last executing test programs: 42m55.56148544s ago: executing program 0 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x3ff, 0x3, 0x5, 0xa81, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x803, 0x4, 0xf, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000000400000008000000080000000000", @ANYBLOB="000000000000004620e186", @ANYRES32=0x0, @ANYRES32], 0x50) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a24010000000201"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f00000004c0)="a762918dd6c10f5973585e458edddea0b92a9e3c39db3b551ab29f34e4884cc4abe7935bfcd946de35740c", 0x2b}], 0x1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000400)={'system_u:object_r:lastlog_t:s0', 0x20, 'unconfined_u\x00'}, 0x2c) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 42m52.55369717s ago: executing program 0 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 42m52.413595682s ago: executing program 0 (id=983): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42m52.204048506s ago: executing program 0 (id=987): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) stat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)="f669184087b8c6242cbef8573fd18712277769d7ba74a0ed685e031d2d83134b5e67a7257d7d0231ef52c076678e416d4649d44c8d67fd8a495b119a3be74c4b35bf22d3c21c5822ffb202943be0b3a2b808861a3eaf5cb8ab16d5db09fefd8b2930e8a0c1880920825f6e2716cb3b359fdb451beebe860cd49fa5a38786d7fd172bd1aff2e30734d993d22eeb31836c71ce38d8d8124e5e255e0338eb5c2e43a95a38e0b9d4586bd2e891f324d81d4a1454bb5760b092721aead07070f01aba25e22ef7bb4ad9d4fc60445909fb2892", 0xd0, 0x3) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000c00)={0xb0000000}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 42m50.805883049s ago: executing program 0 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x3ff, 0x3, 0x5, 0xa81, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x803, 0x4, 0xf, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000000400000008000000080000", @ANYBLOB="000000000000004620e18638aaf4176abc1cd80d6f", @ANYRES32=0x0, @ANYRES32], 0x50) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a24010000000201"], 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r6, 0x0, 0x0) write$selinux_user(r6, &(0x7f0000000400)={'system_u:object_r:lastlog_t:s0', 0x20, 'unconfined_u\x00'}, 0x2c) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 42m50.604956922s ago: executing program 0 (id=991): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 42m50.563740243s ago: executing program 32 (id=991): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 27m28.28071685s ago: executing program 1 (id=4321): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[0x0]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000ac0)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b08346c060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62239c6f30e065cd5b91cd0a03000000000018001b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd7878a37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b412435139000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a4cd13c257ac06c7d8ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190ba4d7909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810ba2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e8134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b000000807ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d24145a2e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a0400000000000000f463661c953fcad6f37725c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2ca8378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa04006651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed004000000b53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f090056b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b5c7fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d050000002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f463934c54edc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a3b89f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d3560aba573bd16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22005b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db239dfe785b54c34a0a5db4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbf4c807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9edbaaadaea56765404e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901003a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50b00", 0x1000}}, 0x1006) unshare(0x64000600) 27m23.450934521s ago: executing program 1 (id=4333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r1) 27m19.5341679s ago: executing program 1 (id=4340): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c40)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 27m19.46999506s ago: executing program 1 (id=4342): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xef77}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002680)='./file0\x00', 0x802014, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 27m14.568359753s ago: executing program 1 (id=4350): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[0x0]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000ac0)={0xc, {"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", 0x1000}}, 0x1006) unshare(0x64000600) 27m14.405883686s ago: executing program 1 (id=4352): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000"], 0x50) 27m14.395601446s ago: executing program 33 (id=4352): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000"], 0x50) 22.102404357s ago: executing program 3 (id=9196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 21.130304271s ago: executing program 3 (id=9202): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18.864706694s ago: executing program 3 (id=9210): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nouser_xattr}, {@grpid}]}, 0x3, 0x460, &(0x7f0000000780)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689", 0xc5}], 0x1}}], 0x1, 0xc0) write$UHID_INPUT(r0, &(0x7f0000001780)={0x8, {"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", 0x1000}}, 0x1006) 13.936930226s ago: executing program 5 (id=9219): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000600000000000000000000000000040000000400008004000980"], 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.3384464s ago: executing program 4 (id=9221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}, 0x6, 0x510, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvrHdbuzGsWziUSrShTeUiyNqu+8PiUBoJ6KkSotwdY68ty2tvZK/b2IrIRvwBARQBEidOXJD4A5AgfwJCigS3nEEROOTABS2a2d3YXu8aG6+9xP58pJd5855nvt+3P+ftjDIBXFiXI+LDiBiKiDcjothqz7VK1Jsl/bvHO7fm05JEo/HJ35NIWm2d+7zU2iz1vY8ifpAcjLuxtb0yV6mU1/c3b19dXp1bKi+V16anp96beX/m3ZnJI44kyR/WOxoRH3zryc/u/vo7H/z+6589nP3bWz9M07re6u82jn5oDr0Qw+2G+mlEGZz0dZPPRggAwLPgSkS8FBGvR8RXoxhDcehhNAAAAPAManxz9Pl2FQAAADifctm1sUmulF3vm4/RyOVKpeY1vF+MF3KV6kbta4vVzbWF5jW0Y1HILS5XypOta4XHopCk61NZfXf97Y716Yh4MSLuFUfS9awPAAAAOBuX9s3/I54Um/N/AAAA4JxxMh4AAADOvyPO//9w2nkAAAAAp8f5fwAAADjXvvvxx2lpPN65ld0HYOHTrc2V6qdXF8obK6XVzfnSfHX9RmmpWl2qlEtD7a163+25Uq3eeCfWNm9O1PIbtYmNre3Z1ermWm02u6/3bPmlMxoXAAAAsOvF1+7/JYmI+jdGspJ6rtXXe5YPXDBJvqPh+lcGlAnQF0PH3eDy5ukkApy5zu904OIwxweSzoaOA4PhrOXuTw5s+Mfjx3LMAQAAgzH+Jef/4aLKDToBYGB+POgEgIHJO8yHC6tw/CsAgXPmo//SP9yr48jn/xuNYyUEAAD03WhzUY/WucDRyOVKpaenBZPF5Up5MiI+HxF/LhaeT9enBpgvAAAAAAAAAAAAAAAAAAAAAAAAADyLGo0kGgAAAMC5FpH7axIRaRkvXhnt/H3gueRfxWwZEZ/98pOf35yr1dan0vZ/PG2v/aLV/vYxfnZwOzAAAAA4gcKhve15enseDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD99Hjn1ny7nGXcR9diJMa6xc/HcLYcjkJEvPDPJPJ7tksiYqgP8et3IuLlbvGTNK0Ya2XRGT8XESMDjn+pD/HhIrt/LSI+7Pb+y8XlbNn9/ZdvlZN6dC17k3eN3/78G+rx+fe5I8Z45cFvJzrbfjTcin8n4pV898+fdvykR/w3egUs7F+9/v3t7V5/2vhVxHjX759kX6yJ2uqNiY2t7avLq3NL5aXy2vT01Hsz78+8OzM5sbhcKbf+7Rrjp1/+Xf1ej/iP7uSy5d747XGONTO83Wv8V3oNqsO/H9zc+UKzWjgYP+KtN7o//y9ny+6Pf/qaeLP1PZD2j7fr9WZ9r1d/86dXe+WWxl/o8fg3n/9io9f4j+jAmHfdPvpeAIC+2djaXpmrVMrrZ1B5/Z3+7TA5o5xVelSG/z/SOOvKt0+2eZTX24fDJ9nPw7TSSPowrnTOkCXWOqLfkyoAAHDO7M4HBp0JAAAAAAAAAAAAAAAAAAAAXFz/038e9trxtuqMWR/MUAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvWfAAAA//98Ecuy") ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.283777605s ago: executing program 5 (id=9226): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80040, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000600000000000000000000000000040000000400008004000980"], 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabfee05ab5ac386dd63ec820e00102100fe8000000000000000000000000000aa0000004c249c08ffffac1e00014e204e2104f19078ea03ae8185b925fdc22b907b1d3c8c65f48a435c158c92d0a577319efc3d11863740ee4c6533a9f5746b50759f6e1c67290bd80e1e84b90b797c87f4446989fab2832d277504cb7fd6b32c917e795e8a7e2524cf583510da81"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.319115229s ago: executing program 5 (id=9229): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x40000, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r5, &(0x7f0000000780)=[{{&(0x7f0000000580)=@l2={0x1f, 0x4d9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0x80, &(0x7f0000000340)}}], 0x1, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 10.27327051s ago: executing program 4 (id=9230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 10.240759871s ago: executing program 4 (id=9231): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.820454077s ago: executing program 3 (id=9232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 8.994999459s ago: executing program 2 (id=9233): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.030339963s ago: executing program 6 (id=9235): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.385538502s ago: executing program 2 (id=9237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000700000000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x40000, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000780)=[{{&(0x7f0000000580)=@l2={0x1f, 0x4d9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0x80, &(0x7f0000000340)}}], 0x1, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 5.597810088s ago: executing program 6 (id=9238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.575237179s ago: executing program 6 (id=9239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 5.563994309s ago: executing program 5 (id=9240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 5.229393504s ago: executing program 2 (id=9241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.983231677s ago: executing program 3 (id=9236): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.917816568s ago: executing program 2 (id=9242): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x1, &(0x7f00000007c0)=[{0x7, 0x2, 0x7, 0x3}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18060010fe5dfca956c315b8e0dd00000000000000000000000800180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000386f5e708737e7088712b07945cdd25d1bce46a6fdb75b4bfe68b24981c07e26fd23172a60f8a8a091aee8abb388bcc3f69b67ae79f841db5c81a265f7e"], &(0x7f0000000300)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) 4.352068047s ago: executing program 5 (id=9243): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.349642336s ago: executing program 4 (id=9244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 3.902704693s ago: executing program 2 (id=9245): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.901603463s ago: executing program 6 (id=9246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.321503301s ago: executing program 4 (id=9247): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.632726012s ago: executing program 3 (id=9248): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.337977376s ago: executing program 5 (id=9249): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x40000, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000780)=[{{&(0x7f0000000580)=@l2={0x1f, 0x4d9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0x80, &(0x7f0000000340)}}], 0x1, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.308554406s ago: executing program 2 (id=9250): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.024484681s ago: executing program 6 (id=9251): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.295562701s ago: executing program 4 (id=9252): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x40000, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r5, &(0x7f0000000780)=[{{&(0x7f0000000580)=@l2={0x1f, 0x4d9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0x80, &(0x7f0000000340)}}], 0x1, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 0s ago: executing program 6 (id=9253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) kernel console output (not intermixed with test programs): 0230][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8341'. [ 2648.959857][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8357'. [ 2652.698194][T27974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8376'. [ 2652.868188][T23909] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2653.278035][T23909] usb 6-1: Using ep0 maxpacket: 16 [ 2653.398060][T23909] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 2653.406620][T23909] usb 6-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2653.417464][T23909] usb 6-1: config 0 has no interface number 0 [ 2653.424848][T23909] usb 6-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2653.437794][T23909] usb 6-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2653.452603][T23909] usb 6-1: config 0 interface 105 has no altsetting 0 [ 2653.628110][T23909] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2653.637345][T23909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2653.645476][T23909] usb 6-1: Product: syz [ 2653.650305][T23909] usb 6-1: Manufacturer: syz [ 2653.742644][T23909] usb 6-1: SerialNumber: syz [ 2653.762140][T23909] usb 6-1: config 0 descriptor?? [ 2655.664170][T28011] UDC core: couldn't find an available UDC or it's busy: -16 [ 2655.671642][T28011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2656.764154][T17396] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2656.779153][T23909] usb 6-1: USB disconnect, device number 70 [ 2656.946464][T27973] udevd[27973]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 2657.128188][T17396] usb 4-1: Using ep0 maxpacket: 16 [ 2657.269388][T17396] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2657.280806][T17396] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2657.294205][T17396] usb 