last executing test programs: 35.454440259s ago: executing program 2 (id=5793): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 34.56944654s ago: executing program 2 (id=5798): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00', 0x60}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr={{0x18, 0x29, 0x43, {0x0, 0x0, 0x2}}}], 0x18}, 0x8001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 33.790343563s ago: executing program 4 (id=5801): arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000300850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000001"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x3a107c4, &(0x7f00000000c0)={[{@auto_da_alloc}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xfe, 0x451, &(0x7f0000000d00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r6, &(0x7f0000000400)={0x7}, 0x6000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) 33.71378535s ago: executing program 3 (id=5802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x1008, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 33.638968186s ago: executing program 2 (id=5803): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x15cd3000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) fsync(0xffffffffffffffff) 33.529561597s ago: executing program 4 (id=5805): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@abort}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@lazytime}, {@barrier}, {@usrquota}, {@grpquota}]}, 0x2, 0x55d, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 32.575152045s ago: executing program 0 (id=5808): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001090224000100000000090400000103c59a0009210000000122"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) 32.549767537s ago: executing program 4 (id=5809): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r3) 3.598144037s ago: executing program 3 (id=5814): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, 0x0, 0x8001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 3.578318389s ago: executing program 1 (id=5812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) tkill(0x0, 0x12) timerfd_create(0x0, 0x0) 3.556518661s ago: executing program 0 (id=5811): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 3.436428752s ago: executing program 1 (id=5816): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='sys_enter\x00', r1}, 0x46) r2 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3204000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57f, &(0x7f0000000680)="$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") r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xd0000062) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 3.02578016s ago: executing program 2 (id=5813): epoll_create(0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x641, 0x68d, 0x81a, r4, 0x0, '\x00', r5, r3, 0x5, 0x3, 0x4, 0xc, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.947514337s ago: executing program 1 (id=5817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d7d9045855c9fc5166765cd9bc7dbbe366952014d6b2655b2fa2c14acea656116db3fe83ccb0ca470a079297bb00"/80], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4319566687570059, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30}, {0x16}]}, 0x10) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000400000000000454be75ecd9e7163000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet(r8, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 2.80935297s ago: executing program 4 (id=5815): arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000300850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000001"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x3a107c4, &(0x7f00000000c0)={[{@auto_da_alloc}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xfe, 0x451, &(0x7f0000000d00)="$eJzs281vG0UbAPBn107bt+3bhFI+WloIFETER9KkBXrgAgKJA0hIcCjHkKRVqdugJki0iiAgVI6oEnfEEYm/gBMnBJyQuMIdVaogQmrhgtHau0ns2Gk+nDrUv5+0yYx3vDNPdmc9nskG0LMGsx9JxN6I+CUi+uvZxgKD9V83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtHjfnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6S+f3kcnTKYBf5HtaZ532OdrqzL/qkuxZmUu90a1qoUEdnp6qv1//4oxdLJ64+XP+5q44Atld2zd7bfPV8F7mBJdLsFQHcUH/TZ999iu01Dj23h+gv1L0BZ3Dfzrb6nHGlepm8L6x+MiFPzf3+RbdE0D1FtMW8AALBZ32bjn6dWjv9qayPLyu3L14YGIuKuiNgfEXdHxIGIuCcve19E3L/O+puXhlaOP9NrGwxtTbLx3/P52lbj+K8Y/cVAKc/9vxZ/X3L6bGXqWP43GYq+nVl+tNXBi0O89PNn7epfPv7Ltqz+YiyYH+RauWmCbnJ8drxTg9LrH0UcKreKP1lcCciuhYMRcWh9h95XJM4+8dXhdoVuHf8qOrDOVP0y4vH6+Z+PpvgLyerrkyO7ojJ1bKS4Klb68acrr7erf1Pxd0B2/nc3Xv9NJfr/TJav186sv44rv37a9jtleYPX/47kzdqa9Y78tffHZ2cvjkbsSF6t5RteH1t6b5EvymfxDx1t3f/35+/J4n8gIrKL+EhEPBgRD+Xn7uGIeCQijq4S//cvPvpOu33b4fxPtrz/LV7/A43nf/2J0rnvvmlX/9rufydqqaH8ldr97xbaN2dXXmKjVzMAAAD896QRsTeSdHgxnabDw/X/lz8Qu9PK9Mzsk6en37swWX9GYCD60mKmq3/ZfOhoMp8fsZ4fy+eKi/3H83njz0v/q+WHJ6Yrk12OHXrdnjb9P/NbqdutA7ac57WgdzX3/7RL7QBuP5//0Lv0f+hd+j/0rlb9/8OmvLUAuDP5/Ifepf9D79L/oXfp/9CTNvNc/1Ylyqs8vS+xXRKRbotmSLRIlDvQu7t8YwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQfwMAAP//NI3x9w==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r6, &(0x7f0000000400)={0x7}, 0x6000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) 2.461016372s ago: executing program 3 (id=5818): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000009e62", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x25) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xa68d7c519e8007f9, 0x0, 0x0, 0x1d45}}, 0x50) 2.350021993s ago: executing program 3 (id=5819): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@abort}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@lazytime}, {@barrier}, {@usrquota}, {@grpquota}]}, 0x2, 0x55d, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.281141219s ago: executing program 4 (id=5820): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x25, 0x5, @val=@perf_event={0x4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) 2.166609459s ago: executing program 0 (id=5821): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3204000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57f, &(0x7f0000000680)="$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") inotify_init1(0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 2.147975421s ago: executing program 0 (id=5822): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 2.137429972s ago: executing program 0 (id=5823): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 2.082036107s ago: executing program 0 (id=5824): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x15cd3000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) fsync(0xffffffffffffffff) 1.982531277s ago: executing program 1 (id=5825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r0}, 0x38) 1.700273733s ago: executing program 4 (id=5826): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x1008, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 1.213565708s ago: executing program 3 (id=5827): open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 930.132774ms ago: executing program 1 (id=5828): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00', 0x60}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr={{0x18, 0x29, 0x43, {0x0, 0x0, 0x2}}}], 0x18}, 0x8001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 764.890279ms ago: executing program 2 (id=5829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000009e62", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x25) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xa68d7c519e8007f9, 0x0, 0x0, 0x1d45}}, 0x50) 717.481854ms ago: executing program 2 (id=5830): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, 0x0, 0x8001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 155.504106ms ago: executing program 3 (id=5831): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 0s ago: executing program 1 (id=5832): arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000300850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000001"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x3a107c4, &(0x7f00000000c0)={[{@auto_da_alloc}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xfe, 0x451, &(0x7f0000000d00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r6, &(0x7f0000000400)={0x7}, 0x6000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) kernel console output (not intermixed with test programs): 94414][T23915] bridge0: port 2(bridge_slave_1) entered blocking state [ 2422.601270][T23915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2422.642325][T23901] device veth0_vlan entered promiscuous mode [ 2422.660313][T23901] device veth1_macvtap entered promiscuous mode [ 2422.688736][T23940] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038 (0x7fffffff) [ 2422.704793][ T30] audit: type=1326 audit(2000000039.420:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23917 comm="syz.0.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f60f2048ff9 code=0x7ffc0000 [ 2422.714204][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2422.735677][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2422.762588][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2422.770577][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2422.778975][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2422.801403][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2422.809675][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2422.817961][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2422.825676][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2422.833236][ T30] audit: type=1326 audit(2000000039.420:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23917 comm="syz.0.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f2048ff9 code=0x7ffc0000 [ 2422.891024][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2422.921103][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2422.922043][ T30] audit: type=1326 audit(2000000039.420:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23917 comm="syz.0.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f60f2048ff9 code=0x7ffc0000 [ 2422.951476][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2422.989407][T23961] syz.1.5447[23961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2422.989853][T23961] syz.1.5447[23961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2423.036242][T23961] input: syz0 as /devices/virtual/input/input60 [ 2423.211030][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2423.219253][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2423.227531][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2423.235744][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2423.240396][T22275] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2423.265263][T23915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2423.307965][T23915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2423.340342][T23963] loop4: detected capacity change from 0 to 512 [ 2423.437863][T23963] EXT4-fs (loop4): Mount option "data_err=ignore" incompatible with ext2 [ 2423.608083][T22275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2423.645205][T22275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2423.668822][T23971] loop4: detected capacity change from 0 to 128 [ 2423.835254][T22275] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2424.802172][T22275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.832364][T22275] usb 1-1: config 0 descriptor?? [ 2424.839983][ T364] device bridge_slave_1 left promiscuous mode [ 2424.845922][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2424.899396][ T364] device bridge_slave_0 left promiscuous mode [ 2424.922543][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2424.953159][ T364] device veth1_macvtap left promiscuous mode [ 2424.964326][T23984] loop4: detected capacity change from 0 to 1024 [ 2424.973917][ T364] device veth0_vlan left promiscuous mode [ 2425.038826][T23984] EXT4-fs (loop4): Ignoring removed orlov option [ 2425.046200][T23984] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2425.367195][T23984] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2425.429955][T23982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5457'. [ 2425.440775][T23986] device vlan2 entered promiscuous mode [ 2425.446168][T23986] device dummy0 entered promiscuous mode [ 2425.452443][T23986] device dummy0 left promiscuous mode [ 2425.595759][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5460'. [ 2425.728799][T23996] hub 6-0:1.0: USB hub found [ 2425.733425][T23996] hub 6-0:1.0: 1 port detected [ 2425.899418][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2425.899434][ T30] audit: type=1326 audit(2000000044.640:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2425.930520][ T30] audit: type=1326 audit(2000000044.640:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2425.954552][ T30] audit: type=1326 audit(2000000044.640:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2425.978390][ T30] audit: type=1326 audit(2000000044.640:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.010289][ T30] audit: type=1326 audit(2000000044.640:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.035225][T24005] input: syz0 as /devices/virtual/input/input61 [ 2426.041999][ T30] audit: type=1326 audit(2000000044.640:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.066997][ T30] audit: type=1326 audit(2000000044.640:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.090540][ T30] audit: type=1326 audit(2000000044.640:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.114093][ T30] audit: type=1326 audit(2000000044.640:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.137935][ T30] audit: type=1326 audit(2000000044.640:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.3.