last executing test programs: 11.055287134s ago: executing program 1 (id=4895): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000080)={[{@shortname_mixed}, {@utf8}, {@fat=@errors_remount}, {@shortname_win95}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@uni_xlate}, {@rodir}, {@fat=@debug}, {@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}, {}, {@fat=@showexec}]}, 0x7, 0x2b8, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x10, 0x25, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0xa, @in=@dev, 0x0, 0x1}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0) write$binfmt_script(r5, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 9.799686995s ago: executing program 1 (id=4903): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='afs_silly_rename\x00'}, 0x10) chdir(0x0) rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc4) 8.889041865s ago: executing program 1 (id=4909): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000d06000)=0xfffffffe, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb22) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$key(0xf, 0x3, 0x2) 7.543500344s ago: executing program 1 (id=4920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r8 = dup(r2) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 6.485304327s ago: executing program 0 (id=4929): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 6.415572233s ago: executing program 1 (id=4933): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@fault_type}, {@prjjquota={'prjjquota', 0x3d, 'lowerdir'}}, {@nobarrier}, {@noquota}, {@data_flush}, {@resuid}, {@adaptive_mode}, {@discard_unit_section}, {@heap}]}, 0xff, 0x551b, &(0x7f0000001200)="$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") (fail_nth: 75) 5.591322226s ago: executing program 1 (id=4935): socket(0x80000000000000a, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="efa3000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff03000000000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(r5, 0x400448de, &(0x7f00000003c0)) (async) ioctl$sock_bt_hci(r5, 0x400448de, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000280)={[{0x8, 0xa, 0x5, 0xf9, 0x1, 0x3, 0x4, 0x6e, 0x1f, 0x5, 0x3, 0x4, 0x1fffe0000}, {0xfff, 0x3, 0x17, 0x0, 0xfb, 0xfd, 0xd, 0x3, 0x3, 0x5, 0x1, 0x0, 0x6}, {0x7c, 0x0, 0x7, 0x3, 0x8, 0x6, 0x2, 0x3, 0x3, 0x8, 0x3, 0x8, 0x2}], 0x87}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000280)={[{0x8, 0xa, 0x5, 0xf9, 0x1, 0x3, 0x4, 0x6e, 0x1f, 0x5, 0x3, 0x4, 0x1fffe0000}, {0xfff, 0x3, 0x17, 0x0, 0xfb, 0xfd, 0xd, 0x3, 0x3, 0x5, 0x1, 0x0, 0x6}, {0x7c, 0x0, 0x7, 0x3, 0x8, 0x6, 0x2, 0x3, 0x3, 0x8, 0x3, 0x8, 0x2}], 0x87}) socket(0xf, 0x2, 0x0) 4.958498962s ago: executing program 4 (id=4936): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002b80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ed03b759bbbce47d58af4ed76cc3b27458bef2d9c1286287ed56544ad4bea987854016f9cadf250c95abdca11992b7eabf59206997c4224d0e3fc43bb08bbd71b1279081923296d6271cde2c007338c8fd9163f3d05430478e670293f37dc234c861adffb5cdf6bd8b84366ec6ef961992d3c7dbf9af6e5b5fe42d679163debbf002ce21464ae97f3f477ef0c2236e373412f6fde75a"], 0x0, 0x0, 0xfffffffffffffca0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 4.946137393s ago: executing program 4 (id=4937): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="757466383d312c757466383d312c756e695f786c6174653d312c636f6465706167653d3836322c03000000746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73684f72746e616d653d77696e756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365745e0bd0f6e43d63703835372c73686f72746e616d653d77692d7d7419757466383d302c756e695f786c6174653d302c696f636861727365743d6d616363656c7469632c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b7, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000021c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000022c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75925f69643d28340c6a3ca1121fbec47e6e4b3e93736e5f6e", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/48, 0x30) getdents(0xffffffffffffffff, 0x0, 0x58) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x27}}, 0x50) 4.055103942s ago: executing program 4 (id=4941): syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x1242070, &(0x7f0000000380)=ANY=[], 0x0, 0x224, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x922002, 0x0, 0x0, 0x2d, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tcp_congestion(r5, 0x0, 0x0) 3.73617383s ago: executing program 0 (id=4943): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0xffff0001}]}) r5 = creat(0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) ioperm(0x0, 0x3d, 0xe) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="3803000000000000", @ANYRES64=r1, @ANYBLOB="01000000000000000300000000000000f9ffffffffffffff0e000000000000006f000000140d00000100000000000000080000000000000009000000000000000b0000000000000001000000000000000800000000000000dc00000006000000060000000860000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000800000000000000040000000000000005000000000000000500000002000000667573650000000003000000000000000100000000000000010000000000000069a9ffffffffffff030000000100000005000000000000000600000000000000318f00000000000020030000000000000100000001000000040000000000000005000000fbffffff000000000040000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="e908000003000000000000000100000000000000070000000000000005000000c8000000667573650000000005000000000000000300000000000000080000000000000002000000000000000900000085000000040000000000000009000000000000008f04000000000000040000000000000000000080000000000900000000000000600e00001e0a0000010400000080000007000000", @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="3f3b8c588efdffff0000000006000000000000000900000000000000070000007f000000405c1a29263f280003000000000000000100000000000000fcffffffffffffff000400000000000002fe00000f0000000500000000000000060000000000000006000000000000000ac8a119000000000c000000000000000400000000000000080000000300000008000000008000000d000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="001000000e00000000000000060000000000000000000000e03c0f0004000000ff000000295c252e0000000004000000000000000300000000000000ad00000000000000020000000000000000000000ff0300000300000000000000ffffffffffffffff060000000000000002000000000000008f0d00000000000000000000000000000d0000000a0000000500000000c0000000020000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="feffffff0900000000000000050000000000000040000000000000000a0000000200000073797a6b616c6c657200000000000000"], 0x338) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x6, 0x4e23, 0x7, 0x16, 0xa0, 0x80, 0x5c, 0x0, r2}, {0x7b, 0x1, 0x8, 0x0, 0xffffffff, 0x2, 0x1, 0xae86}, {0xc, 0xfff, 0x3, 0xf}, 0x0, 0x6e6bb0, 0x2, 0x1, 0x2, 0x2}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x3, 0x8, 0x29e, 0x800}}, 0xe8) syz_fuse_handle_req(r0, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='ack_update_msk\x00', r8}, 0x5) mount$incfs(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x2400, &(0x7f00000008c0)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0xfffffffffffffff9}}, {@readahead={'readahead', 0x3d, 0x4}}], [{@dont_appraise}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket(0x0, 0x80a, 0x9) getpid() 3.303955438s ago: executing program 3 (id=4948): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 3.289797939s ago: executing program 3 (id=4949): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000800)='./file2\x00', 0x0, &(0x7f0000000400), 0x1, 0x762, &(0x7f0000000fc0)="$eJzs3c1rXFUfB/DfvTN56cvzJJVSrQgGXFRQJ01tfVu1VRSqiKi47pBOS+m0KUkEE7tIXboQQcGl+l8U3HTjWnBRdasrhSLVbirKyJ2XZkhmkrTMzK3czwfu5Jx7Jjnnm0ty7p07zAmgsGayhzTiYEScTiKm2vuTiBhrlsoRx1vPu3Pryvxft67MJ9FovPN70nxOti+6viezp12ZjIjvTybxUGlzv0srqxeq9XptsV2fXb54eXZpZfWZ8xer52rnapeOHD029/yxF547+uKgopYOnHr6zQMfvXzjm8bbr73y3bG1JAtWbjV25xiUmZi5+zvplnX56qA7y0mpnac7Z1LOcUDck7TrGB6IqSjF+sGbim9/yHVwAMBQNEoRDQCgYBLzPwAUTOd1gDu3rsx3tnxfkRitmyeieaNyc/5yHG9+nWqMRcTuP5P1OyMzrftd0wPofyYirt1+70a2xZDuQ25l7WpEPNIrf/PuaEw37+JuyN++Z3R4AP3PbKj/l/IfH0D/eecHoJiun2hNZJvnv7Q9v/We/yZ7zF33I+/5r//533r+Uo/82fnfWzvs46tPHnu4X1v3+V+2Zf13zgVH4ebViEfL/c9/svxJn/ynd9jHtV8/rPZryzt/4+uIQz2vf9bf0ZZs/f7E2bPn67XDrceefXw2e+rjfv3nnT87/rv75N/u+F/eYR//7P/5ZL+27fOnv40n7zZL4+09H1SXlxfnIsaTNzbvP7L1WDrP6fyMLP+TT2z9998rf3ZNuLbD/F++/scX959/uLL8Z+7z+H+6wz7+Xvhlsl9b3vkBAAAAAAAAAAAAAAAAAAAAAAAAYBTSiNgbSVq5W07TSqW1hvf+2J3WF5aWnzq78P6lM1lbxHSMpZ1Pupxq1ZOsPtf+PPxO/ciG+rMRsS8iPp/Y1axX5hfqZ/IODwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtezas/397orX+//bKwx8cADA8k3kPAAAYOfM/ABSP+R8Aisf8DwDFY/4HgOIx/wNA8Zj/AQAAAAAAAAAAAAAAAAAAAABgpPY9fv2nJCLWXtrV3DLj7baxXEcGDFua9wCA3JTyHgCQm3LeAwByc4/X+OPDGgeQn2Sb9r4fEb7mCgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOI4dND6/1BU1v+H4rJ6JxSX9f+huFzjA9b/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7e1tbklaaa8FvjfStFKJ+F9ETMdYcvZ8vXY4Iv4fET9OjE1k9bm8Bw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7a0snqhWq/XFotYmHgwhqGg8OAV8v7PBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKO3vuh33iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgT0srqxeq9XptcYiFvDMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNK/AQAA//+yyivL") openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @private=0xa010101}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x10001, 0x9, 0x3801, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x4}, 0x48) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000004c0)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@nodiscard}, {@noquota}, {@nojournal_checksum}, {@quota}, {@resgid}, {@sysvgroups}, {}, {@nouid32}]}, 0x14, 0x4f0, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futimesat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0xfe74}], 0x2}}], 0x1, 0x0) 2.931010761s ago: executing program 4 (id=4950): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x22002, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61d, &(0x7f0000001680)="$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") r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x200}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x200}, 0x48) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102395, 0x7ffff000}], 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x4000, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ftruncate(0xffffffffffffffff, 0x0) socket(0x5, 0x80000, 0x3) (async) r6 = socket(0x5, 0x80000, 0x3) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getsockopt$nfc_llcp(r6, 0x65, 0x0, 0x0, 0x20000000) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) r7 = socket(0x10, 0x400000000080803, 0x0) fcntl$dupfd(r7, 0x0, r7) (async) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x1b, 0x0, 0x2, 0xb, 0x0, r3, 0x9, '\x00', 0x0, r0, 0x5, 0x3, 0x5}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x1b, 0x0, 0x2, 0xb, 0x0, r3, 0x9, '\x00', 0x0, r0, 0x5, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000b5e818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='workqueue_activate_work\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x6}}) 2.332426094s ago: executing program 3 (id=4952): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="757466383d312c757466383d312c756e695f786c6174653d312c636f6465706167653d3836322c03000000746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73684f72746e616d653d77696e756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365745e0bd0f6e43d63703835372c73686f72746e616d653d77692d7d7419757466383d302c756e695f786c6174653d302c696f636861727365743d6d616363656c7469632c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b7, &(0x7f0000000a40)="$eJzs3c9qY1UcB/DfTdPkqmCycCWKF3ThapjOE6RIBwazUrJQFypOB2QShA4U/INxQBBcuXHpA4ggzM6XcOMb+ACCO7soHLnJvU1ak9QLTeufz2fT03PO957fzblp6SKn770weXi/iAePP/s18jyL1iAGcZJFP1pR+yLOGXwTAMC/2UnK4/c01ySXRUS+vbIAgC06SanZ7/8nWy8JANiyN996+/X94fDgjaLI4+7kq+NR+Zd9+XU+vv8gPoxxHMbt6MVpRDozb99NKU3bRakfr0ymx6MyOXn35+r6+79FzPJ70Yv+rOt8/t7wYK+YW8pPyzqertYflPk70YvnVqx/b3hwZ0U+Rp149eWl+m9FL375ID6KcdyfFbHIf75XFK+lb//49J2yvDKfTY9H3dm8hbRzzVsDAAAAAAAAAAAAAAAAAAAAAMB/2K3q7JxuzM7vKbuq83d2TstvdqOo9c+fzzPPZ/WFLpwPNE3xXX2+zu2iKFI1cZFvx/PtaN/MXQMAAAAAAAAAAAAAAAAAAMA/y6OPP3n4/nh8eHQljfo0gPpj/c2v82SWGiz1vBSbU93FWq2quWGJ2PmympNFbKynvIkrelkuazy1ruYffmx6wfzyObvlWvm6OeUWNly03u6lnqh7stWvYfdscl4/JD/VPSml1Im/uXpn3VBq9Ph1Vg71Gm9l55lZY7phTmTrCvv6xcX7shrKLt5FJyKr3mUX47tVI9btYN7oef7rz4rMaR0AAAAAAAAAAAAAAAAAALBViw/9rhh8vDHaSt2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA12rx//8bNKZV+PDo+2cvmdyJo0c3fIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wZAAD//1lbV6k=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000021c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75925f69643d28340c6a3ca1121fbec47e6e4b3e93736e5f6e", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/48, 0x30) getdents(0xffffffffffffffff, 0x0, 0x58) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x27}}, 0x50) 2.071433766s ago: executing program 4 (id=4953): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 1.677527801s ago: executing program 0 (id=4954): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x556b, &(0x7f00000024c0)="$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") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) dup(r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl(0xffffffffffffffff, 0x8b01, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000700)={0x0, "31e024b5bca2a2ff71cd40050b23b5d9033abd5b12abf8a52ed635d09ee90ee7b5653370953f159266514b3411433a515130a158ba270d263a523fd3b06e6e5c"}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000500)={r7}, &(0x7f0000000780)=ANY=[@ANYBLOB="656e633d6f61657020686173683d686d6163287368613235362d6e656f6e290000000000000000000000000000000000000000000000ec08dcdc00"/78], 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x25}, {0x35}, {0x16}]}) 1.556857942s ago: executing program 2 (id=4955): chdir(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000040, &(0x7f0000000600)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0xff}}, {@delalloc}, {@usrquota}], [{@audit}, {@uid_gt}]}, 0x10, 0x4ea, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xfff, 0x5, 0x0, 0x1}, 0x48) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00g\xfcs\xc4$\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_H=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xe5\xc3\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x2}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) 1.429616483s ago: executing program 2 (id=4956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x41, &(0x7f00000002c0)={[{@bsdgroups}, {@journal_checksum}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@sb={'sb', 0x3d, 0x6}}, {@noload}, {@noload}]}, 0x64, 0x516, &(0x7f0000000bc0)="$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") (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x28}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.429125473s