last executing test programs: 9.433641715s ago: executing program 3 (id=4120): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800080000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="44000000200001002cbd7000000000000a201000000000070200000014000200fc02000000000000000000000000000014000100200100000000000000000000000000025dbf387de02907abb1b83ae9bf2735d3"], 0x44}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpid() 8.51302131s ago: executing program 3 (id=4126): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="44000000200001002cbd7000000000000a201000000000070200000014000200fc02000000000000000000000000000014000100200100000000000000000000000000025dbf387de02907abb1b83ae9bf2735d3"], 0x44}}, 0x40000) 7.560386777s ago: executing program 3 (id=4132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r7, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r6, r9, 0xf3a, 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r10, 0x53, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv4_newnexthop={0x2c, 0x68, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x800) 7.006993782s ago: executing program 0 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (fail_nth: 1) 6.771259461s ago: executing program 2 (id=4141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) 6.716104946s ago: executing program 0 (id=4142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x8, 0x0) 6.66755246s ago: executing program 4 (id=4143): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @local, 0x65}, 0x1b) socket$packet(0x11, 0x3, 0x300) unshare(0x20040600) (async, rerun: 64) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xe}, 0x20) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x40) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb73b9}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = epoll_create1(0x80000) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 6.651913061s ago: executing program 3 (id=4144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000830009040000010301010009210008000122010009058103"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0xfdfdffff, {0x2, 0x0, @empty=0xffffffff}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r4 = io_uring_setup(0x17f2, &(0x7f0000000040)={0x0, 0x4965, 0x100, 0x0, 0x225}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000002bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0x24, 0xfb, {0xfb, 0x21, "d2a8f2bb59b779db9e1db807e5e9ea1d356ee34d4f4d7c8383ae4f53ced453bc99671be658b20bd329038e6806dcb2a60fcfed6bb8ca4048a34bf11066cd98f4679cd081b8f829efeeedfab4b068233fcedeee75d40af0d6514c5af74efe32a7a0beaea5baa0a637f645a8f79116ab1b95168d1a3054369a7f80f424d9615f7644a3c7258bbc040000000000000004890c206d50ec070000000000000024188291aaf4015d854ab6cdea0b23b4e7c833b443a049272ab73c9b6dcd95e7d895b820749393e1ebca5a1c3e83a6cd02d7c4d8bf0d0fa1600d987a50c3f4fa24431d859eb9b485b355507503a454072465018f9f4824d40e88b9ef"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.428265379s ago: executing program 4 (id=4145): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d000100000000090400"], 0x0) 6.279959831s ago: executing program 2 (id=4148): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x50) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r6 = syz_open_dev$usbfs(0x0, 0xfffffffffbfffc01, 0xa403) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0xc22, &(0x7f0000001f40)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xf2d}, {0x1, 0x0, 0x1}], @generic="d78573db4a8cb55b6721229b890004d4441f059901e6baf5861030d43bce0cdabd390bd10694ae14fbbe12d2013ad9daaa26cc81e884da0c2fd59e9eb73a523f946ba5834bc7f83e5f3fc2887c69c673c9e0230c643cad3824a03fa848015994dd70906a1c8f64cc0bb0c80e3015d9bcc49543d7961a584427620363a1b99da060f3645bd1c8ba8a928aba3b9a5c68aeb5b48303596b5a9c3ef90a27976053ea3510f2ead317fdc2bb34459cecb4f99a0e2d1224e503ef316d8c97d425441da1c32fd20d73ed605c9dfdd77d0b1076af6ea6caa1ffdd2cf422935868bd760ead8b8ed8069ee7db2b37839f02a56ab2352824519b5915b31266f292b2dadd2ac83fe2f724136bc676dfc0392ab2d215122f93f68a911d92ae9edb2353ac9941a687bc48d04d62bfe3ae20ef38da4d76ed2680b06dd6f445919420cc10b5cd0de540681b073ef2cf29a75950c461faa2bdc20d56161ff0710695ac23b0d1e9f156b6bf76f950de72d31eb3b9aea76484c0754025ce0f7039e1d3cb8da1459d6e37321268b84f76cd63767103d7d346de39214e10380dba475cbf7f89c547d93dd02b51e262b70a7d4729829ae8c00ba3f0f54dbede8a21a54892a1657c0c11601ffa20a4fca82352bc2878bfeb353414ae9367acf06a7027ba86c33f5ae0258670b56a2fb10401a1a70949ea0a2b9b9d85e6848f2f7c547802b5bea46576cdb70a8ecf40d8ee57a8e33d27f1227fc00a194a2c9ec6de8197e71761f9af397a42cf783b6a8598ac38fada1c8f439b75e7c088c3b2251fc290539fdf61608872b445326677facb5a7bb681c990aaf2aab8cb3ab5c29da33cb38d8c025f4f8dd55d7a4235e9a1a3d44bd927b848acb0d5bd3575bc5978df0ad4f9e34e87f47db43f41f980112c62bd85359fe69d8edb1e77185dfe94513d2983fc38150fbb11268572a5c6d15bff05f9a79c8207062f0d4d06b14e5d469e6542a1e8692be3e919a0816186b7db6eefedb1f85baf9691e6cd25b43ef73b1700687a1e2cdb61a4d3d575a2f7c27eb924faba4441fedab748d43b25386d881d5e9de0a01370816a7f85d396d96f63467a163437fb5b911a6f67c637a1f426dcdd881570d4fb16669c61ce481c3912b43fde34e5efde04bfb029b17642dd6a62c4a05b8d33854dbaa923734e61c9500cfbedc7d63ee206ca3aa7dd698401d0107f6ce1a8137c6b881c73f7ad32dad60969b2934dc62d1121a2e88d0d39c07bbf3582eab44b0cf545f27c45f2be8ca7da9eee8219d3876141f3a166c2a9eee820a74f19556bf6535ce803b7817805d2430c532a5689d970b5b4e3477ffcddf14c710c8e54bf33d8ef206304c62848ad2510386054a118d3486eda15c28654c64ba8d0c07c86fcf433001d00381cf747b1e464deeb2203afa7820df6c3b32fcf390181ba39ce0645b4f419ff8d079a24939aa6c7623bfb318c0e707b2054b8f984ecc2a9d59c7768a27b8e62e7dc9e9c492f99b18e2fbf304b7b4bf535f50da482dbf964f72449bf2a4621df1ca5f4e16b036ba9a4783db0e8582f09f7dd9046a585fea3867aa458d3824436adaa5cf028b863a9089936fb2b9336bd244bf8b857a151caf44675668c647260c978be5827f72f5d07448ea76a2db20408a4e3ac696af28d627a340fd4f639d4cc3aa3ba429c5dd1e2e616e8fe14b43e6d4416a80ff799df2cb5d86646132f267d699e80c5984a33479d6be4aead55d9c01fa027b7f90a1cafdb96958787b0d396d3b2b684d0de70a61a14d813ab197bfecc6d357134e09df3fbdd15d52df5b3bd950f2fd532a81e3c40d5355301faca4eea4e398ad53c8e308e1ee54b2c90d101d82f27e8729ebb048532094e6fa043a1de17b59db2a9b8dd6991640320f0edecf874c6c97d953da6f6ff0108fe824617892e114008e40cbd15f9a72f6d2bc5e26641d7c0bbba359ee20bbec83b487cd8a1d138cdb0ced47e04b09c988c617fda5e5dacf735d536b9d34b3517b515e9a3a6e2201cc852bd908c9149518ea00065d1f5f0a75732c8cc4580ff4a7bd3a358ce0ab43aae7d05e55f519e05710c6170481a2012c18ae7a559c7fa092ea13d603de45db64883ff7f5392b1d72af248974cc67ac6a67c23ef363dd78929ed727c84bbd35ed4ea33dc9d6d71c116639af4049fb142c45e3726cd6c93cab97475af9a865ba0e1c1fddd7018c456b705c0f29697734ac236902f4861665325425257559f7bcfb9331a410179660a6c6fd9609826c99a019095dae11938e71016b3a11cc8aec84a37cf0bad3bb3f622fe0f4db2aec1abe6cf4647b84686b5a0e94c1a9b60c5c483658fd2154aad3a569e3058763d1a6767615c043e34fc18e3829775e702e088f09acd5b0393757b3995318e97874d248871f735cd3c79a1809798def5189a76a5fab943709d54818eb2814db4be326c9e58869f1b5b7c313b2e30ad690171c1638b7f2e1bc0535e7b8f6ab51f960b55e6a68a430efafdde892efbec7bf82fe4b933de9e244511cec2fdbaad203ffe6fbca5cd19f2856c857555d0de0aacaea8dca48becff33b2a6f9dff2de4e1b4cf4eb15099a4954c772ac91c5e092be4f6c54dee56cc5dee8ee03f8d8250a0c234cad2ada3556d98c1123e76ea5cdce97fe7a9f8491b8f6ee66dcc4d448b04c9de17169740fe0e38fb4f1ec4cf99ceb3897e875ffd5659e91b24671ea244ac24938623e6914041f981dda9a3f0f702cdbcc111f3fc695a2381c08d16f90e9aecb5d1e2e40c35a049c73fe7facbbbda8c75608942f0c2f756ce7cc457afe20cdd95630db989b4e2f668fca0b8a221eed8ce33b72d68a50b8f30993bb098f0b16f8a7969a45537950d80973643210983fb3d4a8a43616d4574b8b7f8a94cde26ca0871781ff231e238f8da2655688b7d479acedc28a2c6b918ade92d7c519f82abf7032c34ae4b3f93ce147363f30c2abd29477eb945c2dfa2bf165f42912a60c85f5e877ce1baa9d6711db76755de1dd6af837e10677a3c79aa375bddb72457f105c5cb2c551fd4bc0a7db51736ecf0ced7fa36e46e428a53946b9b2dfe3910f36fbcd79a44836ccf2b6f598c93fc4c591026b7d806b8e6b29058db4fad83539c6dc5da7fa20dfce8a4933bc738b5898761695ed3aeeff0dfabe720dcd5e697e54ae254fdbe853b52b0cd01960155fe6915cbbc0adaee5fc69bd2dfa6401603954f345987614bf4cd0d78b2b30f191eb9ee94164f548e6eecc119ea5f3ca98e6643b459fda04534ef8cc2317698ae57ce24681d0c470c173a41e3f23b30a47ea4117047361a687e7c2c60dc2852f1a6aeb22fcb1f165a40657b871b2ec5ec7ce01b83a012fa2572ad9b52060e1a40ad6f13e29c716f261bc6c290f9523959cdf4d269d04fbf8fd0f4c10f9469ce61ff327ec00e79ec484aff2ba87cd30c18a1b00d894ac099038ef18e5d77f9272a2e17c8adab2e56a261fbaf5afcdbdd34ce7123f2c45b2d6441b7d4decfb59c8a6cd37417be238b217cd34660d070523d8f679e87f09fd1ad18ec1ebabbf07694aa2163d2325254186e568717eba3eaad8a81ef39b25d4b2cd7e1944576d09d42d3b066613845e0bb7f869d8a9fabb1a9f5d48bd188228504d8262ca904a60b073603c6dd075ac0979c035c5129e168957bed21321196c139f27036e29c945d2f8d3ce7c8adbfeb25e7bf0568116529045131282bc41046ab57c10cb1ca4c2849e7aa2a95c711804faa3b65940b42dc310ab5d09bf29eb3515f1490e8f651edb6a168c3ae82731668a88eddee8be5f9511de6459af4acc52bdc1913af0c6fef26d5cb077c42808368b63e17dda0091397f27d66502a8ce90088e31956c242b9fb1b7e0492133bd559ddfbff20bc86d9f47b62994f3413336fed8750fb88176d42fc5751c56c6ee25c00bd57b9e8aa29979809ee3b6c86e5c0d789c5d0947fa026f6aab8a701b90631df783a7f851453e0ef418640e0da53dd941419d951c8614b21674ddaa5271275d4741d4d85ea9ca2fc80e62bdab5d00bea4cd05de72b4756fe81b8ed3cfc7520f09e431698ecba60b4dc6131500f0beff2f527c81b207e37be3fc54e7b289eb59828dae70106e5b6a03b6e84936766b52f36fd970a93e1340f3f1deda8499ada8ba0f8931427065c6ab2e91ae4acdb94e4c4efaa16dee7900fd01600ba1b07059157902eddc25c5c16e15eb79f3cb5f61651901debca59c0f7165ff2d189b304c74b7412b8fbac77ffedd7d4e1d2cba64eaf0b838a7ae8d926ea32a7c9206b8e6f192fcdde94301ef309d09c85f572715d8f1adfa30fc457af50b78969b32957bc76e4b2bc71b"}}}}, 0x0) 4.264751854s ago: executing program 0 (id=4149): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/user\x00') fdatasync(r1) r2 = dup(r1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x8, 0x0, [{0x40d, 0x0, 0x32}, {0x972, 0x0, 0xfffffffffffffff6}, {0x284, 0x0, 0x16}, {0x833, 0x0, 0x8000000000000000}, {0x267}, {0xa96, 0x0, 0xfff}, {0x8fd}, {0x91c, 0x0, 0x7}]}) fstat(r1, &(0x7f0000000180)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x200000, 0x1000, 0x81, 0x1}, 0x20) write$khugepaged_scan(r2, &(0x7f0000000300), 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x16, 0x36, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x44) close(r1) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x6]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xe}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1340eea64d69eb01}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) timer_create(0x0, &(0x7f0000000800)={0x0, 0x0, 0x3, @tid=r0}, &(0x7f0000000840)) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) fstat(r7, &(0x7f00000008c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000940)={0x2}) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r7, r6, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x17, 0x23, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffff085}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x1, 0x4, 0x6, 0x5, 0x20, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff4a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x1, 0xe, 0x6, 0xb, 0xffffffffffffffc0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0x3, &(0x7f0000000bc0)=""/3, 0x40f00, 0x42, '\x00', r5, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0x6, 0x2, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000f40)=[{0x0, 0x2, 0x2, 0x5}, {0x0, 0x1, 0xc, 0x6}, {0x1, 0x4, 0xd, 0x3}, {0x2, 0x1, 0xe, 0xa}, {0x5, 0x1, 0xc, 0x2}, {0x2, 0x2, 0x6}, {0x4, 0x5, 0x6, 0x7}, {0x4, 0x5, 0xc, 0xa}], 0x10, 0xd}, 0x94) 4.263962454s ago: executing program 2 (id=4150): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000007f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000a9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000057f000/0x1000)=nil, &(0x7f0000079000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="b54542ce00000000240012800b000100627269646765000014e102800800040000000000050017"], 0x44}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000020000000000000300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009800000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200001, 0xc1) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) 4.263717874s ago: executing program 2 (id=4151): bpf$MAP_CREATE(0x0, 0x0, 0x48) lchown(0x0, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") (fail_nth: 1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100), 0x0, 0x5405, 0x6000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 4.19523051s ago: executing program 0 (id=4153): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000500)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES16=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRES8, @ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000280), 0x2, 0xbc1, &(0x7f00000028c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10088e, &(0x7f0000000340)={[{@resgid}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x44e, &(0x7f0000000c80)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f00000004c0), &(0x7f0000001c40)=r5}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000015d000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, r5, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0) 4.015261985s ago: executing program 2 (id=4154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000200)) (fail_nth: 1) 3.70776619s ago: executing program 4 (id=4155): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000004000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800080000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.564195161s ago: executing program 4 (id=4156): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100c2, 0x1) write$nbd(r4, &(0x7f0000001900)={0x67446698, 0x0, 0x2, 0x2, 0x2}, 0x10) 3.491822267s ago: executing program 4 (id=4157): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000005000000040000000900000006000600", @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32], 0x50) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$usbfs(&(0x7f00000001c0), 0xfffffffffbfffc01, 0xa403) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0xf26, &(0x7f0000001f40)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0xf2d}, {0x1, 0x0, 0x1}], @generic="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"}}}}, 0x0) 3.400073774s ago: executing program 1 (id=4158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) 3.380294846s ago: executing program 1 (id=4159): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00'}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4bfa, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 3.352761408s ago: executing program 0 (id=4160): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00'}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4bfa, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 3.164318614s ago: executing program 3 (id=4161): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x50) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r6 = syz_open_dev$usbfs(0x0, 0xfffffffffbfffc01, 0xa403) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0xc22, &(0x7f0000001f40)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xf2d}, {0x1, 0x0, 0x1}], @generic="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"}}}}, 0x0) 2.648343715s ago: executing program 4 (id=4162): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @dev, 0x0}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="81b1c1e23a79290d178b6f0b000000000000494f222892c45e940700000000000000aa0fd6f2f7d826afbd00fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg(r8, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="02010200002d3922ff65b4355e95", 0x5ee}], 0x1}, 0x4) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.581011891s ago: executing program 1 (id=4163): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/user\x00') fdatasync(r1) r2 = dup(r1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x8, 0x0, [{0x40d, 0x0, 0x32}, {0x972, 0x0, 0xfffffffffffffff6}, {0x284, 0x0, 0x16}, {0x833, 0x0, 0x8000000000000000}, {0x267}, {0xa96, 0x0, 0xfff}, {0x8fd}, {0x91c, 0x0, 0x7}]}) fstat(r1, &(0x7f0000000180)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x200000, 0x1000, 0x81, 0x1}, 0x20) write$khugepaged_scan(r2, &(0x7f0000000300), 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x16, 0x36, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x44) close(r1) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x6]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xe}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1340eea64d69eb01}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) timer_create(0x0, &(0x7f0000000800)={0x0, 0x0, 0x3, @tid=r0}, &(0x7f0000000840)) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) fstat(r7, &(0x7f00000008c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000940)={0x2}) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r7, r6, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x17, 0x23, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffff085}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x1, 0x4, 0x6, 0x5, 0x20, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff4a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x1, 0xe, 0x6, 0xb, 0xffffffffffffffc0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0x3, &(0x7f0000000bc0)=""/3, 