9}, 0x14) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket(0x200000100000011, 0x803, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, r9, 0x0, 0x20000023893) 1.494187743s ago: executing program 3 (id=1442): syz_usb_connect$cdc_ncm(0x0, 0x18a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) (async) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00b12386a0055b8c2a142cf100", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000002580)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000002140)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") preadv(r5, 0x0, 0x0, 0x800, 0xfffffffc) (async) clock_adjtime(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.449779363s ago: executing program 1 (id=1443): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 1.449422303s ago: executing program 3 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff0000000000040000040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = fsopen(&(0x7f0000000140)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x04', 0x0, r2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r3, &(0x7f00000000c0)="97", 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x981d41) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1410) copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0x32, 0x1, 0x0) open(&(0x7f0000000140)='.\x00', 0x8a080, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$eJzs3b+LHHUUAPA3d7O74w/YLaxEcEALq5BLa7NBEhCvMmyhFnqYBOR2ERI48AeOqcTOxtK/QBD8H2xt7CwF/wA7IwRGZnbmdtZM9u7k9sTc59PkZb7vzffN7HA3V9y7D15aHN7O4+6Dz3+LLEtiZxrTeJjEJHai9WWsmX4TAMD/2cOyjD/KpZ7lX79+Ql0SEdmWewMAtuOE7/+NdBX+eCFtAQBbdOudd9+6vr9/4+08z+Lm4qujWfWTffXvcv363fgo5nEnrsY4HkXULwqDqN8WqvBmWZZFmlcm8eqiOJpVlYv3f27O/9PzTbAX45jU0fHbRl3/5v6NvXypU19UfTzb7D+t9r8W43jhuHit/lpPfcyG8dornf6vxDh++TA+jnncrptY1X+xl+dvlN/++dl7VXtVfVIczUZ13kq5225eXODnAwAAAAAAAAAAAAAAAAAAAADA0+lKMztnFPX8nupQM39n91H1n0Hkrcn6fJ5lfdKeqDsfqCzLoozv2vk6V/M8L5vEVX0aL6bdwYIAAAAAAAAAAAAAAAAAAABwed3/5NPDg/n8zr1zCdppAGlE/HUr4t+eZ9o58nJsTh41ex7M5ztNuJ6Tdo/EbpuTRGxso7qIc7otJwXPPNZzE3z/Q29VuvbBpdFZyk7edNC/13kG7dN1eJD038PRcc/Z8iGpB0GscoZxyr2GT1oq4yyP37B3aXzmax8+VwfFhpxINjX2+u/LO9ccSf55FcP6rvaWD5qgU76ek53qeY5sWf7414rEtA4AAAAAAAAAAAAAAAAAANiq1W//9iw+2Fi6U4621hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXKjV3/8/Q1A0xadIHsa9+//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAJ/B0AAP//eWdglQ==") setrlimit(0x6, &(0x7f0000000100)={0x1, 0x8}) 1.449040203s ago: executing program 1 (id=1445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES64=0x0], 0x48) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x181000, 0x40) fremovexattr(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc000a}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.392102623s ago: executing program 4 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003580)=ANY=[@ANYBLOB="200000006a00e36200000000000000000200000000000000080002"], 0x20}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000901000000080001ee800000000c009900feffffff14200000"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x20004000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00006000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(0xffffffffffffffff, 0x62dd, 0x0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) preadv(r8, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) 1.176657164s ago: executing program 2 (id=1447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d0000000000070000000000000095000055f8aa6700"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'virt_wifi0\x00', 0x4000}) 1.105658275s ago: executing program 2 (id=1448): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x5000410) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4e, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)) (fail_nth: 1) 17.843991ms ago: executing program 0 (id=1449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000180)="b8827bd559d2f2763f3ea91ee929b4a0911f6f2df8", 0x15}, {&(0x7f00000001c0)="71a75999b0a9825d71dae887b3004236a47354b7ae3b1b5cca8b65c68899d308f15730e835747951aa5f713c2debfdba861546bdb415e0154d1714ce1283c0baca213e8b20da3c5c967b1ca945e54a41b04ae0051b29ce6a228bc7772db2849753341d765432eccf005047184a150515442da5d580f348a2fbcd10a431a8eb3dab7e35918ab964c99844bed409ca5453b72333e5b67297444d4448", 0x9b}, {&(0x7f0000003100)="c93a7181b04ec8da", 0x8}], 0x3, 0x0, 0x0, 0xc045}, 0x20000050) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 17.14657ms ago: executing program 3 (id=1450): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x1f00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x800, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xfffffff9, 0x9}, 0x14) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000040000000000000000000000000000000100"/103], 0xfc}}, 0x0) r7 = socket(0x200000100000011, 0x803, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, r10, 0x0, 0x20000023893) 0s ago: executing program 4 (id=1451): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000137, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x6, {0x6, 0x8, "8200279e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) kernel console output (not intermixed with test programs): ice strings: Mfr=1, Product=2, SerialNumber=3 [ 112.718052][ T39] usb 4-1: Product: syz [ 112.728351][ T39] usb 4-1: Manufacturer: syz [ 112.737869][ T39] usb 4-1: SerialNumber: syz [ 112.747907][ T39] usb 4-1: config 0 descriptor?? [ 112.769897][ T2629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.776681][ T2629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.919816][ T2235] usb 3-1: Using ep0 maxpacket: 16 [ 112.931173][ T63] usb 1-1: MIDIStreaming interface descriptor not found [ 112.948045][ T63] usb 1-1: USB disconnect, device number 19 [ 113.010945][ T2629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.017816][ T2629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.039865][ T2235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.050720][ T2235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.060282][ T2235] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 113.069098][ T2235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.077766][ T2235] usb 3-1: config 0 descriptor?? [ 113.179832][ T20] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 113.449806][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 113.469868][ T39] CoreChips: probe of 4-1:0.41 failed with error -32 [ 113.560916][ T2235] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 113.570814][ T2235] hid-multitouch 0003:1FD2:6007.0010: item fetching failed at offset 4/5 [ 113.579831][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.580251][ T2235] hid-multitouch: probe of 0003:1FD2:6007.0010 failed with error -22 [ 113.599994][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.609952][ T20] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 113.623858][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.640047][ T20] usb 5-1: config 0 descriptor?? [ 113.762015][ T433] usb 3-1: USB disconnect, device number 15 [ 114.120633][ T20] hid-multitouch 0003:1FD2:6007.0011: unknown main item tag 0x0 [ 114.128184][ T20] hid-multitouch 0003:1FD2:6007.0011: item fetching failed at offset 4/5 [ 114.136581][ T20] hid-multitouch: probe of 0003:1FD2:6007.0011 failed with error -22 [ 114.160324][ T30] kauditd_printk_skb: 1325 callbacks suppressed [ 114.160340][ T30] audit: type=1326 audit(1866555047.357:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.202666][ T30] audit: type=1326 audit(1866555047.357:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.226192][ T30] audit: type=1326 audit(1866555047.357:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.250267][ T30] audit: type=1326 audit(1866555047.357:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.274133][ T30] audit: type=1326 audit(1866555047.357:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.306638][ T30] audit: type=1326 audit(1866555047.357:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.331511][ T20] usb 5-1: USB disconnect, device number 18 [ 114.347508][ T30] audit: type=1326 audit(1866555047.357:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.371246][ T30] audit: type=1326 audit(1866555047.357:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.394964][ T30] audit: type=1326 audit(1866555047.357:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.421294][ T30] audit: type=1326 audit(1866555047.357:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2672 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 114.556316][ T414] usb 4-1: USB disconnect, device number 15 [ 114.689886][ T2235] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 114.991857][ T2707] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.999391][ T2707] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.020453][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.027349][ T2707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.035165][ T2707] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.042015][ T2707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.169883][ T2235] usb 3-1: not running at top speed; connect to a high speed hub [ 115.249946][ T2235] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 115.258171][ T2235] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 115.274158][ T2235] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 115.283258][ T2235] usb 3-1: config 129 has no interface number 0 [ 115.289457][ T2235] usb 3-1: config 129 has no interface number 1 [ 115.295607][ T2235] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 115.308610][ T2235] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 115.319633][ T2235] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 115.332794][ T2235] usb 3-1: config 129 interface 135 has no altsetting 0 [ 115.339570][ T2235] usb 3-1: config 129 interface 5 has no altsetting 0 [ 115.379785][ T20] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 115.562336][ T2235] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 115.571853][ T2235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.580280][ T2235] usb 3-1: Product: syz [ 115.584629][ T2235] usb 3-1: Manufacturer: syz [ 115.589127][ T2235] usb 3-1: SerialNumber: syz [ 115.839847][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 115.970001][ T20] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 115.979225][ T20] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 115.998327][ T20] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 116.009994][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.109919][ T6] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 116.140148][ T2741] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.147722][ T2741] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.167474][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.174357][ T2741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.182384][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.189303][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.210128][ T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.219010][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.226961][ T20] usb 5-1: Product: syz [ 116.231119][ T20] usb 5-1: Manufacturer: syz [ 116.235467][ T20] usb 5-1: SerialNumber: syz [ 116.241014][ T2235] usb 3-1: MIDIStreaming interface descriptor not found [ 116.253244][ T2235] usb 3-1: USB disconnect, device number 16 [ 116.275262][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.326728][ T2744] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.334423][ T2744] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.354258][ T2744] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.361109][ T2744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.368277][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 116.370580][ T2744] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.380082][ T2744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.499889][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.510687][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.520586][ T6] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 116.529493][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.540585][ T6] usb 4-1: config 0 descriptor?? [ 116.599865][ T433] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 116.649921][ T20] usb 5-1: 0:2 : does not exist [ 116.657047][ T20] usb 5-1: USB disconnect, device number 19 [ 116.889809][ T433] usb 1-1: Using ep0 maxpacket: 16 [ 117.030078][ T433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.041662][ T6] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0 [ 117.049166][ T6] hid-multitouch 0003:1FD2:6007.0012: item fetching failed at offset 4/5 [ 117.057439][ T433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.067345][ T6] hid-multitouch: probe of 0003:1FD2:6007.0012 failed with error -22 [ 117.075289][ T433] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 117.085090][ T433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.093596][ T433] usb 1-1: config 0 descriptor?? [ 117.211591][ T2767] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.219114][ T2767] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.232981][ T414] usb 4-1: USB disconnect, device number 16 [ 117.243827][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.250702][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.259066][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.266028][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.347153][ T2774] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.354966][ T2774] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.386845][ T2774] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.393723][ T2774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.401516][ T2774] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.408383][ T2774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.570850][ T433] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 117.578422][ T433] hid-multitouch 0003:1FD2:6007.0013: item fetching failed at offset 4/5 [ 117.586889][ T433] hid-multitouch: probe of 0003:1FD2:6007.0013 failed with error -22 [ 117.774473][ T433] usb 1-1: USB disconnect, device number 20 [ 117.922960][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.931290][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.957386][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.964269][ T2790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.972533][ T2790] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.979385][ T2790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.139952][ T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 118.200979][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.208618][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.228570][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.235444][ T2796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.243355][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.250209][ T2796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.420083][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 118.580082][ T6] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 118.588882][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 118.598052][ T6] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 118.608406][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.715409][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.723408][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.763171][ T2834] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.770068][ T2834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.778237][ T2834] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.785099][ T2834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.793696][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.803534][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.811429][ T6] usb 5-1: Product: syz [ 118.815397][ T6] usb 5-1: Manufacturer: syz [ 118.819802][ T6] usb 5-1: SerialNumber: syz [ 119.019845][ T433] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 119.192477][ T6] usb 5-1: 0:2 : does not exist [ 119.199489][ T6] usb 5-1: USB disconnect, device number 20 [ 119.227007][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 119.227046][ T30] audit: type=1326 audit(1866555052.417:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.256970][ T30] audit: type=1326 audit(1866555052.417:14346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.281219][ T30] audit: type=1326 audit(1866555052.437:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.304555][ T433] usb 4-1: Using ep0 maxpacket: 16 [ 119.309642][ T30] audit: type=1326 audit(1866555052.437:14348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.338234][ T30] audit: type=1326 audit(1866555052.437:14349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.362306][ T30] audit: type=1326 audit(1866555052.437:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.391090][ T30] audit: type=1326 audit(1866555052.437:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.414694][ T30] audit: type=1326 audit(1866555052.437:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.438465][ T30] audit: type=1326 audit(1866555052.437:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.462333][ T30] audit: type=1326 audit(1866555052.437:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2840 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 119.470000][ T433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.497014][ T433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.506670][ T433] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 119.515578][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.524015][ T433] usb 4-1: config 0 descriptor?? [ 119.948776][ T321] udevd[321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 120.150893][ T433] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0 [ 120.162528][ T433] hid-multitouch 0003:1FD2:6007.0014: item fetching failed at offset 4/5 [ 120.177152][ T433] hid-multitouch: probe of 0003:1FD2:6007.0014 failed with error -22 [ 120.421143][ T2235] usb 4-1: USB disconnect, device number 17 [ 120.799830][ T63] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 120.909827][ T433] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 121.069808][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 121.189898][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.200649][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.210231][ T63] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 121.219032][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.227767][ T63] usb 3-1: config 0 descriptor?? [ 121.399861][ T433] usb 5-1: not running at top speed; connect to a high speed hub [ 121.409826][ T298] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 121.479857][ T433] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 121.488048][ T433] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 121.496036][ T433] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 121.504948][ T433] usb 5-1: config 129 has no interface number 0 [ 121.511030][ T433] usb 5-1: config 129 has no interface number 1 [ 121.517097][ T433] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.530287][ T433] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 121.541111][ T433] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 121.554002][ T433] usb 5-1: config 129 interface 135 has no altsetting 0 [ 121.560782][ T433] usb 5-1: config 129 interface 5 has no altsetting 0 [ 121.669856][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 121.710792][ T63] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 121.718350][ T63] hid-multitouch 0003:1FD2:6007.0015: item fetching failed at offset 4/5 [ 121.727006][ T63] hid-multitouch: probe of 0003:1FD2:6007.0015 failed with error -22 [ 121.739968][ T433] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 121.748830][ T433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.756827][ T433] usb 5-1: Product: syz [ 121.761095][ T433] usb 5-1: Manufacturer: syz [ 121.769657][ T433] usb 5-1: SerialNumber: syz [ 121.799967][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.811432][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.821200][ T298] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 121.830220][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.845188][ T298] usb 2-1: config 0 descriptor?? [ 121.911321][ T20] usb 3-1: USB disconnect, device number 17 [ 122.249929][ T6] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 122.380773][ T298] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 122.388293][ T298] hid-multitouch 0003:1FD2:6007.0016: item fetching failed at offset 4/5 [ 122.396922][ T298] hid-multitouch: probe of 0003:1FD2:6007.0016 failed with error -22 [ 122.420440][ T433] usb 5-1: MIDIStreaming interface descriptor not found [ 122.439246][ T433] usb 5-1: USB disconnect, device number 21 [ 122.509924][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 122.584272][ T298] usb 2-1: USB disconnect, device number 15 [ 122.629876][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.684941][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.695120][ T6] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 122.710127][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.718664][ T6] usb 4-1: config 0 descriptor?? [ 122.724858][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.732497][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.773479][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.780471][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.788396][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.795286][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.200872][ T6] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 123.208507][ T6] hid-multitouch 0003:1FD2:6007.0017: item fetching failed at offset 4/5 [ 123.216957][ T6] hid-multitouch: probe of 0003:1FD2:6007.0017 failed with error -22 [ 123.309820][ T298] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 123.389856][ T414] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 123.402626][ T63] usb 4-1: USB disconnect, device number 18 [ 123.629825][ T414] usb 2-1: Using ep0 maxpacket: 16 [ 123.719856][ T6] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.739860][ T298] usb 5-1: not running at top speed; connect to a high speed hub [ 123.749951][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.760811][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.770324][ T414] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 123.779154][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.787852][ T414] usb 2-1: config 0 descriptor?? [ 123.829862][ T298] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 123.839390][ T298] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 123.847742][ T298] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 123.856800][ T298] usb 5-1: config 129 has no interface number 0 [ 123.863049][ T298] usb 5-1: config 129 has no interface number 1 [ 123.869270][ T298] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 123.882819][ T298] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 123.893657][ T298] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 123.906551][ T298] usb 5-1: config 129 interface 135 has no altsetting 0 [ 123.913349][ T298] usb 5-1: config 129 interface 5 has no altsetting 0 [ 123.969903][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 124.119900][ T298] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 124.128793][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.136619][ T6] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 124.144480][ T6] usb 3-1: config 0 has no interface number 0 [ 124.150402][ T6] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 124.160020][ T298] usb 5-1: Product: syz [ 124.163994][ T298] usb 5-1: Manufacturer: syz [ 124.168420][ T298] usb 5-1: SerialNumber: syz [ 124.172889][ T6] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.182936][ T6] usb 3-1: config 0 interface 41 has no altsetting 0 [ 124.190007][ T63] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 124.270717][ T414] hid-multitouch 0003:1FD2:6007.0018: unknown main item tag 0x0 [ 124.278328][ T414] hid-multitouch 0003:1FD2:6007.0018: item fetching failed at offset 4/5 [ 124.286980][ T414] hid-multitouch: probe of 0003:1FD2:6007.0018 failed with error -22 [ 124.329879][ T2235] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 124.379922][ T6] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 124.388880][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.396763][ T6] usb 3-1: Product: syz [ 124.400771][ T6] usb 3-1: Manufacturer: syz [ 124.405140][ T6] usb 3-1: SerialNumber: syz [ 124.410589][ T6] usb 3-1: config 0 descriptor?? [ 124.421133][ T2955] 9pnet: p9_errstr2errno: server reported unknown error œæçæ [ 124.439859][ T2962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.446776][ T2962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.474057][ T2926] usb 2-1: USB disconnect, device number 16 [ 124.569825][ T2235] usb 1-1: Using ep0 maxpacket: 16 [ 124.599881][ T63] usb 4-1: not running at top speed; connect to a high speed hub [ 124.679859][ T63] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 124.688259][ T63] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 124.689865][ T2962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.696791][ T2235] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 124.703612][ T2962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.712802][ T63] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 124.728056][ T2235] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.736745][ T2235] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 124.746581][ T63] usb 4-1: config 129 has no interface number 0 [ 124.752674][ T63] usb 4-1: config 129 has no interface number 1 [ 124.758716][ T63] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 124.771774][ T2235] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.780583][ T63] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 124.791317][ T63] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 124.804235][ T63] usb 4-1: config 129 interface 135 has no altsetting 0 [ 124.811002][ T63] usb 4-1: config 129 interface 5 has no altsetting 0 [ 124.900375][ T298] usb 5-1: MIDIStreaming interface descriptor not found [ 124.912103][ T298] usb 5-1: USB disconnect, device number 22 [ 124.921521][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.940088][ T2235] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.949213][ T2235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.957278][ T2235] usb 1-1: Product: syz [ 124.961423][ T2235] usb 1-1: Manufacturer: syz [ 124.965819][ T2235] usb 1-1: SerialNumber: syz [ 124.970383][ T63] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 124.979239][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.987495][ T63] usb 4-1: Product: syz [ 124.991867][ T63] usb 4-1: Manufacturer: syz [ 124.996470][ T63] usb 4-1: SerialNumber: syz [ 125.159911][ T6] CoreChips: probe of 3-1:0.41 failed with error -32 [ 125.408112][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 125.408129][ T30] audit: type=1326 audit(1866555058.597:14497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.437987][ T30] audit: type=1326 audit(1866555058.597:14498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.461730][ T30] audit: type=1326 audit(1866555058.607:14499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.485242][ T2235] usb 1-1: 0:2 : does not exist [ 125.492124][ T30] audit: type=1326 audit(1866555058.607:14500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.518062][ T30] audit: type=1326 audit(1866555058.607:14501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.541820][ T30] audit: type=1326 audit(1866555058.607:14502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.565834][ T30] audit: type=1326 audit(1866555058.607:14503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.583655][ T2235] usb 1-1: USB disconnect, device number 21 [ 125.595998][ T30] audit: type=1326 