ago: executing program 3 (id=4957): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 1.405890805s ago: executing program 3 (id=4958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x5, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x20}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x0, 0x10, 0x4000, 0x5, {{0x2e, 0x4, 0x1, 0x4, 0xb8, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @broadcast, {[@generic={0x82, 0x12, "cb53dab6e92e4e539a572a995909cda7"}, @rr={0x7, 0x13, 0x6d, [@loopback, @local, @loopback, @remote]}, @timestamp_addr={0x44, 0x44, 0x6f, 0x1, 0x2, [{@loopback, 0x8000}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x80000000}, {@remote, 0x2}, {@private=0xa010102, 0x40a}, {@remote, 0x1}]}, @lsrr={0x83, 0x17, 0x91, [@private=0xa010100, @rand_addr=0x64010102, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x89, 0x10, "3516ff402a0656c7fcac388c6573"}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x8, [{@multicast2, 0x1}, {@broadcast, 0x3}]}]}}}}}) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) time(0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x9d}) 1.297310925s ago: executing program 2 (id=4959): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 1.296709815s ago: executing program 2 (id=4960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x9, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000280)="cc0e41c9243e0b43ecc28d906bd497527e1a16e33cc16417ba0f4559601e036017918605f1f3b0afb6d7027812c621a56acc5c0e643b0b886db0a9efe1507da0dcfa6c06eac85d0df3bbf94d3a24884b66873a88feb1914c281b97ef523450e2d89e1a69ef9d7a652e94bc8c3cb72b61c85903679e90772903fa1d83a37ccaa745391a9c99c384", &(0x7f0000000480)=""/226}, 0x20) 919.306438ms ago: executing program 2 (id=4961): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000080)={[{@shortname_mixed}, {@utf8}, {@fat=@errors_remount}, {@shortname_win95}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@uni_xlate}, {@rodir}, {@fat=@debug}, {@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}, {}, {@fat=@showexec}]}, 0x7, 0x2b8, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x10, 0x25, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0xa, @in=@dev, 0x0, 0x1}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) write$binfmt_script(r5, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 548.696831ms ago: executing program 0 (id=4962): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) inotify_rm_watch(r6, r5) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sched_setaffinity(r8, 0x8, &(0x7f00000003c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00631fa5a56b0a00"/24, @ANYBLOB="5069e92e3dfe84", @ANYRESHEX=r10, @ANYRES64=r3, @ANYRES32, @ANYBLOB]) socket$packet(0x11, 0x3, 0x300) 506.073975ms ago: executing program 0 (id=4963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0xd0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfff8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) 413.757893ms ago: executing program 3 (id=4964): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200106, &(0x7f0000000140), 0x1, 0x476, &(0x7f0000000ac0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x2000}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4a}, 0x20) 413.568993ms ago: executing program 0 (id=4965): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="757466383d312c757466383d312c756e695f786c6174653d312c636f6465706167653d3836322c03000000746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73684f72746e616d653d77696e756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365745e0bd0f6e43d63703835372c73686f72746e616d653d77692d7d7419757466383d302c756e695f786c6174653d302c696f636861727365743d6d616363656c7469632c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b7, &(0x7f0000000a40)="$eJzs3c9qY1UcB/DfTdPkqmCycCWKF3ThapjOE6RIBwazUrJQFypOB2QShA4U/INxQBBcuXHpA4ggzM6XcOMb+ACCO7soHLnJvU1ak9QLTeufz2fT03PO957fzblp6SKn770weXi/iAePP/s18jyL1iAGcZJFP1pR+yLOGXwTAMC/2UnK4/c01ySXRUS+vbIAgC06SanZ7/8nWy8JANiyN996+/X94fDgjaLI4+7kq+NR+Zd9+XU+vv8gPoxxHMbt6MVpRDozb99NKU3bRakfr0ymx6MyOXn35+r6+79FzPJ70Yv+rOt8/t7wYK+YW8pPyzqertYflPk70YvnVqx/b3hwZ0U+Rp149eWl+m9FL375ID6KcdyfFbHIf75XFK+lb//49J2yvDKfTY9H3dm8hbRzzVsDAAAAAAAAAAAAAAAAAAAAAMB/2K3q7JxuzM7vKbuq83d2TstvdqOo9c+fzzPPZ/WFLpwPNE3xXX2+zu2iKFI1cZFvx/PtaN/MXQMAAAAAAAAAAAAAAAAAAMA/y6OPP3n4/nh8eHQljfo0gPpj/c2v82SWGiz1vBSbU93FWq2quWGJ2PmympNFbKynvIkrelkuazy1ruYffmx6wfzyObvlWvm6OeUWNly03u6lnqh7stWvYfdscl4/JD/VPSml1Im/uXpn3VBq9Ph1Vg71Gm9l55lZY7phTmTrCvv6xcX7shrKLt5FJyKr3mUX47tVI9btYN7oef7rz4rMaR0AAAAAAAAAAAAAAAAAALBViw/9rhh8vDHaSt2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA12rx//8bNKZV+PDo+2cvmdyJo0c3fIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wZAAD//1lbV6k=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000021c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000022c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75925f69643d28340c6a3ca1121fbec47e6e4b3e93736e5f6e", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/48, 0x30) getdents(0xffffffffffffffff, 0x0, 0x58) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x27}}, 0x50) 125.599458ms ago: executing program 4 (id=4966): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7d}, @generic={0x7, 0xa, 0x8, 0x1ff, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000500)=0x9, 0x4) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746b76655f6cef67733d342c6163746976655f6c6f67733d342c6e6f71756f74612c6e6f666c7573685f6d6572020000006f5f6269748c3d30303030303030303030303030303030303135312c70726a6a71756f74613d9b9c07bb00289487f6b1902ca3614c704af66e2c6a71666d743d76667376312c657874656e745f63616368652c6261636b67726f756e645f67633d6f66662c007ce7e87cc61ea5f69c4ae63f28791738c0c2ab6bbbf3b0ac272cf96a401c8d9b600b426e89a8f8de270c"], 0x1, 0x5500, &(0x7f0000003040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000002c0)={0x4, 0x0, [{0x8b5, 0x0, 0x200}, {0x9ce, 0x0, 0x7fd5}, {0xc0010117, 0x0, 0x9}, {0x893, 0x0, 0x6}]}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)={0x2a, 0x4, 0x0, {0x4, 0x1, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x6628, 0x0) 0s ago: executing program 2 (id=4967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x0, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340)="57ead63bbb97e1294222c6fdb7f8455b2f8de1970a0520b79daffcc0873101e72bfde141b2085e5f976d554675e67b37f240cbf57db4a320f96d5dcf617dcfd5ce4041a6254a9f9960e0030a23ef50e9e9d383", &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f0000001100)=ANY=[@ANYBLOB="04000007"], 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20040001) kernel console output (not intermixed with test programs): 954] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1038.309552][ T8954] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1038.319133][ T8954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.331433][ T8954] usb 1-1: config 0 descriptor?? [ 1039.126678][ T8954] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1039.166225][ T8954] usb 1-1: USB disconnect, device number 119 [ 1039.267230][T17769] fuse: Unknown parameter 'grou_id' [ 1039.309773][T17768] netlink: 304 bytes leftover after parsing attributes in process `syz.1.4483'. [ 1039.486804][ T8954] usblp0: removed [ 1039.789985][T17789] syz.1.4493[17789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1039.790076][T17789] syz.1.4493[17789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1040.038682][T17790] fuse: Unknown parameter 'grou_id' [ 1040.107080][ T8954] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1040.367349][T17800] 9pnet: Insufficient options for proto=fd [ 1040.976578][ T3655] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1041.263370][ T24] kauditd_printk_skb: 84 callbacks suppressed [ 1041.263385][ T24] audit: type=1326 audit(2000000921.229:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17822 comm="syz.1.4499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x0 [ 1041.304133][ T24] audit: type=1326 audit(2000000921.269:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17825 comm="syz.3.4500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd406a17ef9 code=0x0 [ 1041.406654][ T3655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.424613][ T3655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.435377][ T3655] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1041.444989][ T3655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.056614][ T697] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1042.257693][ T3655] usb 3-1: config 0 descriptor?? [ 1042.496698][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.507678][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.517244][ T697] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1042.526049][ T697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.534939][ T697] usb 5-1: config 0 descriptor?? [ 1042.686644][ T20] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1042.857633][T12576] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1042.858836][T17837] udc-core: couldn't find an available UDC or it's busy [ 1042.872822][T17837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1043.166589][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.177393][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.187062][ T20] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1043.195909][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.204412][ T20] usb 2-1: config 0 descriptor?? [ 1043.266597][T12576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.277378][T12576] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.290053][T12576] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.298921][T12576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.307735][T12576] usb 4-1: config 0 descriptor?? [ 1043.416670][ T8954] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1043.446621][ T697] usbhid 5-1:0.0: can't add hid device: -71 [ 1043.452432][ T697] usbhid: probe of 5-1:0.0 failed with error -71 [ 1043.459666][ T697] usb 5-1: USB disconnect, device number 67 [ 1043.697885][ T20] hid-steam 0003:28DE:1142.0075: item fetching failed at offset 3/5 [ 1043.705874][ T20] hid-steam 0003:28DE:1142.0075: steam_probe:parse of hid interface failed [ 1043.714432][ T20] hid-steam: probe of 0003:28DE:1142.0075 failed with error -22 [ 1043.846575][ T8954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.856692][ T8954] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1043.865456][ T8954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.874382][ T8954] usb 1-1: config 0 descriptor?? [ 1043.899660][T17853] 9pnet: Insufficient options for proto=fd [ 1044.047120][T12576] usbhid 4-1:0.0: can't add hid device: -71 [ 1044.053900][T12576] usbhid: probe of 4-1:0.0 failed with error -71 [ 1044.084787][ T3655] usbhid 3-1:0.0: can't add hid device: -71 [ 1044.113479][T17859] fuse: Unknown parameter 'grou_id' [ 1044.125075][ T3655] usbhid: probe of 3-1:0.0 failed with error -71 [ 1044.141851][T12576] usb 4-1: USB disconnect, device number 114 [ 1044.229066][ T3655] usb 3-1: USB disconnect, device number 117 [ 1044.313378][ T8954] Bluetooth: hci0: command 0x1003 tx timeout [ 1044.319545][T11288] Bluetooth: hci0: sending frame failed (-49) [ 1044.652758][ T304] usb 2-1: USB disconnect, device number 118 [ 1044.797371][ T24] audit: type=1326 audit(2000000924.769:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1044.842009][ T24] audit: type=1326 audit(2000000924.769:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1044.887391][ T24] audit: type=1326 audit(2000000924.769:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1044.933406][ T24] audit: type=1326 audit(2000000924.769:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1044.980491][ T24] audit: type=1326 audit(2000000924.769:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1045.027543][ T24] audit: type=1326 audit(2000000924.769:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1045.066511][ T3655] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1045.084207][ T24] audit: type=1326 audit(2000000924.769:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1045.131081][ T24] audit: type=1326 audit(2000000924.769:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1045.446608][ T3655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.464562][ T3655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.484441][ T3655] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1045.502268][ T3655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.511497][ T3655] usb 3-1: config 0 descriptor?? [ 1046.346504][ T697] Bluetooth: hci0: command 0x1001 tx timeout [ 1046.352823][T11288] Bluetooth: hci0: sending frame failed (-49) [ 1046.533002][T12576] usb 1-1: USB disconnect, device number 121 [ 1046.977628][T17902] tipc: Enabling of bearer rejected, failed to enable media [ 1047.650413][T17912] 9pnet: Insufficient options for proto=fd [ 1048.081047][T17927] fuse: Unknown parameter 'grou_id' [ 1048.258994][ T3655] usbhid 3-1:0.0: can't add hid device: -71 [ 1048.423897][ T3655] usbhid: probe of 3-1:0.0 failed with error -71 [ 1048.438211][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 1048.455498][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 1048.455602][ T24] audit: type=1326 audit(2000000928.419:10043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1048.466264][ T3655] usb 3-1: USB disconnect, device number 118 [ 1048.566590][ T24] audit: type=1326 audit(2000000928.419:10044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1048.590410][ T24] audit: type=1326 audit(2000000928.419:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1048.673362][T17934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4523'. [ 1048.932087][ T24] audit: type=1326 audit(2000000928.429:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1048.955978][ T24] audit: type=1326 audit(2000000928.429:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1048.980069][ T24] audit: type=1326 audit(2000000928.429:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1049.003985][ T24] audit: type=1326 audit(2000000928.429:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1049.027721][ T24] audit: type=1326 audit(2000000928.429:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1049.051698][ T24] audit: type=1326 audit(2000000928.429:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1049.075136][ T24] audit: type=1326 audit(2000000928.429:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.2.