0x40f00, 0x42, '\x00', r5, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0x6, 0x2, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000f40)=[{0x0, 0x2, 0x2, 0x5}, {0x0, 0x1, 0xc, 0x6}, {0x1, 0x4, 0xd, 0x3}, {0x2, 0x1, 0xe, 0xa}, {0x5, 0x1, 0xc, 0x2}, {0x2, 0x2, 0x6}, {0x4, 0x5, 0x6, 0x7}, {0x4, 0x5, 0xc, 0xa}], 0x10, 0xd}, 0x94) 2.523682045s ago: executing program 1 (id=4164): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 2.522804636s ago: executing program 0 (id=4165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x10000000000000de, 0x0, [{0x481, 0x0, 0x9}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@bsdgroups}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0xfd, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r3, 0x400000000000e7d, 0x0, 0x3) 2.451022731s ago: executing program 1 (id=4166): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$selinux_create(r5, &(0x7f0000000380)=@access={'u:object_r:app_data_file:s0:c512,c768', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xffffffffffffff43}, 0x60) r6 = socket$inet(0x2, 0x2, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000100)}, {&(0x7f0000000c00)=""/4092, 0xffc}], 0x4, 0xd0, 0x3) 1.935663403s ago: executing program 3 (id=4167): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x247, &(0x7f0000000a00)="$eJzsmD9v00AYxp87O05SRaUsHViKRCWKoE7jCNQlgiIhMbHwT2xEralC3AalRqKRkOADwMaAxIIEX4CBoRMDHwIJBkBCYmgGBhYYDp19dc6+JjZZ+/6G03P3vvfnfXK5wSAI4sjy/dvvr88ur944B6CGRZTV+E8LYCzWXMv/8vLh2RetK6/efX77cXv28V5muZpshNBGGFCZsL8N4MOahTDZKZn9R4pF1VkAT/RNcJxR+jbEMVfpu+C4pbQPhjtK39d0DwyuexKdwHfXe8HGvU7gr8imIRtPNs3s+YZPGTZUXwghmBbf2R1020Hg9zVhq1g6ZNWyI4cKaVYmlGzWnTf8K8HBcI2jpZ2Pawc88GZF868BjobKaYLhuhpfRRmu644s0eo/YY/Wt1L175fbgVlt4PdlqgxMqlaKSixav+JZB/XbkDlO0emHhY4vT/Z6nFiS5VwyQ3P4v3VigfSsEkYh6WTmty/iWK6QiygRjdj5N++i2nuKTa+lqxgvnlfNy11AzBVwNSWKVLH+ZozP88O9ivnH/pG3oGD55bDi96dSyB/tjz79bali0OXT/O66KBtmAp/ex++HeM1wWh3zrxDC1t6Perj1oL6zO1jubLU3/U1/2/OaFxjw5LxXjx4i2c4Yz572Plej92lGe/9KY3Id7uBROwz7jbh1mIMqwrDvRX0vOvesSu7tO0qFuArgVNyRjjvJipaxB3PiHB7lSrVkJhEEQRAEQRAEQRAEQRAEQUzFAlj0FTQHL/4K+y8AAP//di5Mnw==") r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setreuid(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x16) ioctl$UI_DEV_CREATE(r8, 0x5501) write$input_event(r8, &(0x7f0000000400)={{}, 0x16, 0x3, 0x4}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x1, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.827975332s ago: executing program 2 (id=4168): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x247, &(0x7f0000000a00)="$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") r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setreuid(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x16) ioctl$UI_DEV_CREATE(r8, 0x5501) write$input_event(r8, &(0x7f0000000400)={{}, 0x16, 0x3, 0x4}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x1, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) (fail_nth: 1) 0s ago: executing program 1 (id=4169): syz_clone3(&(0x7f0000000340)={0x60861400, &(0x7f0000000280)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) pidfd_send_signal(r0, 0x5, &(0x7f00000000c0)={0x5, 0x8, 0xffffffc4}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7f}, 0x8) kernel console output (not intermixed with test programs): terface number 1 [ 1124.326259][ T586] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1124.339682][ T2155] usb 1-1: config 0 descriptor?? [ 1124.351021][ T586] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1124.363621][ T2155] hub 1-1:0.0: USB hub found [ 1124.369887][ T586] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1124.378953][ T586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.387162][ T586] usb 2-1: Product: syz [ 1124.391365][ T586] usb 2-1: Manufacturer: syz [ 1124.395964][ T586] usb 2-1: SerialNumber: syz [ 1124.567077][ T2155] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1124.610421][ T586] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1124.618323][ T586] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1124.636775][ T586] usb 2-1: USB disconnect, device number 55 [ 1124.776281][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.784877][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.794878][ T2155] usbhid 1-1:0.0: can't add hid device: -71 [ 1124.800967][ T2155] usbhid: probe of 1-1:0.0 failed with error -71 [ 1124.829942][ T2155] usb 1-1: USB disconnect, device number 50 [ 1125.165247][T13210] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1125.174595][T13210] FAT-fs (loop7): unable to read boot sector [ 1125.371941][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1125.389871][T13224] overlayfs: './file0' not a directory [ 1125.422419][T13224] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1125.431936][T13224] FAT-fs (loop3): unable to read boot sector [ 1127.699508][ T39] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1127.786845][T13243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1128.140814][ T39] usb 1-1: not running at top speed; connect to a high speed hub [ 1128.177197][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.309703][ T39] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1128.432940][ T39] usb 1-1: config 1 has no interface number 1 [ 1128.458840][ T39] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1128.512215][ T39] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1128.527493][T13233] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1128.558311][T13233] FAT-fs (loop5): unable to read boot sector [ 1128.657368][ T39] usb 1-1: string descriptor 0 read error: -71 [ 1128.670221][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.741928][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.759484][ T39] usb 1-1: can't set config #1, error -71 [ 1128.768720][ T39] usb 1-1: USB disconnect, device number 51 [ 1128.778400][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1128.778641][T13232] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1128.796708][T13232] FAT-fs (loop7): unable to read boot sector [ 1128.894684][T13260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1128.940892][T13259] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1128.950226][T13259] FAT-fs (loop1): unable to read boot sector [ 1129.089612][ T586] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1129.248329][T13264] overlayfs: './file0' not a directory [ 1129.259563][T13264] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1129.268888][T13264] FAT-fs (loop7): unable to read boot sector [ 1129.364516][ T586] usb 3-1: not running at top speed; connect to a high speed hub [ 1129.382749][ T586] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.397815][ T586] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1129.412092][ T586] usb 3-1: config 1 has no interface number 1 [ 1129.418422][ T586] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1129.435384][ T586] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1129.460668][ T586] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1129.475356][ T586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.491582][ T586] usb 3-1: Product: syz [ 1129.504197][ T586] usb 3-1: Manufacturer: syz [ 1129.512057][ T586] usb 3-1: SerialNumber: syz [ 1129.841278][ T586] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1129.852293][ T586] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1129.873040][ T586] usb 3-1: USB disconnect, device number 56 [ 1129.951828][T13273] tipc: Enabling of bearer rejected, failed to enable media [ 1131.186014][T13270] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1131.379779][T13270] FAT-fs (loop1): unable to read boot sector [ 1131.497531][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1132.327911][T13298] device syzkaller0 entered promiscuous mode [ 1132.706967][T13304] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1132.716465][T13304] FAT-fs (loop5): unable to read boot sector [ 1133.252859][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1133.321735][T13313] overlayfs: './file0' not a directory [ 1133.332888][T13313] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1133.342270][T13313] FAT-fs (loop7): unable to read boot sector [ 1133.496499][T13290] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1133.507231][T13290] FAT-fs (loop9): unable to read boot sector [ 1133.593098][T13319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1133.677117][T13321] overlayfs: './file0' not a directory [ 1133.688867][T13321] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1133.698133][T13321] FAT-fs (loop5): unable to read boot sector [ 1133.789453][ T341] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1133.990170][ T341] usb 1-1: not running at top speed; connect to a high speed hub [ 1133.998807][ T341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.009215][ T341] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1134.136561][ T341] usb 1-1: config 1 has no interface number 1 [ 1134.169026][ T341] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1134.239693][ T341] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1134.252369][ T341] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.261842][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.270073][ T341] usb 1-1: Product: syz [ 1134.274477][ T341] usb 1-1: Manufacturer: syz [ 1134.279154][ T341] usb 1-1: SerialNumber: syz [ 1134.494197][ T341] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1134.504576][ T341] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1134.550787][ T341] usb 1-1: USB disconnect, device number 52 [ 1134.577528][T13332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1135.431097][T13345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1137.640090][T13347] device syzkaller0 entered promiscuous mode [ 1138.359505][ T341] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1138.589437][ T341] usb 5-1: Using ep0 maxpacket: 32 [ 1138.596640][ T341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.960299][ T341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.999451][ T341] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1139.079456][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.102977][ T341] usb 5-1: config 0 descriptor?? [ 1139.109493][ T341] hub 5-1:0.0: USB hub found [ 1139.223327][T13368] loop1: detected capacity change from 0 to 512 [ 1139.232987][T13368] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1139.583962][ T341] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1139.839987][T13364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.067098][T13364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.105995][ T341] usbhid 5-1:0.0: can't add hid device: -71 [ 1140.129604][ T341] usbhid: probe of 5-1:0.0 failed with error -71 [ 1140.180601][ T341] usb 5-1: USB disconnect, device number 40 [ 1140.283549][T13354] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1140.293026][T13354] FAT-fs (loop1): unable to read boot sector [ 1140.385187][T13378] overlayfs: './file0' not a directory [ 1140.407490][T13378] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1140.417019][T13378] FAT-fs (loop3): unable to read boot sector [ 1140.544514][T13379] loop3: detected capacity change from 0 to 512 [ 1140.560401][T13379] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1147.555750][T13398] overlayfs: './file0' not a directory [ 1147.572930][T13398] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1147.582208][T13398] FAT-fs (loop7): unable to read boot sector [ 1147.831569][T13404] device syzkaller0 entered promiscuous mode [ 1147.980352][T13414] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1147.989572][T13414] FAT-fs (loop7): unable to read boot sector [ 1149.223445][T13432] overlayfs: './file0' not a directory [ 1149.242277][T13432] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1149.251561][T13432] FAT-fs (loop7): unable to read boot sector [ 1149.484352][T13403] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.519497][T13403] FAT-fs (loop5): unable to read boot sector [ 1149.730121][T13418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.739340][T13418] FAT-fs (loop3): unable to read boot sector [ 1149.826189][T13430] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.923804][T13430] FAT-fs (loop1): unable to read boot sector [ 1150.522797][T13452] overlayfs: './file0' not a directory [ 1150.588305][T13454] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1150.597557][T13454] FAT-fs (loop3): unable to read boot sector [ 1153.569181][T13473] overlayfs: './file0' not a directory [ 1154.079648][T13474] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1154.088821][T13474] FAT-fs (loop1): unable to read boot sector [ 1154.286417][T13482] tipc: Enabling of bearer rejected, failed to enable media [ 1154.461334][T13492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1155.726948][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1156.193244][T13478] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1156.209738][T13478] FAT-fs (loop1): unable to read boot sector [ 1158.521572][T13516] loop3: detected capacity change from 0 to 512 [ 1158.528359][T13516] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1159.502176][T13535] loop3: detected capacity change from 0 to 512 [ 1159.513514][T13535] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1160.540116][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1160.636138][T13518] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.645630][T13518] FAT-fs (loop3): unable to read boot sector [ 1160.721714][T13548] overlayfs: './file0' not a directory [ 1160.740167][T13548] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1160.749530][T13548] FAT-fs (loop1): unable to read boot sector [ 1160.812042][T13549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.929425][ T341] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1161.089442][ T341] usb 4-1: device descriptor read/64, error -71 [ 1161.459574][ T341] usb 4-1: device descriptor read/64, error -71 [ 1161.687829][T13551] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.697213][T13551] FAT-fs (loop3): unable to read boot sector [ 1161.729389][ T341] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1161.899414][ T341] usb 4-1: device descriptor read/64, error -71 [ 1164.012669][T13575] loop1: detected capacity change from 0 to 512 [ 1164.025447][T13575] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1164.265044][ T341] usb 4-1: device descriptor read/64, error -71 [ 1164.909471][ T341] usb usb4-port1: attempt power cycle [ 1165.089424][ T6331] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1165.128351][T13578] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1165.137696][T13578] FAT-fs (loop5): unable to read boot sector [ 1165.301162][ T6331] usb 5-1: Using ep0 maxpacket: 32 [ 1165.307478][ T6331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.318815][ T6331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.328913][ T39] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1165.336716][ T6331] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1165.346078][ T6331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.373274][ T6331] usb 5-1: config 0 descriptor?? [ 1165.382867][ T6331] hub 5-1:0.0: USB hub found [ 1166.189047][T13592] loop3: detected capacity change from 0 to 512 [ 1166.195826][T13592] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1166.309544][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 1166.761193][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.780472][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.790960][ T6331] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1167.034802][T13579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.042774][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1169.325644][T13606] overlayfs: './file0' not a directory [ 1169.367806][T13606] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1169.377568][T13606] FAT-fs (loop7): unable to read boot sector [ 1169.831204][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.839983][ T39] usb 2-1: config 0 descriptor?? [ 1169.847282][ T39] hub 2-1:0.0: USB hub found [ 1169.867935][T13579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.913573][ T39] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1169.949128][ T6331] usbhid 5-1:0.0: can't add hid device: -71 [ 1169.953469][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 1169.959451][ T6331] usbhid: probe of 5-1:0.0 failed with error -71 [ 1170.019426][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 1170.025547][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 1170.060558][ T6331] usb 5-1: USB disconnect, device number 41 [ 1170.239584][ T39] usb 2-1: USB disconnect, device number 56 [ 1170.539141][T13624] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1170.558362][T13624] FAT-fs (loop9): unable to read boot sector [ 1170.579969][T13614] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1170.589142][T13614] FAT-fs (loop5): unable to read boot sector [ 1170.595237][ T39] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1170.669920][T13620] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1170.688887][T13620] FAT-fs (loop7): unable to read