4-1: config 0 has no interface number 0 [ 2657.970176][T17396] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2657.979370][T17396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.987377][T17396] usb 4-1: Product: syz [ 2657.991705][T17396] usb 4-1: Manufacturer: syz [ 2657.996305][T17396] usb 4-1: SerialNumber: syz [ 2658.036479][T17396] usb 4-1: config 0 descriptor?? [ 2658.223556][T17396] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 2658.248789][T28046] overlayfs: failed to resolve './file0': -2 [ 2658.544034][T17396] usb 4-1: No valid video chain found. [ 2658.792317][T28052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8397'. [ 2658.811906][T28052] device bridge0 entered promiscuous mode [ 2658.818966][T28052] bridge0: port 3(macsec1) entered blocking state [ 2658.825437][T28052] bridge0: port 3(macsec1) entered disabled state [ 2658.837339][T28052] device bridge0 left promiscuous mode [ 2661.430483][T17396] usb 4-1: USB disconnect, device number 85 [ 2663.511225][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8413'. [ 2664.288108][T18552] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2664.536164][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8418'. [ 2664.549571][T28133] device bridge0 entered promiscuous mode [ 2664.556294][T28133] bridge0: port 3(macsec1) entered blocking state [ 2664.562927][T28133] bridge0: port 3(macsec1) entered disabled state [ 2665.195490][T28133] device bridge0 left promiscuous mode [ 2665.676814][T28142] tipc: Enabling of bearer rejected, already enabled [ 2665.688392][T18552] usb 5-1: Using ep0 maxpacket: 16 [ 2665.999923][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8422'. [ 2666.142971][T18552] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 2666.154351][T18552] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.165381][T18552] usb 5-1: config 0 has no interface number 0 [ 2666.193146][T28144] tipc: Enabling of bearer rejected, already enabled [ 2666.328097][T18552] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2666.337300][T18552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.346103][T18552] usb 5-1: Product: syz [ 2666.350852][T18552] usb 5-1: Manufacturer: syz [ 2666.355594][T18552] usb 5-1: SerialNumber: syz [ 2666.371071][T18552] usb 5-1: config 0 descriptor?? [ 2666.439531][T18552] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 2666.454004][T18552] usb 5-1: No valid video chain found. [ 2667.715358][T17396] usb 5-1: USB disconnect, device number 89 [ 2669.690964][T28173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8432'. [ 2670.800627][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8437'. [ 2671.625745][T28170] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2672.927932][T28170] usb 7-1: Using ep0 maxpacket: 16 [ 2673.048053][T28170] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 2673.058211][T28170] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2674.643592][T28170] usb 7-1: config 0 has no interface number 0 [ 2674.738131][T28170] usb 7-1: string descriptor 0 read error: -71 [ 2674.754631][T28170] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2674.771828][T28170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.799902][T28170] usb 7-1: config 0 descriptor?? [ 2674.828079][T28170] usb 7-1: can't set config #0, error -71 [ 2674.842943][T28170] usb 7-1: USB disconnect, device number 39 [ 2675.690155][T28235] overlayfs: missing 'workdir' [ 2676.231015][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8452'. [ 2676.817244][T13377] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2677.894672][T28262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8457'. [ 2678.265329][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8458'. [ 2678.288933][T13377] usb 6-1: device descriptor read/64, error -71 [ 2678.758145][T13377] usb 6-1: device descriptor read/64, error -71 [ 2679.038295][T13377] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2680.107899][T13377] usb 6-1: device descriptor read/64, error -71 [ 2680.143129][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8462'. [ 2681.362781][T28314] overlayfs: missing 'lowerdir' [ 2682.274889][T28322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8472'. [ 2683.258227][T28322] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2683.267481][T28322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2683.570600][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8475'. [ 2683.992377][T28334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8476'. [ 2684.168057][T14823] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2684.455224][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8480'. [ 2684.728024][T14823] usb 6-1: device descriptor read/64, error -71 [ 2685.550607][T14823] usb 6-1: device descriptor read/64, error -71 [ 2686.620303][T14823] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2686.981609][T28373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8485'. [ 2687.827331][T28383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8487'. [ 2687.838574][T28386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8488'. [ 2688.193321][T28383] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2688.202618][T28383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2688.226420][T28386] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2688.235685][T28386] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2688.603608][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8489'. [ 2691.213684][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8495'. [ 2693.461453][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8499'. [ 2693.552061][T28425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8498'. [ 2697.010855][T28461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8506'. [ 2699.409171][T28484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8512'. [ 2710.752468][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8534'. [ 2718.027997][ T30] audit: type=1326 audit(2000001347.019:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28619 comm="syz.3.8548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x0 [ 2727.990109][T28689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8566'. [ 2728.786797][ T30] audit: type=1326 audit(2000001357.829:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28709 comm="syz.6.8572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x0 [ 2731.273922][T28748] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2731.975744][ T30] audit: type=1326 audit(2000001361.019:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.308041][ T30] audit: type=1326 audit(2000001361.339:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.319501][T28754] hub 1-0:1.0: USB hub found [ 2732.333994][ T30] audit: type=1326 audit(2000001361.339:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.361202][T28754] hub 1-0:1.0: 1 port detected [ 2732.398108][ T30] audit: type=1326 audit(2000001361.339:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.442847][ T30] audit: type=1326 audit(2000001361.339:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.508920][ T30] audit: type=1326 audit(2000001361.339:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.579563][ T30] audit: type=1326 audit(2000001361.339:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.653193][ T30] audit: type=1326 audit(2000001361.339:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2732.725731][ T30] audit: type=1326 audit(2000001361.339:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28753 comm="syz.3.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2734.107947][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2734.107967][ T30] audit: type=1326 audit(2000001363.119:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28779 comm="syz.6.8590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x0 [ 2734.688050][T13377] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2734.719814][ T30] audit: type=1400 audit(2000001363.769:8494): avc: denied { setopt } for pid=28789 comm="syz.4.8593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2735.058115][T13377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2735.075198][T13377] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2735.084629][T13377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.108563][T13377] usb 6-1: config 0 descriptor?? [ 2735.218031][T14823] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2735.678439][T14823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2735.704712][T14823] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2735.755490][T14823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.886713][T14823] usb 5-1: config 0 descriptor?? [ 2737.417931][ T30] audit: type=1326 audit(2000001366.429:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28826 comm="syz.5.8603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x0 [ 2738.297825][T13377] usbhid 6-1:0.0: can't add hid device: -71 [ 2738.347241][T13377] usbhid: probe of 6-1:0.0 failed with error -71 [ 2738.382138][T13377] usb 6-1: USB disconnect, device number 75 [ 2738.609867][T21600] tipc: Disabling bearer [ 2738.615323][T21600] tipc: Disabling bearer [ 2738.633374][T21600] tipc: Left network mode [ 2738.728005][T18552] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2738.768104][T14823] usbhid 5-1:0.0: can't add hid device: -71 [ 2738.774117][T14823] usbhid: probe of 5-1:0.0 failed with error -71 [ 2738.849286][T14823] usb 5-1: USB disconnect, device number 90 [ 2739.186720][T28843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.208509][T28843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2739.216093][T28843] device bridge_slave_0 entered promiscuous mode [ 2739.223542][T28843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2739.231110][T28843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2739.238826][T28843] device bridge_slave_1 entered promiscuous mode [ 2739.757551][T28843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2739.764776][T28843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2739.772140][T28843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.779207][T28843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2739.787423][T18552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2739.800498][T18552] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2739.812129][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2739.828944][T21611] bridge0: port 2(bridge_slave_1) entered disabled state [ 2739.829474][ T30] audit: type=1326 audit(2000001368.879:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2739.897096][T18552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.908996][T28856] hub 1-0:1.0: USB hub found [ 2739.913855][T28856] hub 1-0:1.0: 1 port detected [ 2739.927539][T18552] usb 7-1: config 0 descriptor?? [ 2739.981935][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2739.989931][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2740.009357][ T30] audit: type=1326 audit(2000001368.939:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.324636][ T30] audit: type=1326 audit(2000001368.939:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.353732][ T30] audit: type=1326 audit(2000001368.939:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.378927][ T30] audit: type=1326 audit(2000001368.939:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.402978][ T30] audit: type=1326 audit(2000001368.939:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.426134][T28859] hub 1-0:1.0: USB hub found [ 2740.431453][T28859] hub 1-0:1.0: 1 port detected [ 2740.432068][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2740.440391][ T30] audit: type=1326 audit(2000001368.939:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.449316][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2740.476220][ T30] audit: type=1326 audit(2000001368.939:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.500747][ T30] audit: type=1326 audit(2000001368.939:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.528456][ T30] audit: type=1326 audit(2000001368.939:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28855 comm="syz.3.