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc9d0ef9 code=0x7ffc0000 [ 1049.101486][T17941] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1049.116708][T17941] kvm [17940]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x20000000 [ 1049.256548][ T940] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1049.416613][ T524] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1049.686725][ T940] usb 2-1: not running at top speed; connect to a high speed hub [ 1049.786624][ T940] usb 2-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.806001][ T940] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1049.986882][ T940] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 [ 1049.995839][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.003589][ T940] usb 2-1: Product: ࠠ [ 1050.007615][ T940] usb 2-1: Manufacturer: 㰊 [ 1050.012044][ T940] usb 2-1: SerialNumber: syz [ 1050.036571][ T524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.036592][T17937] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1050.047407][ T524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.063845][ T524] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1050.072776][ T524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.081475][ T524] usb 1-1: config 0 descriptor?? [ 1050.986718][ T940] usbhid 2-1:1.0: can't add hid device: -71 [ 1050.992570][ T940] usbhid: probe of 2-1:1.0 failed with error -71 [ 1051.004957][ T940] usb 2-1: USB disconnect, device number 119 [ 1051.217154][T17974] fuse: Unknown parameter 'grou_id' [ 1052.089392][T17997] fuse: Unknown parameter 'grou_id' [ 1052.193372][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.200413][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.207843][T18002] device bridge_slave_0 entered promiscuous mode [ 1052.214570][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.221482][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.228753][T18002] device bridge_slave_1 entered promiscuous mode [ 1052.256503][ T940] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1052.280183][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.287052][T18002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.294147][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.300943][T18002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.325002][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1052.333329][T12576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.342564][T12576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.347416][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1052.361452][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1052.371617][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.378527][T12576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.401009][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1052.408946][ T524] usbhid 1-1:0.0: can't add hid device: -71 [ 1052.415119][ T524] usbhid: probe of 1-1:0.0 failed with error -71 [ 1052.422556][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.429455][T12576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.437102][ T524] usb 1-1: USB disconnect, device number 122 [ 1052.444874][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1052.460736][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.470418][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1052.483780][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1052.492593][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1052.501307][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1052.523969][T18002] device veth0_vlan entered promiscuous mode [ 1052.536407][T18002] device veth1_macvtap entered promiscuous mode [ 1052.543803][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1052.575414][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1052.591058][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1052.876577][ T940] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1052.949189][ T940] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1052.987623][ T940] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1053.037564][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.082532][T18019] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1053.118236][ T940] usb 2-1: invalid MIDI out EP 0 [ 1053.123850][ T940] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1053.126073][T18024] fuse: Bad value for 'user_id' [ 1053.326857][T17996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1053.529999][T18035] input: syz0 as /devices/virtual/input/input89 [ 1053.539472][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 1053.539483][ T24] audit: type=1400 audit(2000000933.509:10087): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=2894 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1053.540152][T18034] syz.2.4549[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1053.557274][ T24] audit: type=1400 audit(2000000933.509:10088): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2894 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1053.568226][T18034] syz.2.4549[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1053.619610][ T24] audit: type=1400 audit(2000000933.509:10089): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2894 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1053.724809][ T6105] device bridge_slave_1 left promiscuous mode [ 1053.783836][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.814144][ T6105] device bridge_slave_0 left promiscuous mode [ 1053.835586][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.869945][ T24] audit: type=1400 audit(2000000933.579:10090): avc: denied { name_bind } for pid=17995 comm="syz.1.4540" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1053.896580][ T6105] device veth1_macvtap left promiscuous mode [ 1053.911383][ T6105] device veth0_vlan left promiscuous mode [ 1053.963176][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 1054.096221][T18056] fuse: Unknown parameter 'grou_id' [ 1054.476501][ T20] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1054.626504][ T524] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1054.797297][ T697] usb 2-1: USB disconnect, device number 120 [ 1054.846611][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.858541][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1054.866595][ T524] usb 4-1: Using ep0 maxpacket: 32 [ 1054.986575][ T524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1055.096603][ T1313] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1055.166606][ T20] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1055.185779][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1055.195889][ T20] usb 1-1: SerialNumber: syz [ 1055.223950][ T524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1055.235124][ T524] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1055.244014][ T524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.290030][ T524] usb 4-1: config 0 descriptor?? [ 1055.306689][T18058] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1055.327119][ T524] hub 4-1:0.0: USB hub found [ 1055.476579][ T1313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.491910][ T1313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.503305][ T1313] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1055.512395][ T1313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.527975][ T1313] usb 5-1: config 0 descriptor?? [ 1055.546609][ T524] hub 4-1:0.0: 2 ports detected [ 1055.556520][ T8954] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1055.926636][ T8954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.940067][ T8954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1055.953564][ T8954] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1055.963180][ T8954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.971166][ T1313] usbhid 5-1:0.0: can't add hid device: -71 [ 1055.977084][ T1313] usbhid: probe of 5-1:0.0 failed with error -71 [ 1055.987196][ T8954] usb 2-1: config 0 descriptor?? [ 1055.993077][ T1313] usb 5-1: USB disconnect, device number 68 [ 1056.026545][ T940] Bluetooth: hci0: command 0x1003 tx timeout [ 1056.033566][T11288] Bluetooth: hci0: sending frame failed (-49) [ 1056.468151][ T8954] plantronics 0003:047F:FFFF.0076: No inputs registered, leaving [ 1056.483176][ T8954] plantronics 0003:047F:FFFF.0076: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1056.603843][ T20] usb 1-1: 0:2 : does not exist [ 1056.609692][ T20] usb 1-1: unit 5: unexpected type 0x0b [ 1056.627599][ T20] usb 1-1: USB disconnect, device number 123 [ 1056.636880][ T1896] udevd[1896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1056.672029][ T24] audit: type=1326 audit(2000000936.639:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18074 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1056.706539][ T24] audit: type=1326 audit(2000000936.639:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18074 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1056.746643][ T24] audit: type=1326 audit(2000000936.639:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18074 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1056.796508][ T24] audit: type=1326 audit(2000000936.639:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18074 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1056.844507][ T24] audit: type=1326 audit(2000000936.639:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18074 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1056.896525][ T24] audit: type=1326 audit(2000000936.639:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18074 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1057.693329][ T524] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1057.846547][ T3655] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1057.856901][ T524] usb 4-1: reset high-speed USB device number 115 using dummy_hcd [ 1058.106517][ T940] Bluetooth: hci0: command 0x1001 tx timeout [ 1058.112390][T11288] Bluetooth: hci0: sending frame failed (-49) [ 1058.209469][ T3655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.220268][ T3655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.220300][ T3655] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1058.238665][ T3655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.242742][ T3655] usb 1-1: config 0 descriptor?? [ 1058.366923][ T20] usb 2-1: USB disconnect, device number 121 [ 1058.555675][T18110] fuse: Unknown parameter 'grou_id' [ 1058.786582][ T3655] usbhid 1-1:0.0: can't add hid device: -71 [ 1058.792439][ T3655] usbhid: probe of 1-1:0.0 failed with error -71 [ 1058.802255][ T3655] usb 1-1: USB disconnect, device number 124 [ 1058.866564][ T524] usb 4-1: device descriptor read/64, error -71 [ 1059.026575][ T524] usb 4-1: device reset changed ep0 maxpacket size! [ 1059.033254][T12576] usb 4-1: USB disconnect, device number 115 [ 1059.039468][ T524] hub 4-1:0.0: set hub depth failed [ 1060.006529][T12576] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1060.080426][T18145] netlink: 'syz.1.4567': attribute type 27 has an invalid length. [ 1060.413910][ T8954] Bluetooth: hci0: command 0x1009 tx timeout [ 1060.539615][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.546663][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.766513][T12576] usb 4-1: Using ep0 maxpacket: 16 [ 1060.916036][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1060.926344][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1060.956920][T12576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.967956][T12576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.024922][T18161] fuse: Bad value for 'user_id' [ 1061.113341][T12576] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1061.207565][T12576] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1061.221502][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4574'. [ 1061.230408][T12576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.244000][T12576] usb 4-1: config 0 descriptor?? [ 1061.546580][T12576] usbhid 4-1:0.0: can't add hid device: -71 [ 1061.553477][T12576] usbhid: probe of 4-1:0.0 failed with error -71 [ 1061.561524][T12576] usb 4-1: USB disconnect, device number 116 [ 1062.407410][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 1062.407425][ T24] audit: type=1326 audit(2000000942.379:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.3.4585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98e706ef9 code=0x0 [ 1062.606551][ T3655] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1062.618223][T18195] FAULT_INJECTION: forcing a failure. [ 1062.618223][T18195] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.630699][T18195] CPU: 1 PID: 18195 Comm: syz.4.4586 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 1062.641888][T18195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1062.651778][T18195] Call Trace: [ 1062.654920][T18195] dump_stack_lvl+0x1e2/0x24b [ 1062.659421][T18195] ? panic+0x812/0x812 [ 1062.663324][T18195] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1062.668621][T18195] dump_stack+0x15/0x17 [ 1062.672614][T18195] should_fail+0x3c6/0x510 [ 1062.676871][T18195] ? alloc_htab_elem+0x269/0x710 [ 1062.681643][T18195] __should_failslab+0xa4/0xe0 [ 1062.686241][T18195] should_failslab+0x9/0x20 [ 1062.690593][T18195] __kmalloc+0x60/0x330 [ 1062.694584][T18195] ? __kasan_check_write+0x14/0x20 [ 1062.700056][T18195] alloc_htab_elem+0x269/0x710 [ 1062.704650][T18195] __htab_percpu_map_update_elem+0x2d3/0x450 [ 1062.710556][T18195] bpf_percpu_hash_update+0x90/0xc0 [ 1062.715579][T18195] bpf_map_update_value+0x25d/0x420 [ 1062.720729][T18195] generic_map_update_batch+0x533/0x860 [ 1062.726111][T18195] ? generic_map_delete_batch+0x630/0x630 [ 1062.731671][T18195] ? generic_map_delete_batch+0x630/0x630 [ 1062.737214][T18195] bpf_map_do_batch+0x4c3/0x620 [ 1062.741901][T18195] __se_sys_bpf+0xc3c/0x11cb0 [ 1062.746417][T18195] ? stack_trace_save+0x113/0x1c0 [ 1062.751277][T18195] ? terminate_walk+0x407/0x4f0 [ 1062.755965][T18195] ? stack_trace_snprint+0xf0/0xf0 [ 1062.760913][T18195] ? kmem_cache_free+0xa9/0x1e0 [ 1062.765603][T18195] ? check_kill_permission+0x97/0x490 [ 1062.770803][T18195] ? kasan_set_track+0x5d/0x70 [ 1062.775399][T18195] ? __x64_sys_bpf+0x90/0x90 [ 1062.779827][T18195] ? __kasan_slab_free+0x11/0x20 [ 1062.784602][T18195] ? slab_free_freelist_hook+0xc0/0x190 [ 1062.789986][T18195] ? _kstrtoull+0x3a0/0x4a0 [ 1062.794325][T18195] ? kstrtouint_from_user+0x20a/0x2a0 [ 1062.799617][T18195] ? kstrtol_from_user+0x310/0x310 [ 1062.804561][T18195] ? bpf_send_signal_common+0x2d8/0x420 [ 1062.809945][T18195] ? memset+0x35/0x40 [ 1062.813762][T18195] ? __fsnotify_parent+0x4b9/0x6c0 [ 1062.818719][T18195] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 1062.825430][T18195] ? proc_fail_nth_write+0x20b/0x290 [ 1062.830562][T18195] ? proc_fail_nth_read+0x210/0x210 [ 1062.835590][T18195] ? security_file_permission+0x86/0xb0 [ 1062.841058][T18195] ? rw_verify_area+0x1c3/0x360 [ 1062.845743][T18195] ? preempt_count_add+0x92/0x1a0 [ 1062.850612][T18195] ? vfs_write+0x852/0xe70 [ 1062.854853][T18195] ? kmem_cache_free+0x1c0/0x1e0 [ 1062.859629][T18195] ? kernel_write+0x3d0/0x3d0 [ 1062.864147][T18195] ? __kasan_check_write+0x14/0x20 [ 1062.869087][T18195] ? mutex_lock+0xa5/0x110 [ 1062.873380][T18195] ? mutex_trylock+0xa0/0xa0 [ 1062.877770][T18195] ? __kasan_check_write+0x14/0x20 [ 1062.882716][T18195] ? fput_many+0x160/0x1b0 [ 1062.886972][T18195] ? debug_smp_processor_id+0x17/0x20 [ 1062.892181][T18195] __x64_sys_bpf+0x7b/0x90 [ 1062.896429][T18195] do_syscall_64+0x34/0x70 [ 1062.900684][T18195] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1062.906409][T18195] RIP: 0033:0x7f9341875ef9 [ 1062.910662][T18195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.930102][T18195] RSP: 002b:00007f93404f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1062.938367][T18195] RAX: ffffffffffffffda RBX: 00007f9341a2ef80 RCX: 00007f9341875ef9 [ 1062.946154][T18195] RDX: 0000000000000038 RSI: 0000000020000400 RDI: 000000000000001a [ 1062.953968][T18195] RBP: 00007f93404f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.961778][T18195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.966627][ T3655] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1062.969593][T18195] R13: 0000000000000000 R14: 00007f9341a2ef80 R15: 00007ffcc921aac8 [ 1062.992181][ T3655] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1063.007127][ T3655] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1063.025725][ T3655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.038919][T18201] 9pnet: Insufficient options for proto=fd [ 1063.077382][ T3655] usb 1-1: invalid MIDI out EP 0 [ 1063.083006][ T3655] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1063.279278][T18189] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1063.376028][ T24] audit: type=1400 audit(2000000943.339:10119): avc: denied { remount } for pid=18202 comm="syz.4.4589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1063.422177][T18209] input: syz0 as /devices/virtual/input/input90 [ 1063.655041][T18213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.691030][T18213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.701583][T18213] device bridge_slave_0 entered promiscuous mode [ 1063.714484][T18213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.721574][T18213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.728867][T18213] device bridge_slave_1 entered promiscuous mode [ 1063.738855][T18223] FAULT_INJECTION: forcing a failure. [ 1063.738855][T18223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.751823][T18223] CPU: 0 PID: 18223 Comm: syz.3.4595 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 1063.762989][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1063.772881][T18223] Call Trace: [ 1063.776019][T18223] dump_stack_lvl+0x1e2/0x24b [ 1063.780531][T18223] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1063.785826][T18223] dump_stack+0x15/0x17 [ 1063.788326][T18213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.789924][T18223] should_fail+0x3c6/0x510 [ 1063.789947][T18223] should_fail_usercopy+0x1a/0x20 [ 1063.796783][T18213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.801014][T18223] _copy_to_user+0x20/0x90 [ 1063.801037][T18223] simple_read_from_buffer+0xc7/0x150 [ 1063.805971][T18213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.812908][T18223] proc_fail_nth_read+0x1a3/0x210 [ 1063.812923][T18223] ? proc_fault_inject_write+0x390/0x390 [ 1063.812946][T18223] ? security_file_permission+0x86/0xb0 [ 1063.817170][T18213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.822371][T18223] ? rw_verify_area+0x1c3/0x360 [ 1063.850474][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.851968][T18223] ? proc_fault_inject_write+0x390/0x390 [ 1063.851988][T18223] vfs_read+0x200/0xba0 [ 1063.873152][T18223] ? kernel_read+0x70/0x70 [ 1063.877394][T18223] ? __kasan_check_write+0x14/0x20 [ 1063.882338][T18223] ? mutex_lock+0xa5/0x110 [ 1063.886674][T18223] ? mutex_trylock+0xa0/0xa0 [ 1063.891105][T18223] ? __fdget_pos+0x2e7/0x3a0 [ 1063.895552][T18223] ? ksys_read+0x77/0x2c0 [ 1063.899709][T18223] ksys_read+0x199/0x2c0 [ 1063.903780][T18223] ? vfs_write+0xe70/0xe70 [ 1063.908039][T18223] ? debug_smp_processor_id+0x17/0x20 [ 1063.913241][T18223] __x64_sys_read+0x7b/0x90 [ 1063.917577][T18223] do_syscall_64+0x34/0x70 [ 1063.921829][T18223] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1063.927557][T18223] RIP: 0033:0x7ff98e70593c [ 1063.931812][T18223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1063.951249][T18223] RSP: 002b:00007ff98d381030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.959491][T18223] RAX: ffffffffffffffda RBX: 00007ff98e8bff80 RCX: 00007ff98e70593c [ 1063.967310][T18223] RDX: 000000000000000f RSI: 00007ff98d3810a0 RDI: 0000000000000004 [ 1063.975111][T18223] RBP: 00007ff98d381090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.982923][T18223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.990736][T18223] R13: 0000000000000000 R14: 00007ff98e8bff80 R15: 00007ffcfddc51e8 [ 1063.999337][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.010383][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.022364][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1064.032693][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.039573][T12576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.057724][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1064.065688][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.072567][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.080006][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1064.088415][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1064.104338][T18213] device veth0_vlan entered promiscuous mode [ 1064.111183][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1064.119708][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1064.128155][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1064.135426][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1064.149417][T18213] device veth1_macvtap entered promiscuous mode [ 1064.157171][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1064.170943][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1064.229919][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1064.316694][ T8954] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1064.362332][T18233] tipc: Started in network mode [ 1064.367182][T18233] tipc: Own node identity eeb617cf978f, cluster identity 4711 [ 1064.374730][T18233] tipc: Enabled bearer , priority 0 [ 1064.443188][T18233] device syzkaller0 entered promiscuous mode [ 1065.029184][T18227] tipc: Resetting bearer [ 1065.077386][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.088839][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.112866][ T8954] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1065.123149][ T8954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.173348][T18227] tipc: Disabling bearer [ 1065.194570][ T8954] usb 4-1: config 0 descriptor?? [ 1065.336848][ T940] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1065.361463][ T20] usb 1-1: USB disconnect, device number 125 [ 1065.510058][T18253] fuse: Bad value for 'fd' [ 1065.582153][ T9] device bridge_slave_1 left promiscuous mode [ 1065.623846][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.671032][ T9] device bridge_slave_0 left promiscuous mode [ 1065.677920][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.694995][ T9] device veth1_macvtap left promiscuous mode [ 1065.702473][ T9] device veth0_vlan left promiscuous mode [ 1065.796825][ T8954] hid (null): bogus close delimiter [ 1065.886615][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.897451][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.907301][ T940] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 1065.916173][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.924859][ T940] usb 3-1: config 0 descriptor?? [ 1066.046567][ T8954] usb 4-1: string descriptor 0 read error: -71 [ 1066.076706][ T8954] uclogic 0003:256C:006D.0077: failed retrieving string descriptor #200: -71 [ 1066.085419][ T8954] uclogic 0003:256C:006D.0077: failed retrieving pen parameters: -71 [ 1066.093371][T13660] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1066.100703][ T8954] uclogic 0003:256C:006D.0077: failed probing pen v2 parameters: -71 [ 1066.108665][ T8954] uclogic 0003:256C:006D.0077: failed probing parameters: -71 [ 1066.116002][ T8954] uclogic: probe of 0003:256C:006D.0077 failed with error -71 [ 1066.124731][ T8954] usb 4-1: USB disconnect, device number 117 [ 1066.416818][ T940] wacom 0003:056A:0027.0078: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 1066.477030][ T940] wacom 0003:056A:0027.0078: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 1066.488539][ T288] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1066.502238][ T940] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0078/input/input91 [ 1066.526680][T13660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1066.567719][T13660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1066.597840][ T24] audit: type=1400 audit(2000000946.419:10120): avc: denied { write } for pid=18265 comm="syz.0.4608" name="task" dev="proc" ino=86323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1066.620368][T13660] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.631980][ T24] audit: type=1400 audit(2000000946.419:10121): avc: denied { add_name } for pid=18265 comm="syz.0.4608" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1066.646158][T13660] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.683609][T13660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.684430][ T24] audit: type=1400 audit(2000000946.419:10122): avc: denied { create } for pid=18265 comm="syz.0.4608" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1066.696622][T13660] usb 5-1: config 0 descriptor?? [ 1066.737697][ T24] audit: type=1400 audit(2000000946.419:10123): avc: denied { associate } for pid=18265 comm="syz.0.4608" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1066.806617][T18259] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1066.836821][ T288] usb 2-1: Using ep0 maxpacket: 16 [ 1066.976759][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.987804][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.997402][ T288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1067.009983][ T288] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1067.018826][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.027599][ T288] usb 2-1: config 0 descriptor?? [ 1067.046590][ T940] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1067.197881][ T24] audit: type=1400 audit(2000000947.169:10124): avc: denied { mounton } for pid=18271 comm="syz.0.4610" path="/58/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1067.297519][T13660] plantronics 0003:047F:FFFF.0079: unknown main item tag 0xd [ 1067.306400][T13660] plantronics 0003:047F:FFFF.0079: No inputs registered, leaving [ 1067.315492][T13660] plantronics 0003:047F:FFFF.0079: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1067.457049][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.469179][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.479790][ T940] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1067.489615][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.499049][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.507755][ T940] usb 4-1: config 0 descriptor?? [ 1067.512586][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.520008][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.527321][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.534513][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.541927][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.549591][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.559122][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.566314][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.574773][ T288] microsoft 0003:045E:07DA.007A: unknown main item tag 0x0 [ 1067.580337][T18259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1067.589095][ T288] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.007A/input/input95 [ 1067.601178][ T524] usb 5-1: USB disconnect, device number 69 [ 1067.603881][ T288] microsoft 0003:045E:07DA.007A: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1067.709200][ T304] usb 2-1: USB disconnect, device number 122 [ 1067.844667][ T288] usb 3-1: USB disconnect, device number 119 [ 1068.426527][ T288] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1068.582911][T18293] fuse: Bad value for 'fd' [ 1068.616549][T12576] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1068.986593][T12576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.997356][T12576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.007159][T12576] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1069.020032][T12576] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1069.029138][T12576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.038766][T12576] usb 1-1: config 0 descriptor?? [ 1069.146867][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.158121][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.167798][ T288] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1069.177148][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.196615][ T288] usb 3-1: config 0 descriptor?? [ 1069.835191][T18310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1069.896737][ T940] usbhid 4-1:0.0: can't add hid device: -71 [ 1069.903023][ T940] usbhid: probe of 4-1:0.0 failed with error -71 [ 1069.918259][ T940] usb 4-1: USB disconnect, device number 118 [ 1069.991725][ T24] audit: type=1400 audit(2000000949.959:10125): avc: denied { create } for pid=18286 comm="syz.0.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1070.356531][ T3655] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1070.406659][ T940] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1070.526489][ T24] audit: type=1326 audit(2000000950.489:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.550234][ T24] audit: type=1326 audit(2000000950.499:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.574169][ T24] audit: type=1326 audit(2000000950.499:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.597700][ T24] audit: type=1326 audit(2000000950.499:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.621220][ T24] audit: type=1326 audit(2000000950.499:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.644772][ T24] audit: type=1326 audit(2000000950.499:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.668512][ T24] audit: type=1326 audit(2000000950.499:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.692028][ T24] audit: type=1326 audit(2000000950.499:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.715673][ T24] audit: type=1326 audit(2000000950.499:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18318 comm="syz.1.