boot sector [ 1170.780076][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 1170.797693][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.815747][ T39] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1170.834920][ T39] usb 2-1: config 1 has no interface number 1 [ 1170.855247][ T39] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1170.888424][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1170.911911][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1170.925645][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.936293][ T39] usb 2-1: Product: syz [ 1170.940732][ T39] usb 2-1: Manufacturer: syz [ 1170.945420][ T39] usb 2-1: SerialNumber: syz [ 1171.171114][ T39] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1171.181243][ T39] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1171.194272][T13636] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1171.195585][ T39] usb 2-1: USB disconnect, device number 57 [ 1171.214962][T13636] FAT-fs (loop9): unable to read boot sector [ 1171.289400][T13497] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1171.397934][T13643] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1171.407166][T13643] FAT-fs (loop5): unable to read boot sector [ 1171.469671][T13402] udevd[13402]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1171.509479][T13497] usb 4-1: Using ep0 maxpacket: 32 [ 1171.515782][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.489257][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.499213][T13497] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1172.508330][T13497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.520240][T13497] usb 4-1: config 0 descriptor?? [ 1172.526990][T13497] hub 4-1:0.0: USB hub found [ 1173.534320][T13497] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1173.952048][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.971625][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.088349][T13671] overlayfs: './file0' not a directory [ 1174.094586][T13671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1174.103758][T13671] FAT-fs (loop5): unable to read boot sector [ 1174.259465][T11385] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1174.398269][T13497] usbhid 4-1:0.0: can't add hid device: -71 [ 1174.407059][T13497] usbhid: probe of 4-1:0.0 failed with error -71 [ 1174.449677][T11385] usb 2-1: Using ep0 maxpacket: 32 [ 1174.454982][T13497] usb 4-1: USB disconnect, device number 47 [ 1174.462087][T11385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.473947][T11385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.484124][T11385] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1174.493361][T11385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.511852][T11385] usb 2-1: config 0 descriptor?? [ 1174.517793][T11385] hub 2-1:0.0: USB hub found [ 1174.720838][T11385] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1175.653907][T11385] usbhid 2-1:0.0: can't add hid device: -71 [ 1175.659907][T11385] usbhid: probe of 2-1:0.0 failed with error -71 [ 1175.717515][T11385] usb 2-1: USB disconnect, device number 58 [ 1177.981085][T13708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1183.226547][T13737] device syzkaller0 entered promiscuous mode [ 1183.589527][T12942] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1183.789394][T12942] usb 3-1: Using ep0 maxpacket: 32 [ 1183.795751][T12942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.796314][T13738] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1183.816232][T13738] FAT-fs (loop7): unable to read boot sector [ 1183.821318][T12942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.847375][T12942] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1183.870204][T12942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.898132][T12942] usb 3-1: config 0 descriptor?? [ 1183.934939][T12942] hub 3-1:0.0: USB hub found [ 1184.122774][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1184.272533][T12942] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1184.631624][T13767] loop1: detected capacity change from 0 to 512 [ 1184.646311][T13767] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1190.496202][T13777] overlayfs: './file0' not a directory [ 1190.504608][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.517842][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.531400][T12942] usbhid 3-1:0.0: can't add hid device: -71 [ 1190.537532][T12942] usbhid: probe of 3-1:0.0 failed with error -71 [ 1190.643700][T12942] usb 3-1: USB disconnect, device number 57 [ 1190.771896][T13791] device syzkaller0 entered promiscuous mode [ 1193.521030][T13792] overlayfs: './file0' not a directory [ 1193.536028][T13792] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1193.545432][T13792] FAT-fs (loop5): unable to read boot sector [ 1194.140391][T13811] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1194.189425][T13811] FAT-fs (loop9): unable to read boot sector [ 1194.244621][T13818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1194.258976][T13800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1194.279475][T13800] FAT-fs (loop1): unable to read boot sector [ 1195.472182][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 1195.840934][T13817] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1195.850202][ T377] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1195.856053][T13834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1195.857875][T13817] FAT-fs (loop3): unable to read boot sector [ 1196.050095][ T377] usb 4-1: not running at top speed; connect to a high speed hub [ 1196.060892][ T377] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.079068][ T377] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1196.088499][ T377] usb 4-1: config 1 has no interface number 1 [ 1196.098717][T13497] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1196.112467][ T377] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1196.135451][ T377] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1196.158101][ T377] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1196.167689][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.178852][ T377] usb 4-1: Product: syz [ 1196.183541][ T377] usb 4-1: Manufacturer: syz [ 1196.188398][ T377] usb 4-1: SerialNumber: syz [ 1196.333416][T13497] usb 5-1: Using ep0 maxpacket: 32 [ 1196.539938][ T377] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1196.547955][ T377] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1196.556993][T13497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.568152][T13497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.578660][T13497] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1196.588227][T13497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.602917][ T377] usb 4-1: USB disconnect, device number 48 [ 1196.618763][T13497] usb 5-1: config 0 descriptor?? [ 1196.633385][T13497] hub 5-1:0.0: USB hub found [ 1196.775478][T13854] overlayfs: './file0' not a directory [ 1196.783584][T13854] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1196.793162][T13854] FAT-fs (loop1): unable to read boot sector [ 1196.921454][T13497] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1196.921464][T13851] udevd[13851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1197.236417][T13860] overlayfs: './file0' not a directory [ 1197.254891][T13860] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1197.264249][T13860] FAT-fs (loop5): unable to read boot sector [ 1197.360530][T13862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1200.861971][T13497] usbhid 5-1:0.0: can't add hid device: -71 [ 1200.868878][T13497] usbhid: probe of 5-1:0.0 failed with error -71 [ 1200.950370][T13497] usb 5-1: USB disconnect, device number 42 [ 1201.036310][T13877] loop3: detected capacity change from 0 to 512 [ 1201.045650][T13877] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1201.351132][T13878] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.574692][T13878] FAT-fs (loop5): unable to read boot sector [ 1201.967264][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1204.455587][T13898] overlayfs: './file0' not a directory [ 1204.466584][T13898] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1204.476161][T13898] FAT-fs (loop3): unable to read boot sector [ 1204.766593][T13902] loop3: detected capacity change from 0 to 512 [ 1204.785101][T13902] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1206.057328][T13916] overlayfs: './file0' not a directory [ 1206.075276][T13916] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1206.084701][T13916] FAT-fs (loop5): unable to read boot sector [ 1206.369286][T13908] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1206.378524][T13908] FAT-fs (loop1): unable to read boot sector [ 1206.489384][T13497] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1206.680084][T13497] usb 5-1: not running at top speed; connect to a high speed hub [ 1206.688858][T13497] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.699590][T13497] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1206.708901][T13497] usb 5-1: config 1 has no interface number 1 [ 1206.715406][T13497] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1206.729443][T13497] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1206.742367][T13497] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.752380][T13497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.762600][T13497] usb 5-1: Product: syz [ 1206.767236][T13497] usb 5-1: Manufacturer: syz [ 1206.772615][T13497] usb 5-1: SerialNumber: syz [ 1207.135861][T13932] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.165426][T13932] FAT-fs (loop3): unable to read boot sector [ 1208.672590][T12942] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1208.939463][T12942] usb 4-1: Using ep0 maxpacket: 32 [ 1208.945938][T12942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.966131][T13497] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1209.004629][T12942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.016267][T12942] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1209.038342][T13956] overlayfs: './file0' not a directory [ 1209.056667][T13956] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1209.065970][T13956] FAT-fs (loop3): unable to read boot sector [ 1209.116042][T12942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.160777][T13497] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1209.187147][T13497] usb 5-1: USB disconnect, device number 43 [ 1209.196916][T12942] usb 4-1: config 0 descriptor?? [ 1209.204664][T12942] hub 4-1:0.0: USB hub found [ 1209.312381][T13947] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1209.322033][T13947] FAT-fs (loop5): unable to read boot sector [ 1209.400325][T13815] udevd[13815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1209.420937][T12942] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1209.459577][ T341] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1209.639389][T13950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.651801][T13950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.653004][T13965] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1209.668702][T13965] FAT-fs (loop5): unable to read boot sector [ 1209.684711][ T341] usb 1-1: Using ep0 maxpacket: 32 [ 1209.691681][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.705062][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.715056][ T341] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1209.731930][T12942] usbhid 4-1:0.0: can't add hid device: -71 [ 1209.782282][T12942] usbhid: probe of 4-1:0.0 failed with error -71 [ 1209.788871][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.846809][ T341] usb 1-1: config 0 descriptor?? [ 1209.854128][ T341] hub 1-1:0.0: USB hub found [ 1209.859947][T12942] usb 4-1: USB disconnect, device number 49 [ 1210.115956][ T341] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1210.159784][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1210.326842][T13955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.336555][T13955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.364108][ T341] usbhid 1-1:0.0: can't add hid device: -71 [ 1210.370359][ T341] usbhid: probe of 1-1:0.0 failed with error -71 [ 1210.410057][ T341] usb 1-1: USB disconnect, device number 53 [ 1210.459420][ T377] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1210.640391][ T377] usb 5-1: not running at top speed; connect to a high speed hub [ 1210.649693][ T377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.661462][ T377] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1210.671045][ T377] usb 5-1: config 1 has no interface number 1 [ 1210.678477][ T377] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1210.693435][ T377] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1210.702928][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.711281][ T377] usb 5-1: Product: syz [ 1210.715605][ T377] usb 5-1: Manufacturer: syz [ 1210.720448][ T377] usb 5-1: SerialNumber: syz [ 1210.854251][T13982] loop1: detected capacity change from 0 to 512 [ 1210.864257][T13982] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1211.709720][T13987] device syzkaller0 entered promiscuous mode [ 1212.074547][T13997] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.509499][T13997] FAT-fs (loop1): unable to read boot sector [ 1212.516202][ T377] usb 5-1: USB disconnect, device number 44 [ 1213.414362][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 1213.762653][T14015] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1213.772910][T14015] FAT-fs (loop3): unable to read boot sector [ 1215.232367][T14034] loop3: detected capacity change from 0 to 512 [ 1215.249182][T14034] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1216.993389][ T6331] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1217.878669][T14037] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.887909][T14037] FAT-fs (loop1): unable to read boot sector [ 1218.482611][ T6331] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1218.727401][ T6331] usb 3-1: Using ep0 maxpacket: 32 [ 1218.760130][T14066] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.775590][T14066] FAT-fs (loop9): unable to read boot sector [ 1218.781779][ T6331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.799390][ T6331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.810049][ T6331] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1218.837377][ T6331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.880272][T14074] overlayfs: './file0' not a directory [ 1218.897930][T14074] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1218.907558][T14074] FAT-fs (loop7): unable to read boot sector [ 1218.983470][ T6331] usb 3-1: config 0 descriptor?? [ 1218.993199][ T6331] hub 3-1:0.0: USB hub found [ 1219.194325][ T6331] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1219.407691][T14051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.419569][T14051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.487700][ T6331] usbhid 3-1:0.0: can't add hid device: -71 [ 1219.501347][ T6331] usbhid: probe of 3-1:0.0 failed with error -71 [ 1219.559910][ T6331] usb 3-1: USB disconnect, device number 59 [ 1219.641148][T14083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1219.657603][T14076] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1219.667475][T14076] FAT-fs (loop1): unable to read boot sector [ 1219.745547][T14085] loop3: detected capacity change from 0 to 512 [ 1219.754999][T14085] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1221.659962][T14105] overlayfs: './file0' not a directory [ 1221.672163][T14105] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1221.681654][T14105] FAT-fs (loop7): unable to read boot sector [ 1221.794107][T14107] overlayfs: './file0' not a directory [ 1221.810118][T14107] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1221.820113][T14107] FAT-fs (loop9): unable to read boot sector [ 1221.909468][ T389] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1222.119414][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 1222.125931][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.136884][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.147205][ T389] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1222.174019][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.389053][T14112] overlayfs: './file0' not a directory [ 1222.560590][T14116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1222.563865][ T389] usb 2-1: config 0 descriptor?? [ 1222.575166][T14111] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1222.585176][T14111] FAT-fs (loop1): unable to read boot sector [ 1222.592946][ T389] hub 2-1:0.0: USB hub found [ 1222.796639][ T389] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1222.940283][T14114] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.969482][T14114] FAT-fs (loop9): unable to read boot sector [ 1223.018865][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.054520][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.243110][ T389] usbhid 2-1:0.0: can't add hid device: -71 [ 1223.249165][ T389] usbhid: probe of 2-1:0.0 failed with error -71 [ 1223.300192][ T389] usb 2-1: USB disconnect, device number 59 [ 1223.352778][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1223.380369][T14119] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1223.389873][T14119] FAT-fs (loop7): unable to read boot sector [ 1223.900178][T12942] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1224.240705][T12942] usb 3-1: not running at top speed; connect to a high speed hub [ 1224.341113][T12942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.351339][T12942] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1224.360716][T12942] usb 3-1: config 1 has no interface number 1 [ 1224.858932][T12942] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1226.044799][T12942] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.808338][T14156] overlayfs: './file0' not a directory [ 1226.839760][T14156] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1226.849505][T14156] FAT-fs (loop3): unable to read boot sector [ 1226.997185][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3787'. [ 1227.014688][T12942] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.030690][T12942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.080739][T12942] usb 3-1: can't set config #1, error -71 [ 1227.092154][T12942] usb 3-1: USB disconnect, device number 60 [ 1227.184675][T14170] overlayfs: './file0' not a directory [ 1227.196531][T14170] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1227.206054][T14170] FAT-fs (loop7): unable to read boot sector [ 1227.437143][T14166] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.446434][T14166] FAT-fs (loop5): unable to read boot sector [ 1227.469402][ T377] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1227.769402][ T1361] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1227.853533][ T377] usb 5-1: not running at top speed; connect to a high speed hub [ 1227.881634][ T377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.891986][ T377] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1227.901299][ T377] usb 5-1: config 1 has no interface number 1 [ 1227.907814][ T377] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1227.920898][ T377] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1227.933541][ T377] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.945264][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.953358][ T377] usb 5-1: Product: syz [ 1227.957572][ T377] usb 5-1: Manufacturer: syz [ 1227.962210][ T377] usb 5-1: SerialNumber: syz [ 1227.969406][ T1361] usb 2-1: Using ep0 maxpacket: 32 [ 1227.976114][ T1361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.989235][ T1361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.999176][ T1361] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1228.008323][ T1361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.017498][ T1361] usb 2-1: config 0 descriptor?? [ 1228.023390][ T1361] hub 2-1:0.0: USB hub found [ 1228.173825][ T377] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1228.181815][ T377] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1228.192808][ T377] usb 5-1: USB disconnect, device number 45 [ 1228.225595][ T1361] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1228.399914][T13844] udevd[13844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1228.434849][T14174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.443842][T14174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.458264][ T1361] usbhid 2-1:0.0: can't add hid device: -71 [ 1228.538416][ T1361] usbhid: probe of 2-1:0.0 failed with error -71 [ 1228.572748][ T1361] usb 2-1: USB disconnect, device number 60 [ 1230.011481][T14192] loop3: detected capacity change from 0 to 512 [ 1230.806494][T14192] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1231.532379][T14196] device syzkaller0 entered promiscuous mode [ 1231.673855][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'. [ 1231.903889][T14209] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1231.913694][T14209] FAT-fs (loop3): unable to read boot sector [ 1233.302378][T14216] overlayfs: './file0' not a directory [ 1233.313498][T14216] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1233.322965][T14216] FAT-fs (loop7): unable to read boot sector [ 1233.332576][ T1361] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1233.426969][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3804'. [ 1234.772296][T14236] overlayfs: './file0' not a directory [ 1234.782895][T14236] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1234.792567][T14236] FAT-fs (loop3): unable to read boot sector [ 1234.805689][ T1361] usb 3-1: not running at top speed; connect to a high speed hub [ 1234.999424][ T2155] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1235.011453][ T1361] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1235.019081][ T1361] usb 3-1: can't read configurations, error -71 [ 1235.026308][T14243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1235.097669][T14248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1235.121976][ T28] audit: type=1326 audit(1235.108:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.150281][ T28] audit: type=1326 audit(1235.108:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.174621][ T28] audit: type=1326 audit(1235.128:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.198362][ T28] audit: type=1326 audit(1235.128:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.200047][ T2155] usb 1-1: not running at top speed; connect to a high speed hub [ 1235.221964][ T28] audit: type=1326 audit(1235.128:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.230667][T14245] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.255537][ T28] audit: type=1326 audit(1235.128:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.262491][ T2155] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.284882][ T28] audit: type=1400 audit(1235.128:879): avc: denied { bind } for pid=14249 comm="syz.2.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1235.314303][ T28] audit: type=1326 audit(1235.128:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.322744][ T2155] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1235.337728][ T28] audit: type=1326 audit(1235.128:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.346585][T14245] FAT-fs (loop3): unable to read boot sector [ 1235.376522][ T2155] usb 1-1: config 1 has no interface number 1 [ 1235.383413][ T28] audit: type=1326 audit(1235.128:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9f72f8f749 code=0x7ffc0000 [ 1235.416909][ T2155] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1235.450377][ T2155] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1235.468165][ T2155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.480284][ T2155] usb 1-1: Product: syz [ 1235.484819][ T2155] usb 1-1: Manufacturer: syz [ 1235.489612][ T2155] usb 1-1: SerialNumber: syz [ 1235.615833][T14256] overlayfs: './file0' not a directory [ 1235.622169][T14256] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.631656][T14256] FAT-fs (loop5): unable to read boot sector [ 1236.674422][ T2155] usb 1-1: USB disconnect, device number 54 [ 1237.013194][T14273] loop1: detected capacity change from 0 to 1024 [ 1237.020572][T14273] EXT4-fs: Ignoring removed orlov option [ 1237.410917][T14273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1238.132775][T11191] EXT4-fs (loop1): unmounting filesystem. [ 1238.152619][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 1238.182012][T13852] udevd[13852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1238.851409][T14297] overlayfs: './file0' not a directory [ 1238.861637][T14297] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1238.871378][T14297] FAT-fs (loop3): unable to read boot sector [ 1239.166988][T14309] loop3: detected capacity change from 0 to 256 [ 1239.176493][T14309] exfat: Deprecated parameter 'utf8' [ 1239.181952][T14309] exfat: Deprecated parameter 'namecase' [ 1239.189615][T14309] exfat: Deprecated parameter 'namecase' [ 1239.195295][T14309] exfat: Deprecated parameter 'utf8' [ 1239.202846][T14309] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1240.032777][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1240.079437][ T1361] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1240.749460][T11675] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1240.880166][ T1361] usb 1-1: not running at top speed; connect to a high speed hub [ 1240.899153][ T1361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.216567][ T1361] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1241.229949][ T1361] usb 1-1: config 1 has no interface number 1 [ 1241.240191][ T1361] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1241.262467][ T1361] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.310457][T11675] usb 2-1: not running at top speed; connect to a high speed hub [ 1241.324249][ T1361] usb 1-1: string descriptor 0 read error: -71 [ 1241.349645][T11675] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.376064][ T1361] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1241.396359][T11675] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1241.419826][ T1361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.438794][T11675] usb 2-1: config 1 has no interface number 1 [ 1241.503256][T11675] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1241.548286][ T1361] usb 1-1: can't set config #1, error -71 [ 1241.584872][ T1361] usb 1-1: USB disconnect, device number 55 [ 1242.246638][T11675] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1242.388454][T11675] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.232556][T14356] overlayfs: './file0' not a directory [ 1245.012177][T14357] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1245.022232][T14357] FAT-fs (loop5): unable to read boot sector [ 1246.648707][T11675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.665669][T11675] usb 2-1: Product: syz [ 1246.675381][T11675] usb 2-1: Manufacturer: syz [ 1246.806980][T11675] usb 2-1: SerialNumber: syz [ 1247.202454][T11675] usb 2-1: can't set config #1, error -71 [ 1247.230727][T11675] usb 2-1: USB disconnect, device number 61 [ 1247.237822][T14376] overlayfs: './file0' not a directory [ 1247.244004][T14376] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1247.253299][T14376] FAT-fs (loop9): unable to read boot sector [ 1247.426994][T14362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.436377][T14362] FAT-fs (loop5): unable to read boot sector [ 1249.947973][T14381] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1249.977939][T14381] FAT-fs (loop3): unable to read boot sector [ 1249.991659][T14406] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1250.029686][T14406] FAT-fs (loop5): unable to read boot sector [ 1250.404419][T14415] overlayfs: './file0' not a directory [ 1250.427818][T14415] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1250.437275][T14415] FAT-fs (loop7): unable to read boot sector [ 1250.663647][T14418] loop1: detected capacity change from 0 to 1024 [ 1250.702919][T14418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1251.497414][T14440] overlayfs: './file0' not a directory [ 1251.503985][T14440] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1251.513311][T14440] FAT-fs (loop7): unable to read boot sector [ 1251.595493][T11191] EXT4-fs (loop1): unmounting filesystem. [ 1252.030512][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1252.162513][T14452] device syzkaller0 entered promiscuous mode [ 1252.170400][T14452] tipc: Enabling of bearer rejected, failed to enable media [ 1252.249413][T12942] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1252.359376][ T389] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1252.429352][T12942] usb 3-1: Using ep0 maxpacket: 32 [ 1252.435901][T12942] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.454182][T12942] usb 3-1: config 0 has no interface number 0 [ 1252.464306][T12942] usb 3-1: config 0 interface 2 has no altsetting 0 [ 1252.475762][T12942] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1252.492372][T12942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.509372][T12942] usb 3-1: Product: syz [ 1252.515415][T14462] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.531852][T12942] usb 3-1: Manufacturer: syz [ 1252.538724][T12942] usb 3-1: SerialNumber: syz [ 1252.570779][T14462] FAT-fs (loop9): unable to read boot sector [ 1252.595498][ T389] usb 1-1: not running at top speed; connect to a high speed hub [ 1252.604270][T12942] usb 3-1: config 0 descriptor?? [ 1252.610178][ T389] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.622474][ T389] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1252.631543][ T389] usb 1-1: config 1 has no interface number 1 [ 1252.637671][ T389] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1252.650709][ T389] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1252.668372][ T389] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.677670][ T389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.697603][ T389] usb 1-1: Product: syz [ 1252.711001][T14466] overlayfs: './file0' not a directory [ 1252.723168][T14466] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1252.732645][T14466] FAT-fs (loop3): unable to read boot sector [ 1252.759870][ T389] usb 1-1: Manufacturer: syz [ 1252.785287][ T389] usb 1-1: SerialNumber: syz [ 1252.840762][T12942] usb 3-1: USB disconnect, device number 63 [ 1253.061461][ T389] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1253.079425][ T389] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1253.104940][ T389] usb 1-1: USB disconnect, device number 56 [ 1253.121531][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3864'. [ 1253.409436][T12942] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1253.487283][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1253.600268][T12942] usb 4-1: not running at top speed; connect to a high speed hub [ 1253.609240][T12942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.619996][T12942] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1253.630310][T12942] usb 4-1: config 1 has no interface number 1 [ 1253.636499][T12942] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1253.649503][T12942] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1253.662041][T12942] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1253.671348][T12942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.679359][T12942] usb 4-1: Product: syz [ 1253.683497][T12942] usb 4-1: Manufacturer: syz [ 1253.688086][T12942] usb 4-1: SerialNumber: syz [ 1253.789281][T14482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1253.898093][T12942] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1253.906062][T12942] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1253.917593][T12942] usb 4-1: USB disconnect, device number 50 [ 1254.119754][T14371] udevd[14371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1254.177828][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1254.177851][ T28] audit: type=1400 audit(1254.158:913): avc: denied { view } for pid=14491 comm="syz.1.3871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1254.206425][T14493] overlayfs: './file0' not a directory [ 1254.212596][T14493] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1254.221812][T14493] FAT-fs (loop9): unable to read boot sector [ 1254.568705][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 1255.109438][T11385] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1255.229348][T14513] overlayfs: './file0' not a directory [ 1255.241683][T14513] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1255.251280][T14513] FAT-fs (loop9): unable to read boot sector [ 1255.397250][T14515] overlayfs: './file0' not a directory [ 1255.412142][T14515] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1255.421920][T14515] FAT-fs (loop3): unable to read boot sector [ 1255.820163][T11385] usb 4-1: not running at top speed; connect to a high speed hub [ 1255.829030][T11385] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.839617][T11385] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1255.848882][T11385] usb 4-1: config 1 has no interface number 1 [ 1255.855293][T11385] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1255.868206][T11385] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1255.898134][T11385] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.907446][T11385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.916078][T11385] usb 4-1: Product: syz [ 1255.920488][T11385] usb 4-1: Manufacturer: syz [ 1255.925174][T11385] usb 4-1: SerialNumber: syz [ 1255.997126][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1256.088760][T14524] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1256.139190][T14524] FAT-fs (loop5): unable to read boot sector [ 1256.310995][T11385] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1256.320032][T11385] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1256.345879][T11385] usb 4-1: USB disconnect, device number 51 [ 1256.549622][ T28] audit: type=1400 audit(1256.538:914): avc: denied { read append } for pid=14535 comm="syz.2.3884" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1256.575218][ T28] audit: type=1400 audit(1256.538:915): avc: denied { open } for pid=14535 