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2740.583646][T21611] bridge0: port 1(bridge_slave_0) entered blocking state [ 2740.590773][T21611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2740.598760][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2740.643604][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2740.652154][T21611] bridge0: port 2(bridge_slave_1) entered blocking state [ 2740.659255][T21611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2740.686212][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2741.212650][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2741.225280][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2741.234471][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2741.257494][T28866] device veth1_macvtap left promiscuous mode [ 2741.263663][T28866] device macsec0 entered promiscuous mode [ 2741.277797][T28843] device veth0_vlan entered promiscuous mode [ 2741.289828][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2741.299875][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2741.309631][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2741.317658][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2741.326234][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2741.334776][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2741.376528][T21600] device bridge_slave_1 left promiscuous mode [ 2741.382852][T21600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2741.390567][T21600] device bridge_slave_0 left promiscuous mode [ 2741.397094][T21600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2741.410242][T21600] device veth1_macvtap left promiscuous mode [ 2741.416661][T21600] device veth0_vlan left promiscuous mode [ 2741.531476][T28876] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2742.462010][T28882] hub 1-0:1.0: USB hub found [ 2742.466820][T28882] hub 1-0:1.0: 1 port detected [ 2742.687920][ T8615] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2742.911285][T28843] device veth1_macvtap entered promiscuous mode [ 2743.506263][T28901] hub 1-0:1.0: USB hub found [ 2743.521288][T28901] hub 1-0:1.0: 1 port detected [ 2743.551591][T28904] hub 1-0:1.0: USB hub found [ 2743.564639][T28904] hub 1-0:1.0: 1 port detected [ 2743.588487][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2743.596960][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2743.606117][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2743.614520][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2743.623018][T18552] usbhid 7-1:0.0: can't add hid device: -71 [ 2743.629094][T18552] usbhid: probe of 7-1:0.0 failed with error -71 [ 2743.636832][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2743.645877][T18552] usb 7-1: USB disconnect, device number 40 [ 2743.653158][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2743.662273][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2743.828041][ T8615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2743.891905][T28913] syz.6.8625[28913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2743.892449][T28913] syz.6.8625[28913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2744.983360][ T8615] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2745.005879][ T8615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2745.015084][ T8615] usb 4-1: config 0 descriptor?? [ 2747.172912][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 2747.172929][ T30] audit: type=1326 audit(2000001376.219:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.233448][T28931] hub 1-0:1.0: USB hub found [ 2747.243331][T28931] hub 1-0:1.0: 1 port detected [ 2747.251149][ T30] audit: type=1326 audit(2000001376.259:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.299594][ T30] audit: type=1326 audit(2000001376.259:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.346842][ T30] audit: type=1326 audit(2000001376.259:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.384247][ T30] audit: type=1326 audit(2000001376.259:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.407949][ T30] audit: type=1326 audit(2000001376.259:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.463689][ T30] audit: type=1326 audit(2000001376.259:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.512117][ T30] audit: type=1326 audit(2000001376.259:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.538065][ T8615] usbhid 4-1:0.0: can't add hid device: -71 [ 2747.539658][ T30] audit: type=1326 audit(2000001376.259:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.544061][ T8615] usbhid: probe of 4-1:0.0 failed with error -71 [ 2747.575235][ T30] audit: type=1326 audit(2000001376.259:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.6.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2747.658070][ T8615] usb 4-1: USB disconnect, device number 86 [ 2747.824803][T28945] syz.3.8636[28945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2747.825290][T28945] syz.3.8636[28945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2747.874948][T28945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2747.893581][T28945] IPv6: NLM_F_CREATE should be set when creating new route [ 2749.019405][T28954] hub 1-0:1.0: USB hub found [ 2749.024579][T28954] hub 1-0:1.0: 1 port detected [ 2750.641830][T28978] syz.3.8646[28978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2750.642228][T28978] syz.3.8646[28978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2751.681736][T28988] hub 1-0:1.0: USB hub found [ 2751.698385][T28988] hub 1-0:1.0: 1 port detected [ 2752.935953][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 2752.935971][ T30] audit: type=1326 audit(2000001381.979:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.3.8662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x0 [ 2753.468011][T17396] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2754.552337][ T30] audit: type=1326 audit(2000001383.599:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.605251][T29028] hub 1-0:1.0: USB hub found [ 2754.624493][T29028] hub 1-0:1.0: 1 port detected [ 2754.636992][ T30] audit: type=1326 audit(2000001383.629:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.674538][ T30] audit: type=1326 audit(2000001383.629:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.711924][ T30] audit: type=1326 audit(2000001383.629:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.739027][ T30] audit: type=1326 audit(2000001383.629:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.748112][T17396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2754.764203][ T30] audit: type=1326 audit(2000001383.629:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.797977][ T30] audit: type=1326 audit(2000001383.629:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.807944][T17396] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2754.822226][ T30] audit: type=1326 audit(2000001383.629:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.862135][T17396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2754.862235][ T30] audit: type=1326 audit(2000001383.629:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.6.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2754.888625][T17396] usb 5-1: config 0 descriptor?? [ 2754.914618][T29040] device veth1_macvtap left promiscuous mode [ 2754.920871][T29040] device macsec0 entered promiscuous mode [ 2755.243712][T28170] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2757.258014][T28170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2757.271020][T28170] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2757.280172][T28170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.289855][T28170] usb 4-1: config 0 descriptor?? [ 2758.437980][T17396] usbhid 5-1:0.0: can't add hid device: -71 [ 2758.444748][T17396] usbhid: probe of 5-1:0.0 failed with error -71 [ 2758.778331][T17396] usb 5-1: USB disconnect, device number 91 [ 2759.058064][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2759.058080][ T30] audit: type=1326 audit(2000001388.099:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.091233][ T30] audit: type=1326 audit(2000001388.139:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.120499][ T30] audit: type=1326 audit(2000001388.159:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.129087][T29083] hub 1-0:1.0: USB hub found [ 2759.144908][ T30] audit: type=1326 audit(2000001388.159:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.149089][T29083] hub 1-0:1.0: 1 port detected [ 2759.172876][ T30] audit: type=1326 audit(2000001388.159:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.211200][ T30] audit: type=1326 audit(2000001388.159:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.256757][ T30] audit: type=1326 audit(2000001388.159:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.309440][ T30] audit: type=1326 audit(2000001388.159:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.343219][ T30] audit: type=1326 audit(2000001388.169:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.378883][ T30] audit: type=1326 audit(2000001388.169:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29082 comm="syz.4.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2759.878450][T28170] usbhid 4-1:0.0: can't add hid device: -71 [ 2759.885161][T28170] usbhid: probe of 4-1:0.0 failed with error -71 [ 2759.903445][T28170] usb 4-1: USB disconnect, device number 87 [ 2759.938017][T29105] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8692' sets config #0 [ 2759.958257][T29105] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8692' sets config #1 [ 2760.167116][T14823] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2760.269804][T29113] hub 1-0:1.0: USB hub found [ 2760.274903][T29113] hub 1-0:1.0: 1 port detected [ 2760.312891][T29114] syz.4.8694[29114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2760.313399][T29114] syz.4.8694[29114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2760.538719][T14823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2760.713991][T14823] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2760.859162][T14823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2761.256122][T14823] usb 7-1: config 0 descriptor?? [ 2761.334020][T29120] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.8698' sets config #1 [ 2761.997944][T14823] usbhid 7-1:0.0: can't add hid device: -71 [ 2762.004556][T14823] usbhid: probe of 7-1:0.0 failed with error -71 [ 2762.025883][T14823] usb 7-1: USB disconnect, device number 41 [ 2762.347506][T29138] hub 1-0:1.0: USB hub found [ 2762.359129][T29138] hub 1-0:1.0: 1 port detected [ 2762.712615][T29148] hub 1-0:1.0: USB hub found [ 2762.745556][T29148] hub 1-0:1.0: 1 port detected [ 2764.238139][ T30] kauditd_printk_skb: 716 callbacks suppressed [ 2764.238186][ T30] audit: type=1326 audit(2000001393.219:9577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2764.586358][ T30] audit: type=1326 audit(2000001393.219:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2765.868365][ T30] audit: type=1326 audit(2000001393.229:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2765.964388][ T30] audit: type=1326 audit(2000001393.229:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2765.988404][ T30] audit: type=1326 audit(2000001393.229:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2766.012807][ T30] audit: type=1326 audit(2000001393.229:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2766.160131][ T30] audit: type=1326 audit(2000001393.229:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2766.184141][ T30] audit: type=1326 audit(2000001393.229:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2766.217925][ T30] audit: type=1326 audit(2000001393.239:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2766.710226][T29193] syz.2.8719[29193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2766.710848][T29193] syz.2.8719[29193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2767.219732][ T30] audit: type=1326 audit(2000001393.239:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29169 comm="syz.6.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2767.352880][T29194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2767.360299][T29194] IPv6: NLM_F_CREATE should be set when creating new route [ 2767.370410][T29191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2767.377658][T29191] IPv6: NLM_F_CREATE should be set when creating new route [ 2768.872373][T29208] syz.4.8726[29208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2768.872943][T29208] syz.4.8726[29208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2769.057976][T29208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2769.076699][T29208] IPv6: NLM_F_CREATE should be set when creating new route [ 2769.995214][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 2769.995232][ T30] audit: type=1326 audit(2000001399.039:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.046866][T29212] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8729' sets config #0 [ 2770.080669][T29212] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8729' sets config #1 [ 2770.128555][ T30] audit: type=1326 audit(2000001399.079:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.152599][ T30] audit: type=1326 audit(2000001399.079:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.176815][ T30] audit: type=1326 audit(2000001399.079:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.207968][ T30] audit: type=1326 audit(2000001399.079:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.232664][ T30] audit: type=1326 audit(2000001399.079:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.281886][ T30] audit: type=1326 audit(2000001399.079:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.311574][T29215] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8730' sets config #0 [ 2770.326156][T29215] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8730' sets config #1 [ 2770.336661][ T30] audit: type=1326 audit(2000001399.079:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.366572][ T30] audit: type=1326 audit(2000001399.079:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2770.391679][ T30] audit: type=1326 audit(2000001399.079:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.8729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2771.764906][T29245] syz.6.8736[29245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2771.765020][T29245] syz.6.8736[29245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2771.793178][T29245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2771.812020][T29245] IPv6: NLM_F_CREATE should be set when creating new route [ 2776.062653][T29268] device veth1_macvtap left promiscuous mode [ 2776.088031][T29268] device macsec0 entered promiscuous mode [ 2776.097716][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2776.097733][ T30] audit: type=1326 audit(2000001405.139:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.130013][T28170] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 2776.138745][ T30] audit: type=1326 audit(2000001405.179:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.168417][ T30] audit: type=1326 audit(2000001405.189:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.236992][ T30] audit: type=1326 audit(2000001405.189:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.261053][ T30] audit: type=1326 audit(2000001405.189:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.286917][ T30] audit: type=1326 audit(2000001405.189:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.322490][ T30] audit: type=1326 audit(2000001405.189:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.346559][ T30] audit: type=1326 audit(2000001405.189:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.370290][ T30] audit: type=1326 audit(2000001405.219:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.393898][ T30] audit: type=1326 audit(2000001405.219:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.6.8750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2776.820331][T18552] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2776.974339][T29289] hub 1-0:1.0: USB hub found [ 2776.978104][T23107] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2776.980329][T29289] hub 1-0:1.0: 1 port detected [ 2777.197999][T18552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2777.208829][T18552] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2777.219772][T18552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.233871][T18552] usb 4-1: config 0 descriptor?? [ 2777.348068][T23107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2777.358682][T23107] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2777.379727][T23107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.394607][T23107] usb 6-1: config 0 descriptor?? [ 2779.921763][T29325] hub 1-0:1.0: USB hub found [ 2779.939002][T29325] hub 1-0:1.0: 1 port detected [ 2779.970264][T29328] hub 1-0:1.0: USB hub found [ 2779.977994][T18552] usbhid 4-1:0.0: can't add hid device: -71 [ 2779.984227][T18552] usbhid: probe of 4-1:0.0 failed with error -71 [ 2779.993959][T29328] hub 1-0:1.0: 1 port detected [ 2780.018538][T18552] usb 4-1: USB disconnect, device number 88 [ 2780.187952][T23107] usbhid 6-1:0.0: can't add hid device: -71 [ 2780.194539][T23107] usbhid: probe of 6-1:0.0 failed with error -71 [ 2780.227314][T23107] usb 6-1: USB disconnect, device number 76 [ 2781.020245][T29348] hub 1-0:1.0: USB hub found [ 2781.126893][T29348] hub 1-0:1.0: 1 port detected [ 2781.378540][ T30] kauditd_printk_skb: 946 callbacks suppressed [ 2781.378561][ T30] audit: type=1326 audit(2000001410.429:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.4.