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2426.412477][T24013] loop2: detected capacity change from 0 to 128 [ 2427.554660][T24022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5470'. [ 2427.612302][T22275] usbhid 1-1:0.0: can't add hid device: -71 [ 2427.620349][T22275] usbhid: probe of 1-1:0.0 failed with error -71 [ 2427.638686][T22275] usb 1-1: USB disconnect, device number 127 [ 2427.860877][T24031] device vlan0 entered promiscuous mode [ 2427.866344][T24031] device dummy0 entered promiscuous mode [ 2427.872832][T24031] device dummy0 left promiscuous mode [ 2428.175647][T24033] syz.0.5471[24033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2428.175824][T24033] syz.0.5471[24033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2428.190068][T24033] input: syz0 as /devices/virtual/input/input62 [ 2429.441202][T24045] loop3: detected capacity change from 0 to 1024 [ 2429.489817][T24045] EXT4-fs (loop3): Ignoring removed orlov option [ 2429.508436][T24045] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2429.576346][T24045] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2429.795911][T24058] loop1: detected capacity change from 0 to 128 [ 2429.887822][T23915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2430.727885][T17583] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2430.891751][T24073] loop1: detected capacity change from 0 to 512 [ 2431.077638][T23915] usb 1-1: Using ep0 maxpacket: 16 [ 2431.516059][T24073] EXT4-fs (loop1): 1 orphan inode deleted [ 2431.525050][T24073] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2431.545929][T24073] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038 (0x7fffffff) [ 2431.547976][T17583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2431.566566][T17583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2431.576276][T17583] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2431.577897][T23915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2431.596191][T23915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2431.605942][T23915] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2431.615035][T23915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.627484][T23915] usb 1-1: config 0 descriptor?? [ 2431.647929][T17583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.657176][T17583] usb 4-1: config 0 descriptor?? [ 2431.772265][T24086] syz.1.5483[24086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2431.772365][T24086] syz.1.5483[24086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2431.899630][T24086] input: syz0 as /devices/virtual/input/input63 [ 2432.147373][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'. [ 2432.217845][T23915] usbhid 1-1:0.0: can't add hid device: -71 [ 2432.223640][T23915] usbhid: probe of 1-1:0.0 failed with error -71 [ 2432.234037][T23915] usb 1-1: USB disconnect, device number 2 [ 2432.897872][T24098] hub 6-0:1.0: USB hub found [ 2432.902490][T24098] hub 6-0:1.0: 1 port detected [ 2433.141467][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2433.141485][ T30] audit: type=1326 audit(2000000051.880:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.171652][ T30] audit: type=1326 audit(2000000051.880:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.208668][ T30] audit: type=1326 audit(2000000051.880:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.243262][ T30] audit: type=1326 audit(2000000051.880:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.273654][T24109] loop1: detected capacity change from 0 to 128 [ 2433.280081][ T30] audit: type=1326 audit(2000000051.880:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.323493][ T30] audit: type=1326 audit(2000000051.880:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.347495][ T30] audit: type=1326 audit(2000000051.880:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 2433.371464][ T30] audit: type=1326 audit(2000000051.880:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2433.431401][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'. [ 2434.027818][T17583] usbhid 4-1:0.0: can't add hid device: -71 [ 2434.077239][ T30] audit: type=1326 audit(2000000052.810:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24122 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2434.109374][T17583] usbhid: probe of 4-1:0.0 failed with error -71 [ 2434.116946][T17583] usb 4-1: USB disconnect, device number 92 [ 2435.531515][ T30] audit: type=1326 audit(2000000052.850:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24122 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2435.638699][T24131] loop1: detected capacity change from 0 to 512 [ 2435.652765][T24133] loop2: detected capacity change from 0 to 1024 [ 2435.763769][T24133] EXT4-fs (loop2): Ignoring removed orlov option [ 2435.780118][T24133] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2435.989034][T24133] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2436.015781][T24131] EXT4-fs (loop1): 1 orphan inode deleted [ 2436.029996][T24131] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2436.050939][T24131] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038 (0x7fffffff) [ 2436.238187][T24150] syz.1.5498[24150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.238773][T24150] syz.1.5498[24150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.268943][T24150] input: syz0 as /devices/virtual/input/input64 [ 2436.289292][T17583] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2436.587761][T17583] usb 4-1: Using ep0 maxpacket: 16 [ 2436.756843][T24160] device vlan2 entered promiscuous mode [ 2436.762271][T24160] device bridge0 entered promiscuous mode [ 2436.770850][T24160] bridge0: port 3(vlan2) entered blocking state [ 2436.776942][T24160] bridge0: port 3(vlan2) entered disabled state [ 2436.791551][T24160] device bridge0 left promiscuous mode [ 2436.997914][T17583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2437.018063][T17583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2437.049545][T17583] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2437.066873][T17583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.080552][T17583] usb 4-1: config 0 descriptor?? [ 2437.088341][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'. [ 2437.224312][T24171] loop4: detected capacity change from 0 to 128 [ 2438.287497][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2438.287547][ T30] audit: type=1326 audit(2000000057.020:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.320441][ T30] audit: type=1326 audit(2000000057.020:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.346851][ T30] audit: type=1326 audit(2000000057.030:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.389817][ T30] audit: type=1326 audit(2000000057.030:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.659789][T24196] loop2: detected capacity change from 0 to 512 [ 2438.670906][ T30] audit: type=1326 audit(2000000057.030:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.699001][T24196] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2 [ 2438.724528][ T30] audit: type=1326 audit(2000000057.030:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.748529][ T30] audit: type=1326 audit(2000000057.030:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 2438.772375][T17583] usbhid 4-1:0.0: can't add hid device: -71 [ 2438.780419][T17583] usbhid: probe of 4-1:0.0 failed with error -71 [ 2438.786658][ T30] audit: type=1326 audit(2000000057.030:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24185 comm="syz.1.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8978ff9 code=0x7ffc0000 [ 2438.824224][T17583] usb 4-1: USB disconnect, device number 93 [ 2438.968237][T24206] device vlan2 entered promiscuous mode [ 2438.973730][T24206] device bridge0 entered promiscuous mode [ 2438.982022][T24206] bridge0: port 3(vlan2) entered blocking state [ 2438.988187][T24206] bridge0: port 3(vlan2) entered disabled state [ 2439.227441][T24206] device bridge0 left promiscuous mode [ 2439.274294][T24209] loop2: detected capacity change from 0 to 128 [ 2439.303522][ T30] audit: type=1326 audit(2000000058.040:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2439.320577][T24211] loop1: detected capacity change from 0 to 512 [ 2439.329075][ T30] audit: type=1326 audit(2000000058.060:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2439.379695][T24211] EXT4-fs (loop1): 1 orphan inode deleted [ 2439.388417][T24211] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2439.491772][T24211] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038 (0x7fffffff) [ 2440.597939][T24239] syz.1.5524[24239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2440.600030][T24239] syz.1.5524[24239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2440.684708][T24239] input: syz0 as /devices/virtual/input/input65 [ 2441.044040][T24251] loop2: detected capacity change from 0 to 128 [ 2443.493093][T23918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2443.592717][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2443.592734][ T30] audit: type=1326 audit(2000000062.330:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.628147][ T30] audit: type=1326 audit(2000000062.330:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.652475][ T30] audit: type=1326 audit(2000000062.330:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.676231][ T30] audit: type=1326 audit(2000000062.330:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.708710][ T30] audit: type=1326 audit(2000000062.330:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.720636][T24294] loop3: detected capacity change from 0 to 1024 [ 2443.738761][ T30] audit: type=1326 audit(2000000062.330:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.800791][T24299] loop2: detected capacity change from 0 to 128 [ 2443.811008][T24294] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2443.837829][ T30] audit: type=1326 audit(2000000062.330:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.862691][ T30] audit: type=1326 audit(2000000062.330:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.867869][T23918] usb 1-1: device descriptor read/64, error -71 [ 2443.886044][ T30] audit: type=1326 audit(2000000062.330:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2443.915453][ T30] audit: type=1326 audit(2000000062.330:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24284 comm="syz.3.