comm="syz.2.3884" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1256.720425][T14541] netlink: 'syz.2.3885': attribute type 5 has an invalid length. [ 1256.728216][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3885'. [ 1256.739227][T14541] overlayfs: conflicting options: nfs_export=on,index=off [ 1256.865198][T14544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.143386][T14550] loop3: detected capacity change from 0 to 40427 [ 1257.151168][T14550] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1257.158991][T14550] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1257.169458][T14550] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1257.191729][T14550] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1257.198881][T14550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1257.261640][T14550] syz.3.3888: attempt to access beyond end of device [ 1257.261640][T14550] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1257.718780][T11376] syz-executor: attempt to access beyond end of device [ 1257.718780][T11376] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 1257.733184][T11376] syz-executor: attempt to access beyond end of device [ 1257.733184][T11376] loop3: rw=2051, sector=57344, nr_sectors = 16384 limit=40427 [ 1257.748663][T11376] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 1257.748714][T11376] F2FS-fs (loop3): Issue discard(7168, 7168, 2048) failed, ret: -5 [ 1257.812765][T14568] overlayfs: './file0' not a directory [ 1257.832482][T14568] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1257.841900][T14568] FAT-fs (loop5): unable to read boot sector [ 1258.173282][T14575] overlayfs: './file0' not a directory [ 1258.184773][T14575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1258.194055][T14575] FAT-fs (loop7): unable to read boot sector [ 1258.384799][T14573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.394385][T14573] FAT-fs (loop3): unable to read boot sector [ 1258.606796][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 1258.802371][T14582] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.812027][T14582] FAT-fs (loop9): unable to read boot sector [ 1258.909435][T11385] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1259.119370][T11385] usb 2-1: device descriptor read/64, error -71 [ 1259.589419][T11385] usb 2-1: device descriptor read/64, error -71 [ 1259.689439][T11675] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1259.854142][T14605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1259.862431][T11385] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1259.919419][T11675] usb 3-1: Using ep0 maxpacket: 32 [ 1259.926322][T11675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.937280][T11675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.947261][T11675] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1259.956795][T11675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.965504][T11675] usb 3-1: config 0 descriptor?? [ 1259.971183][T11675] hub 3-1:0.0: USB hub found [ 1260.019381][T11385] usb 2-1: device descriptor read/64, error -71 [ 1260.175319][T11675] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1260.289376][T11385] usb 2-1: device descriptor read/64, error -71 [ 1260.387204][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.395942][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.406634][T11675] usbhid 3-1:0.0: can't add hid device: -71 [ 1260.409489][T11385] usb usb2-port1: attempt power cycle [ 1260.413009][T11675] usbhid: probe of 3-1:0.0 failed with error -71 [ 1260.460085][T11675] usb 3-1: USB disconnect, device number 64 [ 1260.922296][T14618] overlayfs: './file0' not a directory [ 1260.932975][T14618] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1260.942662][T14618] FAT-fs (loop9): unable to read boot sector [ 1261.190084][T11385] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1261.220628][T11385] usb 2-1: device descriptor read/8, error -71 [ 1262.289880][T11385] usb 2-1: device descriptor read/8, error -71 [ 1262.390879][T14630] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1262.412206][T14630] FAT-fs (loop9): unable to read boot sector [ 1262.511742][T14638] loop3: detected capacity change from 0 to 512 [ 1262.520760][T14638] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1262.930749][T14641] loop1: detected capacity change from 0 to 512 [ 1263.196345][T14641] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3914: inode has both inline data and extents flags [ 1263.224238][T14641] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3914: couldn't read orphan inode 15 (err -117) [ 1263.333839][T14641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1263.481208][T14654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1263.496182][T14620] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1263.505458][T14620] FAT-fs (loop5): unable to read boot sector [ 1263.519975][ T28] audit: type=1400 audit(1263.508:916): avc: denied { setattr } for pid=14640 comm="syz.1.3914" name="file1" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1263.542057][ T28] audit: type=1400 audit(1263.508:917): avc: denied { mounton } for pid=14640 comm="syz.1.3914" path="/172/file0/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1263.565107][ T28] audit: type=1400 audit(1263.508:918): avc: denied { write } for pid=14640 comm="syz.1.3914" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1263.586666][ T28] audit: type=1400 audit(1263.508:919): avc: denied { add_name } for pid=14640 comm="syz.1.3914" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1263.607107][ T28] audit: type=1400 audit(1263.508:920): avc: denied { setattr } for pid=14640 comm="syz.1.3914" name="work" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1263.628960][ T28] audit: type=1400 audit(1263.508:921): avc: denied { remove_name } for pid=14640 comm="syz.1.3914" name="#2f" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1263.651110][ T28] audit: type=1400 audit(1263.508:922): avc: denied { rename } for pid=14640 comm="syz.1.3914" name="#2f" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1263.672795][ T28] audit: type=1400 audit(1263.508:923): avc: denied { unlink } for pid=14640 comm="syz.1.3914" name="#2f" dev="loop1" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1263.694908][ T28] audit: type=1400 audit(1263.508:924): avc: denied { unlink } for pid=14640 comm="syz.1.3914" name="#30" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1263.716292][ T28] audit: type=1400 audit(1263.508:925): avc: denied { link } for pid=14640 comm="syz.1.3914" name="file1" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1263.746543][T11191] EXT4-fs (loop1): unmounting filesystem. [ 1264.270744][T14670] overlayfs: './file0' not a directory [ 1264.280246][T14670] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1264.289583][T14670] FAT-fs (loop1): unable to read boot sector [ 1265.523230][T14668] loop3: detected capacity change from 0 to 40427 [ 1265.535866][T14668] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1265.620056][T14668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1265.786253][T14668] F2FS-fs (loop3): invalid crc value [ 1265.810906][T14668] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1265.850740][T14668] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1265.857866][T14668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1266.667469][T14692] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1266.676995][T14692] FAT-fs (loop9): unable to read boot sector [ 1267.855796][T14705] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1267.865303][T14705] FAT-fs (loop1): unable to read boot sector [ 1268.054010][T14742] overlayfs: './file0' not a directory [ 1268.060279][T14742] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1268.069758][T14742] FAT-fs (loop5): unable to read boot sector [ 1268.079384][ T377] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1268.259417][ T377] usb 5-1: Using ep0 maxpacket: 32 [ 1268.265669][ T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.276625][ T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.286929][ T377] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1268.296012][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.304969][ T377] usb 5-1: config 0 descriptor?? [ 1268.310714][ T377] hub 5-1:0.0: USB hub found [ 1268.513384][ T377] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1268.654968][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1268.654983][ T28] audit: type=1326 audit(1268.638:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1268.684378][ T28] audit: type=1326 audit(1268.638:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1268.719438][ T28] audit: type=1326 audit(1268.638:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1268.736134][T14737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.743707][ T28] audit: type=1326 audit(1268.638:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1268.810277][T14737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.836857][ T28] audit: type=1326 audit(1268.638:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1268.843496][ T377] usbhid 5-1:0.0: can't add hid device: -71 [ 1269.083318][T14760] loop3: detected capacity change from 0 to 512 [ 1269.090123][T14760] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1270.547259][ T28] audit: type=1326 audit(1268.638:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1270.821930][ T377] usbhid: probe of 5-1:0.0 failed with error -71 [ 1270.829760][ T28] audit: type=1326 audit(1268.638:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1270.860322][ T28] audit: type=1326 audit(1268.638:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1270.883292][ T28] audit: type=1326 audit(1268.638:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1270.917557][ T28] audit: type=1326 audit(1268.638:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14745 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0098f749 code=0x7ffc0000 [ 1270.919866][ T377] usb 5-1: USB disconnect, device number 46 [ 1271.030315][T14772] loop3: detected capacity change from 0 to 4096 [ 1271.467987][T14778] syz.3.3948[14778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.468065][T14778] syz.3.3948[14778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.995434][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3951'. [ 1272.409166][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 1272.420702][T14794] syz.3.3954[14794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1272.420783][T14794] syz.3.3954[14794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1272.456392][T14794] loop3: detected capacity change from 0 to 512 [ 1272.484812][T14794] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3954: inode has both inline data and extents flags [ 1272.498245][T14794] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3954: couldn't read orphan inode 15 (err -117) [ 1272.510594][T14794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1272.539446][ T341] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1272.550945][T14802] device syzkaller0 entered promiscuous mode [ 1272.689360][ T341] usb 3-1: device descriptor read/64, error -71 [ 1272.719386][ T377] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1272.900133][ T377] usb 2-1: not running at top speed; connect to a high speed hub [ 1272.981569][ T341] usb 3-1: device descriptor read/64, error -71 [ 1273.097890][ T377] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.108182][ T377] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1273.117406][ T377] usb 2-1: config 1 has no interface number 1 [ 1273.123538][ T377] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1273.137942][ T377] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.149667][ T377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.158782][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.166932][ T377] usb 2-1: Product: syz [ 1273.171136][ T377] usb 2-1: Manufacturer: syz [ 1273.175720][ T377] usb 2-1: SerialNumber: syz [ 1273.197519][T11376] EXT4-fs (loop3): unmounting filesystem. [ 1273.259370][ T341] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1273.408389][ T377] usb 2-1: USB disconnect, device number 66 [ 1273.414610][ T341] usb 3-1: device descriptor read/64, error -71 [ 1273.479393][T12798] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1273.620031][T14368] udevd[14368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1273.673188][T12798] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1273.680925][T12798] usb 4-1: can't read configurations, error -71 [ 1273.689469][ T341] usb 3-1: device descriptor read/64, error -71 [ 1273.719406][ T2155] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1273.809392][ T341] usb usb3-port1: attempt power cycle [ 1273.899376][ T2155] usb 1-1: Using ep0 maxpacket: 32 [ 1273.905777][ T2155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.913688][T14816] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.916883][ T2155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.926116][T14816] FAT-fs (loop9): unable to read boot sector [ 1273.935814][ T2155] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1273.950856][ T2155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.962211][ T2155] usb 1-1: config 0 descriptor?? [ 1273.969223][ T2155] hub 1-1:0.0: USB hub found [ 1274.170519][ T2155] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1274.183538][T14825] loop3: detected capacity change from 0 to 256 [ 1274.190286][T14825] exfat: Deprecated parameter 'utf8' [ 1274.195660][T14825] exfat: Deprecated parameter 'namecase' [ 1274.201526][T14825] exfat: Deprecated parameter 'namecase' [ 1274.207258][T14825] exfat: Deprecated parameter 'utf8' [ 1274.216500][T14825] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1274.229379][ T341] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1274.260526][ T341] usb 3-1: device descriptor read/8, error -71 [ 1274.384616][T14813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.393193][T14813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.402225][ T2155] usbhid 1-1:0.0: can't add hid device: -71 [ 1274.409251][ T2155] usbhid: probe of 1-1:0.0 failed with error -71 [ 1274.410427][ T341] usb 3-1: device descriptor read/8, error -71 [ 1274.450599][ T2155] usb 1-1: USB disconnect, device number 57 [ 1274.689352][ T341] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1274.720474][ T341] usb 3-1: device descriptor read/8, error -71 [ 1274.870488][ T341] usb 3-1: device descriptor read/8, error -71 [ 1274.883939][T14829] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3965'. [ 1274.989464][ T341] usb usb3-port1: unable to enumerate USB device [ 1274.998690][T14839] loop1: detected capacity change from 0 to 512 [ 1275.008351][T14368] udevd[14368]: incorrect ext4 checksum on /dev/loop1 [ 1275.016366][T14839] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1275.236259][T14833] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.246055][T14833] FAT-fs (loop9): unable to read boot sector [ 1275.292164][T14850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1275.300426][T12798] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1275.424389][T14852] device syzkaller0 entered promiscuous mode [ 1275.462748][T14845] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.472324][T14845] FAT-fs (loop5): unable to read boot sector [ 1275.490253][T12798] usb 4-1: Using ep0 maxpacket: 32 [ 1275.497084][T12798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.508368][T12798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.518406][T12798] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1275.527816][T12798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.537157][T12798] usb 4-1: config 0 descriptor?? [ 1275.543191][T12798] hub 4-1:0.0: USB hub found [ 1275.746334][T12798] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1275.759349][ T341] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1275.882007][T14857] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.891451][T14857] FAT-fs (loop5): unable to read boot sector [ 1275.939347][ T341] usb 5-1: Using ep0 maxpacket: 32 [ 1275.945698][ T341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.957188][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.966015][ T341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.976144][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.985178][ T341] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1276.010402][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.012123][T12798] usbhid 4-1:0.0: can't add hid device: -71 [ 1276.024887][ T341] usb 5-1: config 0 descriptor?? [ 1276.040140][ T341] hub 5-1:0.0: USB hub found [ 1276.041136][T12798] usbhid: probe of 4-1:0.0 failed with error -71 [ 1276.081268][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1276.090438][T12798] usb 4-1: USB disconnect, device number 54 [ 1276.240826][ T341] hub 5-1:0.0: 1 port detected [ 1276.389396][T11385] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1276.570123][T11385] usb 2-1: not running at top speed; connect to a high speed hub [ 1276.609135][T11385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.619423][T11385] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1276.628460][T11385] usb 