audit(1866555058.607:14504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.621084][ T30] audit: type=1326 audit(1866555058.607:14505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.625346][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.645730][ T30] audit: type=1326 audit(1866555058.607:14506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 125.702867][ T63] usb 4-1: MIDIStreaming interface descriptor not found [ 125.739592][ T63] usb 4-1: USB disconnect, device number 19 [ 125.905402][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.246283][ T2926] usb 3-1: USB disconnect, device number 18 [ 126.329831][ T298] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 126.539842][ T433] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 126.679792][ T298] usb 2-1: Using ep0 maxpacket: 8 [ 126.719824][ T414] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 126.809818][ T433] usb 4-1: Using ep0 maxpacket: 16 [ 126.819984][ T298] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 126.828363][ T298] usb 2-1: config 2 has no interface number 0 [ 126.834773][ T298] usb 2-1: config 2 interface 31 has no altsetting 0 [ 126.929940][ T433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.941001][ T433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.950754][ T433] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 126.959589][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.959804][ T414] usb 5-1: Using ep0 maxpacket: 16 [ 126.968776][ T433] usb 4-1: config 0 descriptor?? [ 127.019876][ T298] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 127.028731][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.036627][ T298] usb 2-1: Product: syz [ 127.040662][ T298] usb 2-1: Manufacturer: syz [ 127.045057][ T298] usb 2-1: SerialNumber: syz [ 127.090054][ T414] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 127.098383][ T414] usb 5-1: config 0 has no interface number 0 [ 127.105881][ T414] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.119876][ T2926] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 127.148064][ T414] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.157967][ T414] usb 5-1: config 0 interface 41 has no altsetting 0 [ 127.319907][ T414] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 127.328801][ T414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.336631][ T414] usb 5-1: Product: syz [ 127.340597][ T414] usb 5-1: Manufacturer: syz [ 127.348017][ T414] usb 5-1: SerialNumber: syz [ 127.353442][ T414] usb 5-1: config 0 descriptor?? [ 127.369896][ T3015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.376793][ T3015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.379802][ T2926] usb 1-1: Using ep0 maxpacket: 16 [ 127.460864][ T433] hid-multitouch 0003:1FD2:6007.0019: unknown main item tag 0x0 [ 127.468336][ T433] hid-multitouch 0003:1FD2:6007.0019: item fetching failed at offset 4/5 [ 127.476645][ T298] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 127.484232][ T433] hid-multitouch: probe of 0003:1FD2:6007.0019 failed with error -22 [ 127.519916][ T2926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.530836][ T2926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.540400][ T2926] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 127.549213][ T2926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.557692][ T2926] usb 1-1: config 0 descriptor?? [ 127.591002][ T3015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.597773][ T3015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.661384][ T433] usb 4-1: USB disconnect, device number 20 [ 127.739799][ T298] usb 3-1: Using ep0 maxpacket: 16 [ 127.879875][ T298] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 127.888568][ T298] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 127.897087][ T298] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 127.907095][ T298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.020864][ T2926] hid-multitouch 0003:1FD2:6007.001A: unknown main item tag 0x0 [ 128.028371][ T2926] hid-multitouch 0003:1FD2:6007.001A: item fetching failed at offset 4/5 [ 128.036922][ T2926] hid-multitouch: probe of 0003:1FD2:6007.001A failed with error -22 [ 128.050006][ T414] CoreChips: probe of 5-1:0.41 failed with error -32 [ 128.080049][ T298] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.089085][ T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.096942][ T298] usb 3-1: Product: syz [ 128.100973][ T298] usb 3-1: Manufacturer: syz [ 128.105386][ T298] usb 3-1: SerialNumber: syz [ 128.223518][ T2926] usb 1-1: USB disconnect, device number 22 [ 128.489854][ T6] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 128.497387][ T298] usb 3-1: 0:2 : does not exist [ 128.503749][ T298] usb 3-1: USB disconnect, device number 19 [ 128.964289][ T3041] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.974451][ T3041] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.128956][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.135870][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.159605][ T6] usb 4-1: not running at top speed; connect to a high speed hub [ 129.171860][ T2235] usb 2-1: USB disconnect, device number 17 [ 129.179980][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.186830][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.200727][ T298] usb 5-1: USB disconnect, device number 23 [ 129.259894][ T6] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 129.268172][ T6] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 129.279102][ T6] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 129.288255][ T6] usb 4-1: config 129 has no interface number 0 [ 129.294677][ T6] usb 4-1: config 129 has no interface number 1 [ 129.301019][ T6] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 129.314592][ T6] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 129.329119][ T6] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 129.342130][ T6] usb 4-1: config 129 interface 135 has no altsetting 0 [ 129.348878][ T6] usb 4-1: config 129 interface 5 has no altsetting 0 [ 129.549891][ T6] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 129.558789][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.566618][ T6] usb 4-1: Product: syz [ 129.570581][ T6] usb 4-1: Manufacturer: syz [ 129.574990][ T6] usb 4-1: SerialNumber: syz [ 130.210321][ T6] usb 4-1: MIDIStreaming interface descriptor not found [ 130.229984][ T6] usb 4-1: USB disconnect, device number 21 [ 130.655660][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.663307][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.696503][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.703398][ T3086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.711463][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.718396][ T3086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.789473][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 130.789490][ T30] audit: type=1326 audit(1866555063.977:14691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.819524][ T30] audit: type=1326 audit(1866555063.977:14692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.843462][ T30] audit: type=1326 audit(1866555063.987:14693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.866930][ T30] audit: type=1326 audit(1866555063.987:14694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.890507][ T30] audit: type=1326 audit(1866555063.987:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.914306][ T30] audit: type=1326 audit(1866555063.987:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.943017][ T30] audit: type=1326 audit(1866555063.987:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 130.969113][ T30] audit: type=1326 audit(1866555063.987:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 131.004245][ T30] audit: type=1326 audit(1866555063.987:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 131.030503][ T30] audit: type=1326 audit(1866555063.987:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3088 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 131.067968][ T321] udevd[321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 131.530649][ T3105] overlayfs: missing 'workdir' [ 131.772031][ T3113] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.779535][ T3113] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.864897][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.871787][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.879639][ T3113] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.886521][ T3113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.472599][ T3183] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.481217][ T3183] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.515759][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.522678][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.530483][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.537316][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.969959][ T414] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 135.429807][ T414] usb 5-1: Using ep0 maxpacket: 16 [ 135.549873][ T414] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 135.562232][ T414] usb 5-1: config 0 has no interface number 0 [ 135.582261][ T414] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 135.609870][ T414] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 135.639803][ T414] usb 5-1: config 0 interface 41 has no altsetting 0 [ 135.749790][ T6] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 135.835280][ T30] kauditd_printk_skb: 1318 callbacks suppressed [ 135.835297][ T30] audit: type=1326 audit(1866555068.967:16019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3217 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 135.859923][ T414] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 135.865041][ T30] audit: type=1326 audit(1866555069.027:16020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3217 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 135.884587][ T414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.904544][ T30] audit: type=1326 audit(1866555069.027:16021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3217 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 135.925718][ T414] usb 5-1: Product: syz [ 135.933928][ T30] audit: type=1326 audit(1866555069.117:16022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3219 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 135.957183][ T414] usb 5-1: Manufacturer: syz [ 135.961915][ T414] usb 5-1: SerialNumber: syz [ 135.967071][ T414] usb 5-1: config 0 descriptor?? [ 135.979691][ T30] audit: type=1326 audit(1866555069.167:16023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 136.009935][ T3196] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.016721][ T3196] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.039821][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 136.046631][ T30] audit: type=1326 audit(1866555069.167:16024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 136.087982][ T30] audit: type=1326 audit(1866555069.197:16025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 136.121866][ T30] audit: type=1326 audit(1866555069.197:16026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 136.145453][ T30] audit: type=1326 audit(1866555069.197:16027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 136.168813][ T30] audit: type=1326 audit(1866555069.197:16028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 136.223929][ T3238] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.231885][ T3238] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.240008][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.252586][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.262481][ T6] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 136.271713][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.272843][ T3196] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.284673][ T6] usb 4-1: config 0 descriptor?? [ 136.291410][ T3196] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.295388][ T3238] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.305068][ T3238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.313291][ T3238] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.320164][ T3238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.749912][ T414] CoreChips: probe of 5-1:0.41 failed with error -32 [ 136.760896][ T6] hid-multitouch 0003:1FD2:6007.001B: unknown main item tag 0x0 [ 136.770386][ T6] hid-multitouch 0003:1FD2:6007.001B: item fetching failed at offset 4/5 [ 136.779083][ T6] hid-multitouch: probe of 0003:1FD2:6007.001B failed with error -22 [ 136.968103][ T6] usb 4-1: USB disconnect, device number 22 [ 137.751392][ T414] usb 5-1: USB disconnect, device number 24 [ 138.749785][ T414] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 138.909775][ T2235] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 138.989815][ T414] usb 4-1: Using ep0 maxpacket: 16 [ 139.109844][ T414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.120672][ T414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.130527][ T414] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 139.139388][ T414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.148664][ T414] usb 4-1: config 0 descriptor?? [ 139.153796][ T2235] usb 5-1: Using ep0 maxpacket: 16 [ 139.269852][ T2235] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 139.277841][ T2235] usb 5-1: config 0 has no interface number 0 [ 139.284032][ T2235] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 139.294011][ T2235] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 139.304061][ T2235] usb 5-1: config 0 interface 41 has no altsetting 0 [ 139.500051][ T2235] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 139.519880][ T2235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.541109][ T2235] usb 5-1: Product: syz [ 139.545195][ T2235] usb 5-1: Manufacturer: syz [ 139.550268][ T2235] usb 5-1: SerialNumber: syz [ 139.558676][ T2235] usb 5-1: config 0 descriptor?? [ 139.579866][ T3308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.587056][ T3308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.635842][ T414] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 139.644966][ T414] hid-multitouch 0003:1FD2:6007.001C: item fetching failed at offset 4/5 [ 139.653502][ T414] hid-multitouch: probe of 0003:1FD2:6007.001C failed with error -22 [ 139.699876][ T6] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 139.804108][ T3308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.810965][ T3308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.831030][ T414] usb 4-1: USB disconnect, device number 23 [ 139.969828][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 140.109885][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.120797][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.130512][ T6] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 140.139586][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.148948][ T6] usb 1-1: config 0 descriptor?? [ 140.259888][ T2235] CoreChips: probe of 5-1:0.41 failed with error -32 [ 140.610835][ T6] hid-multitouch 0003:1FD2:6007.001D: unknown main item tag 0x0 [ 140.618692][ T6] hid-multitouch 0003:1FD2:6007.001D: item fetching failed at offset 4/5 [ 140.627488][ T6] hid-multitouch: probe of 0003:1FD2:6007.001D failed with error -22 [ 140.821085][ T2235] usb 1-1: USB disconnect, device number 23 [ 141.333544][ T433] usb 5-1: USB disconnect, device number 25 [ 141.452544][ T30] kauditd_printk_skb: 977 callbacks suppressed [ 141.452560][ T30] audit: type=1326 audit(1866555074.647:17006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.490958][ T30] audit: type=1326 audit(1866555074.677:17007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.515038][ T30] audit: type=1326 audit(1866555074.677:17008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.545629][ T30] audit: type=1326 audit(1866555074.677:17009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.595689][ T30] audit: type=1326 audit(1866555074.677:17010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.658166][ T30] audit: type=1326 audit(1866555074.677:17011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.722083][ T30] audit: type=1326 audit(1866555074.677:17012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.785041][ T30] audit: type=1326 audit(1866555074.677:17013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.808718][ T433] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 141.847430][ T30] audit: type=1326 audit(1866555074.677:17014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 141.912984][ T30] audit: type=1326 audit(1866555074.677:17015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3376 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c19dbe819 code=0x7ffc0000 [ 142.159846][ T6] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.239858][ T433] usb 5-1: not running at top speed; connect to a high speed hub [ 142.329837][ T433] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 142.338036][ T433] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 142.346683][ T433] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 142.355719][ T433] usb 5-1: config 129 has no interface number 0 [ 142.361741][ T433] usb 5-1: config 129 has no interface number 1 [ 142.367797][ T433] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 142.380872][ T433] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 142.391486][ T433] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 142.404437][ T433] usb 5-1: config 129 interface 135 has no altsetting 0 [ 142.411195][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 142.416158][ T433] usb 5-1: config 129 interface 5 has no altsetting 0 [ 142.449808][ T2235] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 142.559871][ T6] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 142.567896][ T6] usb 2-1: config 0 has no interface number 0 [ 142.573855][ T6] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.583553][ T6] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.593287][ T6] usb 2-1: config 0 interface 41 has no altsetting 0 [ 142.599880][ T433] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 142.608625][ T433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.616614][ T433] usb 5-1: Product: syz [ 142.620538][ T433] usb 5-1: Manufacturer: syz [ 142.624944][ T433] usb 5-1: SerialNumber: syz [ 142.799869][ T6] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 142.809044][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.816818][ T6] usb 2-1: Product: syz [ 142.820916][ T6] usb 2-1: Manufacturer: syz [ 142.825337][ T6] usb 2-1: SerialNumber: syz [ 142.830633][ T6] usb 2-1: config 0 descriptor?? [ 142.849848][ T3388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.849853][ T2235] usb 3-1: not running at top speed; connect to a high speed hub [ 142.849881][ T3388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.890596][ T3374] 9pnet: Insufficient options for proto=fd [ 142.929876][ T2235] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 142.938121][ T2235] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 142.946123][ T2235] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 142.955019][ T2235] usb 3-1: config 129 has no interface number 0 [ 142.961138][ T2235] usb 3-1: config 129 has no interface number 1 [ 142.967194][ T2235] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 142.980726][ T2235] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 142.991532][ T2235] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 143.004508][ T2235] usb 3-1: config 129 interface 135 has no altsetting 0 [ 143.011297][ T2235] usb 3-1: config 129 interface 5 has no altsetting 0 [ 143.128586][ T3388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.136982][ T3388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.189897][ T2235] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 143.200277][ T2235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.208182][ T2235] usb 3-1: Product: syz [ 143.212495][ T2235] usb 3-1: Manufacturer: syz [ 143.216933][ T2235] usb 3-1: SerialNumber: syz [ 143.360334][ T433] usb 5-1: MIDIStreaming interface descriptor not found [ 143.382170][ T433] usb 5-1: USB disconnect, device number 26 [ 143.409795][ T414] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 143.503529][ T3390] 9pnet: Insufficient options for proto=fd [ 143.589908][ T6] CoreChips: probe of 2-1:0.41 failed with error -32 [ 143.660736][ T414] usb 1-1: Using ep0 maxpacket: 16 [ 143.799916][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.810721][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.820328][ T414] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 143.829215][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.839068][ T414] usb 1-1: config 0 descriptor?? [ 143.960378][ T2235] usb 3-1: MIDIStreaming interface descriptor not found [ 143.970500][ T2235] usb 3-1: USB disconnect, device number 20 [ 143.982256][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.101795][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.109554][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.129157][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.136058][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.143893][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.150780][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.320777][ T414] hid-multitouch 0003:1FD2:6007.001E: unknown main item tag 0x0 [ 144.328359][ T414] hid-multitouch 0003:1FD2:6007.001E: item fetching failed at offset 4/5 [ 144.338788][ T414] hid-multitouch: probe of 0003:1FD2:6007.001E failed with error -22 [ 144.521655][ T433] usb 1-1: USB disconnect, device number 24 [ 144.827642][ T433] usb 2-1: USB disconnect, device number 18 [ 145.673727][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.681667][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.730247][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.737158][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.772801][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.779698][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.309820][ T298] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 146.461884][ T30] kauditd_printk_skb: 690 callbacks suppressed [ 146.461902][ T30] audit: type=1326 audit(1866555079.657:17706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f815dd597e7 code=0x7ffc0000 [ 146.519862][ T30] audit: type=1326 audit(1866555079.657:17707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815dcfe1a9 code=0x7ffc0000 [ 146.549913][ T298] usb 5-1: Using ep0 maxpacket: 16 [ 146.573021][ T30] audit: type=1326 audit(1866555079.657:17708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 146.606253][ T30] audit: type=1326 audit(1866555079.697:17709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f815dd597e7 code=0x7ffc0000 [ 146.643588][ T30] audit: type=1326 audit(1866555079.697:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815dcfe1a9 code=0x7ffc0000 [ 146.667231][ T30] audit: type=1326 audit(1866555079.697:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 146.691628][ T30] audit: type=1326 audit(1866555079.697:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f815dd597e7 code=0x7ffc0000 [ 146.699938][ T298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.715502][ T30] audit: type=1326 audit(1866555079.697:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815dcfe1a9 code=0x7ffc0000 [ 146.750107][ T30] audit: type=1326 audit(1866555079.697:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 146.759793][ T298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.773829][ T30] audit: type=1326 audit(1866555079.707:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f815dd597e7 code=0x7ffc0000 [ 146.797385][ T298] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 146.835431][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.854313][ T298] usb 5-1: config 0 descriptor?? [ 146.919805][ T414] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 147.028350][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.037174][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.065446][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.072339][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.080716][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.087611][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.159671][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.159785][ T414] usb 3-1: Using ep0 maxpacket: 16 [ 147.167939][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.200089][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.206978][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.216632][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.223514][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.289864][ T414] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 147.309828][ T414] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 147.333694][ T414] usb 3-1: config 1 interface 0 has no altsetting 0 [ 147.350825][ T298] hid-multitouch 0003:1FD2:6007.001F: unknown main item tag 0x0 [ 147.362563][ T298] hid-multitouch 0003:1FD2:6007.001F: item fetching failed at offset 4/5 [ 147.374150][ T298] hid-multitouch: probe of 0003:1FD2:6007.001F failed with error -22 [ 147.509867][ T414] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.518807][ T414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.526566][ T414] usb 3-1: Product: 꾼邨ꕔ뮎᫅汸튾㲨៓挓䒱㠖㾞켘䷚쮡뱩數㴑ê”䧜䨺ﵥ踂ବ疱ã°ë‚ˆî­è¤¿ï¾©ã¬»ç½‰æ †é¦¦ä˜ºå¤¹ì»ã…‡é¤¶ã¦í–­ï¾¾é€ªá¯»æ¤£è•’ꡖ㞠椧ì¦ã©ªã–‚걄ꀡ꽥çœî®‘ëƒå세◦飵≲ⱚ繵뱽峋䠾ê¸è’„簣䫉ã¿ì²®ë‰¦ê¿¥ê«–럘郟꓃⡄紇薩ᛪæ瞒글ﲂ汴缕ì³î²¨ì†å¿¹æ†ç¬ [ 147.557194][ T414] usb 3-1: Manufacturer: ã · [ 147.557825][ T433] usb 5-1: USB disconnect, device number 27 [ 147.561539][ T414] usb 3-1: SerialNumber: ä€ [ 147.579867][ T3480] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.586701][ T3480] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.669857][ T298] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 147.764034][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.771708][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.802434][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.809268][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.817085][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.823935][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.919821][ T298] usb 4-1: Using ep0 maxpacket: 16 [ 148.059851][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.070702][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.080459][ T414] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 148.086924][ T298] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 148.096835][ T414] usb 3-1: USB disconnect, device number 21 [ 148.104659][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.128765][ T298] usb 4-1: config 0 descriptor?? [ 148.591576][ T298] hid-multitouch 0003:1FD2:6007.0020: unknown main item tag 0x0 [ 148.600043][ T298] hid-multitouch 0003:1FD2:6007.0020: item fetching failed at offset 4/5 [ 148.608514][ T298] hid-multitouch: probe of 0003:1FD2:6007.0020 failed with error -22 [ 148.648359][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.656423][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.683881][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.690783][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.698458][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.705317][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.791925][ T2235] usb 4-1: USB disconnect, device number 24 [ 148.989660][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.998420][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.042096][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.049053][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.056908][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.063855][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.309807][ T2235] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 149.614289][ T2235] usb 1-1: Using ep0 maxpacket: 8 [ 150.713938][ T2235] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 