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2444.014523][T24301] syz.3.5552[24301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2444.014614][T24301] syz.3.5552[24301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2444.047158][T24301] fuse: Bad value for 'group_id' [ 2444.787039][T24316] loop4: detected capacity change from 0 to 512 [ 2444.829388][T24316] EXT4-fs (loop4): Mount option "data_err=ignore" incompatible with ext2 [ 2445.768180][T24353] loop2: detected capacity change from 0 to 1024 [ 2446.067516][T24353] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2446.165356][T22273] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2446.232457][T24360] syz.2.5572[24360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2446.232940][T24360] syz.2.5572[24360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2446.303499][T24360] fuse: Bad value for 'group_id' [ 2446.717889][T22273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2446.728661][T22273] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2446.741555][T22273] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2446.750584][T22273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2446.757437][ T314] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2446.763988][T22273] usb 2-1: config 0 descriptor?? [ 2446.810061][T22273] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2447.134797][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5568'. [ 2447.188253][T22275] usb 2-1: USB disconnect, device number 123 [ 2447.277789][ T314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.291942][ T314] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2447.309055][ T314] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2447.318675][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.327369][ T314] usb 5-1: config 0 descriptor?? [ 2447.595440][T24364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'. [ 2447.628944][T24393] loop2: detected capacity change from 0 to 512 [ 2447.651843][T24393] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2 [ 2448.124594][T22273] usb 5-1: USB disconnect, device number 88 [ 2448.172044][T24411] loop2: detected capacity change from 0 to 1024 [ 2448.650230][T24411] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2448.835701][T24427] syz.2.5591[24427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2448.835758][T24427] syz.2.5591[24427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2449.462178][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2449.462194][ T30] audit: type=1326 audit(2000000068.200:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.552195][ T30] audit: type=1326 audit(2000000068.280:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.577331][ T30] audit: type=1326 audit(2000000068.280:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.601142][ T30] audit: type=1326 audit(2000000068.280:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.624565][T22273] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2449.624955][ T30] audit: type=1326 audit(2000000068.280:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.668500][ T30] audit: type=1326 audit(2000000068.280:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.692251][ T30] audit: type=1326 audit(2000000068.280:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.716046][ T30] audit: type=1326 audit(2000000068.280:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.739433][ T30] audit: type=1326 audit(2000000068.280:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.763261][ T30] audit: type=1326 audit(2000000068.280:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2449.808386][T24455] loop4: detected capacity change from 0 to 512 [ 2449.837757][T22275] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2449.849587][T24455] EXT4-fs (loop4): Mount option "data_err=ignore" incompatible with ext2 [ 2449.941180][T24459] loop3: detected capacity change from 0 to 1024 [ 2449.997838][T22273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.012483][T22273] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2450.031080][T24459] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2450.034171][T22273] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2450.071391][T22273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.251685][T24466] syz.3.5607[24466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2450.252160][T24466] syz.3.5607[24466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2450.358423][T22275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.386546][T22275] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2450.395715][T22275] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2450.399567][T22273] usb 3-1: config 0 descriptor?? [ 2450.404681][T22275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.418742][T22275] usb 1-1: config 0 descriptor?? [ 2450.458481][T22273] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2450.673215][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'. [ 2450.684902][T22273] usb 3-1: USB disconnect, device number 123 [ 2450.693867][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 2451.250974][T22273] usb 1-1: USB disconnect, device number 4 [ 2451.758917][T24499] loop1: detected capacity change from 0 to 512 [ 2451.809353][T24499] EXT4-fs (loop1): Mount option "data_err=ignore" incompatible with ext2 [ 2451.827587][T24507] loop4: detected capacity change from 0 to 1024 [ 2451.906844][T24507] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2452.685227][T24515] syz.4.5623[24515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2452.685317][T24515] syz.4.5623[24515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2453.024504][T24541] loop3: detected capacity change from 0 to 512 [ 2453.038299][T22273] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2453.057832][ T1625] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2453.069637][T24541] EXT4-fs (loop3): Mount option "data_err=ignore" incompatible with ext2 [ 2453.607851][ T1625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2453.617853][T22273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2453.627799][ T1625] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2453.636650][T22273] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2453.649338][ T1625] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2453.658202][T22273] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2453.667003][ T1625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.674858][T22273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.683592][ T1625] usb 2-1: config 0 descriptor?? [ 2453.690720][T22273] usb 3-1: config 0 descriptor?? [ 2453.741061][T22273] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2453.956514][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5631'. [ 2454.208499][T24526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5629'. [ 2454.223935][T23918] usb 3-1: USB disconnect, device number 124 [ 2454.305142][T24564] loop3: detected capacity change from 0 to 1024 [ 2454.349778][T24564] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2454.482691][T24568] syz.3.5643[24568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2454.482800][T24568] syz.3.5643[24568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2454.619902][T22273] usb 2-1: USB disconnect, device number 124 [ 2454.810857][T24582] loop2: detected capacity change from 0 to 512 [ 2454.893123][T24582] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2 [ 2455.731814][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2455.731856][ T30] audit: type=1326 audit(2000000074.470:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2455.825464][ T30] audit: type=1326 audit(2000000074.510:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2455.897556][ T30] audit: type=1326 audit(2000000074.510:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2455.921222][ T30] audit: type=1326 audit(2000000074.510:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2455.944613][ T30] audit: type=1326 audit(2000000074.510:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2455.976115][ T30] audit: type=1326 audit(2000000074.510:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2456.063524][ T30] audit: type=1326 audit(2000000074.510:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2456.086933][ T30] audit: type=1326 audit(2000000074.510:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2456.117776][ T30] audit: type=1326 audit(2000000074.510:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2456.151702][ T30] audit: type=1326 audit(2000000074.510:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24598 comm="syz.3.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb7f9239ff9 code=0x7ffc0000 [ 2456.287750][ T1625] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2456.297682][T24617] syz.0.5662[24617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.298197][T24617] syz.0.5662[24617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.327970][ T1332] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2456.337767][T23918] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2456.657862][ T1625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.667845][ T1625] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2456.680507][ T1625] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2456.689465][ T1625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.697839][ T1332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.708014][ T1625] usb 4-1: config 0 descriptor?? [ 2456.712833][ T1332] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2456.725609][ T1332] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2456.734479][ T1332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.743303][ T1332] usb 2-1: config 0 descriptor?? [ 2456.747925][T23918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2456.758452][ T1625] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2456.760811][T23918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2456.775551][T23918] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2456.784354][T23918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.788424][ T1332] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2456.793765][T23918] usb 3-1: config 0 descriptor?? [ 2456.961705][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 2456.991105][T24611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5660'. [ 2457.000529][ T1332] usb 2-1: USB disconnect, device number 125 [ 2457.479383][T24608] hub 6-0:1.0: USB hub found [ 2457.483968][T24608] hub 6-0:1.0: 1 port detected [ 2457.491142][ T1332] usb 4-1: USB disconnect, device number 94 [ 2457.547909][T23918] usbhid 3-1:0.0: can't add hid device: -71 [ 2457.563058][T23918] usbhid: probe of 3-1:0.0 failed with error -71 [ 2457.598896][T23918] usb 3-1: USB disconnect, device number 125 [ 2459.231536][T24652] loop1: detected capacity change from 0 to 1024 [ 2459.380402][T24652] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2461.806529][T24676] syz.1.5675[24676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2461.806593][T24676] syz.1.5675[24676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2461.817923][T12328] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2461.889589][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2461.889608][ T30] audit: type=1326 audit(2000000080.630:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2461.919193][ T30] audit: type=1326 audit(2000000080.630:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2461.944938][ T30] audit: type=1326 audit(2000000080.630:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2461.969187][ T30] audit: type=1326 audit(2000000080.630:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2461.993143][ T30] audit: type=1326 audit(2000000080.630:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2462.016625][ T30] audit: type=1326 audit(2000000080.630:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2462.042623][ T30] audit: type=1326 audit(2000000080.630:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2462.066827][ T30] audit: type=1326 audit(2000000080.630:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2462.090729][ T30] audit: type=1326 audit(2000000080.630:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2462.099284][T24682] loop2: detected capacity change from 0 to 1024 [ 2462.114213][ T30] audit: type=1326 audit(2000000080.630:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.2.