2-1: config 1 has no interface number 1 [ 1276.634591][T11385] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1276.644008][ T341] usb 5-1: USB disconnect, device number 47 [ 1276.654839][T11385] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.742983][T14878] loop3: detected capacity change from 0 to 512 [ 1276.752483][T14878] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1277.187412][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 1277.629225][T11385] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1277.638516][T11385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.646718][T11385] usb 2-1: Product: syz [ 1277.651208][T11385] usb 2-1: Manufacturer: syz [ 1277.655819][T11385] usb 2-1: SerialNumber: syz [ 1278.133987][T11385] usb 2-1: USB disconnect, device number 67 [ 1278.162142][T14882] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.171612][T14882] FAT-fs (loop1): unable to read boot sector [ 1278.179369][T12798] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1278.350049][T14368] udevd[14368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1278.357020][T14891] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.366220][T12798] usb 3-1: device descriptor read/64, error -71 [ 1278.375394][T14891] FAT-fs (loop7): unable to read boot sector [ 1278.395624][T14900] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3183071107 (203716550848 ns) > initial count (190329080192 ns). Using initial count to start timer. [ 1278.497884][T14906] device syzkaller0 entered promiscuous mode [ 1278.649392][T12798] usb 3-1: device descriptor read/64, error -71 [ 1278.799661][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3990'. [ 1279.030251][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1279.030273][ T28] audit: type=1326 audit(1279.018:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.277774][ T28] audit: type=1326 audit(1279.048:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.569614][ T28] audit: type=1326 audit(1279.048:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.586575][T14923] loop3: detected capacity change from 0 to 256 [ 1279.626982][ T28] audit: type=1326 audit(1279.048:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.651572][ T28] audit: type=1326 audit(1279.048:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.674764][ T28] audit: type=1326 audit(1279.058:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.697771][ T28] audit: type=1326 audit(1279.058:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.720777][T12798] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1279.721667][T14923] exfat: Deprecated parameter 'utf8' [ 1279.728634][ T28] audit: type=1326 audit(1279.068:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.737624][T14923] exfat: Deprecated parameter 'namecase' [ 1279.762852][T14923] exfat: Deprecated parameter 'namecase' [ 1279.765076][T14904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.768550][T14923] exfat: Deprecated parameter 'utf8' [ 1279.777785][ T28] audit: type=1326 audit(1279.068:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.786687][T14923] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1279.805975][ T28] audit: type=1326 audit(1279.068:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff23d78f749 code=0x7ffc0000 [ 1279.818433][T14904] FAT-fs (loop1): unable to read boot sector [ 1279.843101][T14928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1279.856099][T14927] FAULT_INJECTION: forcing a failure. [ 1279.856099][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1279.869391][T14927] CPU: 1 PID: 14927 Comm: syz.4.3995 Not tainted syzkaller #0 [ 1279.876865][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1279.887029][T14927] Call Trace: [ 1279.890431][T14927] [ 1279.893381][T14927] __dump_stack+0x21/0x24 [ 1279.897731][T14927] dump_stack_lvl+0xee/0x150 [ 1279.902341][T14927] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1279.907387][T14927] dump_stack+0x15/0x24 [ 1279.911620][T14927] should_fail_ex+0x3d4/0x520 [ 1279.916484][T14927] should_fail+0xb/0x10 [ 1279.920631][T14927] should_fail_usercopy+0x1a/0x20 [ 1279.925748][T14927] _copy_from_user+0x1e/0xc0 [ 1279.930355][T14927] __sys_bpf+0x277/0x780 [ 1279.934671][T14927] ? bpf_link_show_fdinfo+0x320/0x320 [ 1279.940033][T14927] ? __cfi_ksys_write+0x10/0x10 [ 1279.944875][T14927] ? debug_smp_processor_id+0x17/0x20 [ 1279.950260][T14927] __x64_sys_bpf+0x7c/0x90 [ 1279.954786][T14927] x64_sys_call+0x488/0x9a0 [ 1279.959288][T14927] do_syscall_64+0x4c/0xa0 [ 1279.963870][T14927] ? clear_bhb_loop+0x30/0x80 [ 1279.968709][T14927] ? clear_bhb_loop+0x30/0x80 [ 1279.973373][T14927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.979256][T14927] RIP: 0033:0x7fa7eeb8f749 [ 1279.983750][T14927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.003697][T14927] RSP: 002b:00007fa7ed5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1280.012151][T14927] RAX: ffffffffffffffda RBX: 00007fa7eede6090 RCX: 00007fa7eeb8f749 [ 1280.020115][T14927] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 1280.028079][T14927] RBP: 00007fa7ed5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.036041][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.044000][T14927] R13: 00007fa7eede6128 R14: 00007fa7eede6090 R15: 00007fff80732468 [ 1280.052138][T14927] [ 1280.055263][T12798] usb 3-1: device descriptor read/64, error -71 [ 1280.240795][T14936] loop1: detected capacity change from 0 to 128 [ 1280.280115][T14368] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1280.298491][T14944] device syzkaller0 entered promiscuous mode [ 1280.359601][T14949] loop1: detected capacity change from 0 to 256 [ 1280.366697][T14949] exfat: Deprecated parameter 'utf8' [ 1280.379457][T14949] exfat: Deprecated parameter 'namecase' [ 1280.393006][T14949] exfat: Deprecated parameter 'namecase' [ 1280.398805][T14949] exfat: Deprecated parameter 'utf8' [ 1280.406659][T14949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1280.445391][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4003'. [ 1280.610481][T14941] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1280.619855][T14941] FAT-fs (loop5): unable to read boot sector [ 1280.747580][T14965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4005'. [ 1281.596332][T14971] device syzkaller0 entered promiscuous mode [ 1281.649378][ T2155] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1281.671190][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4010'. [ 1281.688617][T14961] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.697984][T14961] FAT-fs (loop3): unable to read boot sector [ 1281.830049][ T2155] usb 4-1: not running at top speed; connect to a high speed hub [ 1281.840814][ T2155] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.862054][ T2155] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1281.877854][ T2155] usb 4-1: config 1 has no interface number 1 [ 1281.884650][ T2155] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1281.897973][T14981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1281.907602][ T2155] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1281.928506][ T2155] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1281.938077][ T2155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.946772][ T2155] usb 4-1: Product: syz [ 1281.952798][ T2155] usb 4-1: Manufacturer: syz [ 1281.957604][ T2155] usb 4-1: SerialNumber: syz [ 1281.959390][ T1361] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1281.971231][T14983] device syzkaller0 entered promiscuous mode [ 1281.987622][T14973] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.996934][T14973] FAT-fs (loop5): unable to read boot sector [ 1282.156244][T14993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.165588][T14993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.173198][ T2155] usb 4-1: USB disconnect, device number 55 [ 1282.177454][ T1361] usb 5-1: device descriptor read/64, error -71 [ 1282.519346][ T1361] usb 5-1: device descriptor read/64, error -71 [ 1282.559441][T12798] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1282.567445][T14368] udevd[14368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1282.709363][T12798] usb 1-1: device descriptor read/64, error -71 [ 1282.789362][ T1361] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1283.002283][T12798] usb 1-1: device descriptor read/64, error -71 [ 1283.014625][ T1361] usb 5-1: device descriptor read/64, error -71 [ 1283.294153][T15010] overlayfs: './file0' not a directory [ 1283.351202][T15011] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1283.360522][T15011] FAT-fs (loop7): unable to read boot sector [ 1283.529422][ T1361] usb 5-1: device descriptor read/64, error -71 [ 1283.602467][T12798] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1283.649400][ T1361] usb usb5-port1: attempt power cycle [ 1283.710299][T15013] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1283.719616][T15013] FAT-fs (loop5): unable to read boot sector [ 1283.759388][T12798] usb 1-1: device descriptor read/64, error -71 [ 1283.870214][T15021] device syzkaller0 entered promiscuous mode [ 1284.059412][ T1361] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1284.090691][ T1361] usb 5-1: device descriptor read/8, error -71 [ 1284.250772][ T1361] usb 5-1: device descriptor read/8, error -71 [ 1284.276676][T12798] usb 1-1: device descriptor read/64, error -71 [ 1284.396423][T15018] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.399446][T12798] usb usb1-port1: attempt power cycle [ 1284.405766][T15018] FAT-fs (loop3): unable to read boot sector [ 1284.421902][T15019] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.431460][T15019] FAT-fs (loop7): unable to read boot sector [ 1284.529331][ T1361] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1284.570312][ T1361] usb 5-1: device descriptor read/8, error -71 [ 1284.614778][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1284.614793][ T28] audit: type=1326 audit(1284.598:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.649377][ T28] audit: type=1326 audit(1284.608:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.672806][ T28] audit: type=1326 audit(1284.628:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.764926][ T28] audit: type=1326 audit(1284.628:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.883150][ T28] audit: type=1326 audit(1284.638:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.908933][ T1361] usb 5-1: device descriptor read/8, error -71 [ 1284.914137][ T28] audit: type=1326 audit(1284.648:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.938982][ T28] audit: type=1326 audit(1284.648:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.962008][T12798] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 1284.969768][ T28] audit: type=1326 audit(1284.648:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1284.993094][ T28] audit: type=1326 audit(1284.648:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1285.016214][ T28] audit: type=1326 audit(1284.648:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1285.041002][ T1361] usb usb5-port1: unable to enumerate USB device [ 1285.047791][T12798] usb 1-1: device descriptor read/8, error -71 [ 1285.109452][T12942] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1285.200234][T12798] usb 1-1: device descriptor read/8, error -71 [ 1285.260708][T15049] FAULT_INJECTION: forcing a failure. [ 1285.260708][T15049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.274835][T15049] CPU: 1 PID: 15049 Comm: syz.4.4030 Not tainted syzkaller #0 [ 1285.282586][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1285.292637][T15049] Call Trace: [ 1285.295908][T15049] [ 1285.298848][T15049] __dump_stack+0x21/0x24 [ 1285.303319][T15049] dump_stack_lvl+0xee/0x150 [ 1285.307948][T15049] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1285.312977][T15049] dump_stack+0x15/0x24 [ 1285.317148][T15049] should_fail_ex+0x3d4/0x520 [ 1285.321888][T15049] should_fail+0xb/0x10 [ 1285.326049][T15049] should_fail_usercopy+0x1a/0x20 [ 1285.331068][T15049] _copy_from_user+0x1e/0xc0 [ 1285.335780][T15049] iovec_from_user+0x1aa/0x2e0 [ 1285.340544][T15049] ? __kasan_check_write+0x14/0x20 [ 1285.345732][T15049] __import_iovec+0x71/0x470 [ 1285.350360][T15049] import_iovec+0x7c/0xb0 [ 1285.354697][T15049] do_preadv+0x1bd/0x330 [ 1285.358943][T15049] ? vfs_writev+0x590/0x590 [ 1285.363454][T15049] ? __kasan_check_write+0x14/0x20 [ 1285.368702][T15049] ? fput+0x154/0x1a0 [ 1285.372889][T15049] ? fpregs_restore_userregs+0x128/0x260 [ 1285.378540][T15049] __x64_sys_preadv+0x9e/0xb0 [ 1285.383242][T15049] x64_sys_call+0x370/0x9a0 [ 1285.387738][T15049] do_syscall_64+0x4c/0xa0 [ 1285.392149][T15049] ? clear_bhb_loop+0x30/0x80 [ 1285.396917][T15049] ? clear_bhb_loop+0x30/0x80 [ 1285.401671][T15049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.407576][T15049] RIP: 0033:0x7fa7eeb8f749 [ 1285.412022][T15049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1285.431793][T15049] RSP: 002b:00007fa7ed5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1285.440208][T15049] RAX: ffffffffffffffda RBX: 00007fa7eede6090 RCX: 00007fa7eeb8f749 [ 1285.448245][T15049] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000007 [ 1285.456219][T15049] RBP: 00007fa7ed5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.464179][T15049] R10: 0000000000000111 R11: 0000000000000246 R12: 0000000000000001 [ 1285.472225][T15049] R13: 00007fa7eede6128 R14: 00007fa7eede6090 R15: 00007fff80732468 [ 1285.480193][T15049] [ 1285.524257][T12942] usb 4-1: Using ep0 maxpacket: 32 [ 1285.537405][T12942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.556493][T12942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.566689][T12942] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1285.655803][T12942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.675469][T12942] usb 4-1: config 0 descriptor?? [ 1285.692920][T12942] hub 4-1:0.0: USB hub found [ 1285.990835][T15062] overlayfs: './file0' not a directory [ 1286.022066][T15062] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1286.031899][T15062] FAT-fs (loop3): unable to read boot sector [ 1286.141937][T12942] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1286.472953][T15078] overlayfs: './file0' not a directory [ 1286.479819][T15078] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1286.488996][T15078] FAT-fs (loop5): unable to read boot sector [ 1286.549061][T15039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.587579][T15039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.619593][T12942] usbhid 4-1:0.0: can't add hid device: -71 [ 1286.627718][T12942] usbhid: probe of 4-1:0.0 failed with error -71 [ 1286.642264][T15059] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.651934][T15059] FAT-fs (loop1): unable to read boot sector [ 1286.670057][T12942] usb 4-1: USB disconnect, device number 56 [ 1286.995604][T15068] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1287.004854][T15068] FAT-fs (loop9): unable to read boot sector [ 1287.026842][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1289.434434][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1289.445012][T15104] loop1: detected capacity change from 0 to 2048 [ 1289.451614][T12798] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1289.453939][T15105] bridge0: port 3(vlan0) entered blocking state [ 1289.466275][T15105] bridge0: port 3(vlan0) entered disabled state [ 1289.478410][T15104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1289.643503][T12798] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1289.651216][T12798] usb 1-1: can't read configurations, error -71 [ 1289.819340][ T2155] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1289.873213][T15117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1289.882477][T15117] FAT-fs (loop5): unable to read boot sector [ 1290.010038][ T2155] usb 4-1: not running at top speed; connect to a high speed hub [ 1290.028696][ T2155] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.048995][ T2155] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1290.060254][ T2155] usb 4-1: config 1 has no interface number 1 [ 1290.066647][ T2155] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1290.082303][ T2155] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1290.100377][ T2155] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1290.109549][ T2155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.117541][ T2155] usb 4-1: Product: syz [ 1290.121817][ T2155] usb 4-1: Manufacturer: syz [ 1290.126424][ T2155] usb 4-1: SerialNumber: syz [ 1290.317872][T15125] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1290.322028][T11191] EXT4-fs (loop1): unmounting filesystem. [ 1290.327635][T15125] FAT-fs (loop5): unable to read boot sector [ 1290.359120][ T2155] usb 4-1: USB disconnect, device number 57 [ 1290.809851][T14368] udevd[14368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1290.891703][T15128] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1290.901037][T15128] FAT-fs (loop9): unable to read boot sector [ 1292.233131][T15167] binder: 15162:15167 ioctl c0306201 0 returned -14 [ 1292.244876][T15167] binder: 15162:15167 ioctl c0306201 0 returned -14 [ 1292.657396][T15175] binder: 15168:15175 