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1070.739330][ T3655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.750300][ T3655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.759897][ T3655] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1070.768770][ T3655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.778162][ T3655] usb 5-1: config 0 descriptor?? [ 1070.796595][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.807560][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.817412][ T940] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1070.826328][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.834799][ T940] usb 4-1: config 0 descriptor?? [ 1071.566658][ T288] usbhid 3-1:0.0: can't add hid device: -71 [ 1071.574227][ T288] usbhid: probe of 3-1:0.0 failed with error -71 [ 1071.582389][ T288] usb 3-1: USB disconnect, device number 120 [ 1071.616616][T12576] usbhid 1-1:0.0: can't add hid device: -71 [ 1071.623174][T12576] usbhid: probe of 1-1:0.0 failed with error -71 [ 1071.635982][T12576] usb 1-1: USB disconnect, device number 126 [ 1072.548886][T18345] fuse: Bad value for 'fd' [ 1073.526553][ T3655] usbhid 5-1:0.0: can't add hid device: -71 [ 1073.532458][ T3655] usbhid: probe of 5-1:0.0 failed with error -71 [ 1073.554764][ T3655] usb 5-1: USB disconnect, device number 70 [ 1074.438872][ T940] usbhid 4-1:0.0: can't add hid device: -71 [ 1074.444679][ T940] usbhid: probe of 4-1:0.0 failed with error -71 [ 1074.451763][ T940] usb 4-1: USB disconnect, device number 119 [ 1074.954874][ T8954] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1075.076518][T12576] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1075.166538][ T940] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1075.396616][ T8954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.447783][ T8954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.458674][ T8954] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1075.474033][ T8954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.486497][ T8954] usb 1-1: config 0 descriptor?? [ 1075.721677][T12576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.732376][T12576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.742727][T12576] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1075.751620][T12576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.867697][T18389] fuse: Bad value for 'fd' [ 1075.872473][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.874965][T12576] usb 2-1: config 0 descriptor?? [ 1076.772360][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.784090][ T940] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1076.793593][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.806778][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 1076.806791][ T24] audit: type=1400 audit(2000000956.769:10183): avc: denied { relabelfrom } for pid=18394 comm="syz.2.4644" name="" dev="pipefs" ino=86520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1076.890248][ T940] usb 4-1: config 0 descriptor?? [ 1076.896788][ T24] audit: type=1326 audit(2000000956.859:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1076.920489][ T940] usb 4-1: can't set config #0, error -71 [ 1076.933185][ T24] audit: type=1326 audit(2000000956.859:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1076.958262][ T940] usb 4-1: USB disconnect, device number 120 [ 1077.072373][ T24] audit: type=1326 audit(2000000956.859:10186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.098747][ T24] audit: type=1326 audit(2000000956.869:10187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.246889][ T24] audit: type=1326 audit(2000000956.869:10188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.270562][ T24] audit: type=1326 audit(2000000956.869:10189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.298159][ T24] audit: type=1326 audit(2000000956.899:10190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.322095][ T24] audit: type=1326 audit(2000000956.899:10191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.345901][ T24] audit: type=1326 audit(2000000956.899:10192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1077.736575][T12576] usbhid 2-1:0.0: can't add hid device: -71 [ 1077.742513][T12576] usbhid: probe of 2-1:0.0 failed with error -71 [ 1077.765482][T12576] usb 2-1: USB disconnect, device number 123 [ 1077.966590][ T8954] usbhid 1-1:0.0: can't add hid device: -71 [ 1077.972402][ T8954] usbhid: probe of 1-1:0.0 failed with error -71 [ 1078.020000][ T8954] usb 1-1: USB disconnect, device number 127 [ 1078.868087][T18443] fuse: Invalid rootmode [ 1079.596614][T18446] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1079.676525][T12576] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1079.945442][T18480] 9pnet: Insufficient options for proto=fd [ 1079.960895][T18480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4666'. [ 1080.034073][T18485] syz.1.4668[18485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.034140][T18485] syz.1.4668[18485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.066503][T18446] usb 5-1: Using ep0 maxpacket: 8 [ 1080.777350][T12576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.805270][T12576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.815137][T12576] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1080.824056][T12576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.846596][T18446] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1080.864545][T18446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.873383][T12576] usb 3-1: config 0 descriptor?? [ 1080.886177][T18446] usb 5-1: Product: syz [ 1080.944715][T18446] usb 5-1: Manufacturer: syz [ 1080.951969][T18446] usb 5-1: SerialNumber: syz [ 1081.005912][T18446] usb 5-1: config 0 descriptor?? [ 1081.048107][T18446] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 1081.139291][T18510] fuse: Invalid rootmode [ 1081.621035][ T8954] usb 5-1: USB disconnect, device number 71 [ 1082.226519][T18446] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1082.626632][T18446] usb 4-1: not running at top speed; connect to a high speed hub [ 1082.706599][T18446] usb 4-1: config 13 has an invalid interface number: 6 but max is 0 [ 1082.714782][T18446] usb 4-1: config 13 has an invalid descriptor of length 113, skipping remainder of the config [ 1082.725586][T18446] usb 4-1: config 13 has no interface number 0 [ 1082.731804][T18446] usb 4-1: config 13 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1082.745131][T18446] usb 4-1: config 13 interface 6 has no altsetting 0 [ 1082.957758][T18446] usb 4-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice=f1.a7 [ 1082.958036][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 1082.958052][ T24] audit: type=1326 audit(2000000962.929:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1082.976601][T18446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.999516][ T24] audit: type=1326 audit(2000000962.929:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.004098][T12576] usbhid 3-1:0.0: can't add hid device: -71 [ 1083.028207][ T24] audit: type=1326 audit(2000000962.929:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.053251][T12576] usbhid: probe of 3-1:0.0 failed with error -71 [ 1083.057513][ T24] audit: type=1326 audit(2000000962.929:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.062355][T18446] usb 4-1: Product: syz [ 1083.090547][ T24] audit: type=1326 audit(2000000962.929:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.116303][ T24] audit: type=1326 audit(2000000962.969:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.200843][ T24] audit: type=1326 audit(2000000962.969:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.253239][ T24] audit: type=1326 audit(2000000962.969:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.291288][ T24] audit: type=1326 audit(2000000962.969:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.291308][ T24] audit: type=1326 audit(2000000962.969:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1083.294232][T12576] usb 3-1: USB disconnect, device number 121 [ 1083.346364][T18446] usb 4-1: Manufacturer: 銏玼ⵤଯᤉ꼰쬲싽왯킹齒￟喌鱴ۀƆ벆墯历틉됕ᶯ徉땄׏苊裗矐츋揬暟蒬☠ᅭ툓祋䡔Ч࠘ឲ辎鲦幩졹ꏇ䶶찂赁ᖢ巕蘿یʓ켍<嶵쿕헖䅤꓃䡳斊䰔赝냚ኋ훨Ǐ㛍䡙瑘ﷷ貯厜ꢦ럶麠駙퍦蔩 [ 1083.346376][T18446] usb 4-1: SerialNumber: syz [ 1083.368299][T18446] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1083.386390][T18446] usb 4-1: no configuration chosen from 1 choice [ 1083.496560][ T6432] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1084.016399][T18551] fuse: Invalid rootmode [ 1084.211367][T18557] FAULT_INJECTION: forcing a failure. [ 1084.211367][T18557] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.223900][T18557] CPU: 0 PID: 18557 Comm: syz.2.4690 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 1084.235064][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1084.244993][T18557] Call Trace: [ 1084.248091][T18557] dump_stack_lvl+0x1e2/0x24b [ 1084.252598][T18557] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1084.257894][T18557] dump_stack+0x15/0x17 [ 1084.261884][T18557] should_fail+0x3c6/0x510 [ 1084.266136][T18557] ? p9_client_prepare_req+0x313/0xb50 [ 1084.271436][T18557] __should_failslab+0xa4/0xe0 [ 1084.276032][T18557] should_failslab+0x9/0x20 [ 1084.280377][T18557] kmem_cache_alloc+0x3d/0x2e0 [ 1084.284970][T18557] ? p9_client_prepare_req+0x150/0xb50 [ 1084.290276][T18557] p9_client_prepare_req+0x313/0xb50 [ 1084.295392][T18557] p9_client_rpc+0x159/0x1390 [ 1084.299903][T18557] ? __kasan_check_write+0x14/0x20 [ 1084.304847][T18557] ? node_tag_clear+0x200/0x2b0 [ 1084.309543][T18557] ? p9_fid_create+0x230/0x230 [ 1084.314135][T18557] ? idr_alloc_u32+0x20b/0x320 [ 1084.318738][T18557] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1084.323688][T18557] ? debug_smp_processor_id+0x17/0x20 [ 1084.328895][T18557] ? __radix_tree_preload+0x351/0x3d0 [ 1084.334101][T18557] p9_client_walk+0x1fe/0x7b0 [ 1084.338612][T18557] ? p9_client_rpc+0x1390/0x1390 [ 1084.343391][T18557] ? v9fs_fid_lookup+0x118/0x160 [ 1084.348163][T18557] v9fs_file_open+0x2df/0x6a0 [ 1084.352676][T18557] ? v9fs_fid_readpage+0x440/0x440 [ 1084.357621][T18557] do_dentry_open+0x7c1/0x10d0 [ 1084.362230][T18557] vfs_open+0x73/0x80 [ 1084.366037][T18557] path_openat+0x2660/0x3000 [ 1084.370472][T18557] ? kmem_cache_alloc+0x168/0x2e0 [ 1084.375324][T18557] ? do_syscall_64+0x34/0x70 [ 1084.379752][T18557] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1084.385658][T18557] ? do_filp_open+0x460/0x460 [ 1084.390173][T18557] do_filp_open+0x21c/0x460 [ 1084.394508][T18557] ? vfs_tmpfile+0x2b0/0x2b0 [ 1084.398943][T18557] ? get_unused_fd_flags+0x94/0xa0 [ 1084.403884][T18557] do_sys_openat2+0x13f/0x710 [ 1084.408400][T18557] ? mutex_trylock+0xa0/0xa0 [ 1084.412829][T18557] ? do_sys_open+0x220/0x220 [ 1084.417246][T18557] ? __kasan_check_write+0x14/0x20 [ 1084.422194][T18557] ? ksys_write+0x260/0x2c0 [ 1084.426533][T18557] __x64_sys_openat+0x243/0x290 [ 1084.431227][T18557] ? __ia32_sys_open+0x270/0x270 [ 1084.436170][T18557] ? debug_smp_processor_id+0x17/0x20 [ 1084.441379][T18557] do_syscall_64+0x34/0x70 [ 1084.445629][T18557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1084.451352][T18557] RIP: 0033:0x7fbd67ae0ef9 [ 1084.455607][T18557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.475066][T18557] RSP: 002b:00007fbd6673a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1084.483294][T18557] RAX: ffffffffffffffda RBX: 00007fbd67c9a058 RCX: 00007fbd67ae0ef9 [ 1084.491103][T18557] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1084.498913][T18557] RBP: 00007fbd6673a090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.506722][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.514539][T18557] R13: 0000000000000000 R14: 00007fbd67c9a058 R15: 00007ffee4c1b188 [ 1084.646850][ T6432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.661635][ T6432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.678538][ T6432] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1084.689787][ T6432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.711504][ T6432] usb 1-1: config 0 descriptor?? [ 1084.868329][T18578] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1085.130005][ T8954] usb 4-1: USB disconnect, device number 121 [ 1085.520746][ T6432] hid-led 0003:1D34:000A.007B: unknown main item tag 0x0 [ 1085.527647][T12576] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1085.758208][T18602] fuse: Bad value for 'rootmode' [ 1085.887160][T12576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.898533][ T6432] hid-led: probe of 0003:1D34:000A.007B failed with error -71 [ 1085.967475][ T6432] usb 1-1: USB disconnect, device number 2 [ 1085.977820][T12576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.002268][T12576] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1086.011482][T12576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.020148][T12576] usb 3-1: config 0 descriptor?? [ 1086.480986][T18619] 9pnet: Insufficient options for proto=fd [ 1086.526789][T12576] hid (null): global environment stack underflow [ 1086.539656][T12576] uclogic 0003:5543:0522.007C: global environment stack underflow [ 1086.547644][T12576] uclogic 0003:5543:0522.007C: item 0 1 1 11 parsing failed [ 1086.555094][T12576] uclogic 0003:5543:0522.007C: parse failed [ 1086.561660][T12576] uclogic: probe of 0003:5543:0522.007C failed with error -22 [ 1087.156671][T12576] usb 3-1: USB disconnect, device number 122 [ 1087.615537][T18648] syz.3.4712[18648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1087.616090][T18648] syz.3.4712[18648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1087.994791][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 1087.994806][ T24] audit: type=1326 audit(2000000967.959:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.059952][ T24] audit: type=1326 audit(2000000967.959:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.122200][ T24] audit: type=1326 audit(2000000967.959:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.152914][ T24] audit: type=1326 audit(2000000967.959:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.574046][T18668] fuse: Bad value for 'rootmode' [ 1088.673881][ T24] audit: type=1326 audit(2000000967.959:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.801533][ T24] audit: type=1326 audit(2000000967.959:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.825185][ T24] audit: type=1326 audit(2000000967.959:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.866558][ T24] audit: type=1326 audit(2000000967.959:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1088.989309][ T24] audit: type=1326 audit(2000000967.959:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1089.653799][ T24] audit: type=1326 