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3608a94ff9 code=0x7ffc0000 [ 2462.120222][ T1332] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2462.143485][T23918] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2462.223892][T24682] EXT4-fs (loop2): Ignoring removed orlov option [ 2462.231243][T24682] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2462.249618][T24682] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2462.418197][T24693] device vlan2 entered promiscuous mode [ 2462.423600][T24693] device bridge0 entered promiscuous mode [ 2462.577673][T24693] bridge0: port 3(vlan2) entered blocking state [ 2462.594671][T24693] bridge0: port 3(vlan2) entered disabled state [ 2462.679643][T24693] device bridge0 left promiscuous mode [ 2462.690376][T12328] usb 5-1: unable to read config index 0 descriptor/all [ 2462.697413][T12328] usb 5-1: can't read configurations, error -71 [ 2462.807869][ T1332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2462.818169][ T1332] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2462.831481][ T1332] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2462.840419][ T1332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.852558][ T1332] usb 1-1: config 0 descriptor?? [ 2462.858064][T23918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2462.876336][T23918] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2462.901816][ T1332] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2462.918637][T23918] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2462.946648][T23918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.972557][T23918] usb 4-1: config 0 descriptor?? [ 2463.030199][T23918] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2463.164035][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5681'. [ 2463.254085][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5682'. [ 2463.263860][T23918] usb 4-1: USB disconnect, device number 95 [ 2463.772490][ T1332] usb 1-1: USB disconnect, device number 5 [ 2463.947838][T24724] loop3: detected capacity change from 0 to 1024 [ 2464.306765][T24724] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2464.574220][T24730] syz.3.5697[24730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2464.574313][T24730] syz.3.5697[24730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2464.585859][T12328] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2464.608879][T24730] fuse: Unknown parameter 'grou00000000000000000000' [ 2464.752122][T12507] Bluetooth: hci0: Frame reassembly failed (-84) [ 2464.998044][T12328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2465.009247][T12328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2465.019141][T12328] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2465.028489][T12328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.040855][T12328] usb 2-1: config 0 descriptor?? [ 2465.207796][T12500] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2465.576019][T12500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2465.586748][T12500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2465.596388][T12500] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2465.605244][T12500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.613939][T12500] usb 1-1: config 0 descriptor?? [ 2465.857790][T23918] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2466.128064][T12500] hid (null): bogus close delimiter [ 2466.217847][T23918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.227995][T23918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2466.240713][T23918] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2466.249522][T23918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.258019][T23918] usb 5-1: config 0 descriptor?? [ 2466.297834][T22275] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2466.305805][T23918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2466.347932][T12500] usb 1-1: language id specifier not provided by device, defaulting to English [ 2466.501105][T24748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 2466.510601][ T1332] usb 5-1: USB disconnect, device number 91 [ 2466.667848][T22275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2466.678568][T22275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2466.688103][T22275] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2466.697006][T22275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.705827][T22275] usb 4-1: config 0 descriptor?? [ 2466.867828][T23918] Bluetooth: hci0: command 0x1003 tx timeout [ 2466.887959][T12633] Bluetooth: hci0: sending frame failed (-49) [ 2466.907875][T12328] usbhid 2-1:0.0: can't add hid device: -71 [ 2466.913678][T12328] usbhid: probe of 2-1:0.0 failed with error -71 [ 2468.009133][T12328] usb 2-1: USB disconnect, device number 126 [ 2468.937767][T24699] Bluetooth: hci0: command 0x1001 tx timeout [ 2468.943636][T12633] Bluetooth: hci0: sending frame failed (-49) [ 2469.607852][T12500] uclogic 0003:256C:006D.006F: failed retrieving string descriptor #200: -71 [ 2469.622724][T12500] uclogic 0003:256C:006D.006F: failed retrieving pen parameters: -71 [ 2469.632634][T24763] loop4: detected capacity change from 0 to 512 [ 2469.646165][T12500] uclogic 0003:256C:006D.006F: failed probing pen v2 parameters: -71 [ 2469.654493][T12500] uclogic 0003:256C:006D.006F: failed probing parameters: -71 [ 2469.661872][T12500] uclogic: probe of 0003:256C:006D.006F failed with error -71 [ 2469.675989][T12500] usb 1-1: USB disconnect, device number 6 [ 2469.690488][T24763] EXT4-fs (loop4): 1 orphan inode deleted [ 2469.697180][T24763] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2469.718013][T24763] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 2470.019768][T24776] syz.4.5710[24776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2470.019863][T24776] syz.4.5710[24776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2470.032532][T24776] input: syz0 as /devices/virtual/input/input66 [ 2471.042947][T12500] Bluetooth: hci0: command 0x1009 tx timeout [ 2471.197852][T22275] usbhid 4-1:0.0: can't add hid device: -71 [ 2471.203826][T22275] usbhid: probe of 4-1:0.0 failed with error -71 [ 2471.221122][T22275] usb 4-1: USB disconnect, device number 96 [ 2471.417830][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2471.418000][ T30] audit: type=1326 audit(2000000090.150:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.481203][ T30] audit: type=1326 audit(2000000090.210:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.504546][ T30] audit: type=1326 audit(2000000090.210:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.537909][ T30] audit: type=1326 audit(2000000090.220:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.561423][ T30] audit: type=1326 audit(2000000090.220:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.585111][ T30] audit: type=1326 audit(2000000090.220:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.609263][ T30] audit: type=1326 audit(2000000090.220:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.632806][ T30] audit: type=1326 audit(2000000090.220:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.666996][ T30] audit: type=1326 audit(2000000090.220:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.700294][ T30] audit: type=1326 audit(2000000090.220:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.4.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb590250ff9 code=0x7ffc0000 [ 2471.998009][T22275] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2472.027793][ T1625] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2472.184754][T24808] syz.0.5724[24808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2472.185128][T24808] syz.0.5724[24808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2472.226038][T24808] input: syz0 as /devices/virtual/input/input67 [ 2472.427791][T12500] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2472.477845][T22275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2472.488577][T22275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2472.498080][T22275] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2472.506946][T22275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.515866][T22275] usb 5-1: config 0 descriptor?? [ 2472.597825][ T1625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2472.607864][ T1625] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2472.620615][ T1625] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2472.629408][ T1625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.638274][ T1625] usb 2-1: config 0 descriptor?? [ 2472.678428][ T1625] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2472.787834][T12500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2472.798582][T12500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2472.808275][T12500] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2472.817093][T12500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.826056][T12500] usb 4-1: config 0 descriptor?? [ 2472.880205][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5721'. [ 2472.889604][ T1625] usb 2-1: USB disconnect, device number 127 [ 2473.367998][T12500] hid (null): bogus close delimiter [ 2473.468545][T24816] loop1: detected capacity change from 0 to 512 [ 2473.560319][T24816] EXT4-fs (loop1): 1 orphan inode deleted [ 2473.565885][T24816] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2473.586671][T12500] usb 4-1: language id specifier not provided by device, defaulting to English [ 2473.586757][T24816] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038 (0x7fffffff) [ 2473.760447][T24821] syz.1.5726[24821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2473.760544][T24821] syz.1.5726[24821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2473.773592][T24821] input: syz0 as /devices/virtual/input/input68 [ 2474.036082][T24827] device vlan2 entered promiscuous mode [ 2474.041910][T24827] device veth0 entered promiscuous mode [ 2474.048199][T24827] device veth0 left promiscuous mode [ 2474.068689][T24829] loop1: detected capacity change from 0 to 512 [ 2476.037796][T22275] usbhid 5-1:0.0: can't add hid device: -71 [ 2476.048087][T22275] usbhid: probe of 5-1:0.0 failed with error -71 [ 2476.055161][T22275] usb 5-1: USB disconnect, device number 92 [ 2479.037788][T12500] uclogic 0003:256C:006D.0070: failed retrieving string descriptor #200: -110 [ 2479.046507][T12500] uclogic 0003:256C:006D.0070: failed retrieving pen parameters: -110 [ 2480.017759][T12500] uclogic 0003:256C:006D.0070: failed probing pen v2 parameters: -110 [ 2480.025794][T12500] uclogic 0003:256C:006D.0070: failed probing parameters: -110 [ 2482.047752][T12500] uclogic: probe of 0003:256C:006D.0070 failed with error -110 [ 2508.046304][T12500] usb 4-1: USB disconnect, device number 97 [ 2508.107800][T24829] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 2508.349174][T24843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.356011][T24843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.363222][T24843] device bridge_slave_0 entered promiscuous mode [ 2508.370899][T24843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.377749][T24843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.385007][T24843] device bridge_slave_1 entered promiscuous mode [ 2508.527094][T24852] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.534003][T24852] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.541319][T24852] device bridge_slave_0 entered promiscuous mode [ 2508.553505][T24852] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.560366][T24852] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.567626][T24852] device bridge_slave_1 entered promiscuous mode [ 2508.587563][T24847] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.594427][T24847] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.601643][T24847] device bridge_slave_0 entered promiscuous mode [ 2508.609870][T24847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.616709][T24847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.624230][T24847] device bridge_slave_1 entered promiscuous mode [ 2508.683246][T24849] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.690252][T24849] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.697775][T24849] device bridge_slave_0 entered promiscuous mode [ 2508.704535][T24849] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.711490][T24849] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.718645][T24849] device bridge_slave_1 entered promiscuous mode [ 2508.732497][T24843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.739347][T24843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2508.746455][T24843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.753239][T24843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2508.842640][T24853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.849518][T24853] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.856762][T24853] device bridge_slave_0 entered promiscuous mode [ 2508.884515][ T364] device bridge_slave_1 left promiscuous mode [ 2508.890498][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.897895][ T364] device bridge_slave_0 left promiscuous mode [ 2508.903813][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.911600][ T364] device veth1_macvtap left promiscuous mode [ 2508.917408][ T364] device veth0_vlan left promiscuous mode [ 2509.011264][T24853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.018158][T24853] bridge0: port 2(bridge_slave_1) entered disabled state [ 2509.026602][T24853] device bridge_slave_1 entered promiscuous mode [ 