ioctl c0306201 0 returned -14 [ 1292.935500][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4065'. [ 1293.013645][T15161] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1293.023622][T15161] FAT-fs (loop5): unable to read boot sector [ 1293.224814][T15193] loop3: detected capacity change from 0 to 256 [ 1293.314901][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 1293.363836][T15193] exfat: Deprecated parameter 'utf8' [ 1293.369212][T15193] exfat: Deprecated parameter 'namecase' [ 1293.374993][T15193] exfat: Deprecated parameter 'namecase' [ 1293.380850][T15193] exfat: Deprecated parameter 'utf8' [ 1293.388126][T15193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1293.509406][ T586] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1293.691523][ T586] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1293.699394][ T1361] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1293.699453][ T586] usb 1-1: can't read configurations, error -71 [ 1293.890539][ T1361] usb 5-1: not running at top speed; connect to a high speed hub [ 1293.921784][ T1361] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.965330][ T1361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1294.012599][ T1361] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1294.021921][ T1361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.030177][ T1361] usb 5-1: Product: syz [ 1294.051825][ T1361] usb 5-1: Manufacturer: syz [ 1294.060577][ T1361] usb 5-1: SerialNumber: syz [ 1294.196734][T15209] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.206007][T15209] FAT-fs (loop3): unable to read boot sector [ 1294.282152][ T1361] usb 5-1: 0:2 : does not exist [ 1294.297392][ T1361] usb 5-1: USB disconnect, device number 52 [ 1295.140379][T15225] overlayfs: './file0' not a directory [ 1295.149828][T15225] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1295.159108][T15225] FAT-fs (loop3): unable to read boot sector [ 1295.939348][T12798] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1296.060160][T15233] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.077587][T15233] FAT-fs (loop5): unable to read boot sector [ 1296.129335][T12798] usb 4-1: Using ep0 maxpacket: 32 [ 1296.135599][T12798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.167040][T12798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.191509][T12798] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1296.200807][T12798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.252563][T12798] usb 4-1: config 0 descriptor?? [ 1296.269918][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1296.269932][ T28] audit: type=1400 audit(1296.258:995): avc: denied { mounton } for pid=15247 comm="syz.4.4084" path="/267/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1296.304210][T12798] hub 4-1:0.0: USB hub found [ 1296.461010][T12798] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1297.701800][T15268] overlayfs: './file0' not a directory [ 1297.713843][T15268] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1297.723196][T15268] FAT-fs (loop3): unable to read boot sector [ 1297.771675][T15270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.909576][T15270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.011104][T12798] usbhid 4-1:0.0: can't add hid device: -71 [ 1298.018457][T12798] usbhid: probe of 4-1:0.0 failed with error -71 [ 1298.049757][T12798] usb 4-1: USB disconnect, device number 58 [ 1298.175553][T15280] overlayfs: './file0' not a directory [ 1298.187283][T15280] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1298.196825][T15280] FAT-fs (loop5): unable to read boot sector [ 1298.418095][T15285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1298.445443][T15257] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1298.454857][T15257] FAT-fs (loop1): unable to read boot sector [ 1298.719656][ T28] audit: type=1400 audit(1298.658:996): avc: denied { setopt } for pid=15289 comm="syz.4.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1299.904048][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1301.652390][T15322] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1303.505280][T15330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4106'. [ 1304.508621][ T28] audit: type=1326 audit(1304.488:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1304.569360][ T28] audit: type=1326 audit(1304.518:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1304.666266][ T28] audit: type=1326 audit(1304.518:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1304.789321][ T28] audit: type=1326 audit(1304.518:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1304.859357][ T28] audit: type=1326 audit(1304.518:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1305.793953][T15354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4110'. [ 1306.238638][ T28] audit: type=1326 audit(1304.518:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1306.916433][T15356] overlayfs: './file0' not a directory [ 1306.924430][T15357] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1306.933618][T15357] FAT-fs (loop7): unable to read boot sector [ 1307.111075][ T28] audit: type=1326 audit(1304.518:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1307.157242][ T28] audit: type=1326 audit(1304.518:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1307.234874][ T28] audit: type=1326 audit(1304.518:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1307.242897][T15336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1307.280929][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1307.473933][ T28] audit: type=1326 audit(1304.518:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.3.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01478f749 code=0x7ffc0000 [ 1307.497174][T15336] FAT-fs (loop1): unable to read boot sector [ 1307.713823][T15371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1307.775946][T15376] 9pnet_fd: Insufficient options for proto=fd [ 1308.483506][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 1308.989374][ T377] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1309.042652][T15384] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1309.052005][T15384] FAT-fs (loop5): unable to read boot sector [ 1309.067262][T15382] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1309.076627][T15382] FAT-fs (loop1): unable to read boot sector [ 1309.440339][ T377] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1309.470177][ T377] usb 2-1: can't read configurations, error -71 [ 1309.590532][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1309.590547][ T28] audit: type=1400 audit(1309.578:1015): avc: denied { getattr } for pid=15409 comm="syz.4.4129" name="/" dev="aio" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1309.618976][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1310.176255][T15412] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1310.191442][T15412] FAT-fs (loop5): unable to read boot sector [ 1310.466217][T15444] FAULT_INJECTION: forcing a failure. [ 1310.466217][T15444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.479784][T15444] CPU: 1 PID: 15444 Comm: syz.0.4140 Not tainted syzkaller #0 [ 1310.487268][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1310.497418][T15444] Call Trace: [ 1310.500704][T15444] [ 1310.503645][T15444] __dump_stack+0x21/0x24 [ 1310.508000][T15444] dump_stack_lvl+0xee/0x150 [ 1310.512683][T15444] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1310.517823][T15444] ? _parse_integer+0x2a/0x40 [ 1310.522522][T15444] dump_stack+0x15/0x24 [ 1310.526688][T15444] should_fail_ex+0x3d4/0x520 [ 1310.531396][T15444] should_fail+0xb/0x10 [ 1310.535571][T15444] should_fail_usercopy+0x1a/0x20 [ 1310.540603][T15444] _copy_from_user+0x1e/0xc0 [ 1310.545186][T15444] ___sys_sendmsg+0x155/0x290 [ 1310.549947][T15444] ? __sys_sendmsg+0x270/0x270 [ 1310.554717][T15444] ? __kasan_check_write+0x14/0x20 [ 1310.559810][T15444] ? proc_fail_nth_write+0x17a/0x1f0 [ 1310.565176][T15444] ? vfs_write+0x9d6/0xca0 [ 1310.569586][T15444] ? __fdget+0x19c/0x220 [ 1310.574082][T15444] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1310.579122][T15444] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1310.584590][T15444] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1310.590664][T15444] x64_sys_call+0x171/0x9a0 [ 1310.595172][T15444] do_syscall_64+0x4c/0xa0 [ 1310.599577][T15444] ? clear_bhb_loop+0x30/0x80 [ 1310.604253][T15444] ? clear_bhb_loop+0x30/0x80 [ 1310.608938][T15444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1310.614824][T15444] RIP: 0033:0x7fca0098f749 [ 1310.619235][T15444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.639010][T15444] RSP: 002b:00007fca018ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.647408][T15444] RAX: ffffffffffffffda RBX: 00007fca00be5fa0 RCX: 00007fca0098f749 [ 1310.655364][T15444] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1310.663322][T15444] RBP: 00007fca018ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.671275][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.679239][T15444] R13: 00007fca00be6038 R14: 00007fca00be5fa0 R15: 00007ffcb57c7a68 [ 1310.687202][T15444] [ 1310.829406][T15459] netlink: 47 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1311.591658][T15474] loop1: detected capacity change from 0 to 512 [ 1312.038288][T15474] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1312.129549][T11675] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1312.129592][ T1361] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1312.321990][T15474] EXT4-fs (loop1): 1 truncate cleaned up [ 1312.327753][T15474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1312.367453][ T28] audit: type=1400 audit(1312.348:1016): avc: denied { ioctl } for pid=15468 comm="syz.1.4147" path="/220/bus/file1" dev="loop1" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1312.532631][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1312.544030][T15481] device bridge1 entered promiscuous mode [ 1312.551609][ T1361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.567472][ T1361] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1312.586497][ T1361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.656516][ T1361] usb 5-1: config 0 descriptor?? [ 1312.663666][ T1361] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1312.670938][T11675] usb 4-1: Using ep0 maxpacket: 32 [ 1312.677331][ T1361] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1312.686766][T11675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.743724][T11191] EXT4-fs (loop1): unmounting filesystem. [ 1312.752588][T15488] FAULT_INJECTION: forcing a failure. [ 1312.752588][T15488] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.765246][T15488] CPU: 1 PID: 15488 Comm: syz.2.4151 Not tainted syzkaller #0 [ 1312.772716][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1312.782778][T15488] Call Trace: [ 1312.786063][T15488] [ 1312.788984][T15488] __dump_stack+0x21/0x24 [ 1312.793329][T15488] dump_stack_lvl+0xee/0x150 [ 1312.797941][T15488] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1312.802976][T15488] ? __kasan_check_read+0x11/0x20 [ 1312.808003][T15488] ? preempt_schedule_irq+0xbb/0x110 [ 1312.813387][T15488] dump_stack+0x15/0x24 [ 1312.817579][T15488] should_fail_ex+0x3d4/0x520 [ 1312.822277][T15488] __should_failslab+0xac/0xf0 [ 1312.827138][T15488] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1312.832520][T15488] should_failslab+0x9/0x20 [ 1312.837026][T15488] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1312.842405][T15488] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1312.847786][T15488] __kmalloc+0xa1/0x1e0 [ 1312.852034][T15488] ? strnlen_user+0x10d/0x190 [ 1312.857403][T15488] __se_sys_memfd_create+0xf2/0x3b0 [ 1312.862714][T15488] __x64_sys_memfd_create+0x5b/0x70 [ 1312.868015][T15488] x64_sys_call+0x235/0x9a0 [ 1312.872527][T15488] do_syscall_64+0x4c/0xa0 [ 1312.876951][T15488] ? clear_bhb_loop+0x30/0x80 [ 1312.881643][T15488] ? clear_bhb_loop+0x30/0x80 [ 1312.886329][T15488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1312.892230][T15488] RIP: 0033:0x7f9f72f8f749 [ 1312.896652][T15488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.916255][T15488] RSP: 002b:00007f9f73df2e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1312.924941][T15488] RAX: ffffffffffffffda RBX: 0000000000000445 RCX: 00007f9f72f8f749 [ 1312.932925][T15488] RDX: 00007f9f73df2ef0 RSI: 0000000000000000 RDI: 00007f9f73014960 [ 1312.940999][T15488] RBP: 0000200000000b00 R08: 00007f9f73df2bb7 R09: 00007f9f73df2e40 [ 1312.949085][T15488] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 1312.957075][T15488] R13: 00007f9f73df2ef0 R14: 00007f9f73df2eb0 R15: 00002000000001c0 [ 1312.965056][T15488] [ 1313.004174][T11675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.015194][T11675] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1313.025916][T11675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.059673][ T1361] usb 5-1: USB disconnect, device number 53 [ 1313.079889][T11675] usb 4-1: config 0 descriptor?? [ 1313.174459][T11675] hub 4-1:0.0: USB hub found [ 1313.201750][ T28] audit: type=1400 audit(1313.188:1017): avc: denied { append } for pid=15489 comm="syz.1.4152" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1313.229178][ T28] audit: type=1400 audit(1313.208:1018): avc: denied { map } for pid=15489 comm="syz.1.4152" path="/dev/hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1313.254262][ T28] audit: type=1400 audit(1313.208:1019): avc: denied { execute } for pid=15489 comm="syz.1.4152" path="/dev/hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1313.282324][T15493] loop1: detected capacity change from 0 to 512 [ 1313.289185][T15493] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1313.305653][T15493] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1313.319670][T11675] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1313.495988][ T6781] Bluetooth: hci0: Frame reassembly failed (-84) [ 1313.499537][T15497] FAULT_INJECTION: forcing a failure. [ 1313.499537][T15497] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.515102][T15497] CPU: 0 PID: 15497 Comm: syz.2.4154 Not tainted syzkaller #0 [ 1313.522595][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1313.532819][T15497] Call Trace: [ 1313.536683][T15497] [ 1313.539737][T15497] __dump_stack+0x21/0x24 [ 1313.544630][T15497] dump_stack_lvl+0xee/0x150 [ 1313.549229][T15497] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1313.554283][T15497] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1313.560209][T15497] dump_stack+0x15/0x24 [ 1313.564393][T15497] should_fail_ex+0x3d4/0x520 [ 1313.569094][T15497] __should_failslab+0xac/0xf0 [ 1313.573861][T15497] should_failslab+0x9/0x20 [ 1313.578446][T15497] kmem_cache_alloc_node+0x42/0x340 [ 1313.583913][T15497] ? __alloc_skb+0xea/0x4b0 [ 1313.588578][T15497] __alloc_skb+0xea/0x4b0 [ 1313.592936][T15497] create_monitor_ctrl_open+0x153/0x880 [ 1313.598813][T15497] ? hci_sock_gen_cookie+0x100/0x100 [ 1313.604110][T15497] ? ns_capable+0x8c/0xf0 [ 1313.608436][T15497] hci_sock_ioctl+0x289/0x7f0 [ 1313.613126][T15497] sock_do_ioctl+0x101/0x310 [ 1313.617731][T15497] ? sock_show_fdinfo+0xb0/0xb0 [ 1313.622590][T15497] ? selinux_file_ioctl+0x377/0x480 [ 1313.627800][T15497] sock_ioctl+0x4d8/0x6e0 [ 1313.632134][T15497] ? __cfi_sock_ioctl+0x10/0x10 [ 1313.636997][T15497] ? __fget_files+0x2d5/0x330 [ 1313.641673][T15497] ? security_file_ioctl+0x95/0xc0 [ 1313.646777][T15497] ? __cfi_sock_ioctl+0x10/0x10 [ 1313.651617][T15497] __se_sys_ioctl+0x12f/0x1b0 [ 1313.656281][T15497] __x64_sys_ioctl+0x7b/0x90 [ 1313.660861][T15497] x64_sys_call+0x58b/0x9a0 [ 1313.665357][T15497] do_syscall_64+0x4c/0xa0 [ 1313.669758][T15497] ? clear_bhb_loop+0x30/0x80 [ 1313.674430][T15497] ? clear_bhb_loop+0x30/0x80 [ 1313.679094][T15497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1313.685057][T15497] RIP: 0033:0x7f9f72f8f749 [ 1313.689460][T15497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.709138][T15497] RSP: 002b:00007f9f73e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.717712][T15497] RAX: ffffffffffffffda RBX: 00007f9f731e5fa0 RCX: 00007f9f72f8f749 [ 1313.725673][T15497] RDX: 0000200000000200 RSI: 00000000400448de RDI: 0000000000000006 [ 1313.733630][T15497] RBP: 00007f9f73e35090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.741598][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.750080][T15497] R13: 00007f9f731e6038 R14: 00007f9f731e5fa0 R15: 00007ffdcf9d42b8 [ 1313.758050][T15497] [ 1313.769673][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.778537][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.806887][T11675] usbhid 4-1:0.0: can't add hid device: -71 [ 1313.813123][T11675] usbhid: probe of 4-1:0.0 failed with error -71 [ 1313.937006][T11675] usb 4-1: USB disconnect, device number 59 [ 1314.692950][T15513] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.702294][T15513] FAT-fs (loop3): unable to read boot sector [ 1314.738952][T15515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.748449][T15515] FAT-fs (loop1): unable to read boot sector [ 1314.946494][T15531] syz.1.4164[15531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1314.946589][T15531] syz.1.4164[15531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.029356][T15536] overlayfs: './file0' not a directory [ 1315.062853][T15536] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1315.072204][T15536] FAT-fs (loop9): unable to read boot sector [ 1315.499346][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 1315.511109][ T7273] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1315.532530][T15497] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1316.050697][T15547] loop3: detected capacity change from 0 to 16 [ 1317.238947][T15548] input: syz0 as /devices/virtual/input/input9 [ 1317.349222][T15547] erofs: (device loop3): mounted with root inode @ nid 36. [ 1317.363795][T15543] input: syz0 as /devices/virtual/input/input10 [ 1317.589314][ C0] ================================================================== [ 1317.597591][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9b0 [ 1317.604672][ C0] Write of size 8 at addr ffff88811b830a00 by task syz.2.4168/15546 [ 1317.612658][ C0] [ 1317.614985][ C0] CPU: 0 PID: 15546 Comm: syz.2.4168 Not tainted syzkaller #0 [ 1317.622708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1317.632779][ C0] Call Trace: [ 1317.636067][ C0] [ 1317.638918][ C0] __dump_stack+0x21/0x24 [ 1317.643265][ C0] dump_stack_lvl+0xee/0x150 [ 1317.647871][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1317.652910][ C0] ? __run_timers+0x32b/0x9b0 [ 1317.657597][ C0] print_address_description+0x71/0x200 [ 1317.663315][ C0] print_report+0x4a/0x60 [ 1317.667651][ C0] kasan_report+0x122/0x150 [ 1317.672256][ C0] ? __run_timers+0x32b/0x9b0 [ 1317.676950][ C0] __asan_report_store8_noabort+0x17/0x20 [ 1317.682697][ C0] __run_timers+0x32b/0x9b0 [ 1317.687234][ C0] ? sched_clock+0x9/0x10 [ 1317.691583][ C0] ? sched_clock_cpu+0x6e/0x250 [ 1317.696539][ C0] ? calc_index+0x200/0x200 [ 1317.701138][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1317.706371][ C0] run_timer_softirq+0x6a/0xf0 [ 1317.706597][T15561] FAULT_INJECTION: forcing a failure. [ 1317.706597][T15561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.711142][ C0] handle_softirqs+0x1d7/0x600 [ 1317.711166][ C0] __irq_exit_rcu+0x52/0xf0 [ 1317.711183][ C0] irq_exit_rcu+0x9/0x10 [ 1317.711198][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1317.743350][ C0] [ 1317.746280][ C0] [ 1317.749208][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1317.755218][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 1317.762250][ C0] Code: 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 48 89 e5 48 8b 45 08 65 48 8b 15 d0 3f 92 7e 65 8b 0d d1 3f 92 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 0b 00 00 [ 1317.782122][ C0] RSP: 0018:ffffc9000dc278b0 EFLAGS: 00000246 [ 1317.788193][ C0] RAX: ffffffff83e0cfa0 RBX: ffffc9000dc27d00 RCX: 0000000080000000 [ 1317.796252][ C0] RDX: ffff88811d6d6540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1317.804307][ C0] RBP: ffffc9000dc278b0 R08: dffffc0000000000 R09: fffff52001b84ecd [ 1317.812469][ C0] R10: fffff52001b84ecd R11: 1ffff92001b84ecc R12: ffffffff85e28d90 [ 1317.820444][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1317.828421][ C0] ? ____sys_recvmsg+0x2b0/0x590 [ 1317.833383][ C0] ____sys_recvmsg+0x2b0/0x590 [ 1317.838161][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1317.843202][ C0] ? import_iovec+0x7c/0xb0 [ 1317.847987][ C0] ___sys_recvmsg+0x1b2/0x510 [ 1317.852778][ C0] ? __sys_recvmsg+0x270/0x270 [ 1317.857568][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 1317.863749][ C0] ? do_recvmmsg+0x3dd/0x7a0 [ 1317.868359][ C0] do_recvmmsg+0x359/0x7a0 [ 1317.872791][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1317.877655][ C0] ? __kasan_check_read+0x11/0x20 [ 1317.882681][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1317.887702][ C0] ? sysvec_reschedule_ipi+0x78/0x80 [ 1317.892982][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1317.898525][ C0] x64_sys_call+0x3e7/0x9a0 [ 1317.903197][ C0] do_syscall_64+0x4c/0xa0 [ 1317.907632][ C0] ? clear_bhb_loop+0x30/0x80 [ 1317.912391][ C0] ? clear_bhb_loop+0x30/0x80 [ 1317.917060][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.923035][ C0] RIP: 0033:0x7f9f72f8f749 [ 1317.927449][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.947219][ C0] RSP: 002b:00007f9f73e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1317.955625][ C0] RAX: ffffffffffffffda RBX: 00007f9f731e6090 RCX: 00007f9f72f8f749 [ 1317.963589][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 1317.971548][ C0] RBP: 00007f9f73013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1317.979507][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1317.987555][ C0] R13: 00007f9f731e6128 R14: 00007f9f731e6090 R15: 00007ffdcf9d42b8 [ 1317.995613][ C0] [ 1317.998618][ C0] [ 1318.001019][ C0] Allocated by task 15497: [ 1318.005483][ C0] kasan_set_track+0x4b/0x70 [ 1318.010068][ C0] kasan_save_alloc_info+0x25/0x30 [ 1318.015172][ C0] __kasan_kmalloc+0x95/0xb0 [ 1318.019781][ C0] __kmalloc+0xb1/0x1e0 [ 1318.023932][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 1318.029028][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 1318.034110][ C0] tty_ioctl+0x8ef/0xc60 [ 1318.038406][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 1318.043070][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1318.047651][ C0] x64_sys_call+0x58b/0x9a0 [ 1318.052141][ C0] do_syscall_64+0x4c/0xa0 [ 1318.056542][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.062425][ C0] [ 1318.064732][ C0] Freed by task 15497: [ 1318.068781][ C0] kasan_set_track+0x4b/0x70 [ 1318.073555][ C0] kasan_save_free_info+0x31/0x50 [ 1318.078586][ C0] ____kasan_slab_free+0x132/0x180 [ 1318.083707][ C0] __kasan_slab_free+0x11/0x20 [ 1318.088557][ C0] slab_free_freelist_hook+0xc2/0x190 [ 1318.093918][ C0] __kmem_cache_free+0xb7/0x1b0 [ 1318.098754][ C0] kfree+0x6f/0xf0 [ 1318.102557][ C0] hci_release_dev+0x12a3/0x13b0 [ 1318.107565][ C0] bt_host_release+0x82/0x90 [ 1318.112270][ C0] device_release+0xa4/0x1d0 [ 1318.117263][ C0] kobject_put+0x19d/0x280 [ 1318.121730][ C0] put_device+0x1f/0x30 [ 1318.125912][ C0] hci_dev_cmd+0x265/0x720 [ 1318.130309][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 1318.134972][ C0] sock_do_ioctl+0x101/0x310 [ 1318.139554][ C0] sock_ioctl+0x4d8/0x6e0 [ 1318.143874][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 1318.148533][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1318.153119][ C0] x64_sys_call+0x58b/0x9a0 [ 1318.157608][ C0] do_syscall_64+0x4c/0xa0 [ 1318.162009][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.167889][ C0] [ 1318.170196][ C0] Last potentially related work creation: [ 1318.175891][ C0] kasan_save_stack+0x3a/0x60 [ 1318.180565][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 1318.186009][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1318.191799][ C0] insert_work+0x51/0x300 [ 1318.196115][ C0] __queue_work+0x9b1/0xd30 [ 1318.200600][ C0] queue_work_on+0xd2/0x140 [ 1318.205086][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 1318.210095][ C0] hci_cmd_sync_status+0x53/0x120 [ 1318.215102][ C0] hci_dev_cmd+0x628/0x720 [ 1318.219499][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 1318.224299][ C0] sock_do_ioctl+0x101/0x310 [ 1318.228872][ C0] sock_ioctl+0x4d8/0x6e0 [ 1318.233186][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 1318.237853][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1318.242421][ C0] x64_sys_call+0x58b/0x9a0 [ 1318.246912][ C0] do_syscall_64+0x4c/0xa0 [ 1318.251313][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.257194][ C0] [ 1318.259498][ C0] Second to last potentially related work creation: [ 1318.266063][ C0] kasan_save_stack+0x3a/0x60 [ 1318.270726][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 1318.276172][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1318.281965][ C0] insert_work+0x51/0x300 [ 1318.286277][ C0] __queue_work+0x9b1/0xd30 [ 1318.290859][ C0] queue_work_on+0xd2/0x140 [ 1318.295362][ C0] hci_cmd_timeout+0x191/0x200 [ 1318.300112][ C0] process_one_work+0x71f/0xc40 [ 1318.304958][ C0] worker_thread+0xa29/0x11f0 [ 1318.309618][ C0] kthread+0x281/0x320 [ 1318.313703][ C0] ret_from_fork+0x1f/0x30 [ 1318.318101][ C0] [ 1318.320403][ C0] The buggy address belongs to the object at ffff88811b830000 [ 1318.320403][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 1318.334446][ C0] The buggy address is located 2560 bytes inside of [ 1318.334446][ C0] 8192-byte region [ffff88811b830000, ffff88811b832000) [ 1318.347879][ C0] [ 1318.350187][ C0] The buggy address belongs to the physical page: [ 1318.356642][ C0] page:ffffea00046e0c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b830 [ 1318.366869][ C0] head:ffffea00046e0c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1318.375186][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 1318.381253][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 1318.389830][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1318.398399][ C0] page dumped because: kasan: bad access detected [ 1318.405388][ C0] page_owner tracks the page as allocated [ 1318.411093][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11967, tgid 11967 (syz-executor), ts 1020278197003, free_ts 1019998331009 [ 1318.434436][ C0] post_alloc_hook+0x1f5/0x210 [ 1318.439265][ C0] prep_new_page+0x1c/0x110 [ 1318.443760][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 1318.449295][ C0] __alloc_pages+0x1c3/0x450 [ 1318.453870][ C0] alloc_slab_page+0x6e/0xf0 [ 1318.458450][ C0] new_slab+0x98/0x3d0 [ 1318.462511][ C0] ___slab_alloc+0x6bd/0xb20 [ 1318.467090][ C0] __slab_alloc+0x5e/0xa0 [ 1318.471408][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 1318.476851][ C0] __kmalloc_node+0xa1/0x1e0 [ 1318.481428][ C0] kvmalloc_node+0x294/0x480 [ 1318.485998][ C0] pfifo_fast_init+0x3af/0x7a0 [ 1318.490746][ C0] qdisc_create_dflt+0x150/0x3b0 [ 1318.495753][ C0] dev_activate+0x2cf/0x1040 [ 1318.500340][ C0] __dev_open+0x3ce/0x4f0 [ 1318.504738][ C0] __dev_change_flags+0x21b/0x6b0 [ 1318.509778][ C0] page last free stack trace: [ 1318.514427][ C0] free_unref_page_prepare+0x742/0x750 [ 1318.519872][ C0] free_unref_page+0x8f/0x530 [ 1318.524547][ C0] __free_pages+0x67/0x100 [ 1318.528949][ C0] __free_slab+0xca/0x1a0 [ 1318.533315][ C0] __unfreeze_partials+0x160/0x190 [ 1318.538412][ C0] put_cpu_partial+0xa9/0x100 [ 1318.543073][ C0] __slab_free+0x1c4/0x280 [ 1318.547479][ C0] ___cache_free+0xbf/0xd0 [ 1318.551879][ C0] qlist_free_all+0xc6/0x140 [ 1318.556447][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 1318.561885][ C0] __kasan_slab_alloc+0x24/0x80 [ 1318.566715][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 1318.571815][ C0] kmem_cache_alloc_lru+0x104/0x280 [ 1318.577079][ C0] sock_alloc_inode+0x28/0xc0 [ 1318.581747][ C0] new_inode_pseudo+0x70/0x1f0 [ 1318.586488][ C0] __sock_create+0x12c/0x7c0 [ 1318.591056][ C0] [ 1318.593361][ C0] Memory state around the buggy address: [ 1318.598969][ C0] ffff88811b830900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1318.607007][ C0] ffff88811b830980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1318.615051][ C0] >ffff88811b830a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1318.623101][ C0] ^ [ 1318.627153][ C0] ffff88811b830a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1318.635207][ C0] ffff88811b830b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1318.643241][ C0] ================================================================== [ 1318.651276][ C0] Disabling lock debugging due to kernel taint [ 1318.657465][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1318.669231][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1318.677634][ C0] CPU: 0 PID: 15546 Comm: syz.2.4168 Tainted: G B syzkaller #0 [ 1318.686554][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1318.696590][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 1318.702393][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 e2 28 00 4c 89 ff e8 00 26 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 5c 6d 00 49 8b 7d 00 e8 e3 21 [ 1318.721977][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 1318.728031][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811d6d6540 [ 1318.735992][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1318.743943][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 1318.751897][ C0] R10: ffffed1023706139 R11: 1ffff11023706139 R12: dffffc0000000000 [ 1318.759853][ C0] R13: 0000000000000000 R14: ffff88811b8309c8 R15: 0000000000000008 [ 1318.767902][ C0] FS: 00007f9f73e146c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1318.776831][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1318.783497][ C0] CR2: 0000200000d62030 CR3: 000000011ce37000 CR4: 00000000003506b0 [ 1318.791551][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1318.799515][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1318.807502][ C0] Call Trace: [ 1318.810769][ C0] [ 1318.813616][ C0] delayed_work_timer_fn+0x61/0x80 [ 1318.818737][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1318.824531][ C0] call_timer_fn+0x46/0x2a0 [ 1318.829051][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1318.834865][ C0] __run_timers+0x672/0x9b0 [ 1318.839380][ C0] ? calc_index+0x200/0x200 [ 1318.843878][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1318.849169][ C0] run_timer_softirq+0x6a/0xf0 [ 1318.854816][ C0] handle_softirqs+0x1d7/0x600 [ 1318.859780][ C0] __irq_exit_rcu+0x52/0xf0 [ 1318.864388][ C0] irq_exit_rcu+0x9/0x10 [ 1318.868842][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1318.874681][ C0] [ 1318.877617][ C0] [ 1318.880625][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1318.886694][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 1318.893908][ C0] Code: 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 48 89 e5 48 8b 45 08 65 48 8b 15 d0 3f 92 7e 65 8b 0d d1 3f 92 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 0b 00 00 [ 1318.913768][ C0] RSP: 0018:ffffc9000dc278b0 EFLAGS: 00000246 [ 1318.920626][ C0] RAX: ffffffff83e0cfa0 RBX: ffffc9000dc27d00 RCX: 0000000080000000 [ 1318.928861][ C0] RDX: ffff88811d6d6540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1318.937050][ C0] RBP: ffffc9000dc278b0 R08: dffffc0000000000 R09: fffff52001b84ecd [ 1318.945114][ C0] R10: fffff52001b84ecd R11: 1ffff92001b84ecc R12: ffffffff85e28d90 [ 1318.953519][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1318.961754][ C0] ? ____sys_recvmsg+0x2b0/0x590 [ 1318.966809][ C0] ____sys_recvmsg+0x2b0/0x590 [ 1318.971615][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1318.976749][ C0] ? import_iovec+0x7c/0xb0 [ 1318.981256][ C0] ___sys_recvmsg+0x1b2/0x510 [ 1318.986584][ C0] ? __sys_recvmsg+0x270/0x270 [ 1318.991527][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 1318.998132][ C0] ? do_recvmmsg+0x3dd/0x7a0 [ 1319.002721][ C0] do_recvmmsg+0x359/0x7a0 [ 1319.007241][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1319.012158][ C0] ? __kasan_check_read+0x11/0x20 [ 1319.017348][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1319.022366][ C0] ? sysvec_reschedule_ipi+0x78/0x80 [ 1319.027746][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1319.033298][ C0] x64_sys_call+0x3e7/0x9a0 [ 1319.038090][ C0] do_syscall_64+0x4c/0xa0 [ 1319.042596][ C0] ? clear_bhb_loop+0x30/0x80 [ 1319.047260][ C0] ? clear_bhb_loop+0x30/0x80 [ 1319.051923][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1319.057900][ C0] RIP: 0033:0x7f9f72f8f749 [ 1319.062481][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.082157][ C0] RSP: 002b:00007f9f73e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1319.092041][ C0] RAX: ffffffffffffffda RBX: 00007f9f731e6090 RCX: 00007f9f72f8f749 [ 1319.100118][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 1319.108267][ C0] RBP: 00007f9f73013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1319.116454][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1319.124441][ C0] R13: 00007f9f731e6128 R14: 00007f9f731e6090 R15: 00007ffdcf9d42b8 [ 1319.132405][ C0] [ 1319.135417][ C0] Modules linked in: [ 1319.139301][ C0] ---[ end trace 0000000000000000 ]--- [ 1319.144823][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 1319.150126][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 e2 28 00 4c 89 ff e8 00 26 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 5c 6d 00 49 8b 7d 00 e8 e3 21 [ 1319.169839][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 1319.176026][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811d6d6540 [ 1319.184104][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1319.193288][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 1319.201347][ C0] R10: ffffed1023706139 R11: 1ffff11023706139 R12: dffffc0000000000 [ 1319.209339][ C0] R13: 0000000000000000 R14: ffff88811b8309c8 R15: 0000000000000008 [ 1319.217301][ C0] FS: 00007f9f73e146c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1319.226240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1319.232809][ C0] CR2: 0000200000d62030 CR3: 000000011ce37000 CR4: 00000000003506b0 [ 1319.240860][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1319.248814][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1319.256858][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1319.264473][ C0] Kernel Offset: disabled [ 1319.269012][ C0] Rebooting in 86400 seconds..