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2781.483270][T29359] hub 1-0:1.0: USB hub found [ 2781.488195][T29359] hub 1-0:1.0: 1 port detected [ 2781.490516][ T30] audit: type=1326 audit(2000001410.469:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.4.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd133f34929 code=0x7ffc0000 [ 2781.528028][ T30] audit: type=1326 audit(2000001410.509:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.554027][ T30] audit: type=1326 audit(2000001410.509:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.578518][ T30] audit: type=1326 audit(2000001410.509:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.602610][ T30] audit: type=1326 audit(2000001410.509:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.637024][ T30] audit: type=1326 audit(2000001410.509:10675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.757982][ T30] audit: type=1326 audit(2000001410.509:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.784645][ T30] audit: type=1326 audit(2000001410.509:10677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2781.808401][ T30] audit: type=1326 audit(2000001410.509:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29358 comm="syz.6.8775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2782.910870][T29375] hub 1-0:1.0: USB hub found [ 2782.916130][T29375] hub 1-0:1.0: 1 port detected [ 2782.932889][T29377] hub 1-0:1.0: USB hub found [ 2782.944298][T29377] hub 1-0:1.0: 1 port detected [ 2784.385502][T23909] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2784.606364][ T8615] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2784.776478][T29409] syz.5.8793[29409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2784.776590][T29409] syz.5.8793[29409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2784.792037][T29409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2786.148146][ T8615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2786.168248][ T8615] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2786.177457][ T8615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2786.197023][ T8615] usb 5-1: config 0 descriptor?? [ 2786.270686][T23909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2786.280636][T23909] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2786.289745][T23909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2786.378375][T23909] usb 4-1: config 0 descriptor?? [ 2786.454609][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 2786.454625][ T30] audit: type=1326 audit(2000001415.499:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2786.495402][T29418] hub 1-0:1.0: USB hub found [ 2786.501210][T29418] hub 1-0:1.0: 1 port detected [ 2787.405692][ T30] audit: type=1326 audit(2000001415.529:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.170870][ T30] audit: type=1326 audit(2000001415.529:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.194810][ T30] audit: type=1326 audit(2000001415.529:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.221400][ T30] audit: type=1326 audit(2000001415.529:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.254710][ T30] audit: type=1326 audit(2000001415.529:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.283822][ T30] audit: type=1326 audit(2000001415.529:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.319216][ T30] audit: type=1326 audit(2000001415.529:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.352444][ T30] audit: type=1326 audit(2000001415.529:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.362182][T23909] usbhid 4-1:0.0: can't add hid device: -71 [ 2788.396970][T23909] usbhid: probe of 4-1:0.0 failed with error -71 [ 2788.420538][ T30] audit: type=1326 audit(2000001415.529:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.5.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2788.425342][T29435] hub 1-0:1.0: USB hub found [ 2788.451661][T23909] usb 4-1: USB disconnect, device number 89 [ 2788.470110][T29435] hub 1-0:1.0: 1 port detected [ 2788.471405][T29443] device pim6reg1 entered promiscuous mode [ 2789.128058][ T8615] usbhid 5-1:0.0: can't add hid device: -71 [ 2789.136769][ T8615] usbhid: probe of 5-1:0.0 failed with error -71 [ 2789.508302][ T8615] usb 5-1: USB disconnect, device number 92 [ 2789.690031][T29457] device pim6reg1 entered promiscuous mode [ 2790.157915][ T8615] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2791.467876][T23909] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2791.478120][ T8615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2791.498296][ T8615] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2791.633549][ T8615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.756415][ T8615] usb 5-1: config 0 descriptor?? [ 2793.797996][T23909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2793.807976][T23909] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2793.817157][T23909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2794.718280][T23909] usb 3-1: config 0 descriptor?? [ 2794.738090][ T8615] usbhid 5-1:0.0: can't add hid device: -71 [ 2794.748247][ T8615] usbhid: probe of 5-1:0.0 failed with error -71 [ 2794.777326][ T8615] usb 5-1: USB disconnect, device number 93 [ 2794.790373][T23909] usb 3-1: can't set config #0, error -71 [ 2794.813170][T23909] usb 3-1: USB disconnect, device number 78 [ 2794.897424][T29510] syz.6.8820[29510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2794.897531][T29510] syz.6.8820[29510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2794.912966][T29510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2794.971450][T29515] device pim6reg1 entered promiscuous mode [ 2795.310092][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 2795.310111][ T30] audit: type=1326 audit(2000001424.359:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2795.319127][T29523] hub 1-0:1.0: USB hub found [ 2795.345049][T29523] hub 1-0:1.0: 1 port detected [ 2795.357968][T18552] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2795.384052][ T30] audit: type=1326 audit(2000001424.359:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2795.421317][ T30] audit: type=1326 audit(2000001424.359:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2795.445522][ T30] audit: type=1326 audit(2000001424.359:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2795.481010][ T30] audit: type=1326 audit(2000001424.359:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2795.517985][ T30] audit: type=1326 audit(2000001424.359:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2795.555037][ T30] audit: type=1326 audit(2000001424.359:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2796.339394][ T30] audit: type=1326 audit(2000001424.359:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2796.363680][ T30] audit: type=1326 audit(2000001424.359:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2796.387805][ T30] audit: type=1326 audit(2000001424.359:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7792570929 code=0x7ffc0000 [ 2796.515435][T29537] syz.3.8833[29537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2796.515930][T29537] syz.3.8833[29537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2796.571290][T29537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2796.967955][T23909] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2797.698219][T23909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2797.708553][T23909] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2797.717652][T23909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2797.728053][T18552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2797.732471][T23909] usb 5-1: config 0 descriptor?? [ 2797.739996][T18552] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2797.752566][T18552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2797.761488][T18552] usb 3-1: config 0 descriptor?? [ 2797.817310][T29553] hub 1-0:1.0: USB hub found [ 2797.822215][T29553] hub 1-0:1.0: 1 port detected [ 2799.993569][T29568] syz.6.8845[29568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2799.994503][T29568] syz.6.8845[29568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2801.177933][T18552] usbhid 3-1:0.0: can't add hid device: -71 [ 2801.198314][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 2801.198332][ T30] audit: type=1326 audit(2000001430.249:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2801.248719][T29573] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8848' sets config #0 [ 2801.258114][T18552] usbhid: probe of 3-1:0.0 failed with error -71 [ 2801.271860][ T30] audit: type=1326 audit(2000001430.289:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2801.295709][ T30] audit: type=1326 audit(2000001430.289:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2801.319493][ T30] audit: type=1326 audit(2000001430.289:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2801.343394][ T30] audit: type=1326 audit(2000001430.289:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2801.367206][T23909] usbhid 5-1:0.0: can't add hid device: -71 [ 2801.481104][T29578] hub 1-0:1.0: USB hub found [ 2801.486936][T23909] usbhid: probe of 5-1:0.0 failed with error -71 [ 2801.493630][ T30] audit: type=1326 audit(2000001430.289:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2801.512678][T18552] usb 3-1: USB disconnect, device number 79 [ 2801.576844][T29581] syz.2.8847[29581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2801.577345][T29581] syz.2.8847[29581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2801.682970][T29581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2801.771717][T29578] hub 1-0:1.0: 1 port detected [ 2801.831646][T23909] usb 5-1: USB disconnect, device number 94 [ 2802.250081][ T30] audit: type=1326 audit(2000001430.289:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2802.327765][ T30] audit: type=1326 audit(2000001430.289:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2802.362521][ T30] audit: type=1326 audit(2000001430.289:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2802.454187][ T30] audit: type=1326 audit(2000001430.289:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.3.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2804.180863][T29616] syz.4.8855[29616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2804.181247][T29616] syz.4.8855[29616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2806.464294][ T30] kauditd_printk_skb: 419 callbacks suppressed [ 2806.464318][ T30] audit: type=1326 audit(2000001434.789:11533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd97fbd88e7 code=0x7ffc0000 [ 2806.508907][ T30] audit: type=1326 audit(2000001434.789:11534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97fb7db19 code=0x7ffc0000 [ 2806.543472][ T30] audit: type=1326 audit(2000001434.789:11535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd97fbd88e7 code=0x7ffc0000 [ 2806.568342][ T30] audit: type=1326 audit(2000001434.789:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97fb7db19 code=0x7ffc0000 [ 2806.597473][ T30] audit: type=1326 audit(2000001434.789:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2806.656506][ T30] audit: type=1326 audit(2000001434.799:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd97fbd88e7 code=0x7ffc0000 [ 2806.731630][ T30] audit: type=1326 audit(2000001434.799:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97fb7db19 code=0x7ffc0000 [ 2807.374471][ T30] audit: type=1326 audit(2000001434.799:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2807.392115][T29645] hub 1-0:1.0: USB hub found [ 2807.398591][ T30] audit: type=1326 audit(2000001435.519:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd97fbd88e7 code=0x7ffc0000 [ 2807.427399][ T30] audit: type=1326 audit(2000001435.519:11542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.6.