2509.099322][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2509.106874][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2509.114723][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2509.142222][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2509.150265][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.157180][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2509.164646][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2509.172639][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.179480][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2509.211910][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2509.220216][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2509.228061][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2509.235864][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2509.305827][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2509.313312][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2509.340909][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2509.349155][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2509.357061][T22275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.363907][T22275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2509.371083][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2509.379199][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2509.387113][T22275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.393964][T22275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2509.401143][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2509.408421][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2509.415593][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2509.423660][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2509.431604][T22275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.438429][T22275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2509.445600][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2509.453701][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2509.461638][T22275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.468465][T22275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2509.475635][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2509.483774][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2509.491987][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2509.499492][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2509.516848][T24843] device veth0_vlan entered promiscuous mode [ 2509.542598][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2509.550942][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2509.561277][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2509.569112][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2509.576793][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2509.584630][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2509.592377][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2509.600430][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2509.608499][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2509.615691][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2509.623619][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2509.631029][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2509.647874][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2509.655897][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2509.663747][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2509.671606][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2509.684228][T24847] device veth0_vlan entered promiscuous mode [ 2509.699845][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2509.707968][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2509.716080][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2509.724130][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.730965][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2509.738575][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2509.745896][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2509.753202][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2509.773071][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2509.781118][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2509.789393][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2509.797789][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2509.805874][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2509.813909][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.820741][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2509.829873][T24847] device veth1_macvtap entered promiscuous mode [ 2509.839617][T24843] device veth1_macvtap entered promiscuous mode [ 2509.873572][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2509.881302][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2509.889522][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2509.897624][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2509.905719][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2509.918518][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2509.926592][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2509.936603][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2509.944662][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2509.960500][T24852] device veth0_vlan entered promiscuous mode [ 2509.970625][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2509.978871][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2509.986613][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2509.994509][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2510.002240][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2510.010185][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2510.017971][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2510.025961][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2510.034045][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2510.041353][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2510.057488][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2510.064854][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2510.072070][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2510.080971][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2510.088983][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2510.095815][T12328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2510.103365][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2510.111578][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2510.119572][T12328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2510.126392][T12328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2510.134177][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2510.157863][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2510.167070][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2510.175013][T22275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2510.192337][T24852] device veth1_macvtap entered promiscuous mode [ 2510.204832][T24849] device veth0_vlan entered promiscuous mode [ 2510.224190][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2510.240534][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2510.266383][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2510.276374][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2510.290475][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2510.298903][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2510.335366][T24849] device veth1_macvtap entered promiscuous mode [ 2510.342804][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2510.342821][ T30] audit: type=1326 audit(2000000129.050:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.379893][ T30] audit: type=1326 audit(2000000129.050:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.381100][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2510.403385][ T30] audit: type=1326 audit(2000000129.050:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.478533][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2510.517213][T24873] loop2: detected capacity change from 0 to 1024 [ 2510.524211][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2510.564757][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2510.574139][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2510.583634][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2510.591755][ T30] audit: type=1326 audit(2000000129.050:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.616989][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2510.626778][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2510.636012][T24699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2510.644130][ T30] audit: type=1326 audit(2000000129.050:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.683849][T24873] EXT4-fs (loop2): Ignoring removed orlov option [ 2510.690791][ T30] audit: type=1326 audit(2000000129.050:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.711814][T24873] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2510.720424][ T30] audit: type=1326 audit(2000000129.050:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.732363][T24874] device vlan2 entered promiscuous mode [ 2510.747404][ T30] audit: type=1326 audit(2000000129.050:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.752724][T24874] device bridge0 entered promiscuous mode [ 2510.776213][ T30] audit: type=1326 audit(2000000129.050:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.783993][T24874] bridge0: port 3(vlan2) entered blocking state [ 2510.810910][T24874] bridge0: port 3(vlan2) entered disabled state [ 2510.817887][T24874] device bridge0 left promiscuous mode [ 2510.828898][ T30] audit: type=1326 audit(2000000129.050:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24869 comm="syz.2.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2510.853776][T24873] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2510.876156][T22273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2510.895294][T22273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2510.914072][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2510.922109][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2510.932440][T24853] device veth0_vlan entered promiscuous mode [ 2510.955050][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2510.962954][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2511.153859][T24853] device veth1_macvtap entered promiscuous mode [ 2511.350208][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2511.376493][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2511.384923][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2511.404515][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2511.412594][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2511.420808][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2511.428928][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2511.742907][T12328] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2511.939825][T24900] loop2: detected capacity change from 0 to 512 [ 2511.974512][T24902] loop4: detected capacity change from 0 to 512 [ 2512.030372][T24902] EXT4-fs (loop4): 1 orphan inode deleted [ 2512.036070][T24902] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2512.060447][ T364] device bridge_slave_1 left promiscuous mode [ 2512.061932][T24902] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 2512.082716][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.090354][ T364] device bridge_slave_0 left promiscuous mode [ 2512.096360][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2512.104756][ T364] device bridge_slave_1 left promiscuous mode [ 2512.110970][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.118709][ T364] device bridge_slave_0 left promiscuous mode [ 2512.124699][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2512.708938][T24911] syz.4.5740[24911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2512.709119][T24911] syz.4.5740[24911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2513.100153][T24910] input: syz0 as /devices/virtual/input/input69 [ 2513.165965][ T364] device bridge_slave_1 left promiscuous mode [ 2513.172263][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.180201][ T364] device bridge_slave_0 left promiscuous mode [ 2513.186252][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.198501][T24900] EXT4-fs (loop2): 1 orphan inode deleted [ 2513.211689][ T364] device bridge_slave_1 left promiscuous mode [ 2513.225186][T24900] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2513.247141][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.249003][T24900] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 2513.272927][ T364] device bridge_slave_0 left promiscuous mode [ 2513.278995][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.288663][ T364] device veth1_macvtap left promiscuous mode [ 2513.294819][ T364] device veth1_macvtap left promiscuous mode [ 2513.300968][ T364] device veth1_macvtap left promiscuous mode [ 2513.306856][ T364] device veth0_vlan left promiscuous mode [ 2513.312594][T12328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2513.328509][T12328] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2513.357843][ T364] device veth1_macvtap left promiscuous mode [ 2513.366173][ T364] device veth0_vlan left promiscuous mode [ 2513.412053][T12328] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2513.421497][T12328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.432508][T12328] usb 2-1: config 0 descriptor?? [ 2513.515779][T24923] syz.2.5739[24923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2513.516203][T24923] syz.2.5739[24923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2513.552910][T24923] input: syz0 as /devices/virtual/input/input70 [ 2513.723972][T12328] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2513.731534][T22275] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2513.887771][T17583] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2514.118020][T22275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.137985][T22275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.148342][T22275] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2514.157371][T22275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.223581][T22275] usb 1-1: config 0 descriptor?? [ 2514.248133][T17583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.263500][T17583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.277576][T24929] device vlan2 entered promiscuous mode [ 2514.283025][T24929] device veth0 entered promiscuous mode [ 2514.283110][T17583] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2514.297234][T24929] device veth0 left promiscuous mode [ 2514.297269][T17583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.314767][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5737'. [ 2514.320191][T17583] usb 4-1: config 0 descriptor?? [ 2514.326352][T12500] usb 2-1: USB disconnect, device number 2 [ 2514.458063][T11453] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2514.601805][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5749'. [ 2514.697759][T11453] usb 3-1: Using ep0 maxpacket: 16 [ 2514.790624][T24919] hub 6-0:1.0: USB hub found [ 2514.795153][T24919] hub 6-0:1.0: 1 port detected [ 2514.817905][T11453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.828766][T11453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.838401][T11453] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2514.859640][T11453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.867776][T17583] usbhid 4-1:0.0: can't add hid device: -71 [ 2514.875092][T17583] usbhid: probe of 4-1:0.0 failed with error -71 [ 2514.937195][T11453] usb 3-1: config 0 descriptor?? [ 2514.943991][T17583] usb 4-1: USB disconnect, device number 98 [ 2516.438451][T22275] usbhid 1-1:0.0: can't add hid device: -71 [ 2516.444600][T22275] usbhid: probe of 1-1:0.0 failed with error -71 [ 2516.497514][T22275] usb 1-1: USB disconnect, device number 7 [ 2516.510342][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2516.510357][ T30] audit: type=1326 audit(2000000135.250:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2516.548666][ T30] audit: type=1326 audit(2000000135.280:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2516.599706][ T30] audit: type=1326 audit(2000000135.280:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2516.655185][ T30] audit: type=1326 audit(2000000135.280:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2516.693891][T24965] loop3: detected capacity change from 0 to 512 [ 2516.722263][ T30] audit: type=1326 audit(2000000135.280:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2516.753791][T24967] syz.0.5756[24967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2516.754340][T24967] syz.0.5756[24967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2516.781965][T24967] input: syz0 as /devices/virtual/input/input71 [ 2517.202979][ T30] audit: type=1326 audit(2000000135.280:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2517.248807][T24965] EXT4-fs (loop3): Mount option "data_err=ignore" incompatible with ext2 [ 2517.269279][ T30] audit: type=1326 audit(2000000135.280:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2517.299830][T24973] loop4: detected capacity change from 0 to 512 [ 2517.310484][ T30] audit: type=1326 audit(2000000135.280:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2517.347811][T11453] usbhid 3-1:0.0: can't add hid device: -71 [ 2517.357707][T11453] usbhid: probe of 3-1:0.0 failed with error -71 [ 2517.385525][ T30] audit: type=1326 audit(2000000135.280:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2517.419153][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5761'. [ 2517.439219][T11453] usb 3-1: USB disconnect, device number 126 [ 2517.440290][ T30] audit: type=1326 audit(2000000135.280:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.3.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc9b774aff9 code=0x7ffc0000 [ 2517.461380][T24973] EXT4-fs (loop4): 1 orphan inode deleted [ 2517.474187][T24973] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2517.496485][T24973] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 2517.689595][T24990] syz.4.5758[24990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2517.690014][T24990] syz.4.5758[24990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2517.736945][T24989] device vlan2 entered promiscuous mode [ 2517.753577][T24989] device veth0 entered promiscuous mode [ 2517.795226][T24990] input: syz0 as /devices/virtual/input/input72 [ 2517.809235][T24989] device veth0 left promiscuous mode [ 2518.017765][T11453] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2518.025258][ T314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2519.357944][T11453] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2519.370030][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2519.387753][T11453] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2519.412445][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2519.484762][T11453] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2519.493917][ T314] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2519.504765][T11453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.512756][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.522106][T11453] usb 3-1: config 0 descriptor?? [ 2519.527207][ T314] usb 2-1: config 0 descriptor?? [ 2519.561183][T11453] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2519.677830][ T346] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2519.785350][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5760'. [ 2519.800242][T11453] usb 3-1: USB disconnect, device number 127 [ 2519.989704][T24980] hub 6-0:1.0: USB hub found [ 2519.994253][T24980] hub 6-0:1.0: 1 port detected [ 2520.067860][ T314] usbhid 2-1:0.0: can't add hid device: -71 [ 2520.073655][ T314] usbhid: probe of 2-1:0.0 failed with error -71 [ 2520.079836][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2520.090438][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2520.100879][ T314] usb 2-1: USB disconnect, device number 3 [ 2520.107973][ T346] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2520.116998][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.125470][ T346] usb 4-1: config 0 descriptor?? [ 2520.436194][T25018] loop4: detected capacity change from 0 to 1024 [ 2520.593082][T25018] EXT4-fs (loop4): Ignoring removed orlov option [ 2520.603580][T25018] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2520.627835][ T314] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2520.629942][T25018] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2520.700047][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5777'. [ 2520.700782][T25025] loop2: detected capacity change from 0 to 512 [ 2520.727094][T25032] loop4: detected capacity change from 0 to 512 [ 2520.733938][T25025] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2 [ 2520.890242][T25032] EXT4-fs (loop4): 1 orphan inode deleted [ 2520.895944][T25032] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2520.916841][T25032] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 2520.986937][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 2521.017938][ T346] usbhid 4-1:0.0: can't add hid device: -71 [ 2521.024106][ T346] usbhid: probe of 4-1:0.0 failed with error -71 [ 2521.035391][ T346] usb 4-1: USB disconnect, device number 99 [ 2521.239635][T25041] syz.4.5776[25041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2521.239724][T25041] syz.4.5776[25041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2521.267786][T25041] input: syz0 as /devices/virtual/input/input73 [ 2521.302173][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.408851][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.419633][ T314] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2521.529575][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.583466][T25048] device vlan2 entered promiscuous mode [ 2521.588859][T25048] device veth0 entered promiscuous mode [ 2521.593972][ T314] usb 1-1: config 0 descriptor?? [ 2521.599129][T25048] device veth0 left promiscuous mode [ 2521.752833][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2521.752849][ T30] audit: type=1326 audit(2000000140.490:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2521.794737][ T30] audit: type=1326 audit(2000000140.490:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2521.822255][ T30] audit: type=1326 audit(2000000140.490:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2521.876451][ T30] audit: type=1326 audit(2000000140.490:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.028158][ T30] audit: type=1326 audit(2000000140.490:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.063640][ T30] audit: type=1326 audit(2000000140.490:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.098481][ T30] audit: type=1326 audit(2000000140.490:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.126989][ T30] audit: type=1326 audit(2000000140.490:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.238320][ T30] audit: type=1326 audit(2000000140.490:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.325892][ T30] audit: type=1326 audit(2000000140.490:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.2.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deaee7ff9 code=0x7ffc0000 [ 2522.544059][T25069] loop3: detected capacity change from 0 to 512 [ 2522.617762][ T346] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2522.640127][T25069] EXT4-fs (loop3): 1 orphan inode deleted [ 2522.645784][T25069] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2522.666706][T25069] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 2522.773392][T25076] loop2: detected capacity change from 0 to 512 [ 2522.817800][T23918] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2522.829758][T25076] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2 [ 2522.861483][T25077] syz.3.5787[25077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2522.861773][T25077] syz.3.5787[25077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2522.885990][T25077] input: syz0 as /devices/virtual/input/input74 [ 2523.018108][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2523.059673][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2523.071371][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5790'. [ 2523.086015][ T346] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2523.098634][ T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.107313][ T346] usb 2-1: config 0 descriptor?? [ 2523.238318][T23918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2523.248409][T23918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2523.261146][T23918] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2523.270041][T23918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.278588][T23918] usb 5-1: config 0 descriptor?? [ 2523.307816][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 2523.313733][ T314] usbhid: probe of 1-1:0.0 failed with error -71 [ 2523.320463][T23918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2523.328506][ T314] usb 1-1: USB disconnect, device number 8 [ 2523.468378][T25084] loop3: detected capacity change from 0 to 512 [ 2523.522432][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5785'. [ 2523.532002][T23918] usb 5-1: USB disconnect, device number 93 [ 2523.549972][T25084] EXT4-fs (loop3): 1 orphan inode deleted [ 2523.555565][T25084] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2523.576454][T25062] hub 6-0:1.0: USB hub found [ 2523.576510][T25084] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 2523.585878][T25062] hub 6-0:1.0: 1 port detected [ 2523.717854][ T314] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2524.003108][T25091] syz.3.5792[25091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2524.003201][T25091] syz.3.5792[25091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2524.019471][T25089] input: syz0 as /devices/virtual/input/input75 [ 2524.039083][ T346] usbhid 2-1:0.0: can't add hid device: -71 [ 2524.045481][ T346] usbhid: probe of 2-1:0.0 failed with error -71 [ 2524.294888][ T346] usb 2-1: USB disconnect, device number 4 [ 2524.506890][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.524996][T25105] device vlan2 entered promiscuous mode [ 2524.530955][T25105] device veth0 entered promiscuous mode [ 2524.531155][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.546152][T25105] device veth0 left promiscuous mode [ 2524.546613][ T314] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2524.626432][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.637920][ T314] usb 1-1: config 0 descriptor?? [ 2525.250184][T25113] loop1: detected capacity change from 0 to 1024 [ 2525.299988][T25113] EXT4-fs (loop1): Ignoring removed orlov option [ 2525.306938][T25113] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2525.330106][T25117] loop4: detected capacity change from 0 to 512 [ 2525.354339][T25113] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2525.419392][T25117] EXT4-fs (loop4): Mount option "data_err=ignore" incompatible with ext2 [ 2525.970634][T25130] loop4: detected capacity change from 0 to 1024 [ 2525.977973][T17583] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2526.172032][T25130] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2526.197972][T12328] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2526.339639][T25136] syz.4.5805[25136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2526.339722][T25136] syz.4.5805[25136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2526.351978][T25136] fuse: Bad value for 'user_id' [ 2526.406503][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 2526.447795][T17583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2526.458764][T17583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.468410][T17583] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2526.499578][T17583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.517763][T12328] usb 4-1: Using ep0 maxpacket: 16 [ 2526.523172][T17583] usb 3-1: config 0 descriptor?? [ 2526.528052][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 2526.534020][ T314] usbhid: probe of 1-1:0.0 failed with error -71 [ 2526.541828][ T314] usb 1-1: USB disconnect, device number 9 [ 2526.597164][T12507] Bluetooth: hci0: Frame reassembly failed (-84) [ 2526.637929][T12328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2526.649362][T12328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.658915][T12328] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2526.667759][T12328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.676592][T12328] usb 4-1: config 0 descriptor?? [ 2526.897757][ T314] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2527.018065][T17583] hid (null): bogus close delimiter [ 2527.277939][T17583] usb 3-1: language id specifier not provided by device, defaulting to English [ 2527.297794][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2527.307779][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2527.320503][ T314] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2527.329340][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.338919][ T314] usb 1-1: config 0 descriptor?? [ 2527.378486][ T314] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2527.581893][T25143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5808'. [ 2527.591255][ T1625] usb 1-1: USB disconnect, device number 10 [ 2529.007817][ T1332] Bluetooth: hci0: command 0x1003 tx timeout [ 2529.015016][T12633] Bluetooth: hci0: sending frame failed (-49) [ 2532.007710][ T1625] Bluetooth: hci0: command 0x1001 tx timeout [ 2532.013984][T12633] Bluetooth: hci0: sending frame failed (-49) [ 2533.037766][T17583] uclogic 0003:256C:006D.0071: failed retrieving string descriptor #200: -110 [ 2533.046645][T17583] uclogic 0003:256C:006D.0071: failed retrieving pen parameters: -110 [ 2534.007751][T12328] usbhid 4-1:0.0: can't add hid device: -71 [ 2534.013531][T12328] usbhid: probe of 4-1:0.0 failed with error -71 [ 2534.027787][T17583] uclogic 0003:256C:006D.0071: failed probing pen v2 parameters: -110 [ 2534.035788][T17583] uclogic 0003:256C:006D.0071: failed probing parameters: -110 [ 2534.052070][T12328] usb 4-1: USB disconnect, device number 100 [ 2535.004067][T23915] Bluetooth: hci0: command 0x1009 tx timeout [ 2535.037725][T17583] uclogic: probe of 0003:256C:006D.0071 failed with error -110 [ 2553.056622][T12328] usb 3-1: USB disconnect, device number 2 [ 2553.383190][T25171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.390219][T25171] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.397499][T25171] device bridge_slave_0 entered promiscuous mode [ 2553.405518][T25171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.412379][T25171] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.419669][T25171] device bridge_slave_1 entered promiscuous mode [ 2553.516729][T25172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.523601][T25172] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.530918][T25172] device bridge_slave_0 entered promiscuous mode [ 2553.539457][T25172] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.546301][T25172] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.553723][T25172] device bridge_slave_1 entered promiscuous mode [ 2553.564760][T25174] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.571680][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.578923][T25174] device bridge_slave_0 entered promiscuous mode [ 2553.595178][T25174] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.602060][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.609258][T25174] device bridge_slave_1 entered promiscuous mode [ 2553.697201][T25173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.704084][T25173] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.711533][T25173] device bridge_slave_0 entered promiscuous mode [ 2553.733300][T25173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.740179][T25173] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.747337][T25173] device bridge_slave_1 entered promiscuous mode [ 2553.781373][T25175] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.788269][T25175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.795427][T25175] device bridge_slave_0 entered promiscuous mode [ 2553.820731][T25175] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.827572][T25175] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.834897][T25175] device bridge_slave_1 entered promiscuous mode [ 2553.924754][T25171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.931621][T25171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2553.938727][T25171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.945489][T25171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2553.969127][ T364] device bridge_slave_1 left promiscuous mode [ 2553.975179][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.982515][ T364] device bridge_slave_0 left promiscuous mode [ 2553.988537][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.996309][ T364] device veth1_macvtap left promiscuous mode [ 2554.002180][ T364] device veth0_vlan left promiscuous mode [ 2554.172168][T25172] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.179036][T25172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.186161][T25172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.193101][T25172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.214651][T25175] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.221520][T25175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.228638][T25175] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.235471][T25175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.247558][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.255026][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.263104][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.270732][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.279101][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.286538][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.350478][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2554.358063][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2554.365399][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2554.373564][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2554.381889][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.388730][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.395913][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2554.403165][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2554.436706][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2554.445141][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2554.453251][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.460087][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.467295][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2554.475436][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2554.483387][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.490220][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.497361][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2554.505404][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2554.513468][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.520302][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.527444][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2554.534610][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2554.541878][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2554.549281][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2554.556521][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2554.564706][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2554.572655][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.579490][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.586720][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2554.595611][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2554.603583][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.610501][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.617722][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2554.625857][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2554.633799][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.640638][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.647809][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2554.655916][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2554.663880][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.670705][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.677910][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2554.685727][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2554.693486][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2554.701338][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2554.718226][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2554.725674][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2554.733188][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2554.741125][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2554.749188][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2554.756964][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2554.764692][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2554.772603][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2554.780390][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2554.788238][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2554.817098][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2554.824532][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2554.832294][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2554.840486][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2554.848459][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.855278][T12328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.867001][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2554.881381][T25172] device veth0_vlan entered promiscuous mode [ 