150.722137][ T2235] usb 1-1: config 2 has no interface number 0 [ 150.728037][ T2235] usb 1-1: config 2 interface 31 has no altsetting 0 [ 150.889877][ T2235] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 150.898745][ T2235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.919808][ T2235] usb 1-1: Product: syz [ 150.923896][ T2235] usb 1-1: Manufacturer: syz [ 150.928515][ T2235] usb 1-1: SerialNumber: syz [ 150.949804][ T2926] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 150.957265][ T298] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 151.209807][ T2926] usb 3-1: Using ep0 maxpacket: 16 [ 151.214813][ T298] usb 5-1: Using ep0 maxpacket: 16 [ 151.369843][ T2926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.380546][ T2926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.390207][ T298] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 151.398088][ T298] usb 5-1: config 0 has no interface number 0 [ 151.404030][ T2926] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 151.412870][ T298] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 151.422507][ T2926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.430700][ T298] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 151.441107][ T2926] usb 3-1: config 0 descriptor?? [ 151.445921][ T298] usb 5-1: config 0 interface 41 has no altsetting 0 [ 151.659996][ T298] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 151.668915][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.676843][ T298] usb 5-1: Product: syz [ 151.689159][ T298] usb 5-1: Manufacturer: syz [ 151.696936][ T298] usb 5-1: SerialNumber: syz [ 151.708087][ T298] usb 5-1: config 0 descriptor?? [ 151.729888][ T3569] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.737858][ T3569] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.771179][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.778938][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.805118][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.812030][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.819876][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.826745][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.910709][ T2926] hid-multitouch 0003:1FD2:6007.0021: unknown main item tag 0x0 [ 151.918280][ T2926] hid-multitouch 0003:1FD2:6007.0021: item fetching failed at offset 4/5 [ 151.926689][ T2926] hid-multitouch: probe of 0003:1FD2:6007.0021 failed with error -22 [ 151.970904][ T3569] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.977809][ T3569] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.111062][ T433] usb 3-1: USB disconnect, device number 22 [ 152.197410][ T2235] usb 1-1: USB disconnect, device number 25 [ 152.419847][ T298] CoreChips: probe of 5-1:0.41 failed with error -32 [ 152.806219][ T30] kauditd_printk_skb: 397 callbacks suppressed [ 152.806234][ T30] audit: type=1400 audit(1866555085.997:18113): avc: denied { read } for pid=3599 comm="syz.3.1228" name="rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.874304][ T30] audit: type=1400 audit(1866555086.067:18114): avc: denied { open } for pid=3599 comm="syz.3.1228" path="/dev/rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.877528][ T3609] hub 6-0:1.0: USB hub found [ 152.898839][ T30] audit: type=1400 audit(1866555086.067:18115): avc: denied { ioctl } for pid=3599 comm="syz.3.1228" path="/dev/rtc0" dev="devtmpfs" ino=255 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.904087][ T3609] hub 6-0:1.0: 1 port detected [ 152.927126][ T30] audit: type=1400 audit(1866555086.067:18116): avc: denied { write } for pid=3599 comm="syz.3.1228" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.372845][ T39] usb 5-1: USB disconnect, device number 28 [ 154.475019][ T30] audit: type=1326 audit(1866555087.587:18117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 154.580202][ T30] audit: type=1326 audit(1866555087.587:18118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 154.620354][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.638722][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.650746][ T30] audit: type=1326 audit(1866555087.587:18119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 154.678455][ T30] audit: type=1326 audit(1866555087.587:18120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 154.686444][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.702036][ T30] audit: type=1326 audit(1866555087.587:18121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 154.708576][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.739108][ T30] audit: type=1326 audit(1866555087.587:18122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effa7ae11b0 code=0x7ffc0000 [ 154.761567][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.769541][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.209905][ T433] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 155.469815][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 155.559837][ T6] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 155.599840][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.616257][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.626655][ T433] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 155.635839][ T433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.654520][ T433] usb 3-1: config 0 descriptor?? [ 155.739767][ T2926] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 155.809769][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 155.949879][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.961204][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.970794][ T6] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 155.979597][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.987453][ T2926] usb 4-1: Using ep0 maxpacket: 16 [ 155.993378][ T6] usb 5-1: config 0 descriptor?? [ 156.120787][ T433] hid-multitouch 0003:1FD2:6007.0022: unknown main item tag 0x0 [ 156.128326][ T2926] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 156.136185][ T2926] usb 4-1: config 0 has no interface number 0 [ 156.142089][ T2926] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 156.151826][ T433] hid-multitouch 0003:1FD2:6007.0022: item fetching failed at offset 4/5 [ 156.160306][ T433] hid-multitouch: probe of 0003:1FD2:6007.0022 failed with error -22 [ 156.169052][ T2926] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.178894][ T2926] usb 4-1: config 0 interface 41 has no altsetting 0 [ 156.345024][ T433] usb 3-1: USB disconnect, device number 23 [ 156.359933][ T2926] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 156.376560][ T2926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.384714][ T2926] usb 4-1: Product: syz [ 156.388821][ T2926] usb 4-1: Manufacturer: syz [ 156.393553][ T2926] usb 4-1: SerialNumber: syz [ 156.399007][ T2926] usb 4-1: config 0 descriptor?? [ 156.419843][ T3652] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 156.426637][ T3652] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 156.674215][ T6] hid-multitouch 0003:1FD2:6007.0023: unknown main item tag 0x0 [ 156.682385][ T6] hid-multitouch 0003:1FD2:6007.0023: item fetching failed at offset 4/5 [ 156.690846][ T6] hid-multitouch: probe of 0003:1FD2:6007.0023 failed with error -22 [ 156.699730][ T6] usb 5-1: USB disconnect, device number 29 [ 156.700137][ T3652] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 156.713921][ T3652] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 157.119795][ T39] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 157.169856][ T2926] CoreChips: probe of 4-1:0.41 failed with error -32 [ 157.201581][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.210335][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.236416][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.243348][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.251597][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.258521][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.311099][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.319579][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.350095][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.357083][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.366771][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.373673][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.382312][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 157.499946][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.510919][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.522799][ T39] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 157.531776][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.543287][ T39] usb 3-1: config 0 descriptor?? [ 157.818404][ T30] kauditd_printk_skb: 889 callbacks suppressed [ 157.818443][ T30] audit: type=1326 audit(1866555091.007:19012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf9e8e7e7 code=0x7ffc0000 [ 157.848124][ T30] audit: type=1326 audit(1866555091.027:19013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf9e331a9 code=0x7ffc0000 [ 157.873119][ T30] audit: type=1326 audit(1866555091.027:19014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 157.898124][ T30] audit: type=1326 audit(1866555091.037:19015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf9e8e7e7 code=0x7ffc0000 [ 157.921545][ T30] audit: type=1326 audit(1866555091.037:19016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf9e331a9 code=0x7ffc0000 [ 157.945784][ T30] audit: type=1326 audit(1866555091.037:19017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf9e8e7e7 code=0x7ffc0000 [ 157.969145][ T30] audit: type=1326 audit(1866555091.037:19018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf9e331a9 code=0x7ffc0000 [ 157.993023][ T30] audit: type=1326 audit(1866555091.037:19019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fcaf9e97819 code=0x7ffc0000 [ 158.016482][ T30] audit: type=1326 audit(1866555091.047:19020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf9e8e7e7 code=0x7ffc0000 [ 158.020945][ T39] hid-multitouch 0003:1FD2:6007.0024: unknown main item tag 0x0 [ 158.047405][ T30] audit: type=1326 audit(1866555091.047:19021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf9e331a9 code=0x7ffc0000 [ 158.070989][ T39] hid-multitouch 0003:1FD2:6007.0024: item fetching failed at offset 4/5 [ 158.081903][ T39] hid-multitouch: probe of 0003:1FD2:6007.0024 failed with error -22 [ 158.216070][ T321] udevd[321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 158.243342][ T6] usb 4-1: USB disconnect, device number 25 [ 158.278553][ T20] usb 3-1: USB disconnect, device number 24 [ 158.619810][ T2926] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 159.059822][ T2926] usb 5-1: not running at top speed; connect to a high speed hub [ 159.159839][ T2926] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 159.172750][ T2926] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 159.188762][ T2926] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 159.206540][ T2926] usb 5-1: config 129 has no interface number 0 [ 159.227323][ T2926] usb 5-1: config 129 has no interface number 1 [ 159.234563][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.249983][ T2926] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 159.270628][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.283666][ T2926] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 159.300558][ T2926] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 159.314432][ T2926] usb 5-1: config 129 interface 135 has no altsetting 0 [ 159.322866][ T2926] usb 5-1: config 129 interface 5 has no altsetting 0 [ 159.331977][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.338942][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.346607][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.353497][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.425637][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.433699][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.509885][ T2926] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 159.518890][ T2926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.521801][ T39] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 159.539055][ T2926] usb 5-1: Product: syz [ 159.549497][ T2926] usb 5-1: Manufacturer: syz [ 159.559510][ T2926] usb 5-1: SerialNumber: syz [ 159.769785][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 159.889923][ T39] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 159.899357][ T39] usb 2-1: config 0 has no interface number 0 [ 159.910091][ T39] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 159.992154][ T39] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 160.002004][ T39] usb 2-1: config 0 interface 41 has no altsetting 0 [ 160.159903][ T39] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 160.190447][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.199636][ T39] usb 2-1: Product: syz [ 160.203816][ T39] usb 2-1: Manufacturer: syz [ 160.208389][ T39] usb 2-1: SerialNumber: syz [ 160.229484][ T39] usb 2-1: config 0 descriptor?? [ 160.260187][ T3716] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.269145][ T3716] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.340747][ T2926] usb 5-1: MIDIStreaming interface descriptor not found [ 160.357334][ T2926] usb 5-1: USB disconnect, device number 30 [ 160.504631][ T3716] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.514746][ T3716] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.679800][ T20] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 160.939773][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 160.979903][ T39] CoreChips: probe of 2-1:0.41 failed with error -32 [ 161.059835][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.070618][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.080366][ T20] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 161.089299][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.102038][ T20] usb 1-1: config 0 descriptor?? [ 161.580773][ T20] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0 [ 161.588572][ T20] hid-multitouch 0003:1FD2:6007.0025: item fetching failed at offset 4/5 [ 161.597372][ T20] hid-multitouch: probe of 0003:1FD2:6007.0025 failed with error -22 [ 161.902941][ T39] usb 1-1: USB disconnect, device number 26 [ 162.115561][ T433] usb 2-1: USB disconnect, device number 19 [ 162.824307][ T30] kauditd_printk_skb: 719 callbacks suppressed [ 162.824323][ T30] audit: type=1326 audit(1866555096.017:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effa7ad97e7 code=0x7ffc0000 [ 162.853619][ T30] audit: type=1326 audit(1866555096.017:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effa7a7e1a9 code=0x7ffc0000 [ 162.877237][ T30] audit: type=1326 audit(1866555096.017:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 162.900793][ T30] audit: type=1326 audit(1866555096.027:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a700727e7 code=0x7ffc0000 [ 162.924262][ T30] audit: type=1326 audit(1866555096.027:19745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a700171a9 code=0x7ffc0000 [ 162.947874][ T30] audit: type=1326 audit(1866555096.027:19746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 162.971538][ T30] audit: type=1326 audit(1866555096.057:19747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effa7ad97e7 code=0x7ffc0000 [ 162.999793][ T30] audit: type=1326 audit(1866555096.057:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effa7a7e1a9 code=0x7ffc0000 [ 163.023525][ T30] audit: type=1326 audit(1866555096.057:19749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 163.047205][ T30] audit: type=1326 audit(1866555096.057:19750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.2.