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97fb7db19 code=0x7ffc0000 [ 2807.727300][T29645] hub 1-0:1.0: 1 port detected [ 2807.897464][T17396] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2808.044774][T29661] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.8876' sets config #1 [ 2809.435497][T17396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2809.447797][T17396] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2809.457421][T17396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2809.470612][T17396] usb 5-1: config 0 descriptor?? [ 2809.601163][T29676] syz.3.8877[29676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2809.601282][T29676] syz.3.8877[29676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2809.737896][T13377] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2809.858916][T15351] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2810.118039][T13377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2810.127978][T13377] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2810.137061][T13377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.156259][T13377] usb 6-1: config 0 descriptor?? [ 2810.248095][T15351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2810.271696][T15351] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2810.289975][T15351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.320667][T15351] usb 7-1: config 0 descriptor?? [ 2811.499684][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 2811.499702][ T30] audit: type=1326 audit(2000001440.549:11652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.530150][ T30] audit: type=1326 audit(2000001440.549:11653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.554047][ T30] audit: type=1326 audit(2000001440.549:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.578375][ T30] audit: type=1326 audit(2000001440.549:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.602384][ T30] audit: type=1326 audit(2000001440.549:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.626273][ T30] audit: type=1326 audit(2000001440.549:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.649946][ T30] audit: type=1326 audit(2000001440.549:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.673986][ T30] audit: type=1326 audit(2000001440.549:11659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.697750][ T30] audit: type=1326 audit(2000001440.549:11660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2811.721912][ T30] audit: type=1326 audit(2000001440.549:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91169d5929 code=0x7ffc0000 [ 2812.128030][T17396] usbhid 5-1:0.0: can't add hid device: -71 [ 2812.134390][T17396] usbhid: probe of 5-1:0.0 failed with error -71 [ 2812.144248][T17396] usb 5-1: USB disconnect, device number 95 [ 2812.558032][T13377] usbhid 6-1:0.0: can't add hid device: -71 [ 2812.564115][T13377] usbhid: probe of 6-1:0.0 failed with error -71 [ 2812.579603][T13377] usb 6-1: USB disconnect, device number 77 [ 2812.669677][T29702] hub 1-0:1.0: USB hub found [ 2812.674493][T29702] hub 1-0:1.0: 1 port detected [ 2813.728310][T15351] usbhid 7-1:0.0: can't add hid device: -71 [ 2813.734754][T15351] usbhid: probe of 7-1:0.0 failed with error -71 [ 2813.775217][T29707] syz.5.8888[29707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2813.775780][T29707] syz.5.8888[29707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2813.851221][T15351] usb 7-1: USB disconnect, device number 43 [ 2816.219642][T29723] hub 1-0:1.0: USB hub found [ 2816.225600][T29723] hub 1-0:1.0: 1 port detected [ 2816.512247][ T30] kauditd_printk_skb: 485 callbacks suppressed [ 2816.512264][ T30] audit: type=1326 audit(2000001445.559:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb90629b8e7 code=0x7ffc0000 [ 2816.543066][ T30] audit: type=1326 audit(2000001445.559:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb906240b19 code=0x7ffc0000 [ 2816.651771][ T30] audit: type=1326 audit(2000001445.559:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2816.741303][ T30] audit: type=1326 audit(2000001445.589:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb90629b8e7 code=0x7ffc0000 [ 2816.846792][ T30] audit: type=1326 audit(2000001445.589:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb906240b19 code=0x7ffc0000 [ 2816.877904][ T30] audit: type=1326 audit(2000001445.589:12152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2816.901908][ T30] audit: type=1326 audit(2000001445.639:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb90629b8e7 code=0x7ffc0000 [ 2816.925916][ T30] audit: type=1326 audit(2000001445.639:12154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb906240b19 code=0x7ffc0000 [ 2816.949875][ T30] audit: type=1326 audit(2000001445.639:12155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9062a4929 code=0x7ffc0000 [ 2816.973849][ T30] audit: type=1326 audit(2000001445.639:12156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29724 comm="syz.3.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb90629b8e7 code=0x7ffc0000 [ 2817.082808][T29750] hub 1-0:1.0: USB hub found [ 2817.087737][T29750] hub 1-0:1.0: 1 port detected [ 2818.350911][T29763] syz.3.8907[29763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2818.351022][T29763] syz.3.8907[29763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2818.366652][T29763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2818.608730][T29766] syz.6.8908[29766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2818.608952][T29766] syz.6.8908[29766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2821.003911][T29776] syz.3.8912[29776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2821.015551][T29776] syz.3.8912[29776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2821.030535][T29776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2821.367890][T13377] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 2821.727947][T13377] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2821.746106][T13377] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2821.777508][T13377] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.821456][T13377] usb 7-1: config 0 descriptor?? [ 2823.087044][T29810] syz.5.8919[29810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2823.093012][T29810] syz.5.8919[29810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2823.347865][T23107] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2824.028073][T23107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2824.045210][T23107] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2824.074044][T23107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2824.131926][T23107] usb 5-1: config 0 descriptor?? [ 2824.595130][T13377] usbhid 7-1:0.0: can't add hid device: -71 [ 2824.604842][T13377] usbhid: probe of 7-1:0.0 failed with error -71 [ 2824.621560][T13377] usb 7-1: USB disconnect, device number 44 [ 2826.268708][T29833] syz.2.8925[29833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2826.268831][T29833] syz.2.8925[29833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2826.447225][T29836] syz.5.8928[29836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2826.458962][T29836] syz.5.8928[29836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2826.474318][T29836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2826.557920][ T8615] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2826.797959][ T8615] usb 4-1: Using ep0 maxpacket: 16 [ 2826.957951][ T8615] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2826.966346][ T8615] usb 4-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2826.977287][ T8615] usb 4-1: config 0 has no interface number 0 [ 2826.983601][ T8615] usb 4-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2826.994896][ T8615] usb 4-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2827.008468][ T8615] usb 4-1: config 0 interface 105 has no altsetting 0 [ 2827.158019][T23107] usbhid 5-1:0.0: can't add hid device: -71 [ 2827.164290][T23107] usbhid: probe of 5-1:0.0 failed with error -71 [ 2827.175972][T23107] usb 5-1: USB disconnect, device number 96 [ 2827.198054][ T8615] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2827.210342][ T8615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.224834][ T8615] usb 4-1: Product: syz [ 2827.232199][ T8615] usb 4-1: Manufacturer: syz [ 2827.240958][ T8615] usb 4-1: SerialNumber: syz [ 2827.252148][ T8615] usb 4-1: config 0 descriptor?? [ 2827.527977][T23107] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2829.955828][T23107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2829.972424][T23107] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2829.997841][T23107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2830.010283][ T8615] usb 4-1: USB disconnect, device number 90 [ 2830.017032][T23107] usb 5-1: config 0 descriptor?? [ 2830.063928][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 2830.063946][ T30] audit: type=1326 audit(2000001459.109:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.077356][T29870] hub 1-0:1.0: USB hub found [ 2830.098841][ T30] audit: type=1326 audit(2000001459.109:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.099581][T29870] hub 1-0:1.0: 1 port detected [ 2830.123426][ T30] audit: type=1326 audit(2000001459.109:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.162368][ T30] audit: type=1326 audit(2000001459.109:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.186515][ T30] audit: type=1326 audit(2000001459.109:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.228062][ T30] audit: type=1326 audit(2000001459.109:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.257046][ T30] audit: type=1326 audit(2000001459.109:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.282020][T23107] usbhid 5-1:0.0: can't add hid device: -71 [ 2830.294333][T23107] usbhid: probe of 5-1:0.0 failed with error -71 [ 2830.380087][T23107] usb 5-1: USB disconnect, device number 97 [ 2830.409544][ T30] audit: type=1326 audit(2000001459.109:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.548776][ T30] audit: type=1326 audit(2000001459.109:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.667037][ T30] audit: type=1326 audit(2000001459.109:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29869 comm="syz.6.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97fbe1929 code=0x7ffc0000 [ 2830.797909][T23107] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2831.308133][T23107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2831.318576][T29886] syz.5.8945[29886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2831.318680][T29886] syz.5.8945[29886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2831.332092][T23107] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2831.359975][T29886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2831.360849][T23107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2831.379972][T23107] usb 5-1: config 0 descriptor?? [ 2832.179734][T29913] device pim6reg1 entered promiscuous mode [ 2832.193568][T29914] syz.2.8950[29914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2832.193673][T29914] syz.2.8950[29914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2832.882430][T29923] syz.2.8955[29923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2832.894095][T29923] syz.2.8955[29923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2833.582258][T23107] usbhid 5-1:0.0: can't add hid device: -71 [ 2833.599826][T23107] usbhid: probe of 5-1:0.0 failed with error -71 [ 2833.610587][T23107] usb 5-1: USB disconnect, device number 98 [ 2835.648802][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 2835.648826][ T30] audit: type=1400 audit(2000001464.699:12359): avc: denied { relabelfrom } for pid=29953 comm="syz.3.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2835.696894][ T30] audit: type=1400 audit(2000001464.719:12360): avc: denied { relabelto } for pid=29953 comm="syz.3.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2835.927903][ T30] audit: type=1400 audit(2000001464.959:12361): avc: denied { map } for pid=29970 comm="syz.3.8973" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2837.075201][T29984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2838.727890][ T30] audit: type=1400 audit(2000001467.739:12362): avc: denied { write } for pid=29990 comm="syz.5.8980" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2839.106840][T30007] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2840.521008][T13377] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2842.447247][T30037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2843.205218][T30046] syz.2.8995[30046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2843.205334][T30046] syz.2.8995[30046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2843.630624][T30055] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2844.640026][T30061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2847.061350][T30088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2847.517975][T17396] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2848.077904][T17396] usb 4-1: Using ep0 maxpacket: 16 [ 2848.247946][T17396] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2848.266293][T17396] usb 4-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2848.286943][T17396] usb 4-1: config 0 has no interface number 0 [ 2848.316212][T17396] usb 4-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2848.362183][T30101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2848.405034][T17396] usb 4-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2848.594875][T17396] usb 4-1: config 0 interface 105 has no altsetting 0 [ 2848.808286][T17396] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2848.838713][T17396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2848.879758][T17396] usb 4-1: Product: syz [ 2848.902418][T17396] usb 4-1: Manufacturer: syz [ 2848.927027][T17396] usb 4-1: SerialNumber: syz [ 2849.291872][T17396] usb 4-1: config 0 descriptor?? [ 2851.803082][T17396] usb 4-1: USB disconnect, device number 91 [ 2852.421981][T17396] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2853.358339][T17396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2853.398157][T17396] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2853.411620][T30116] kvm [30115]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2853.430576][T17396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2853.468440][T17396] usb 4-1: config 0 descriptor?? [ 2853.505779][T30116] kvm [30115]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2853.573785][T30116] kvm [30115]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2855.556629][ T30] audit: type=1400 audit(2000001483.419:12363): avc: denied { create } for pid=30137 comm="syz.5.9023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2855.679218][T30149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2856.597859][T18552] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2858.226557][T30159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2858.234842][T17396] usbhid 4-1:0.0: can't add hid device: -71 [ 2858.241465][T17396] usbhid: probe of 4-1:0.0 failed with error -71 [ 2858.252779][T17396] usb 4-1: USB disconnect, device number 92 [ 2858.837893][T18552] usb 5-1: Using ep0 maxpacket: 16 [ 2858.957912][T18552] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 2858.970158][T18552] usb 