2554.902334][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2554.910402][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2554.917574][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2554.924809][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2554.933150][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2554.941870][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.948709][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.955858][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2554.963899][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2554.972003][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2554.981900][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2554.990026][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2554.997721][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2555.014627][T25171] device veth0_vlan entered promiscuous mode [ 2555.023231][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2555.030521][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2555.037748][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2555.045563][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2555.053421][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2555.061229][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2555.075839][T25174] device veth0_vlan entered promiscuous mode [ 2555.088676][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2555.096655][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2555.106209][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2555.114057][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2555.125748][T25172] device veth1_macvtap entered promiscuous mode [ 2555.154991][T25173] device veth0_vlan entered promiscuous mode [ 2555.165652][T25171] device veth1_macvtap entered promiscuous mode [ 2555.173073][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2555.181861][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2555.189991][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2555.197178][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2555.204409][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2555.212393][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2555.220350][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2555.243446][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2555.258506][T25174] device veth1_macvtap entered promiscuous mode [ 2555.271490][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2555.279612][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2555.287694][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2555.295698][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2555.303829][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2555.312044][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2555.328621][T25173] device veth1_macvtap entered promiscuous mode [ 2555.347545][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2555.356033][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2555.365875][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2555.374246][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2555.382492][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2555.390435][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2555.398369][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2555.405726][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2555.413773][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2555.421894][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2555.429919][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2555.451233][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2555.459550][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2555.480020][T25175] device veth0_vlan entered promiscuous mode [ 2555.500417][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2555.515820][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2555.525717][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2555.525732][ T30] audit: type=1326 audit(2000000174.260:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.538406][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2555.568655][ T30] audit: type=1326 audit(2000000174.300:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.592808][ T30] audit: type=1326 audit(2000000174.300:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.616496][ T30] audit: type=1326 audit(2000000174.300:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.656292][T25201] loop1: detected capacity change from 0 to 1024 [ 2555.658347][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2555.671732][ T30] audit: type=1326 audit(2000000174.300:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.678152][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2555.695393][ T30] audit: type=1326 audit(2000000174.300:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.718159][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2555.726308][ T30] audit: type=1326 audit(2000000174.300:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2555.852599][T25201] EXT4-fs (loop1): Ignoring removed orlov option [ 2555.921586][T25201] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2555.940264][ T30] audit: type=1326 audit(2000000174.300:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2556.020462][ T30] audit: type=1326 audit(2000000174.300:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2556.045306][ T30] audit: type=1326 audit(2000000174.300:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1bffd89ff9 code=0x7ffc0000 [ 2556.076383][T25201] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2556.132250][T23918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2556.140446][T23918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2556.155390][T25175] device veth1_macvtap entered promiscuous mode [ 2556.167488][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2556.175321][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2556.184123][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2556.236126][T23915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2556.248899][T23915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2556.657876][ T314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2556.674280][T25213] loop4: detected capacity change from 0 to 512 [ 2556.699370][T25213] EXT4-fs (loop4): Mount option "data_err=ignore" incompatible with ext2 [ 2556.733627][T25221] loop3: detected capacity change from 0 to 1024 [ 2556.798591][T25221] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 2556.824628][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5820'. [ 2556.939175][ T364] device bridge_slave_1 left promiscuous mode [ 2556.945205][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.953212][ T364] device bridge_slave_0 left promiscuous mode [ 2556.959265][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.967420][ T364] device bridge_slave_1 left promiscuous mode [ 2556.969648][T25226] syz.3.5819[25226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2556.973417][T25226] syz.3.5819[25226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2556.973512][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.004521][ T364] device bridge_slave_0 left promiscuous mode [ 2557.006577][T25226] fuse: Bad value for 'user_id' [ 2557.010654][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2557.023533][ T364] device bridge_slave_1 left promiscuous mode [ 2557.029572][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.037180][ T364] device bridge_slave_0 left promiscuous mode [ 2557.043250][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2557.051460][ T364] device bridge_slave_1 left promiscuous mode [ 2557.057404][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.064831][ T364] device bridge_slave_0 left promiscuous mode [ 2557.071416][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2557.080955][ T364] device veth1_macvtap left promiscuous mode [ 2557.087951][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2557.094237][ T364] device veth0_vlan left promiscuous mode [ 2557.101007][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2557.114236][ T314] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2557.123623][ T364] device veth1_macvtap left promiscuous mode [ 2557.123664][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.134015][ T364] device veth0_vlan left promiscuous mode [ 2557.144844][ T314] usb 3-1: config 0 descriptor?? [ 2557.151632][ T364] device veth1_macvtap left promiscuous mode [ 2557.157642][ T364] device veth0_vlan left promiscuous mode [ 2557.168170][ T364] device veth1_macvtap left promiscuous mode [ 2557.174064][ T364] device veth0_vlan left promiscuous mode [ 2557.217748][T22273] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2557.764735][T25208] hub 6-0:1.0: USB hub found [ 2557.769439][T25208] hub 6-0:1.0: 1 port detected [ 2557.842169][T22273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2557.858351][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 2557.864393][ T314] usbhid: probe of 3-1:0.0 failed with error -71 [ 2557.872886][T22273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2557.875935][ T314] usb 3-1: USB disconnect, device number 3 [ 2557.892625][T22273] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2557.907725][T22273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.927969][T22273] usb 1-1: config 0 descriptor?? [ 2558.077742][T11453] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2558.337725][T11453] usb 5-1: Using ep0 maxpacket: 16 [ 2558.408104][T22273] hid (null): bogus close delimiter [ 2558.508003][T11453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2558.534353][T11453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2558.602532][T11453] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2558.676435][T11453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.727832][T22273] usb 1-1: language id specifier not provided by device, defaulting to English [ 2558.737420][T11453] usb 5-1: config 0 descriptor?? [ 2559.122241][T25262] loop1: detected capacity change from 0 to 512 [ 2564.027766][T22273] uclogic 0003:256C:006D.0072: failed retrieving string descriptor #200: -110 [ 2564.036477][T22273] uclogic 0003:256C:006D.0072: failed retrieving pen parameters: -110 [ 2566.037790][T11453] usbhid 5-1:0.0: can't add hid device: -71 [ 2566.043588][T11453] usbhid: probe of 5-1:0.0 failed with error -71 [ 2566.047716][T22273] uclogic 0003:256C:006D.0072: failed probing pen v2 parameters: -110 [ 2567.037713][T22273] uclogic 0003:256C:006D.0072: failed probing parameters: -110 [ 2567.047795][T11453] usb 5-1: USB disconnect, device number 94 [ 2567.054515][T22273] uclogic: probe of 0003:256C:006D.0072 failed with error -110 [ 2591.055541][T12328] usb 1-1: USB disconnect, device number 11 SYZFAIL: failed to send rpc fd=3 want=2240 sent=0 n=-1 (errno 32: Broken pipe) [ 2591.233712][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2591.233728][ T30] audit: type=1400 audit(2000000209.970:8006): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[470]" dev="pipefs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2592.058708][ T364] device bridge_slave_1 left promiscuous mode [ 2592.064695][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2592.072076][ T364] device bridge_slave_0 left promiscuous mode [ 2592.078082][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2592.085880][ T364] device veth1_macvtap left promiscuous mode [ 2592.091728][ T364] device veth0_vlan left promiscuous mode [ 2593.578897][ T364] device bridge_slave_1 left promiscuous mode [ 2593.584871][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2593.592254][ T364] device bridge_slave_0 left promiscuous mode [ 2593.598360][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2593.606365][ T364] device bridge_slave_1 left promiscuous mode [ 2593.612541][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2593.619906][ T364] device bridge_slave_0 left promiscuous mode [ 2593.625832][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2593.633843][ T364] device bridge_slave_1 left promiscuous mode [ 2593.639821][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2593.648202][ T364] device bridge_slave_0 left promiscuous mode [ 2593.654139][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2593.661910][ T364] device bridge_slave_1 left promiscuous mode [ 2593.667898][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 2593.675173][ T364] device bridge_slave_0 left promiscuous mode [ 2593.681220][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 2593.689917][ T364] device veth1_macvtap left promiscuous mode [ 2593.695742][ T364] device veth0_vlan left promiscuous mode [ 2593.701579][ T364] device veth1_macvtap left promiscuous mode [ 2593.707379][ T364] device veth0_vlan left promiscuous mode [ 2593.713265][ T364] device veth1_macvtap left promiscuous mode [ 2593.719080][ T364] device veth0_vlan left promiscuous mode [ 2593.724935][ T364] device veth1_macvtap left promiscuous mode [ 2593.730911][ T364] device veth0_vlan left promiscuous mode