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effa7ad97e7 code=0x7ffc0000 [ 163.102517][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.110841][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.145856][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.152804][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.160882][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.167739][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.029812][ T433] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 164.269883][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 164.389852][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.400566][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.410178][ T433] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 164.419108][ T433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.489047][ T433] usb 3-1: config 0 descriptor?? [ 164.936042][ T3832] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.943646][ T3832] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.951705][ T433] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 164.962416][ T433] hid-multitouch 0003:1FD2:6007.0026: item fetching failed at offset 4/5 [ 164.970879][ T433] hid-multitouch: probe of 0003:1FD2:6007.0026 failed with error -22 [ 165.153790][ T433] usb 3-1: USB disconnect, device number 25 [ 165.329831][ T2926] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 165.532552][ T3848] hub 6-0:1.0: USB hub found [ 165.537092][ T3848] hub 6-0:1.0: 1 port detected [ 165.769873][ T2926] usb 1-1: not running at top speed; connect to a high speed hub [ 166.029812][ T2926] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 166.043269][ T2926] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 166.059576][ T2926] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 166.078755][ T2926] usb 1-1: config 129 has no interface number 0 [ 166.092440][ T2926] usb 1-1: config 129 has no interface number 1 [ 166.104878][ T2926] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 166.124212][ T2926] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 166.146324][ T2926] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 166.159931][ T2926] usb 1-1: config 129 interface 135 has no altsetting 0 [ 166.166749][ T2926] usb 1-1: config 129 interface 5 has no altsetting 0 [ 166.349923][ T2926] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 166.359806][ T2926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.368084][ T2926] usb 1-1: Product: syz [ 166.373124][ T2926] usb 1-1: Manufacturer: syz [ 166.377619][ T2926] usb 1-1: SerialNumber: syz [ 166.621079][ T3836] 9pnet: Insufficient options for proto=fd [ 166.699785][ T433] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 167.050422][ T2926] usb 1-1: MIDIStreaming interface descriptor not found [ 167.060207][ T2926] usb 1-1: USB disconnect, device number 27 [ 167.119875][ T433] usb 4-1: not running at top speed; connect to a high speed hub [ 167.210868][ T433] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 167.219300][ T433] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 167.227445][ T433] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 167.236441][ T433] usb 4-1: config 129 has no interface number 0 [ 167.242478][ T433] usb 4-1: config 129 has no interface number 1 [ 167.248556][ T433] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 167.261580][ T433] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 167.272489][ T433] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 167.285464][ T433] usb 4-1: config 129 interface 135 has no altsetting 0 [ 167.292232][ T433] usb 4-1: config 129 interface 5 has no altsetting 0 [ 167.328538][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.336309][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.357133][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.364032][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.372167][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.379026][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.469858][ T433] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 167.478794][ T433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.486709][ T433] usb 4-1: Product: syz [ 167.491160][ T433] usb 4-1: Manufacturer: syz [ 167.495573][ T433] usb 4-1: SerialNumber: syz [ 167.679789][ T2926] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 167.690212][ T414] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 167.897943][ T30] kauditd_printk_skb: 1539 callbacks suppressed [ 167.897973][ T30] audit: type=1326 audit(1866555101.087:21290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 167.929104][ T30] audit: type=1326 audit(1866555101.087:21291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 167.930089][ T414] usb 1-1: Using ep0 maxpacket: 16 [ 167.953093][ T2926] usb 3-1: Using ep0 maxpacket: 16 [ 167.963634][ T30] audit: type=1326 audit(1866555101.097:21292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 167.987371][ T30] audit: type=1326 audit(1866555101.097:21293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.011782][ T30] audit: type=1326 audit(1866555101.097:21294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.035640][ T30] audit: type=1326 audit(1866555101.097:21295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.060187][ T30] audit: type=1326 audit(1866555101.097:21296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.085396][ T30] audit: type=1326 audit(1866555101.097:21297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.099876][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.109273][ T30] audit: type=1326 audit(1866555101.097:21298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.119779][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.143323][ T30] audit: type=1326 audit(1866555101.097:21299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815dd62819 code=0x7ffc0000 [ 168.156703][ T414] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 168.184855][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.199851][ T2926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.204426][ T414] usb 1-1: config 0 descriptor?? [ 168.215596][ T2926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.230822][ T2926] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 168.252564][ T2926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.273298][ T2926] usb 3-1: config 0 descriptor?? [ 168.313232][ T3892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1329'. [ 168.460366][ T433] usb 4-1: MIDIStreaming interface descriptor not found [ 168.469690][ T433] usb 4-1: USB disconnect, device number 26 [ 168.484350][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.690606][ T414] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 168.698388][ T414] hid-multitouch 0003:1FD2:6007.0027: item fetching failed at offset 4/5 [ 168.706897][ T414] hid-multitouch: probe of 0003:1FD2:6007.0027 failed with error -22 [ 168.760566][ T2926] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 168.768260][ T2926] hid-multitouch 0003:1FD2:6007.0028: item fetching failed at offset 4/5 [ 168.777013][ T2926] hid-multitouch: probe of 0003:1FD2:6007.0028 failed with error -22 [ 168.915563][ T2926] usb 1-1: USB disconnect, device number 28 [ 168.961646][ T26] usb 3-1: USB disconnect, device number 26 [ 170.719805][ T315] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 170.959781][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 171.079855][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.091001][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.100956][ T315] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 171.110098][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.118889][ T315] usb 2-1: config 0 descriptor?? [ 171.169836][ T414] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 171.409795][ T414] usb 5-1: Using ep0 maxpacket: 16 [ 171.529866][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.540655][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.550659][ T414] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 171.559582][ T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.568405][ T414] usb 5-1: config 0 descriptor?? [ 171.600974][ T315] hid-multitouch 0003:1FD2:6007.0029: unknown main item tag 0x0 [ 171.608484][ T315] hid-multitouch 0003:1FD2:6007.0029: item fetching failed at offset 4/5 [ 171.619977][ T315] hid-multitouch: probe of 0003:1FD2:6007.0029 failed with error -22 [ 171.803066][ T433] usb 2-1: USB disconnect, device number 20 [ 172.050680][ T414] hid-multitouch 0003:1FD2:6007.002A: unknown main item tag 0x0 [ 172.058254][ T414] hid-multitouch 0003:1FD2:6007.002A: item fetching failed at offset 4/5 [ 172.066702][ T414] hid-multitouch: probe of 0003:1FD2:6007.002A failed with error -22 [ 172.251295][ T414] usb 5-1: USB disconnect, device number 31 [ 172.517837][ T3968] FAULT_INJECTION: forcing a failure. [ 172.517837][ T3968] name failslab, interval 1, probability 0, space 0, times 0 [ 172.530815][ T3968] CPU: 0 PID: 3968 Comm: syz.3.1357 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 172.541915][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.551818][ T3968] Call Trace: [ 172.554931][ T3968] [ 172.557708][ T3968] dump_stack_lvl+0x151/0x1c0 [ 172.562237][ T3968] ? io_uring_drop_tctx_refs+0x190/0x190 [ 172.567692][ T3968] dump_stack+0x15/0x20 [ 172.571683][ T3968] should_fail+0x3c6/0x510 [ 172.575938][ T3968] __should_failslab+0xa4/0xe0 [ 172.580536][ T3968] should_failslab+0x9/0x20 [ 172.584877][ T3968] slab_pre_alloc_hook+0x37/0xd0 [ 172.589649][ T3968] __kmalloc+0x6d/0x270 [ 172.593643][ T3968] ? kvmalloc_node+0x1f0/0x4d0 [ 172.598243][ T3968] kvmalloc_node+0x1f0/0x4d0 [ 172.602670][ T3968] ? vm_mmap+0xb0/0xb0 [ 172.606591][ T3968] seq_read_iter+0x1ff/0xd00 [ 172.611349][ T3968] ? kstrtol_from_user+0x310/0x310 [ 172.616330][ T3968] ? iov_iter_init+0x53/0x190 [ 172.620904][ T3968] seq_read+0x44f/0x5c0 [ 172.624887][ T3968] ? __kasan_check_write+0x14/0x20 [ 172.629839][ T3968] ? seq_open+0x130/0x130 [ 172.634016][ T3968] ? fsnotify_perm+0x6a/0x5b0 [ 172.638520][ T3968] ? fsnotify_perm+0x269/0x5b0 [ 172.643122][ T3968] ? security_file_permission+0x86/0xb0 [ 172.648584][ T3968] ? seq_open+0x130/0x130 [ 172.652759][ T3968] vfs_read+0x27d/0xd40 [ 172.656741][ T3968] ? __kasan_check_write+0x14/0x20 [ 172.661690][ T3968] ? kernel_read+0x1f0/0x1f0 [ 172.666121][ T3968] ? __fget_files+0x31e/0x380 [ 172.670633][ T3968] ? __fdget+0x1bc/0x240 [ 172.674723][ T3968] __x64_sys_pread64+0x1a6/0x230 [ 172.679481][ T3968] ? ksys_pread64+0x1d0/0x1d0 [ 172.683992][ T3968] ? debug_smp_processor_id+0x17/0x20 [ 172.689208][ T3968] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 172.695240][ T3968] ? exit_to_user_mode_prepare+0x39/0xa0 [ 172.700671][ T3968] x64_sys_call+0x9f/0x9a0 [ 172.704925][ T3968] do_syscall_64+0x3b/0xb0 [ 172.709172][ T3968] ? clear_bhb_loop+0x35/0x90 [ 172.713684][ T3968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.719414][ T3968] RIP: 0033:0x7f2c19dbe819 [ 172.723667][ T3968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.743117][ T3968] RSP: 002b:00007f2c18437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 172.751356][ T3968] RAX: ffffffffffffffda RBX: 00007f2c19f75fa0 RCX: 00007f2c19dbe819 [ 172.759282][ T3968] RDX: 00000000000000fb RSI: 0000000020000240 RDI: 0000000000000003 [ 172.767090][ T3968] RBP: 00007f2c18437090 R08: 0000000000000000 R09: 0000000000000000 [ 172.774905][ T3968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.782725][ T3968] R13: 0000000000000000 R14: 00007f2c19f75fa0 R15: 00007ffd7efd1a68 [ 172.790530][ T3968] [ 172.903208][ T30] kauditd_printk_skb: 1202 callbacks suppressed [ 172.903226][ T30] audit: type=1326 audit(1866555106.097:22502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a700727e7 code=0x7ffc0000 [ 172.936475][ T30] audit: type=1326 audit(1866555106.097:22503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a700171a9 code=0x7ffc0000 [ 172.960561][ T30] audit: type=1326 audit(1866555106.097:22504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 172.984682][ T30] audit: type=1326 audit(1866555106.097:22505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a700727e7 code=0x7ffc0000 [ 173.023388][ T30] audit: type=1326 audit(1866555106.097:22506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a700171a9 code=0x7ffc0000 [ 173.060116][ T30] audit: type=1326 audit(1866555106.097:22507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 