audit(2000000967.959:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1093.896489][T13660] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1093.918605][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 1093.918617][ T24] audit: type=1326 audit(2000000973.889:10339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18744 comm="syz.3.4737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98e706ef9 code=0x0 [ 1094.146506][T13660] usb 2-1: Using ep0 maxpacket: 16 [ 1094.316589][T13660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.349294][T13660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.486163][T13660] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1094.611372][T13660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.656077][T13660] usb 2-1: config 0 descriptor?? [ 1095.170667][ T24] audit: type=1326 audit(2000000975.129:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.0.4745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7457a15ef9 code=0x0 [ 1095.409694][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1095.419427][T18800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1095.440246][T18762] udc-core: couldn't find an available UDC or it's busy [ 1095.449550][T18762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1095.459735][ T24] audit: type=1326 audit(2000000975.419:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.4.4749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x0 [ 1095.484022][T13660] cp2112 0003:10C4:EA90.007D: unexpected long global item [ 1095.491411][T13660] cp2112 0003:10C4:EA90.007D: parse failed [ 1095.497168][T13660] cp2112: probe of 0003:10C4:EA90.007D failed with error -22 [ 1096.198925][T13660] usb 2-1: USB disconnect, device number 124 [ 1097.206492][T12576] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1097.643609][T18853] fuse: Unknown parameter 'grou_id' [ 1097.654761][T12576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.674930][T12576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.716826][T12576] usb 3-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00 [ 1097.763083][T12576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.836695][T12576] usb 3-1: config 0 descriptor?? [ 1097.986496][ T6432] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1098.121442][ T24] audit: type=1326 audit(2000000978.089:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18859 comm="syz.3.4766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98e706ef9 code=0x0 [ 1098.365551][ T24] audit: type=1326 audit(2000000978.279:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18865 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1098.381378][T12576] hid (null): unknown global tag 0xe [ 1098.392649][ T24] audit: type=1326 audit(2000000978.279:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18865 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1098.397665][T12576] wacom 0003:056A:01BB.007E: unknown global tag 0xe [ 1098.417828][ T24] audit: type=1326 audit(2000000978.279:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18865 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1098.424452][ T6432] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1098.447836][ T24] audit: type=1326 audit(2000000978.279:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18865 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1098.458746][T12576] wacom 0003:056A:01BB.007E: item 0 2 1 14 parsing failed [ 1098.492150][ T24] audit: type=1326 audit(2000000978.279:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18865 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1098.494037][ T6432] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1098.515807][ T24] audit: type=1326 audit(2000000978.279:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18865 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x7ffc0000 [ 1098.526671][T12576] wacom 0003:056A:01BB.007E: parse failed [ 1098.555409][T12576] wacom: probe of 0003:056A:01BB.007E failed with error -22 [ 1098.562871][ T6432] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1098.583109][ T6432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.627609][ T6432] usb 2-1: invalid MIDI out EP 0 [ 1098.632737][ T6432] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1098.838373][T18851] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4764'. [ 1098.894381][ T8954] usb 3-1: USB disconnect, device number 123 [ 1099.214557][T18874] input: syz0 as /devices/virtual/input/input96 [ 1100.231756][T18899] fuse: Unknown parameter 'use00000000000000000000' [ 1100.945190][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1100.958588][T12576] usb 2-1: USB disconnect, device number 125 [ 1101.030510][T18912] syz.1.4777[18912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1101.030578][T18912] syz.1.4777[18912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1101.446808][ T8954] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1101.836493][ T8954] usb 3-1: Using ep0 maxpacket: 16 [ 1101.986616][ T8954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.997725][ T8954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.007499][ T8954] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1102.019359][ T8954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.028185][ T8954] usb 3-1: config 0 descriptor?? [ 1102.146545][T12576] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1102.204180][T18937] fuse: Unknown parameter 'use00000000000000000000' [ 1102.416530][T12576] usb 1-1: Using ep0 maxpacket: 16 [ 1102.534278][ T20] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1102.576591][T12576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.587556][T12576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.597400][T12576] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1102.606282][T12576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.615240][T12576] usb 1-1: config 0 descriptor?? [ 1102.646860][T18914] udc-core: couldn't find an available UDC or it's busy [ 1102.653691][T18914] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1102.667236][ T8954] cp2112 0003:10C4:EA90.007F: unexpected long global item [ 1102.674349][ T8954] cp2112 0003:10C4:EA90.007F: parse failed [ 1102.680426][ T8954] cp2112: probe of 0003:10C4:EA90.007F failed with error -22 [ 1102.892484][ T611] usb 3-1: USB disconnect, device number 124 [ 1102.916612][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.928186][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.938108][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1102.947474][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.955855][ T20] usb 5-1: config 0 descriptor?? [ 1103.067030][T18928] udc-core: couldn't find an available UDC or it's busy [ 1103.073839][T18928] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1103.097560][T12576] cp2112 0003:10C4:EA90.0080: unexpected long global item [ 1103.104792][T12576] cp2112 0003:10C4:EA90.0080: parse failed [ 1103.110780][T12576] cp2112: probe of 0003:10C4:EA90.0080 failed with error -22 [ 1103.166488][ T6432] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1103.268269][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1103.317122][ T8954] usb 1-1: USB disconnect, device number 3 [ 1104.004414][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4795'. [ 1105.238610][ T6432] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1105.254932][ T6432] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1105.267874][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1105.277448][ T6432] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1105.359628][T18983] fuse: Unknown parameter 'user_i00000000000000000000' [ 1105.412762][ T6432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.564771][ T6432] usb 2-1: invalid MIDI out EP 0 [ 1105.575403][ T6432] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1105.577801][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 1105.611908][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 1105.618991][ T20] usb 5-1: USB disconnect, device number 72 [ 1105.727923][T18993] FAULT_INJECTION: forcing a failure. [ 1105.727923][T18993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.741160][T18993] CPU: 0 PID: 18993 Comm: syz.2.4805 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 1105.752350][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1105.762240][T18993] Call Trace: [ 1105.765423][T18993] dump_stack_lvl+0x1e2/0x24b [ 1105.769885][T18993] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1105.775176][T18993] ? __alloc_skb+0x37c/0x510 [ 1105.779604][T18993] dump_stack+0x15/0x17 [ 1105.783595][T18993] should_fail+0x3c6/0x510 [ 1105.787852][T18993] should_fail_usercopy+0x1a/0x20 [ 1105.792708][T18993] _copy_from_iter+0x22c/0xd10 [ 1105.797321][T18993] ? sock_alloc_send_pskb+0x936/0xa50 [ 1105.802518][T18993] ? copyout_mc+0x90/0x90 [ 1105.806683][T18993] ? __check_object_size+0x2e6/0x3c0 [ 1105.811813][T18993] skb_copy_datagram_from_iter+0x100/0x6d0 [ 1105.817606][T18993] unix_stream_sendmsg+0x877/0xf50 [ 1105.822545][T18993] ? unix_show_fdinfo+0xa0/0xa0 [ 1105.827318][T18993] ? security_socket_sendmsg+0x82/0xb0 [ 1105.832606][T18993] ? unix_show_fdinfo+0xa0/0xa0 [ 1105.837294][T18993] __sys_sendto+0x545/0x700 [ 1105.841629][T18993] ? __kasan_check_write+0x14/0x20 [ 1105.846664][T18993] ? __ia32_sys_getpeername+0x90/0x90 [ 1105.851891][T18993] ? __ia32_sys_read+0x90/0x90 [ 1105.856471][T18993] __x64_sys_sendto+0xe5/0x100 [ 1105.861076][T18993] do_syscall_64+0x34/0x70 [ 1105.865327][T18993] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1105.871049][T18993] RIP: 0033:0x7fbd67ae0ef9 [ 1105.875305][T18993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.894752][T18993] RSP: 002b:00007fbd6675b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1105.902993][T18993] RAX: ffffffffffffffda RBX: 00007fbd67c99f80 RCX: 00007fbd67ae0ef9 [ 1105.910889][T18993] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 1105.918698][T18993] RBP: 00007fbd6675b090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.926508][T18993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.934349][T18993] R13: 0000000000000000 R14: 00007fbd67c99f80 R15: 00007ffee4c1b188 [ 1105.941662][ T20] usb 2-1: USB disconnect, device number 126 [ 1106.023958][T18996] fuse: Bad value for 'fd' [ 1106.319095][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 1106.319143][ T24] audit: type=1326 audit(2000000986.289:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.350386][ T24] audit: type=1326 audit(2000000986.319:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.381208][ T24] audit: type=1326 audit(2000000986.319:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.404786][ T24] audit: type=1326 audit(2000000986.319:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.727088][T19009] tipc: Started in network mode [ 1106.731783][T19009] tipc: Own node identity 7f000001, cluster identity 4711 [ 1106.739003][T19009] tipc: Enabled bearer , priority 10 [ 1106.771927][ T24] audit: type=1326 audit(2000000986.369:10396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.837553][ T24] audit: type=1326 audit(2000000986.369:10397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.876432][ T24] audit: type=1326 audit(2000000986.369:10398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.901115][ T24] audit: type=1326 audit(2000000986.799:10399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.925060][ T24] audit: type=1326 audit(2000000986.809:10400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1106.949542][ T24] audit: type=1326 audit(2000000986.839:10401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1107.232176][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4813'. [ 1107.491841][ T6432] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1107.539797][T19037] fuse: Unknown parameter 'user_i00000000000000000000' [ 1107.556042][ T20] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1108.231859][ T8954] tipc: 32-bit node address hash set to 100007f [ 1108.414019][ T6432] usb 4-1: Using ep0 maxpacket: 16 [ 1108.686901][ T20] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1108.742995][ T20] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1108.770027][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1108.781327][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.796585][ T6432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.810460][ T6432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.822476][ T6432] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1108.827577][ T20] usb 2-1: invalid MIDI out EP 0 [ 1108.831924][ T6432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.837538][ T20] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1108.859324][ T6432] usb 4-1: config 0 descriptor?? [ 1109.303383][T19027] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4816'. [ 1109.436903][T19055] input: syz0 as /devices/virtual/input/input97 [ 1109.497704][T19018] udc-core: couldn't find an available UDC or it's busy [ 1109.504526][T19018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1109.537328][ T6432] cp2112 0003:10C4:EA90.0081: unexpected long global item [ 1109.544432][ T6432] cp2112 0003:10C4:EA90.0081: parse failed [ 1109.550418][ T6432] cp2112: probe of 0003:10C4:EA90.0081 failed with error -22 [ 1109.726494][ T8954] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1109.761439][ T611] usb 4-1: USB disconnect, device number 122 [ 1109.986540][ T8954] usb 1-1: Using ep0 maxpacket: 32 [ 1110.107181][ T8954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.118434][ T8954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.128540][ T8954] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1110.137659][ T8954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.146212][ T8954] usb 1-1: config 0 descriptor?? [ 1110.471799][ T697] usb 2-1: USB disconnect, device number 127 [ 1110.630614][ T8954] hid-rmi 0003:0461:4E72.0082: unknown main item tag 0x0 [ 1110.637573][ T8954] hid-rmi 0003:0461:4E72.0082: unknown main item tag 0x0 [ 1110.644414][ T8954] hid-rmi 0003:0461:4E72.0082: unknown main item tag 0x0 [ 1110.651564][ T8954] hid-rmi 0003:0461:4E72.0082: unknown main item tag 0x0 [ 1110.658652][ T8954] hid-rmi 0003:0461:4E72.0082: unknown main item tag 0x0 [ 1110.666281][ T8954] hid-rmi 0003:0461:4E72.0082: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 1110.846084][ T611] usb 1-1: USB disconnect, device number 4 [ 1110.900837][T19077] fuse: Unknown parameter 'user_i00000000000000000000' [ 1110.914635][ T697] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1111.451678][ T697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.462724][ T697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.472654][ T697] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1111.484559][ T697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.493230][ T697] usb 2-1: config 0 descriptor?? [ 1112.614117][T19112] syz.2.4840[19112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1112.614184][T19112] syz.2.4840[19112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1112.659186][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 1112.659203][ T24] audit: type=1326 audit(2000000992.629:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1112.705388][ T24] audit: type=1326 audit(2000000992.629:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1112.730098][ T24] audit: type=1326 audit(2000000992.629:10460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1112.753576][ T24] audit: type=1326 audit(2000000992.629:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1112.777185][ T24] audit: type=1326 audit(2000000992.669:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1113.028557][T19112] 9pnet: Insufficient options for proto=fd [ 1113.177011][ T611] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1113.184597][ T24] audit: type=1326 audit(2000000992.669:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1113.209439][ T24] audit: type=1326 audit(2000000992.669:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1113.244472][ T24] audit: type=1326 audit(2000000992.669:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1113.273187][ T24] audit: type=1326 audit(2000000992.669:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1113.320402][ T24] audit: type=1326 audit(2000000992.669:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19111 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd67ae0ef9 code=0x7ffc0000 [ 1113.796578][ T611] usb 1-1: Using ep0 maxpacket: 16 [ 1114.303449][ T611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.314153][ T611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.324414][ T611] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1114.334680][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.344758][ T611] usb 1-1: config 0 descriptor?? [ 1114.366600][ T697] usbhid 2-1:0.0: can't add hid device: -71 [ 1114.372395][ T697] usbhid: probe of 2-1:0.0 failed with error -71 [ 1114.393579][ T697] usb 2-1: USB disconnect, device number 2 [ 1114.551293][T19140] fuse: Unknown parameter 'user_id00000000000000000000' [ 1114.866510][ T940] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1114.866882][T19102] udc-core: couldn't find an available UDC or it's busy [ 1114.881009][T19102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1114.907396][ T611] cp2112 0003:10C4:EA90.0083: unexpected long global item [ 1114.914536][ T611] cp2112 0003:10C4:EA90.0083: parse failed [ 1114.922521][ T611] cp2112: probe of 0003:10C4:EA90.0083 failed with error -22 [ 1114.989715][T19145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1114.998910][T19145] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1115.108209][ T611] usb 1-1: USB disconnect, device number 5 [ 1115.307540][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.319365][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.329603][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1115.338768][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.352253][ T940] usb 5-1: config 0 descriptor?? [ 1115.686620][ T611] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1115.696819][ T940] usbhid 5-1:0.0: can't add hid device: -71 [ 1115.713581][ T940] usbhid: probe of 5-1:0.0 failed with error -71 [ 1115.737055][ T940] usb 5-1: USB disconnect, device number 73 [ 1115.936511][ T611] usb 2-1: Using ep0 maxpacket: 32 [ 1116.076584][ T611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1116.093759][ T611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1116.115173][ T611] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1116.131564][ T611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.149119][ T611] usb 2-1: config 0 descriptor?? [ 1116.171166][T19164] fuse: Unknown parameter 'grou_id' [ 1116.196549][T19152] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1116.217338][ T611] hub 2-1:0.0: USB hub found [ 1116.296505][ T940] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1116.436514][ T697] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1116.471160][T19171] udc-core: couldn't find an available UDC or it's busy [ 1116.478110][T19171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1116.826746][ T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1116.834295][ T940] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1116.843257][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.851134][ T940] usb 4-1: Product: syz [ 1116.855056][ T940] usb 4-1: Manufacturer: syz [ 1116.859757][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.870653][ T940] usb 4-1: SerialNumber: syz [ 1116.875460][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.885847][ T940] usb 4-1: config 0 descriptor?? [ 1116.890733][ T697] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1116.899647][ T697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.908935][ T697] usb 5-1: config 0 descriptor?? [ 1116.927799][ T940] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 1117.243213][T19181] fuse: Bad value for 'fd' [ 1117.527189][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.557804][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.606152][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1117.656917][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.683513][ T24] kauditd_printk_skb: 313 callbacks suppressed [ 1117.683546][ T24] audit: type=1326 audit(2000000997.639:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1117.723505][ T24] audit: type=1326 audit(2000000997.679:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652964eea7 code=0x7ffc0000 [ 1117.735922][ T20] usb 1-1: config 0 descriptor?? [ 1117.750711][ T24] audit: type=1326 audit(2000000997.679:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65295f3859 code=0x7ffc0000 [ 1117.778285][ T24] audit: type=1326 audit(2000000997.679:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1117.843258][ T24] audit: type=1326 audit(2000000997.689:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652964eea7 code=0x7ffc0000 [ 1117.866827][ T24] audit: type=1326 audit(2000000997.689:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65295f3859 code=0x7ffc0000 [ 1117.890735][ T24] audit: type=1326 audit(2000000997.689:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1117.914475][ T24] audit: type=1326 audit(2000000997.699:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652964eea7 code=0x7ffc0000 [ 1117.938123][ T24] audit: type=1326 audit(2000000997.699:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65295f3859 code=0x7ffc0000 [ 1117.963076][ T24] audit: type=1326 audit(2000000997.699:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.1.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6529657ef9 code=0x7ffc0000 [ 1118.148673][T19189] fuse: Unknown parameter 'user_id00000000000000000000' [ 1119.149289][ T8954] usb 4-1: USB disconnect, device number 123 [ 1119.402993][T19202] incfs: Options parsing error. -22 [ 1119.408243][T19202] incfs: mount failed -22 [ 1119.476551][ T6432] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1119.589524][T19202] device wireguard0 entered promiscuous mode [ 1119.760211][ T697] usbhid 5-1:0.0: can't add hid device: -71 [ 1119.766182][ T697] usbhid: probe of 5-1:0.0 failed with error -71 [ 1119.776070][ T697] usb 5-1: USB disconnect, device number 74 [ 1119.777058][ T611] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1119.796477][ T6432] usb 3-1: Using ep0 maxpacket: 16 [ 1119.886659][ T611] usbhid 2-1:0.0: can't add hid device: -71 [ 1119.892913][ T611] usbhid: probe of 2-1:0.0 failed with error -71 [ 1119.936697][ T6432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.948772][ T611] usb 2-1: USB disconnect, device number 3 [ 1119.954498][ T6432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.967616][ T6432] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1119.985979][ T6432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.004783][ T6432] usb 3-1: config 0 descriptor?? [ 1120.426538][ T8954] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1120.467657][T19194] udc-core: couldn't find an available UDC or it's busy [ 1120.474514][T19194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1120.510607][ T6432] cp2112 0003:10C4:EA90.0084: unexpected long global item [ 1120.519224][ T6432] cp2112 0003:10C4:EA90.0084: parse failed [ 1120.526257][ T6432] cp2112: probe of 0003:10C4:EA90.0084 failed with error -22 [ 1120.708583][ T6432] usb 3-1: USB disconnect, device number 125 [ 1120.758519][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 1120.764603][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 1120.772369][ T20] usb 1-1: USB disconnect, device number 6 [ 1120.795333][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4868'. [ 1120.938071][T19218] fuse: Unknown parameter 'grou_id' [ 1121.081411][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.092281][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.101770][ T8954] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1121.110675][ T8954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.119530][ T8954] usb 4-1: config 0 descriptor?? [ 1121.486529][ T8954] usbhid 4-1:0.0: can't add hid device: -71 [ 1121.492715][ T8954] usbhid: probe of 4-1:0.0 failed with error -71 [ 1121.502071][ T8954] usb 4-1: USB disconnect, device number 124 [ 1121.956196][T19231] fuse: Unknown parameter 'user_id00000000000000000000' [ 1122.673923][T19241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1122.836507][ T20] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1123.196622][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.207524][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.218679][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1123.228379][ T24] kauditd_printk_skb: 316 callbacks suppressed [ 1123.228430][ T24] audit: type=1326 audit(2000001003.199:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.4.4876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9341875ef9 code=0x0 [ 1123.257455][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.283860][ T20] usb 4-1: config 0 descriptor?? [ 1125.180183][T19268] fuse: Unknown parameter 'grou_id' [ 1125.336571][ T697] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1125.552384][T19275] fuse: Bad value for 'fd' [ 1125.726491][ T6105] tipc: Left network mode [ 1125.848167][T19277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.855025][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.863016][T19277] device bridge_slave_0 entered promiscuous mode [ 1125.870014][T19277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.877057][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.884330][T19277] device bridge_slave_1 entered promiscuous mode [ 1125.928452][T19277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.935308][T19277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.942468][T19277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.949355][T19277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.956677][T13660] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1125.972869][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1125.980615][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.988410][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.996605][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.007628][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.009976][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1126.018313][ T697] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1126.026297][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.034114][ T697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.040875][ T611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.044489][ T6432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1126.054310][ T697] usb 5-1: config 0 descriptor?? [ 1126.056135][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.075119][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.092345][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1126.100143][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1126.113037][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1126.125923][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1126.133897][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1126.141292][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.149733][T19277] device veth0_vlan entered promiscuous mode [ 1126.161761][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1126.170873][T19277] device veth1_macvtap entered promiscuous mode [ 1126.181882][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1126.265403][ T6432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1126.276641][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 1126.282626][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 1126.308202][ T20] usb 4-1: USB disconnect, device number 125 [ 1126.356656][T13660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.367536][T13660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.377530][T13660] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1126.385627][ T6105] device bridge_slave_1 left promiscuous mode [ 1126.386745][T13660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.395471][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.404833][T13660] usb 1-1: config 0 descriptor?? [ 1126.425310][ T24] audit: type=1326 audit(2000001006.389:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.448904][ T6105] device bridge_slave_0 left promiscuous mode [ 1126.454867][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.466549][ T24] audit: type=1326 audit(2000001006.419:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.503421][ T24] audit: type=1326 audit(2000001006.419:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.527376][ T24] audit: type=1326 audit(2000001006.419:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.556050][ T24] audit: type=1326 audit(2000001006.419:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.594934][ T24] audit: type=1326 audit(2000001006.419:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.632961][ T24] audit: type=1326 audit(2000001006.419:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.661277][ T24] audit: type=1326 audit(2000001006.419:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1126.767494][ T24] audit: type=1326 audit(2000001006.419:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1127.006753][T13660] usbhid 1-1:0.0: can't add hid device: -71 [ 1127.013354][T13660] usbhid: probe of 1-1:0.0 failed with error -71 [ 1127.027600][T13660] usb 1-1: USB disconnect, device number 7 [ 1128.478817][T19341] device dummy0 entered promiscuous