5-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2858.992094][T18552] usb 5-1: config 0 has no interface number 0 [ 2859.005438][T18552] usb 5-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2859.031657][T18552] usb 5-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2859.062906][T18552] usb 5-1: config 0 interface 105 has no altsetting 0 [ 2859.077926][T23909] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2859.225720][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.236493][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.238116][T18552] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2859.256383][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.267637][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.270229][T18552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2859.279120][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.295513][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.306648][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.307587][T18552] usb 5-1: Product: syz [ 2859.318318][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.330850][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.338710][T18552] usb 5-1: Manufacturer: syz [ 2859.344159][T18552] usb 5-1: SerialNumber: syz [ 2859.352681][T30176] kvm [30174]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 2859.370269][T18552] usb 5-1: config 0 descriptor?? [ 2859.397895][T18552] usb 5-1: can't set config #0, error -71 [ 2859.412786][T18552] usb 5-1: USB disconnect, device number 99 [ 2859.468012][T23909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2859.486647][T23909] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2859.520051][T23909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2859.556216][T23909] usb 7-1: config 0 descriptor?? [ 2862.277961][T23909] usbhid 7-1:0.0: can't add hid device: -71 [ 2862.284019][T23909] usbhid: probe of 7-1:0.0 failed with error -71 [ 2862.312659][T23909] usb 7-1: USB disconnect, device number 46 [ 2862.751421][T30232] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2865.359260][T30260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2866.988362][T23909] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2867.411120][T30291] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2868.003181][T23909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2868.013049][T23909] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2868.047845][T23909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2868.057188][T23909] usb 5-1: config 0 descriptor?? [ 2870.611170][T13387] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2870.978096][T13387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2870.990263][T13387] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2871.009840][T13387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2871.035066][T13387] usb 6-1: config 0 descriptor?? [ 2871.837943][T23909] usbhid 5-1:0.0: can't add hid device: -71 [ 2871.844011][T23909] usbhid: probe of 5-1:0.0 failed with error -71 [ 2871.861999][T23909] usb 5-1: USB disconnect, device number 100 [ 2873.227937][T13387] usbhid 6-1:0.0: can't add hid device: -71 [ 2873.234231][T13387] usbhid: probe of 6-1:0.0 failed with error -71 [ 2873.245481][T13387] usb 6-1: USB disconnect, device number 78 [ 2875.449234][T30367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2881.376832][T30426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2882.780410][T30456] bridge0: port 1(bridge_slave_0) entered blocking state [ 2882.787517][T30456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2882.798951][T30456] device bridge_slave_0 entered promiscuous mode [ 2882.810348][T30456] bridge0: port 2(bridge_slave_1) entered blocking state [ 2882.817426][T30456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2882.829703][T30456] device bridge_slave_1 entered promiscuous mode [ 2883.119987][T30465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2883.626478][T21641] tipc: Disabling bearer [ 2883.631956][T21641] tipc: Disabling bearer [ 2883.653719][T21641] tipc: Left network mode [ 2883.688928][T30456] bridge0: port 2(bridge_slave_1) entered blocking state [ 2883.696013][T30456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2883.703342][T30456] bridge0: port 1(bridge_slave_0) entered blocking state [ 2883.710408][T30456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2883.779769][T21651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2883.809055][T21651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2883.824579][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2883.863900][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2884.053483][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2884.062023][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2884.071393][T21651] bridge0: port 1(bridge_slave_0) entered blocking state [ 2884.078483][T21651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2884.966575][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2884.976279][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2884.985511][T21651] bridge0: port 2(bridge_slave_1) entered blocking state [ 2884.992621][T21651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2885.267915][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2885.281788][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2885.364692][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2885.373124][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2885.407261][T30456] device veth0_vlan entered promiscuous mode [ 2885.423638][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2885.432637][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2885.444112][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2885.453480][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2885.467137][T30456] device veth1_macvtap entered promiscuous mode [ 2886.907905][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2886.941581][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2887.083449][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2887.147735][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2887.275659][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2887.615603][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2887.647379][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2887.656014][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2887.669461][T21651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2888.090544][T30535] overlayfs: failed to resolve './file1': -2 [ 2888.240397][T21641] device bridge_slave_1 left promiscuous mode [ 2888.246646][T21641] bridge0: port 2(bridge_slave_1) entered disabled state [ 2888.254637][T21641] device bridge_slave_0 left promiscuous mode [ 2888.261041][T21641] bridge0: port 1(bridge_slave_0) entered disabled state [ 2888.269696][T21641] device veth0_vlan left promiscuous mode [ 2890.421803][T30558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2890.486362][T30567] device pim6reg1 entered promiscuous mode [ 2891.998559][T18552] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2892.401122][T30609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2892.567874][T13387] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2893.307912][T13387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2893.324763][T13387] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2893.344026][T13387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2893.368077][T13387] usb 4-1: config 0 descriptor?? [ 2893.457916][T18552] usb 7-1: Using ep0 maxpacket: 16 [ 2893.577900][T18552] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 2893.589114][T18552] usb 7-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2893.606642][T18552] usb 7-1: config 0 has no interface number 0 [ 2893.617090][T18552] usb 7-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2893.635736][T18552] usb 7-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2893.662913][T18552] usb 7-1: config 0 interface 105 has no altsetting 0 [ 2893.827902][T18552] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2894.429049][T18552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2894.438663][T18552] usb 7-1: Product: syz [ 2894.442856][T18552] usb 7-1: Manufacturer: syz [ 2894.447476][T18552] usb 7-1: SerialNumber: syz [ 2894.468158][T18552] usb 7-1: config 0 descriptor?? [ 2894.498091][T18552] usb 7-1: can't set config #0, error -71 [ 2894.506565][T18552] usb 7-1: USB disconnect, device number 47 [ 2898.324378][T13387] usbhid 4-1:0.0: can't add hid device: -71 [ 2898.717896][T13387] usbhid: probe of 4-1:0.0 failed with error -71 [ 2898.729588][T13387] usb 4-1: USB disconnect, device number 93 [ 2898.787602][T30661] device pim6reg1 entered promiscuous mode [ 2898.992540][T30665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2899.407821][T18552] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2899.677843][T18552] usb 3-1: Using ep0 maxpacket: 16 [ 2899.879310][T30690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2901.047947][T18552] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 2901.056163][T18552] usb 3-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2901.076051][T30696] device pim6reg1 entered promiscuous mode [ 2901.087928][T18552] usb 3-1: config 0 has no interface number 0 [ 2901.107883][T18552] usb 3-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2901.119271][T18552] usb 3-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2901.132661][T18552] usb 3-1: config 0 interface 105 has no altsetting 0 [ 2901.547991][T18552] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2901.560661][T18552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.580006][T18552] usb 3-1: Product: syz [ 2901.589501][T18552] usb 3-1: Manufacturer: syz [ 2901.601383][T18552] usb 3-1: SerialNumber: syz [ 2901.614547][T18552] usb 3-1: config 0 descriptor?? [ 2902.307872][T23909] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2902.387837][T13387] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2902.728473][T23909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2902.738483][T23909] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2902.747513][T23909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.849393][T23909] usb 6-1: config 0 descriptor?? [ 2902.965357][T13387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2902.983682][T13387] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2902.997005][T13387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2903.011641][T13387] usb 5-1: config 0 descriptor?? [ 2904.279587][T18552] usb 3-1: USB disconnect, device number 80 [ 2905.385572][T23909] usbhid 6-1:0.0: can't add hid device: -71 [ 2905.391771][T23909] usbhid: probe of 6-1:0.0 failed with error -71 [ 2905.435273][T13387] usbhid 5-1:0.0: can't add hid device: -71 [ 2905.442107][T13387] usbhid: probe of 5-1:0.0 failed with error -71 [ 2905.449390][T23909] usb 6-1: USB disconnect, device number 79 [ 2905.470779][T13387] usb 5-1: USB disconnect, device number 101 [ 2906.205564][T23909] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2906.641777][T23909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2906.652352][T23909] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2906.663172][T23909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2906.675934][T23909] usb 6-1: config 0 descriptor?? [ 2907.208818][T15351] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2907.467904][T15351] usb 3-1: Using ep0 maxpacket: 16 [ 2907.597940][T15351] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 2907.606213][T15351] usb 3-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 2907.616556][T15351] usb 3-1: config 0 has no interface number 0 [ 2907.622755][T15351] usb 3-1: too many endpoints for config 0 interface 105 altsetting 50: 182, using maximum allowed: 30 [ 2907.633912][T15351] usb 3-1: config 0 interface 105 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2907.647315][T15351] usb 3-1: config 0 interface 105 has no altsetting 0 [ 2907.807998][T15351] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2907.817114][T15351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2907.825245][T15351] usb 3-1: Product: syz [ 2907.829500][T15351] usb 3-1: Manufacturer: syz [ 2907.834135][T15351] usb 3-1: SerialNumber: syz [ 2907.839688][T15351] usb 3-1: config 0 descriptor?? [ 2908.557927][T23909] usbhid 6-1:0.0: can't add hid device: -71 [ 2908.564016][T23909] usbhid: probe of 6-1:0.0 failed with error -71 [ 2908.649208][T23909] usb 6-1: USB disconnect, device number 80 [ 2908.933743][T30811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2910.129686][T15351] usb 3-1: USB disconnect, device number 81 [ 2912.337486][T30829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2912.344766][T30829] IPv6: NLM_F_CREATE should be set when creating new route [ 2913.278409][T30835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2915.904923][T30863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2917.567961][T17396] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2918.487910][T17396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2918.497705][T17396] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2918.565982][T17396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2918.578356][T17396] usb 6-1: config 0 descriptor?? [ 2920.090734][T30901] bridge0: port 1(bridge_slave_0) entered blocking state [ 2920.098036][T30901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.105571][T30901] device bridge_slave_0 entered promiscuous mode [ 2920.113050][T30901] bridge0: port 2(bridge_slave_1) entered blocking state [ 2920.120346][T30901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.128110][T30901] device bridge_slave_1 entered promiscuous mode [ 2920.203871][T30901] bridge0: port 2(bridge_slave_1) entered blocking state [ 2920.210993][T30901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2920.218345][T30901] bridge0: port 1(bridge_slave_0) entered blocking state [ 2920.225650][T30901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2920.254790][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2920.263885][T21641] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.271714][T21641] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.282272][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2920.290611][T21641] bridge0: port 1(bridge_slave_0) entered blocking state [ 2920.297690][T21641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2920.306950][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2920.315435][T21641] bridge0: port 2(bridge_slave_1) entered blocking state [ 2920.322579][T21641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2920.417831][ C1] ------------[ cut here ]------------ [ 2920.423323][ C1] refcount_t: addition on 0; use-after-free. [ 2920.429456][ C1] WARNING: CPU: 1 PID: 30896 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 2920.438963][ C1] Modules linked in: [ 2920.442870][ C1] CPU: 1 PID: 30896 Comm: syz.6.9235 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2920.454260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2920.464343][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 2920.470541][ C1] Code: 04 01 48 c7 c7 60 ef 62 85 e8 08 9d 50 02 0f 0b eb df e8 5f d6 1c ff c6 05 ba f8 99 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 <0f> 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 [ 2920.490264][ C1] RSP: 0000:ffffc900001d09e0 EFLAGS: 00010246 [ 2920.496362][ C1] RAX: be09dad65244f700 RBX: 0000000000000002 RCX: ffff888124f54f00 [ 2920.504369][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 2920.512380][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: fffff5200003a089 [ 2920.520484][ C1] R10: fffff5200003a089 R11: 1ffff9200003a088 R12: ffff888113a4e408 [ 2920.528500][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc900001d0ba0 [ 2920.536494][ C1] FS: 000055558c475500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2920.545470][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2920.552090][ C1] CR2: 000000110c2fb52c CR3: 0000000124294000 CR4: 00000000003506a0 [ 2920.560108][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2920.568118][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2920.576117][ C1] Call Trace: [ 2920.579664][ C1] [ 2920.582550][ C1] tipc_crypto_xmit+0x1938/0x2400 [ 2920.587665][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2920.592924][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 2920.597640][ C1] ? irqentry_exit+0x37/0x40 [ 2920.602312][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 2920.607569][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 2920.612567][ C1] ? tipc_disc_timeout+0x685/0x830 [ 2920.617720][ C1] tipc_disc_timeout+0x6a2/0x830 [ 2920.622699][ C1] ? update_rq_clock+0x1eb/0x580 [ 2920.627814][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 2920.633048][ C1] ? __kasan_check_write+0x14/0x20 [ 2920.638254][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2920.643827][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 2920.649073][ C1] call_timer_fn+0x38/0x290 [ 2920.653627][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 2920.658876][ C1] __run_timers+0x639/0x9a0 [ 2920.663400][ C1] ? calc_index+0x200/0x200 [ 2920.667954][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 2920.672840][ C1] run_timer_softirq+0x6a/0xf0 [ 2920.677638][ C1] handle_softirqs+0x250/0x560 [ 2920.682428][ C1] __irq_exit_rcu+0x52/0xf0 [ 2920.686972][ C1] irq_exit_rcu+0x9/0x10 [ 2920.691249][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2920.696932][ C1] [ 2920.699906][ C1] [ 2920.702857][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2920.708887][ C1] RIP: 0010:finish_task_switch+0x173/0x780 [ 2920.714714][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 69 4f 5f 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 95 da 5d 03 fb 49 8d 9f 38 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 2920.734483][ C1] RSP: 0000:ffffc90000d57d40 EFLAGS: 00000282 [ 2920.740597][ C1] RAX: 0000000080000001 RBX: ffff888124f55a38 RCX: 0000000000000000 [ 2920.748605][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff [ 2920.756661][ C1] RBP: ffffc90000d57d90 R08: dffffc0000000000 R09: ffffed10226d876e [ 2920.764685][ C1] R10: ffffed10226d876e R11: 1ffff110226d876d R12: ffff8881f71378c0 [ 2920.772716][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888124f54f00 [ 2920.780775][ C1] ? __switch_to_asm+0x3a/0x60 [ 2920.785571][ C1] __schedule+0xb76/0x14c0 [ 2920.790050][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2920.795993][ C1] schedule+0x11e/0x1e0 [ 2920.800198][ C1] exit_to_user_mode_loop+0x50/0xe0 [ 2920.805663][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 2920.811176][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 2920.816678][ C1] irqentry_exit+0x12/0x40 [ 2920.821155][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 2920.826290][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2920.831809][ C1] RIP: 0033:0x7fd97faa09f0 [ 2920.836244][ C1] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 2920.855911][ C1] RSP: 002b:00007ffcc6510048 EFLAGS: 00000246 [ 2920.862039][ C1] RAX: 000000008162e4d3 RBX: 00007fd980938720 RCX: ffffffff8162e4d3 [ 2920.870055][ C1] RDX: 00000000000004d3 RSI: ffffffff8162e4d3 RDI: 000000000000000d [ 2920.878060][ C1] RBP: ffffffff8162e4d3 R08: 00007fd97fdf3000 R09: 00007fd97fdf5000 [ 2920.886072][ C1] R10: 000000008162e4d7 R11: 000000000000000d R12: 000000000000000d [ 2920.894083][ C1] R13: 0000000000000000 R14: ffffffff8162eb19 R15: 0000000000059158 [ 2920.902132][ C1] ? __cgroup_account_cputime+0xe9/0x120 [ 2920.907824][ C1] ? cgroup_rstat_flush_locked+0xa73/0xb60 [ 2920.907846][ C0] ------------[ cut here ]------------ [ 2920.907855][ C0] refcount_t: saturated; leaking memory. [ 2920.913743][ C1] ? cgroup_rstat_flush_locked+0xa73/0xb60 [ 2920.919379][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 2920.924970][ C1] ? cgroup_rstat_flush_locked+0xa73/0xb60 [ 2920.930790][ C0] Modules linked in: [ 2920.939997][ C1] [ 2920.945872][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2920.949769][ C1] ---[ end trace 8f6ab9f00de0861f ]--- [ 2920.952777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2920.963722][ C1] ------------[ cut here ]------------ [ 2920.969156][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 2920.979215][ C1] refcount_t: underflow; use-after-free. [ 2920.984656][ C0] Code: 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 0f 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 98 9c 50 02 <0f> 0b e9 6c ff ff ff e8 ec d5 1c ff c6 05 4a f8 99 04 01 48 c7 c7 [ 2920.990921][ C1] WARNING: CPU: 1 PID: 30896 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 2920.996416][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2921.016019][ C1] Modules linked in: [ 2921.025465][ C0] [ 2921.025472][ C0] RAX: b94408aa27236b00 RBX: 0000000000000001 RCX: ffffffff8661c340 [ 2921.031533][ C1] CPU: 1 PID: 30896 Comm: syz.6.9235 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2921.035409][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 2921.037726][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2921.045708][ C0] RBP: ffffc900000079f0 R08: 0000000000000004 R09: 0000000000000003 [ 2921.057065][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 2921.065034][ C0] R10: fffff52000000e9c R11: 1ffff92000000e9c R12: ffff888113a4e408 [ 2921.075094][ C1] Code: 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 0f 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 <0f> 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 [ 2921.083068][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000007ba0 [ 2921.089219][ C1] RSP: 0000:ffffc900001d09e0 EFLAGS: 00010246 [ 2921.097201][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2921.116907][ C1] [ 2921.124865][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2921.130941][ C1] RAX: be09dad65244f700 RBX: 0000000000000003 RCX: ffff888124f54f00 [ 2921.139883][ C0] CR2: 00005555780a74a8 CR3: 000000010ed16000 CR4: 00000000003506b0 [ 2921.142203][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 2921.142216][ C1] RBP: ffffc900001d09f0 R08: 0000000000000004 R09: 0000000000000003 [ 2921.142228][ C1] R10: fffff5200003a09c R11: 1ffff9200003a09c R12: ffff888113a4e408 [ 2921.148811][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2921.156768][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 2921.164740][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2921.172717][ C1] FS: 000055558c475500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2921.180687][ C0] Call Trace: [ 2921.180696][ C0] [ 2921.188752][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2921.196734][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 2921.204768][ C1] CR2: 000000110c2fb52c CR3: 0000000124294000 CR4: 00000000003506a0 [ 2921.212744][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2921.221676][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2921.224944][ C0] ? __copy_skb_header+0x437/0x600 [ 2921.227797][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2921.234371][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2921.239399][ C1] Call Trace: [ 2921.247354][ C0] ? __skb_clone+0x47a/0x790 [ 2921.252575][ C1] [ 2921.260718][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2921.265825][ C1] tipc_crypto_xmit+0x1a82/0x2400 [ 2921.273794][ C0] ? skb_clone+0x202/0x360 [ 2921.278997][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2921.282265][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2921.286841][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 2921.289703][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2921.294626][ C1] ? irqentry_exit+0x37/0x40 [ 2921.299650][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 2921.304057][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 2921.309250][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2921.314188][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 2921.318861][ C0] call_timer_fn+0x38/0x290 [ 2921.324052][ C1] ? tipc_disc_timeout+0x685/0x830 [ 2921.328640][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2921.334799][ C1] tipc_disc_timeout+0x6a2/0x830 [ 2921.339990][ C0] __run_timers+0x639/0x9a0 [ 2921.345172][ C1] ? update_rq_clock+0x1eb/0x580 [ 2921.350374][ C0] ? calc_index+0x200/0x200 [ 2921.354953][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 2921.360072][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2921.365262][ C1] ? __kasan_check_write+0x14/0x20 [ 2921.370196][ C0] run_timer_softirq+0x6a/0xf0 [ 2921.374683][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2921.379622][ C0] handle_softirqs+0x250/0x560 [ 2921.384111][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 2921.389310][ C0] __irq_exit_rcu+0x52/0xf0 [ 2921.394147][ C1] call_timer_fn+0x38/0x290 [ 2921.399255][ C0] irq_exit_rcu+0x9/0x10 [ 2921.404002][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 2921.409539][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2921.414293][ C1] __run_timers+0x639/0x9a0 [ 2921.419485][ C0] [ 2921.419494][ C0] [ 2921.423986][ C1] ? calc_index+0x200/0x200 [ 2921.428482][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2921.432711][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 2921.437908][ C0] RIP: 0010:default_idle+0xf/0x20 [ 2921.443535][ C1] run_timer_softirq+0x6a/0xf0 [ 2921.448036][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 54 ff ff ff 4c 89 ff e8 b6 9d 01 fd e9 47 ff ff ff 00 55 48 89 e5 66 90 0f 00 2d c3 e4 5f 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 2921.450978][ C1] handle_softirqs+0x250/0x560 [ 2921.453952][ C0] RSP: 0018:ffffffff86607d58 EFLAGS: 00000242 [ 2921.458459][ C1] __irq_exit_rcu+0x52/0xf0 [ 2921.464425][ C0] [ 2921.464431][ C0] RAX: 000000000010432c RBX: ffffffff8661c340 RCX: 000000000010432c [ 2921.469272][ C1] irq_exit_rcu+0x9/0x10 [ 2921.474282][ C0] RDX: 0000000000000001 RSI: ffffffff85632900 RDI: ffffffff856328c0 [ 2921.479042][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2921.498642][ C0] RBP: ffffffff86607d58 R08: dffffc0000000000 R09: ffffed103ee0718f [ 2921.503395][ C1] [ 2921.509635][ C0] R10: ffffed103ee0718f R11: 1ffff1103ee0718e R12: 0000000000000000 [ 2921.514127][ C1] [ 2921.516444][ C0] R13: 1ffffffff0cc3868 R14: 0000000000000000 R15: dffffc0000000000 [ 2921.524416][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2921.528658][ C0] arch_cpu_idle+0xa/0x10 [ 2921.536613][ C1] RIP: 0010:finish_task_switch+0x173/0x780 [ 2921.542239][ C0] default_idle_call+0x71/0x1d0 [ 2921.550218][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 69 4f 5f 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 95 da 5d 03 fb 49 8d 9f 38 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 2921.553139][ C0] do_idle+0x1df/0x530 [ 2921.561117][ C1] RSP: 0000:ffffc90000d57d40 EFLAGS: 00000282 [ 2921.564040][ C0] ? irqentry_exit+0x30/0x40 [ 2921.572018][ C1] [ 2921.572025][ C1] RAX: 0000000080000001 RBX: ffff888124f55a38 RCX: 0000000000000000 [ 2921.577989][ C0] ? sysvec_call_function_single+0x61/0xc0 [ 2921.582317][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff [ 2921.582334][ C1] RBP: ffffc90000d57d90 R08: dffffc0000000000 R09: ffffed10226d876e [ 2921.588136][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2921.592972][ C1] R10: ffffed10226d876e R11: 1ffff110226d876d R12: ffff8881f71378c0 [ 2921.612579][ C0] ? do_idle+0x518/0x530 [ 2921.616632][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888124f54f00 [ 2921.622705][ C0] cpu_startup_entry+0x18/0x20 [ 2921.627312][ C1] ? __switch_to_asm+0x3a/0x60 [ 2921.629742][ C0] rest_init+0x10a/0x130 [ 2921.637716][ C1] __schedule+0xb76/0x14c0 [ 2921.643515][ C0] ? time_init+0x40/0x40 [ 2921.651609][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2921.659574][ C0] arch_call_rest_init+0xe/0x10 [ 2921.664766][ C1] schedule+0x11e/0x1e0 [ 2921.672739][ C0] start_kernel+0x465/0x4e0 [ 2921.676968][ C1] exit_to_user_mode_loop+0x50/0xe0 [ 2921.684943][ C0] x86_64_start_reservations+0x2a/0x30 [ 2921.689708][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 2921.694456][ C0] x86_64_start_kernel+0x5b/0x60 [ 2921.698694][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 2921.703093][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 2921.707342][ C1] irqentry_exit+0x12/0x40 [ 2921.713231][ C0] [ 2921.718079][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 2921.722225][ C0] ---[ end trace 8f6ab9f00de08620 ]--- [ 2921.726721][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2921.782620][ C1] RIP: 0033:0x7fd97faa09f0 [ 2921.787031][ C1] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 2921.806793][ C1] RSP: 002b:00007ffcc6510048 EFLAGS: 00000246 [ 2921.812910][ C1] RAX: 000000008162e4d3 RBX: 00007fd980938720 RCX: ffffffff8162e4d3 [ 2921.820915][ C1] RDX: 00000000000004d3 RSI: ffffffff8162e4d3 RDI: 000000000000000d [ 2921.828929][ C1] RBP: ffffffff8162e4d3 R08: 00007fd97fdf3000 R09: 00007fd97fdf5000 [ 2921.836911][ C1] R10: 000000008162e4d7 R11: 000000000000000d R12: 000000000000000d [ 2921.845122][ C1] R13: 0000000000000000 R14: ffffffff8162eb19 R15: 0000000000059158 [ 2921.853259][ C1] ? __cgroup_account_cputime+0xe9/0x120 [ 2921.858944][ C1] ? cgroup_rstat_flush_locked+0xa73/0xb60 [ 2921.864783][ C1] ? cgroup_rstat_flush_locked+0xa73/0xb60 [ 2921.870625][ C1] ? cgroup_rstat_flush_locked+0xa73/0xb60 [ 2921.876453][ C1] [ 2921.879490][ C1] ---[ end trace 8f6ab9f00de08621 ]--- [ 2921.889887][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2921.912348][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2921.921114][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2921.934998][T30901] device veth0_vlan entered promiscuous mode [ 2921.958344][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2921.967152][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2921.978836][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2921.986503][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2922.005948][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2922.007942][T17396] usbhid 6-1:0.0: can't add hid device: -71 [ 2922.014670][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2922.019977][T17396] usbhid: probe of 6-1:0.0 failed with error -71 [ 2922.031565][T30901] device veth1_macvtap entered promiscuous mode [ 2922.036090][T17396] usb 6-1: USB disconnect, device number 81 [ 2922.149216][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2922.160576][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2922.171192][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2922.246114][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2922.375147][T21641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2923.233746][T21611] tipc: Disabling bearer [ 2923.239057][T21611] tipc: Disabling bearer [ 2923.250637][T21611] tipc: Disabling bearer [ 2923.266216][T21611] tipc: Left network mode [ 2923.318424][T21611] ------------[ cut here ]------------ [ 2923.324047][T21611] refcount_t: saturated; leaking memory. [ 2923.330378][T21611] WARNING: CPU: 0 PID: 21611 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 2923.340180][T21611] Modules linked in: [ 2923.344142][T21611] CPU: 0 PID: 21611 Comm: kworker/u4:44 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2923.356033][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2923.366278][T21611] Workqueue: netns cleanup_net [ 2923.371220][T21611] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 2923.377668][T21611] Code: 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 0f 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 <0f> 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 [ 2923.398211][T21611] RSP: 0018:ffffc90000e577c0 EFLAGS: 00010246 [ 2923.404425][T21611] RAX: d32c5d119a005d00 RBX: 0000000000000000 RCX: ffff888118c98000 [ 2923.412789][T21611] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2923.421660][T21611] RBP: ffffc90000e577d0 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 2923.489354][T21611] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: 1ffff920001caf04 [ 2923.646633][T21611] R13: ffff8881354ea08c R14: 0000000000000000 R15: 0000000000000cc0 [ 2923.759957][T21611] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2923.769449][T21611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2923.776053][T21611] CR2: 000000110c2d547a CR3: 0000000122669000 CR4: 00000000003506a0 [ 2923.784421][T21611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2923.792648][T21611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2923.800983][T21611] Call Trace: [ 2923.804276][T21611] [ 2924.005822][T21611] nf_nat_masq_schedule+0x439/0x4c0 [ 2924.011758][T21611] ? __kasan_check_write+0x14/0x20 [ 2924.017327][T21611] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 2924.024145][T21611] ? masq_device_event+0xd0/0xd0 [ 2924.030072][T21611] ? nfqnl_rcv_dev_event+0x441/0x470 [ 2924.035496][T21611] ? __kasan_check_read+0x11/0x20 [ 2924.042014][T21611] masq_device_event+0x9b/0xd0 [ 2924.046903][T21611] raw_notifier_call_chain+0x90/0x100 [ 2924.095812][T21611] dev_close_many+0x32d/0x4d0 [ 2924.101979][T21611] ? __dev_open+0x4c0/0x4c0 [ 2924.133892][T21611] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2924.186859][T21611] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2924.242846][T21611] ? generic_exec_single+0x22d/0x390 [ 2924.294381][T21611] ? __kasan_check_read+0x11/0x20 [ 2924.343176][T21611] unregister_netdevice_many+0x44c/0x1990 [ 2924.397928][T21611] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2924.452353][T21611] ? wait_for_common+0x35d/0x420 [ 2924.919170][T21611] ? alloc_netdev_mqs+0xc90/0xc90 [ 2924.924358][T21611] ? unregister_netdevice_queue+0x1aa/0x360 [ 2924.959153][T21611] ? list_netdevice+0x4c0/0x4c0 [ 2924.964069][T21611] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 2924.969609][T21611] ? ip6gre_init_net+0x340/0x340 [ 2924.974595][T21611] ? ip6gre_init_net+0x340/0x340 [ 2924.979647][T21611] cleanup_net+0x602/0xad0 [ 2924.984091][T21611] ? ops_init+0x4a0/0x4a0 [ 2924.988547][T21611] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2924.993945][T21611] process_one_work+0x6be/0xba0 [ 2924.998917][T21611] worker_thread+0xa59/0x1200 [ 2925.003633][T21611] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 2925.009426][T21611] kthread+0x411/0x500 [ 2925.013519][T21611] ? worker_clr_flags+0x190/0x190 [ 2925.018640][T21611] ? kthread_blkcg+0xd0/0xd0 [ 2925.023518][T21611] ret_from_fork+0x1f/0x30 [ 2925.032858][T21611] [ 2925.042072][T21611] ---[ end trace 8f6ab9f00de08622 ]--- [ 2925.065699][T30935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2925.079899][T30942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2926.441187][T17396] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2926.629671][T21611] device bridge_slave_1 left promiscuous mode [ 2926.637923][T21611] bridge0: port 2(bridge_slave_1) entered disabled state [ 2926.656381][T21611] device bridge_slave_0 left promiscuous mode [ 2926.667968][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.686333][T21611] device veth0_vlan left promiscuous mode [ 2926.807957][T17396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2926.818038][T17396] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2926.827102][T17396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2926.838021][T17396] usb 6-1: config 0 descriptor?? [ 2926.997874][T17402] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2927.707899][T17402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2927.717683][T17402] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2927.727029][T17402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2927.739014][T17402] usb 5-1: config 0 descriptor?? [ 2928.102759][T21611] ================================================================== [ 2928.110873][T21611] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 2928.118616][T21611] Read of size 4 at addr ffff8881354ea08c by task kworker/u4:44/21611 [ 2928.126773][T21611] [ 2928.129120][T21611] CPU: 0 PID: 21611 Comm: kworker/u4:44 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2928.140761][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2928.150837][T21611] Workqueue: netns cleanup_net [ 2928.155627][T21611] Call Trace: [ 2928.158920][T21611] [ 2928.161869][T21611] __dump_stack+0x21/0x30 [ 2928.166218][T21611] dump_stack_lvl+0xee/0x150 [ 2928.170831][T21611] ? show_regs_print_info+0x20/0x20 [ 2928.176058][T21611] ? load_image+0x3a0/0x3a0 [ 2928.180579][T21611] ? ____kasan_slab_free+0x130/0x160 [ 2928.185881][T21611] ? __kasan_slab_free+0x11/0x20 [ 2928.190834][T21611] print_address_description+0x7f/0x2c0 [ 2928.196400][T21611] ? tcp_metrics_flush_all+0xd3/0x210 [ 2928.201805][T21611] kasan_report+0xf1/0x140 [ 2928.206256][T21611] ? _raw_spin_lock_bh+0x8e/0xe0 [ 2928.211219][T21611] ? tcp_metrics_flush_all+0xd3/0x210 [ 2928.216612][T21611] kasan_check_range+0x280/0x290 [ 2928.221603][T21611] __kasan_check_read+0x11/0x20 [ 2928.226493][T21611] tcp_metrics_flush_all+0xd3/0x210 [ 2928.231725][T21611] ? tcp_net_metrics_init+0x150/0x150 [ 2928.237126][T21611] tcp_net_metrics_exit_batch+0x10/0x20 [ 2928.242713][T21611] cleanup_net+0x602/0xad0 [ 2928.247147][T21611] ? ops_init+0x4a0/0x4a0 [ 2928.251502][T21611] process_one_work+0x6be/0xba0 [ 2928.256393][T21611] worker_thread+0xa59/0x1200 [ 2928.261306][T21611] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 2928.266799][T21611] kthread+0x411/0x500 [ 2928.270894][T21611] ? worker_clr_flags+0x190/0x190 [ 2928.275947][T21611] ? kthread_blkcg+0xd0/0xd0 [ 2928.280555][T21611] ret_from_fork+0x1f/0x30 [ 2928.284993][T21611] [ 2928.288032][T21611] [ 2928.290359][T21611] Allocated by task 20244: [ 2928.294777][T21611] __kasan_slab_alloc+0xbd/0xf0 [ 2928.299655][T21611] slab_post_alloc_hook+0x4f/0x2b0 [ 2928.304790][T21611] kmem_cache_alloc+0xf7/0x260 [ 2928.309567][T21611] copy_net_ns+0x145/0x5c0 [ 2928.314001][T21611] create_new_namespaces+0x3a2/0x660 [ 2928.319299][T21611] unshare_nsproxy_namespaces+0x120/0x170 [ 2928.325032][T21611] ksys_unshare+0x4ac/0x7b0 [ 2928.329554][T21611] __x64_sys_unshare+0x38/0x40 [ 2928.334336][T21611] x64_sys_call+0x442/0x9a0 [ 2928.338853][T21611] do_syscall_64+0x4c/0xa0 [ 2928.343352][T21611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2928.349247][T21611] [ 2928.351569][T21611] Freed by task 21611: [ 2928.355650][T21611] kasan_set_track+0x4a/0x70 [ 2928.360256][T21611] kasan_set_free_info+0x23/0x40 [ 2928.365192][T21611] ____kasan_slab_free+0x125/0x160 [ 2928.370304][T21611] __kasan_slab_free+0x11/0x20 [ 2928.375063][T21611] slab_free_freelist_hook+0xc2/0x190 [ 2928.380435][T21611] kmem_cache_free+0x100/0x320 [ 2928.385198][T21611] cleanup_net+0xa2d/0xad0 [ 2928.389616][T21611] process_one_work+0x6be/0xba0 [ 2928.394475][T21611] worker_thread+0xa59/0x1200 [ 2928.399150][T21611] kthread+0x411/0x500 [ 2928.403255][T21611] ret_from_fork+0x1f/0x30 [ 2928.407674][T21611] [ 2928.409995][T21611] The buggy address belongs to the object at ffff8881354ea000 [ 2928.409995][T21611] which belongs to the cache net_namespace of size 3968 [ 2928.424313][T21611] The buggy address is located 140 bytes inside of [ 2928.424313][T21611] 3968-byte region [ffff8881354ea000, ffff8881354eaf80) [ 2928.437675][T21611] The buggy address belongs to the page: [ 2928.443323][T21611] page:ffffea0004d53a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881354e8000 pfn:0x1354e8 [ 2928.454890][T21611] head:ffffea0004d53a00 order:3 compound_mapcount:0 compound_pincount:0 [ 2928.463299][T21611] flags: 0x4000000000010200(slab|head|zone=1) [ 2928.469405][T21611] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881001c5e00 [ 2928.477997][T21611] raw: ffff8881354e8000 0000000080080002 00000001ffffffff 0000000000000000 [ 2928.486571][T21611] page dumped because: kasan: bad access detected [ 2928.492975][T21611] page_owner tracks the page as allocated [ 2928.498684][T21611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10540, ts 877292249104, free_ts 877237532266 [ 2928.519432][T21611] post_alloc_hook+0x192/0x1b0 [ 2928.524203][T21611] prep_new_page+0x1c/0x110 [ 2928.528709][T21611] get_page_from_freelist+0x2cc5/0x2d50 [ 2928.534252][T21611] __alloc_pages+0x18f/0x440 [ 2928.538852][T21611] new_slab+0xa1/0x4d0 [ 2928.542922][T21611] ___slab_alloc+0x381/0x810 [ 2928.547512][T21611] __slab_alloc+0x49/0x90 [ 2928.551840][T21611] kmem_cache_alloc+0x138/0x260 [ 2928.556705][T21611] copy_net_ns+0x145/0x5c0 [ 2928.561124][T21611] create_new_namespaces+0x3a2/0x660 [ 2928.566409][T21611] unshare_nsproxy_namespaces+0x120/0x170 [ 2928.572128][T21611] ksys_unshare+0x4ac/0x7b0 [ 2928.576725][T21611] __x64_sys_unshare+0x38/0x40 [ 2928.581519][T21611] x64_sys_call+0x442/0x9a0 [ 2928.586023][T21611] do_syscall_64+0x4c/0xa0 [ 2928.590444][T21611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2928.596359][T21611] page last free stack trace: [ 2928.601035][T21611] free_unref_page_prepare+0x542/0x550 [ 2928.606501][T21611] free_unref_page+0xa2/0x550 [ 2928.611181][T21611] free_compound_page+0x78/0xa0 [ 2928.616038][T21611] __put_compound_page+0x77/0xb0 [ 2928.620976][T21611] __put_page+0xbc/0xe0 [ 2928.625134][T21611] skb_release_data+0x3d3/0xa10 [ 2928.629981][T21611] __kfree_skb+0x50/0x70 [ 2928.634239][T21611] tcp_rtx_queue_unlink_and_free+0x205/0x720 [ 2928.640245][T21611] tcp_ack+0x2145/0x6000 [ 2928.644485][T21611] tcp_rcv_established+0x69f/0x1940 [ 2928.649682][T21611] tcp_v4_do_rcv+0x597/0x9f0 [ 2928.654291][T21611] tcp_v4_rcv+0x21cd/0x2810 [ 2928.658790][T21611] ip_protocol_deliver_rcu+0x314/0x6c0 [ 2928.664248][T21611] ip_local_deliver+0x2de/0x530 [ 2928.669096][T21611] ip_sublist_rcv+0x747/0x850 [ 2928.673781][T21611] ip_list_rcv+0x3da/0x420 [ 2928.678198][T21611] [ 2928.680518][T21611] Memory state around the buggy address: [ 2928.686138][T21611] ffff8881354e9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2928.694193][T21611] ffff8881354ea000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2928.702252][T21611] >ffff8881354ea080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2928.710308][T21611] ^ [ 2928.714630][T21611] ffff8881354ea100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2928.722683][T21611] ffff8881354ea180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2928.730742][T21611] ================================================================== [ 2928.738798][T21611] Disabling lock debugging due to kernel taint [ 2929.107862][T17396] usbhid 6-1:0.0: can't add hid device: -71 [ 2929.113868][T17396] usbhid: probe of 6-1:0.0 failed with error -71 [ 2929.183021][T17396] usb 6-1: USB disconnect, device number 82 [ 2930.547990][T17402] usbhid 5-1:0.0: can't add hid device: -71 [ 2930.554041][T17402] usbhid: probe of 5-1:0.0 failed with error -71 [ 2930.561937][T17402] usb 5-1: USB disconnect, device number 102