173.093326][ T30] audit: type=1326 audit(1866555106.097:22508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a700727e7 code=0x7ffc0000 [ 173.119197][ T30] audit: type=1326 audit(1866555106.097:22509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a700171a9 code=0x7ffc0000 [ 173.143994][ T30] audit: type=1326 audit(1866555106.097:22510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8a7007b819 code=0x7ffc0000 [ 173.175624][ T30] audit: type=1326 audit(1866555106.137:22511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a700727e7 code=0x7ffc0000 [ 173.402903][ T3991] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.410917][ T3991] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.437989][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.444941][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.453609][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.460511][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.660180][ T4016] FAULT_INJECTION: forcing a failure. [ 174.660180][ T4016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.673070][ T4016] CPU: 0 PID: 4016 Comm: syz.3.1373 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 174.684918][ T4016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.694814][ T4016] Call Trace: [ 174.697937][ T4016] [ 174.700715][ T4016] dump_stack_lvl+0x151/0x1c0 [ 174.705230][ T4016] ? io_uring_drop_tctx_refs+0x190/0x190 [ 174.710703][ T4016] dump_stack+0x15/0x20 [ 174.714689][ T4016] should_fail+0x3c6/0x510 [ 174.718948][ T4016] should_fail_usercopy+0x1a/0x20 [ 174.723805][ T4016] _copy_from_user+0x20/0xd0 [ 174.728247][ T4016] ___sys_recvmsg+0x150/0x690 [ 174.732752][ T4016] ? __sys_recvmsg+0x260/0x260 [ 174.737366][ T4016] ? __fdget+0x1bc/0x240 [ 174.741583][ T4016] __x64_sys_recvmsg+0x1dc/0x2b0 [ 174.746350][ T4016] ? ___sys_recvmsg+0x690/0x690 [ 174.751043][ T4016] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 174.756938][ T4016] ? exit_to_user_mode_prepare+0x39/0xa0 [ 174.762414][ T4016] x64_sys_call+0x171/0x9a0 [ 174.766745][ T4016] do_syscall_64+0x3b/0xb0 [ 174.770998][ T4016] ? clear_bhb_loop+0x35/0x90 [ 174.775512][ T4016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.781244][ T4016] RIP: 0033:0x7f2c19dbe819 [ 174.785493][ T4016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.804935][ T4016] RSP: 002b:00007f2c18437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 174.813624][ T4016] RAX: ffffffffffffffda RBX: 00007f2c19f75fa0 RCX: 00007f2c19dbe819 [ 174.821520][ T4016] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006 [ 174.829335][ T4016] RBP: 00007f2c18437090 R08: 0000000000000000 R09: 0000000000000000 [ 174.837145][ T4016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.844957][ T4016] R13: 0000000000000000 R14: 00007f2c19f75fa0 R15: 00007ffd7efd1a68 [ 174.852813][ T4016] [ 175.101037][ T4036] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1379'. [ 175.820669][ T4055] FAULT_INJECTION: forcing a failure. [ 175.820669][ T4055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.839869][ T4055] CPU: 0 PID: 4055 Comm: syz.4.1385 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 175.850987][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 175.860893][ T4055] Call Trace: [ 175.864003][ T4055] [ 175.866785][ T4055] dump_stack_lvl+0x151/0x1c0 [ 175.871300][ T4055] ? io_uring_drop_tctx_refs+0x190/0x190 [ 175.876762][ T4055] dump_stack+0x15/0x20 [ 175.880752][ T4055] should_fail+0x3c6/0x510 [ 175.885006][ T4055] should_fail_usercopy+0x1a/0x20 [ 175.889875][ T4055] _copy_to_user+0x20/0x90 [ 175.894124][ T4055] simple_read_from_buffer+0xc7/0x150 [ 175.899331][ T4055] proc_fail_nth_read+0x1a3/0x210 [ 175.904188][ T4055] ? proc_fault_inject_write+0x390/0x390 [ 175.909742][ T4055] ? fsnotify_perm+0x269/0x5b0 [ 175.914341][ T4055] ? security_file_permission+0x86/0xb0 [ 175.919721][ T4055] ? proc_fault_inject_write+0x390/0x390 [ 175.925191][ T4055] vfs_read+0x27d/0xd40 [ 175.929185][ T4055] ? kernel_read+0x1f0/0x1f0 [ 175.933613][ T4055] ? __kasan_check_write+0x14/0x20 [ 175.938556][ T4055] ? mutex_lock+0xb6/0x1e0 [ 175.942814][ T4055] ? wait_for_completion_killable_timeout+0x10/0x10 [ 175.949233][ T4055] ? __fdget_pos+0x2e7/0x3a0 [ 175.953661][ T4055] ? ksys_read+0x77/0x2c0 [ 175.957825][ T4055] ksys_read+0x199/0x2c0 [ 175.961906][ T4055] ? fput_many+0x160/0x1b0 [ 175.966161][ T4055] ? vfs_write+0x1110/0x1110 [ 175.970584][ T4055] ? debug_smp_processor_id+0x17/0x20 [ 175.975791][ T4055] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 175.981693][ T4055] __x64_sys_read+0x7b/0x90 [ 175.986037][ T4055] x64_sys_call+0x28/0x9a0 [ 175.990284][ T4055] do_syscall_64+0x3b/0xb0 [ 175.994537][ T4055] ? clear_bhb_loop+0x35/0x90 [ 175.999049][ T4055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.004797][ T4055] RIP: 0033:0x7fcaf9e9625c [ 176.009031][ T4055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 176.028560][ T4055] RSP: 002b:00007fcaf8510030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.036805][ T4055] RAX: ffffffffffffffda RBX: 00007fcafa04efa0 RCX: 00007fcaf9e9625c [ 176.044614][ T4055] RDX: 000000000000000f RSI: 00007fcaf85100a0 RDI: 0000000000000003 [ 176.052427][ T4055] RBP: 00007fcaf8510090 R08: 0000000000000000 R09: 0000000000000000 [ 176.060239][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.068051][ T4055] R13: 0000000000000000 R14: 00007fcafa04efa0 R15: 00007fff8ede1d28 [ 176.075867][ T4055] [ 176.267613][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.274532][ T4068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.283258][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.290141][ T4068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.469751][ T26] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 176.586002][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xff [ 176.600241][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xff [ 176.614436][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xff [ 176.628173][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xff [ 176.640975][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8ff [ 176.656457][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xff [ 176.666097][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x8ff, nop [ 176.677525][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8ff [ 176.686763][ T4083] kvm [4082]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xff [ 176.709785][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 176.829838][ T26] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 176.837750][ T26] usb 5-1: config 0 has no interface number 0 [ 176.843815][ T26] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 176.853428][ T26] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 176.863141][ T26] usb 5-1: config 0 interface 41 has no altsetting 0 [ 177.019939][ T26] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 177.034395][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.053395][ T26] usb 5-1: Product: syz [ 177.061848][ T26] usb 5-1: Manufacturer: syz [ 177.070809][ T26] usb 5-1: SerialNumber: syz [ 177.082177][ T26] usb 5-1: config 0 descriptor?? [ 177.101386][ T4089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1398'. [ 177.111203][ T4065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.118541][ T4065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.415214][ T4065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.431286][ T4065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.739910][ T433] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 177.909892][ T26] CoreChips: probe of 5-1:0.41 failed with error -32 [ 178.019758][ T433] usb 1-1: Using ep0 maxpacket: 32 [ 178.072428][ T4118] mmap: syz.2.1408 (4118): VmData 167620608 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 178.149994][ T433] usb 1-1: config 1 interface 0 has no altsetting 0 [ 178.316988][ T4124] FAULT_INJECTION: forcing a failure. [ 178.316988][ T4124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.330038][ T4124] CPU: 1 PID: 4124 Comm: syz.2.1410 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 178.341137][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 178.351032][ T4124] Call Trace: [ 178.354159][ T4124] [ 178.356934][ T4124] dump_stack_lvl+0x151/0x1c0 [ 178.361459][ T4124] ? io_uring_drop_tctx_refs+0x190/0x190 [ 178.366920][ T4124] dump_stack+0x15/0x20 [ 178.370913][ T4124] should_fail+0x3c6/0x510 [ 178.375167][ T4124] should_fail_usercopy+0x1a/0x20 [ 178.380021][ T4124] _copy_from_user+0x20/0xd0 [ 178.384448][ T4124] __x64_sys_setrlimit+0xc1/0x140 [ 178.389314][ T4124] ? __ia32_sys_prlimit64+0xb0/0xb0 [ 178.389878][ T433] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 178.394346][ T4124] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 178.394375][ T4124] x64_sys_call+0x47a/0x9a0 [ 178.403457][ T433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.408663][ T4124] do_syscall_64+0x3b/0xb0 [ 178.408686][ T4124] ? clear_bhb_loop+0x35/0x90 [ 178.413127][ T433] usb 1-1: Product: syz [ 178.420817][ T4124] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.420843][ T4124] RIP: 0033:0x7effa7ae2819 [ 178.420861][ T4124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.420878][ T4124] RSP: 002b:00007effa613a038 EFLAGS: 00000246 [ 178.425318][ T433] usb 1-1: Manufacturer: syz [ 178.429581][ T4124] ORIG_RAX: 00000000000000a0 [ 178.429593][ T4124] RAX: ffffffffffffffda RBX: 00007effa7c9a080 RCX: 00007effa7ae2819 [ 178.429609][ T4124] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 178.429623][ T4124] RBP: 00007effa613a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.433693][ T433] usb 1-1: SerialNumber: syz [ 178.439300][ T4124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.439316][ T4124] R13: 0000000000000000 R14: 00007effa7c9a080 R15: 00007ffcc8d3c428 [ 178.439337][ T4124] [ 178.688990][ T30] kauditd_printk_skb: 1042 callbacks suppressed [ 178.689008][ T30] audit: type=1326 audit(1866555111.877:23554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.719120][ T30] audit: type=1326 audit(1866555111.877:23555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.743100][ T30] audit: type=1326 audit(1866555111.887:23556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.774340][ T30] audit: type=1326 audit(1866555111.887:23557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.798070][ T30] audit: type=1326 audit(1866555111.887:23558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.819617][ T4097] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 178.823124][ T30] audit: type=1326 audit(1866555111.887:23559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.852199][ T30] audit: type=1326 audit(1866555111.907:23560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.875736][ T30] audit: type=1326 audit(1866555111.917:23561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.899372][ T30] audit: type=1326 audit(1866555111.927:23562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.923041][ T30] audit: type=1326 audit(1866555111.927:23563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa7ae2819 code=0x7ffc0000 [ 178.961919][ T26] usb 5-1: USB disconnect, device number 32 [ 179.130066][ T4144] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1416'. [ 179.792476][ T4158] overlayfs: failed to resolve './file0': -2 [ 180.099810][ T433] usbhid 1-1:1.0: can't add hid device: -71 [ 180.105717][ T433] usbhid: probe of 1-1:1.0 failed with error -71 [ 180.112864][ T315] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 180.143592][ T433] usb 1-1: USB disconnect, device number 29 [ 180.149509][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 180.177994][ T4167] hub 6-0:1.0: USB hub found [ 180.183629][ T4167] hub 6-0:1.0: 1 port detected [ 180.546529][ T4183] FAULT_INJECTION: forcing a failure. [ 180.546529][ T4183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.559599][ T4183] CPU: 1 PID: 4183 Comm: syz.0.1432 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 180.570605][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.580501][ T4183] Call Trace: [ 180.583630][ T4183] [ 180.586402][ T4183] dump_stack_lvl+0x151/0x1c0 [ 180.590917][ T4183] ? io_uring_drop_tctx_refs+0x190/0x190 [ 180.596383][ T4183] dump_stack+0x15/0x20 [ 180.600376][ T4183] should_fail+0x3c6/0x510 [ 180.604629][ T4183] should_fail_usercopy+0x1a/0x20 [ 180.609487][ T4183] _copy_from_user+0x20/0xd0 [ 180.613914][ T4183] ___sys_recvmsg+0x150/0x690 [ 180.618521][ T4183] ? __sys_recvmsg+0x260/0x260 [ 180.623120][ T4183] ? __fdget+0x1bc/0x240 [ 180.627193][ T4183] __x64_sys_recvmsg+0x1dc/0x2b0 [ 180.631969][ T4183] ? ___sys_recvmsg+0x690/0x690 [ 180.636656][ T4183] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 180.642683][ T4183] ? exit_to_user_mode_prepare+0x39/0xa0 [ 180.648147][ T4183] x64_sys_call+0x171/0x9a0 [ 180.652484][ T4183] do_syscall_64+0x3b/0xb0 [ 180.656736][ T4183] ? clear_bhb_loop+0x35/0x90 [ 180.661249][ T4183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.667006][ T4183] RIP: 0033:0x7f8a7007b819 [ 180.671228][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.690685][ T4183] RSP: 002b:00007f8a6e6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 180.699004][ T4183] RAX: ffffffffffffffda RBX: 00007f8a70232fa0 RCX: 00007f8a7007b819 [ 180.706929][ T4183] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006 [ 180.714746][ T4183] RBP: 00007f8a6e6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.722550][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.730366][ T4183] R13: 0000000000000000 R14: 00007f8a70232fa0 R15: 00007fff44f78ab8 [ 180.738187][ T4183] [ 180.819988][ T315] usb 3-1: not running at top speed; connect to a high speed hub [ 180.852380][ T4190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1433'. [ 180.899822][ T315] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 180.908374][ T315] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 180.916676][ T315] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 180.926233][ T315] usb 3-1: config 129 has no interface number 0 [ 180.932601][ T315] usb 3-1: config 129 has no interface