mode [ 1128.625559][T19345] fuse: Bad value for 'fd' [ 1128.667788][ T697] usbhid 5-1:0.0: can't add hid device: -71 [ 1128.858011][ T697] usbhid: probe of 5-1:0.0 failed with error -71 [ 1128.865572][ T697] usb 5-1: USB disconnect, device number 75 [ 1128.936559][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 1128.936573][ T24] audit: type=1326 audit(2000001008.909:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1128.971146][ T24] audit: type=1326 audit(2000001008.929:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1128.995091][ T24] audit: type=1326 audit(2000001008.939:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.024099][ T24] audit: type=1326 audit(2000001008.939:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.048004][ T24] audit: type=1326 audit(2000001008.939:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.072411][ T24] audit: type=1326 audit(2000001008.939:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.103413][ T24] audit: type=1326 audit(2000001008.939:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.135148][ T24] audit: type=1326 audit(2000001008.939:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.161874][ T24] audit: type=1326 audit(2000001008.939:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.185620][ T24] audit: type=1326 audit(2000001008.939:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19352 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff768ef9 code=0x7ffc0000 [ 1129.226659][ T697] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1129.866682][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.879789][ T697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.898426][ T697] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1129.915903][ T697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.932232][ T697] usb 5-1: config 0 descriptor?? [ 1130.326657][ T697] usbhid 5-1:0.0: can't add hid device: -71 [ 1130.332927][ T697] usbhid: probe of 5-1:0.0 failed with error -71 [ 1130.449534][ T697] usb 5-1: USB disconnect, device number 76 [ 1130.810482][T19400] fuse: Bad value for 'fd' [ 1131.568106][T19431] FAULT_INJECTION: forcing a failure. [ 1131.568106][T19431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.586582][T19431] CPU: 1 PID: 19431 Comm: syz.3.4927 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 1131.597782][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1131.607745][T19431] Call Trace: [ 1131.610880][T19431] dump_stack_lvl+0x1e2/0x24b [ 1131.615472][T19431] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1131.620779][T19431] dump_stack+0x15/0x17 [ 1131.624850][T19431] should_fail+0x3c6/0x510 [ 1131.629101][T19431] should_fail_usercopy+0x1a/0x20 [ 1131.633969][T19431] _copy_to_iter+0x230/0xda0 [ 1131.638405][T19431] ? iov_iter_init+0x120/0x120 [ 1131.642989][T19431] ? preempt_count_add+0x92/0x1a0 [ 1131.647855][T19431] get_random_bytes_user+0x1e1/0x400 [ 1131.652968][T19431] ? signal_pending+0xa0/0xa0 [ 1131.657830][T19431] ? mutex_trylock+0xa0/0xa0 [ 1131.662256][T19431] ? __kasan_check_write+0x14/0x20 [ 1131.667208][T19431] ? import_single_range+0xdd/0x1c0 [ 1131.672253][T19431] __x64_sys_getrandom+0x18a/0x270 [ 1131.677182][T19431] ? add_disk_randomness+0xd0/0xd0 [ 1131.682132][T19431] ? debug_smp_processor_id+0x17/0x20 [ 1131.687341][T19431] do_syscall_64+0x34/0x70 [ 1131.691589][T19431] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1131.697322][T19431] RIP: 0033:0x7ff98e706ef9 [ 1131.701581][T19431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.721015][T19431] RSP: 002b:00007ff98d381038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1131.729376][T19431] RAX: ffffffffffffffda RBX: 00007ff98e8bff80 RCX: 00007ff98e706ef9 [ 1131.737182][T19431] RDX: 0000000000000000 RSI: 00000000ffffff4f RDI: 0000000020000600 [ 1131.745091][T19431] RBP: 00007ff98d381090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.752976][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.760784][T19431] R13: 0000000000000000 R14: 00007ff98e8bff80 R15: 00007ffcfddc51e8 [ 1132.010387][T19435] usb usb8: usbfs: process 19435 (syz.3.4928) did not claim interface 0 before use [ 1132.403452][T19445] FAULT_INJECTION: forcing a failure. [ 1132.403452][T19445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.416315][T19445] CPU: 0 PID: 19445 Comm: syz.1.4933 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 1132.427569][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1132.437453][T19445] Call Trace: [ 1132.440595][T19445] dump_stack_lvl+0x1e2/0x24b [ 1132.445098][T19445] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1132.450397][T19445] ? shmem_getpage_gfp+0x2230/0x2480 [ 1132.455542][T19445] dump_stack+0x15/0x17 [ 1132.459504][T19445] should_fail+0x3c6/0x510 [ 1132.463760][T19445] should_fail_usercopy+0x1a/0x20 [ 1132.468618][T19445] iov_iter_copy_from_user_atomic+0x391/0xd80 [ 1132.474521][T19445] ? shmem_getpage+0xa0/0xa0 [ 1132.478945][T19445] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 1132.484672][T19445] ? memzero_page+0x100/0x100 [ 1132.489202][T19445] generic_perform_write+0x34c/0x570 [ 1132.494309][T19445] ? grab_cache_page_write_begin+0xa0/0xa0 [ 1132.500081][T19445] ? file_remove_privs+0x570/0x570 [ 1132.505030][T19445] ? handle_pte_fault+0x1450/0x3e30 [ 1132.510065][T19445] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1132.515702][T19445] ? __kasan_check_write+0x14/0x20 [ 1132.516506][ T697] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1132.520659][T19445] __generic_file_write_iter+0x23c/0x560 [ 1132.520674][T19445] ? generic_write_checks+0x3b9/0x470 [ 1132.520697][T19445] generic_file_write_iter+0xaf/0x1c0 [ 1132.543948][T19445] vfs_write+0xb4c/0xe70 [ 1132.548027][T19445] ? kernel_write+0x3d0/0x3d0 [ 1132.552544][T19445] ? __fdget_pos+0x209/0x3a0 [ 1132.556960][T19445] ? ksys_write+0x77/0x2c0 [ 1132.561225][T19445] ksys_write+0x199/0x2c0 [ 1132.565476][T19445] ? kvm_sched_clock_read+0x18/0x40 [ 1132.570510][T19445] ? __ia32_sys_read+0x90/0x90 [ 1132.575110][T19445] ? debug_smp_processor_id+0x17/0x20 [ 1132.580318][T19445] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1132.586221][T19445] ? irqentry_exit_to_user_mode+0x41/0x80 [ 1132.591774][T19445] __x64_sys_write+0x7b/0x90 [ 1132.596199][T19445] do_syscall_64+0x34/0x70 [ 1132.600455][T19445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1132.606181][T19445] RIP: 0033:0x7fb7ff7679df [ 1132.610437][T19445] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1132.629874][T19445] RSP: 002b:00007fb7fe3e2df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1132.638118][T19445] RAX: ffffffffffffffda RBX: 00000000013bd7ef RCX: 00007fb7ff7679df [ 1132.646045][T19445] RDX: 00000000013bd7ef RSI: 00007fb7f5fc3000 RDI: 0000000000000004 [ 1132.654031][T19445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000005515 [ 1132.661838][T19445] R10: 00000000000003ca R11: 0000000000000293 R12: 0000000000000004 [ 1132.669653][T19445] R13: 00007fb7fe3e2ef0 R14: 00007fb7fe3e2eb0 R15: 00007fb7f5fc3000 [ 1132.966506][ T20] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1133.613839][T19455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19455 comm=syz.3.4934 [ 1133.752334][ T6105] Bluetooth: hci0: Frame reassembly failed (-84) [ 1133.872887][T19463] syz.3.4938[19463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1133.872937][T19463] syz.3.4938[19463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1133.896535][ T697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.988843][T19467] fuse: Unknown parameter '0x0000000000000003' [ 1134.113665][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 1134.113686][ T24] audit: type=1326 audit(2000001014.079:11258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19468 comm="syz.3.4940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98e706ef9 code=0x0 [ 1134.173972][ T20] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 1134.181923][ T697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.191460][ T20] usb 3-1: config 0 has no interface number 0 [ 1134.197378][ T20] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.208139][ T697] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1134.216946][ T697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.225311][ T20] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.235245][ T697] usb 1-1: config 0 descriptor?? [ 1134.316698][ T20] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1134.325634][ T20] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1134.333532][ T20] usb 3-1: Manufacturer: syz [ 1134.338672][ T20] usb 3-1: config 0 descriptor?? [ 1134.576551][ T697] usbhid 1-1:0.0: can't add hid device: -71 [ 1134.582422][ T697] usbhid: probe of 1-1:0.0 failed with error -71 [ 1134.589742][ T697] usb 1-1: USB disconnect, device number 8 [ 1134.876522][ T20] usbhid 3-1:0.18: can't add hid device: -71 [ 1134.882544][ T20] usbhid: probe of 3-1:0.18 failed with error -71 [ 1134.897653][ T20] usb 3-1: USB disconnect, device number 126 [ 1134.960630][T19477] syz.3.4942[19477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1134.960700][T19477] syz.3.4942[19477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.363207][T19487] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1135.476490][ T611] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1135.741620][ T940] Bluetooth: hci0: command 0x1003 tx timeout [ 1135.756573][T11288] Bluetooth: hci0: sending frame failed (-49) [ 1135.827613][ T24] audit: type=1400 audit(2000001015.789:11259): avc: denied { create } for pid=19498 comm="syz.4.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1136.056489][ T611] usb 1-1: Using ep0 maxpacket: 32 [ 1136.186571][ T611] usb 1-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 1136.196803][ T611] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1136.205643][ T611] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1136.214580][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.227060][ T611] usb 1-1: config 0 descriptor?? [ 1136.480561][T19510] fuse: Unknown parameter '0x0000000000000003' [ 1136.529519][ T611] usb 1-1: USB disconnect, device number 9 [ 1136.642128][T19512] fuse: Unknown parameter 'grou_id' [ 1136.906524][ T524] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1137.301006][T19522] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1137.326585][ T524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.338141][ T524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.348070][ T524] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1137.357180][ T524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.369717][ T524] usb 5-1: config 0 descriptor?? [ 1137.558141][ T24] audit: type=1326 audit(2000001017.529:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.0.4954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7457a15ef9 code=0x0 [ 1137.786474][T12576] Bluetooth: hci0: command 0x1001 tx timeout [ 1137.792487][T11288] Bluetooth: hci0: sending frame failed (-49) [ 1137.846508][ T524] usbhid 5-1:0.0: can't add hid device: -71 [ 1137.852380][ T524] usbhid: probe of 5-1:0.0 failed with error -71 [ 1137.860201][ T524] usb 5-1: USB disconnect, device number 77 [ 1138.181522][ T24] audit: type=1326 audit(2000001018.149:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.0.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7457a15ef9 code=0x7ffc0000 [ 1138.221273][ T24] audit: type=1326 audit(2000001018.179:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.0.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7457a15ef9 code=0x7ffc0000 [ 1138.261288][ T24] audit: type=1326 audit(2000001018.179:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.0.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7457a15ef9 code=0x7ffc0000 [ 1138.285414][ T24] audit: type=1326 audit(2000001018.179:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.0.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7457a15ef9 code=0x7ffc0000 [ 1138.315190][ T24] audit: type=1326 audit(2000001018.179:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.0.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7457a15ef9 code=0x7ffc0000 [ 1138.342736][ T24] audit: type=1326 audit(2000001018.179:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.0.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7457a15ef9 code=0x7ffc0000 [ 1138.366481][ T24] audit: type=1400 audit(2000001018.179:11267): avc: denied { watch } for pid=19545 comm="syz.0.4962" path="/119" dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1138.464616][T19554] fuse: Unknown parameter '0x0000000000000003' SYZFAIL: bad allocate request allocated=0 size=18446744073709551130/18446744073709551136 (errno 11: Resource temporarily unavailable) [ 1138.996553][ T940] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1139.676516][ T940] usb 3-1: device not accepting address 127, error -71 [ 1139.867064][ T611] Bluetooth: hci0: command 0x1009 tx timeout [ 1139.897357][ T6105] device bridge_slave_1 left promiscuous mode [ 1139.903291][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.910565][ T6105] device bridge_slave_0 left promiscuous mode [ 1139.916629][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.667865][ T6105] tipc: Disabling bearer [ 1140.673053][ T6105] tipc: Left network mode [ 1141.587402][ T6105] device bridge_slave_1 left promiscuous mode [ 1141.593341][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.600868][ T6105] device bridge_slave_0 left promiscuous mode [ 1141.606810][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.614752][ T6105] device bridge_slave_1 left promiscuous mode [ 1141.620790][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.628094][ T6105] device bridge_slave_0 left promiscuous mode [ 1141.634094][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.642135][ T6105] device bridge_slave_1 left promiscuous mode [ 1141.648192][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.655515][ T6105] device bridge_slave_0 left promiscuous mode [ 1141.661559][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.669575][ T6105] device veth1_macvtap left promiscuous mode [ 1141.675493][ T6105] device veth0_vlan left promiscuous mode [ 1141.681352][ T6105] device veth1_macvtap left promiscuous mode [ 1141.687367][ T6105] device veth0_vlan left promiscuous mode [ 1141.693076][ T6105] device veth1_macvtap left promiscuous mode [ 1141.698959][ T6105] device veth0_vlan left promiscuous mode [ 1145.257209][ T6105] device bridge_slave_1 left promiscuous mode [ 1145.263149][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.270507][ T6105] device bridge_slave_0 left promiscuous mode [ 1145.276544][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.284106][ T6105] device veth1_macvtap left promiscuous mode [ 1145.289967][ T6105] device veth0_vlan left promiscuous mode