number 1 [ 180.939541][ T315] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.952928][ T315] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 180.989911][ T315] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 181.003298][ T315] usb 3-1: config 129 interface 135 has no altsetting 0 [ 181.013912][ T315] usb 3-1: config 129 interface 5 has no altsetting 0 [ 181.179910][ T315] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 181.189400][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.209609][ T315] usb 3-1: Product: syz [ 181.213682][ T315] usb 3-1: Manufacturer: syz [ 181.218057][ T315] usb 3-1: SerialNumber: syz [ 181.893010][ T315] usb 3-1: MIDIStreaming interface descriptor not found [ 182.070942][ T315] usb 3-1: USB disconnect, device number 27 [ 183.666814][ T20] ================================================================== [ 183.674708][ T20] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 183.682358][ T20] Read of size 8 at addr ffff88810a95ec88 by task kworker/0:1/20 [ 183.689900][ T20] [ 183.692063][ T20] CPU: 0 PID: 20 Comm: kworker/0:1 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 183.703087][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 183.712983][ T20] Workqueue: events binder_deferred_func [ 183.718466][ T20] Call Trace: [ 183.721572][ T20] [ 183.724360][ T20] dump_stack_lvl+0x151/0x1c0 [ 183.728865][ T20] ? io_uring_drop_tctx_refs+0x190/0x190 [ 183.734334][ T20] ? panic+0x760/0x760 [ 183.738236][ T20] ? kasan_quarantine_put+0x34/0x1a0 [ 183.743373][ T20] print_address_description+0x87/0x3b0 [ 183.748737][ T20] kasan_report+0x179/0x1c0 [ 183.753075][ T20] ? _raw_spin_lock+0xa4/0x1b0 [ 183.757681][ T20] ? __list_del_entry_valid+0x2f/0x120 [ 183.762969][ T20] ? __list_del_entry_valid+0x2f/0x120 [ 183.764411][ T4250] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1450'. [ 183.768264][ T20] __asan_report_load8_noabort+0x14/0x20 [ 183.768294][ T20] __list_del_entry_valid+0x2f/0x120 [ 183.787621][ T20] binder_release_work+0xcd/0x680 [ 183.792484][ T20] binder_deferred_func+0x1847/0x1bc0 [ 183.797686][ T20] ? read_word_at_a_time+0x12/0x20 [ 183.800154][ T4249] FAULT_INJECTION: forcing a failure. [ 183.800154][ T4249] name failslab, interval 1, probability 0, space 0, times 0 [ 183.802637][ T20] process_one_work+0x6bb/0xc10 [ 183.802666][ T20] worker_thread+0xad5/0x12a0 [ 183.824250][ T20] ? _raw_spin_lock+0x1b0/0x1b0 [ 183.828939][ T20] kthread+0x421/0x510 [ 183.832840][ T20] ? worker_clr_flags+0x180/0x180 [ 183.837701][ T20] ? kthread_blkcg+0xd0/0xd0 [ 183.842127][ T20] ret_from_fork+0x1f/0x30 [ 183.846381][ T20] [ 183.849247][ T20] [ 183.849249][ T4249] CPU: 1 PID: 4249 Comm: syz.2.1448 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 183.851497][ T20] Allocated by task 4235: [ 183.862607][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 183.866772][ T20] ____kasan_kmalloc+0xdb/0x110 [ 183.876680][ T4249] Call Trace: [ 183.876689][ T4249] [ 183.881354][ T20] __kasan_kmalloc+0x9/0x10 [ 183.884480][ T4249] dump_stack_lvl+0x151/0x1c0 [ 183.887325][ T20] kmem_cache_alloc_trace+0x115/0x210 [ 183.891694][ T4249] ? io_uring_drop_tctx_refs+0x190/0x190 [ 183.896203][ T20] binder_thread_write+0x9f5/0x6ec0 [ 183.901415][ T4249] ? vfs_write+0x94d/0x1110 [ 183.906913][ T20] binder_ioctl_write_read+0x205/0x7300 [ 183.911908][ T4249] dump_stack+0x15/0x20 [ 183.916251][ T20] binder_ioctl+0x371/0x2640 [ 183.921636][ T4249] should_fail+0x3c6/0x510 [ 183.925627][ T20] __se_sys_ioctl+0x114/0x190 [ 183.930052][ T4249] __should_failslab+0xa4/0xe0 [ 183.934317][ T20] __x64_sys_ioctl+0x7b/0x90 [ 183.938812][ T4249] should_failslab+0x9/0x20 [ 183.943412][ T20] x64_sys_call+0x98/0x9a0 [ 183.947946][ T4249] slab_pre_alloc_hook+0x37/0xd0 [ 183.952267][ T20] do_syscall_64+0x3b/0xb0 [ 183.956518][ T4249] ? __se_sys_mount+0x9b/0x3b0 [ 183.961293][ T20] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.965551][ T4249] __kmalloc_track_caller+0x6c/0x260 [ 183.970143][ T20] [ 183.970150][ T20] Freed by task 20: [ 183.975875][ T4249] ? __se_sys_mount+0x9b/0x3b0 [ 183.980993][ T20] kasan_set_track+0x4b/0x70 [ 183.983164][ T4249] strndup_user+0x76/0x150 [ 183.986809][ T20] kasan_set_free_info+0x23/0x40 [ 183.991410][ T4249] __se_sys_mount+0x9b/0x3b0 [ 183.995838][ T20] ____kasan_slab_free+0x126/0x160 [ 184.000092][ T4249] ? __x64_sys_mount+0xd0/0xd0 [ 184.004862][ T20] __kasan_slab_free+0x11/0x20 [ 184.009291][ T4249] ? debug_smp_processor_id+0x17/0x20 [ 184.014255][ T20] slab_free_freelist_hook+0xbd/0x190 [ 184.018835][ T4249] __x64_sys_mount+0xbf/0xd0 [ 184.023434][ T20] kfree+0xc8/0x220 [ 184.028645][ T4249] x64_sys_call+0x49d/0x9a0 [ 184.034038][ T20] binder_free_ref+0x128/0x260 [ 184.038466][ T4249] do_syscall_64+0x3b/0xb0 [ 184.042109][ T20] binder_deferred_func+0x171c/0x1bc0 [ 184.046448][ T4249] ? clear_bhb_loop+0x35/0x90 [ 184.051049][ T20] process_one_work+0x6bb/0xc10 [ 184.055304][ T4249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.060509][ T20] worker_thread+0xad5/0x12a0 [ 184.065023][ T4249] RIP: 0033:0x7effa7ae2819 [ 184.069822][ T20] kthread+0x421/0x510 [ 184.075552][ T4249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.080064][ T20] ret_from_fork+0x1f/0x30 [ 184.084312][ T4249] RSP: 002b:00007effa613a038 EFLAGS: 00000246 [ 184.088217][ T20] [ 184.088225][ T20] Last potentially related work creation: [ 184.107661][ T4249] ORIG_RAX: 00000000000000a5 [ 184.111913][ T20] kasan_save_stack+0x3b/0x60 [ 184.117824][ T4249] RAX: ffffffffffffffda RBX: 00007effa7c9a080 RCX: 00007effa7ae2819 [ 184.119986][ T20] __kasan_record_aux_stack+0xd3/0xf0 [ 184.125541][ T4249] RDX: 0000000020000400 RSI: 0000000020000040 RDI: 0000000000000000 [ 184.130056][ T20] kasan_record_aux_stack_noalloc+0xb/0x10 [ 184.134575][ T4249] RBP: 00007effa613a090 R08: 0000000020000280 R09: 0000000000000000 [ 184.142381][ T20] call_rcu+0x123/0x10b0 [ 184.147585][ T4249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.155398][ T20] __percpu_ref_switch_mode+0x342/0x620 [ 184.161039][ T4249] R13: 0000000000000000 R14: 00007effa7c9a080 R15: 00007ffcc8d3c428 [ 184.168852][ T20] percpu_ref_kill_and_confirm+0xa3/0x220 [ 184.172936][ T4249] [ 184.180741][ T20] blkg_destroy+0x594/0x5f0 [ 184.206784][ T20] blkg_destroy_all+0xd2/0x440 [ 184.211384][ T20] blkcg_exit_queue+0x15/0x20 [ 184.215895][ T20] blk_release_queue+0x148/0x270 [ 184.220685][ T20] kobject_put+0x178/0x260 [ 184.224921][ T20] blk_put_queue+0x19/0x20 [ 184.229186][ T20] scsi_device_dev_release_usercontext+0x58e/0x840 [ 184.235520][ T20] execute_in_process_context+0x1af/0x240 [ 184.241065][ T20] scsi_device_dev_release+0xf8/0x110 [ 184.246274][ T20] device_release+0x95/0x1c0 [ 184.250701][ T20] kobject_put+0x178/0x260 [ 184.254954][ T20] put_device+0x1f/0x30 [ 184.258943][ T20] __scsi_remove_device+0x307/0x370 [ 184.263977][ T20] scsi_probe_and_add_lun+0x2360/0x4320 [ 184.269374][ T20] __scsi_scan_target+0x1ed/0xe30 [ 184.274221][ T20] scsi_scan_host_selected+0x334/0x5f0 [ 184.279513][ T20] scsi_scan_host+0x3a8/0x670 [ 184.284030][ T20] virtscsi_probe+0x930/0xc30 [ 184.288544][ T20] virtio_dev_probe+0x891/0xae0 [ 184.293226][ T20] really_probe+0x28d/0x970 [ 184.297568][ T20] __driver_probe_device+0x1a0/0x310 [ 184.302686][ T20] driver_probe_device+0x54/0x3d0 [ 184.307548][ T20] __driver_attach+0x446/0x590 [ 184.312147][ T20] bus_for_each_dev+0x17b/0x1f0 [ 184.316853][ T20] driver_attach+0x42/0x50 [ 184.321087][ T20] bus_add_driver+0x33f/0x590 [ 184.325602][ T20] driver_register+0x2e2/0x3e0 [ 184.330204][ T20] register_virtio_driver+0x97/0xc0 [ 184.335242][ T20] init+0x66/0xe0 [ 184.338707][ T20] do_one_initcall+0x182/0x610 [ 184.343306][ T20] do_initcall_level+0x186/0x310 [ 184.348169][ T20] do_initcalls+0x4e/0x90 [ 184.352336][ T20] do_basic_setup+0x81/0x90 [ 184.356677][ T20] kernel_init_freeable+0x2c1/0x400 [ 184.361711][ T20] kernel_init+0x1d/0x290 [ 184.365873][ T20] ret_from_fork+0x1f/0x30 [ 184.370134][ T20] [ 184.372301][ T20] The buggy address belongs to the object at ffff88810a95ec80 [ 184.372301][ T20] which belongs to the cache kmalloc-64 of size 64 [ 184.386012][ T20] The buggy address is located 8 bytes inside of [ 184.386012][ T20] 64-byte region [ffff88810a95ec80, ffff88810a95ecc0) [ 184.398861][ T20] The buggy address belongs to the page: [ 184.404331][ T20] page:ffffea00042a5780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a95e [ 184.414397][ T20] flags: 0x4000000000000200(slab|zone=1) [ 184.419869][ T20] raw: 4000000000000200 ffffea000461c040 0000002300000002 ffff888100042780 [ 184.428292][ T20] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 184.436697][ T20] page dumped because: kasan: bad access detected [ 184.443071][ T20] page_owner tracks the page as allocated [ 184.448615][ T20] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2257123985, free_ts 0 [ 184.463296][ T20] post_alloc_hook+0x1a3/0x1b0 [ 184.467995][ T20] prep_new_page+0x1b/0x110 [ 184.472333][ T20] get_page_from_freelist+0x3550/0x35d0 [ 184.477715][ T20] __alloc_pages+0x27e/0x8f0 [ 184.482143][ T20] new_slab+0x9a/0x4e0 [ 184.486049][ T20] ___slab_alloc+0x39e/0x830 [ 184.490478][ T20] __slab_alloc+0x4a/0x90 [ 184.494640][ T20] kmem_cache_alloc_trace+0x142/0x210 [ 184.499849][ T20] percpu_ref_init+0xc8/0x340 [ 184.504361][ T20] blk_alloc_queue+0x3cb/0x570 [ 184.508961][ T20] blk_mq_init_queue+0x36/0xd0 [ 184.513563][ T20] scsi_alloc_sdev+0x674/0xa10 [ 184.518164][ T20] scsi_probe_and_add_lun+0x199/0x4320 [ 184.523456][ T20] __scsi_scan_target+0x1ed/0xe30 [ 184.528319][ T20] scsi_scan_host_selected+0x334/0x5f0 [ 184.533702][ T20] scsi_scan_host+0x3a8/0x670 [ 184.538214][ T20] page_owner free stack trace missing [ 184.543423][ T20] [ 184.545589][ T20] Memory state around the buggy address: [ 184.551063][ T20] ffff88810a95eb80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 184.558957][ T20] ffff88810a95ec00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 184.566855][ T20] >ffff88810a95ec80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 184.574753][ T20] ^ [ 184.578921][ T20] ffff88810a95ed00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 184.586818][ T20] ffff88810a95ed80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 184.594717][ T20] ================================================================== [ 184.602625][ T20] Disabling lock debugging due to kernel taint [ 184.609473][ T20] general protection fault, probably for non-canonical address 0xf41bfc35a0000002: 0000 [#1] PREEMPT SMP KASAN [ 184.621006][ T20] KASAN: maybe wild-memory-access in range [0xa0e001ad00000010-0xa0e001ad00000017] [ 184.630122][ T20] CPU: 0 PID: 20 Comm: kworker/0:1 Tainted: G B W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 184.641143][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.651036][ T20] Workqueue: events binder_deferred_func [ 184.656506][ T20] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 184.662402][ T20] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 7c 7d 48 ff 49 8b 17 4c 39 f2 75 [ 184.681845][ T20] RSP: 0018:ffffc90000147c00 EFLAGS: 00010a03 [ 184.687749][ T20] RAX: 141c0035a0000002 RBX: ffff88812a8c0900 RCX: ffffffff826a3f79 [ 184.695571][ T20] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88810a95ec80 [ 184.703369][ T20] RBP: ffffc90000147c20 R08: ffffffff8141a3db R09: 0000000000000003 [ 184.711185][ T20] R10: fffffbfff0e9a84c R11: dffffc0000000001 R12: dffffc0000000000 [ 184.718992][ T20] R13: ffff88810a95ec80 R14: ffff88810a95ec80 R15: a0e001ad00000014 [ 184.726806][ T20] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 184.735576][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.741994][ T20] CR2: ffffffffde000000 CR3: 0000000006a0f000 CR4: 00000000003506b0 [ 184.749810][ T20] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.757615][ T20] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.765426][ T20] Call Trace: [ 184.768553][ T20] [ 184.771334][ T20] ? __die_body+0x62/0xb0 [ 184.775496][ T20] ? die_addr+0x9f/0xd0 [ 184.779489][ T20] ? exc_general_protection+0x311/0x4b0 [ 184.784874][ T20] ? check_panic_on_warn+0x65/0xb0 [ 184.789820][ T20] ? asm_exc_general_protection+0x27/0x30 [ 184.795373][ T20] ? check_panic_on_warn+0x5b/0xb0 [ 184.800319][ T20] ? __list_del_entry_valid+0x49/0x120 [ 184.805612][ T20] ? __list_del_entry_valid+0x75/0x120 [ 184.810909][ T20] binder_release_work+0xcd/0x680 [ 184.815773][ T20] binder_deferred_func+0x1847/0x1bc0 [ 184.820976][ T20] ? read_word_at_a_time+0x12/0x20 [ 184.825926][ T20] process_one_work+0x6bb/0xc10 [ 184.830613][ T20] worker_thread+0xad5/0x12a0 [ 184.835124][ T20] ? _raw_spin_lock+0x1b0/0x1b0 [ 184.839813][ T20] kthread+0x421/0x510 [ 184.843717][ T20] ? worker_clr_flags+0x180/0x180 [ 184.848577][ T20] ? kthread_blkcg+0xd0/0xd0 [ 184.853009][ T20] ret_from_fork+0x1f/0x30 [ 184.857261][ T20] [ 184.860121][ T20] Modules linked in: [ 184.864103][ T20] ---[ end trace 3c7c2f4f4d6ad53f ]--- [ 184.869378][ T20] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 184.870363][ T315] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 184.875395][ T20] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 7c 7d 48 ff 49 8b 17 4c 39 f2 75 [ 184.902194][ T20] RSP: 0018:ffffc90000147c00 EFLAGS: 00010a03 [ 184.907998][ T20] RAX: 141c0035a0000002 RBX: ffff88812a8c0900 RCX: ffffffff826a3f79 [ 184.915844][ T20] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88810a95ec80 [ 184.923655][ T20] RBP: ffffc90000147c20 R08: ffffffff8141a3db R09: 0000000000000003 [ 184.931488][ T20] R10: fffffbfff0e9a84c R11: dffffc0000000001 R12: dffffc0000000000 [ 184.939473][ T20] R13: ffff88810a95ec80 R14: ffff88810a95ec80 R15: a0e001ad00000014 [ 184.947330][ T20] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 184.956077][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.962485][ T20] CR2: ffffffffde000000 CR3: 0000000006a0f000 CR4: 00000000003506b0 [ 184.970307][ T20] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.978179][ T20] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.986030][ T20] Kernel panic - not syncing: Fatal exception [ 184.992231][ T20] Kernel Offset: disabled [ 184.996375][ T20] Rebooting in 86400 seconds..