last executing test programs: 28.40897299s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000580)=ANY=[@ANYBLOB="2a4609f53b0b7e77fefeb4698b831305ab986faa9b1a40807807d7c711fe024fcbaba1f7090fb2ff401358d4f2744b8aedee037c47428fd3d98448e42f7fa39da3a2bceb238f", @ANYRESOCT=r1, @ANYBLOB="01531453be003a541228f5e3695c2c278223f0e296e7930682791b3e83b93752abeac2cc52170f3b3c3f9f5c1fb4fbbd98733f8722474107", @ANYRESHEX=r1, @ANYRES32=r1], 0x9, 0x2a9, &(0x7f00000051c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0x81}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 27.502670879s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/13, &(0x7f0000000080)=0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000380)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[@ANYBLOB="01"], 0x0) 27.489389741s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x10, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYBLOB, @ANYRES32, @ANYRES64, @ANYBLOB="1f7d637440fa2d61c2c29f1a96a697ed3671dfa6154317bd596d8b21b8f0ee05cbcda312a4ac823ae8f1891495f1c64dcf5b2b22096c4ca4f69f73232c9e1c2c362052090d0aa88761810e6dd47520900611227cb127f6ff8d50c93593a288afdd7f12c0faf2bc661a7b9811136b453c893ecb939747b18e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x1a61) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000d80)={'veth0_virt_wifi\x00', 0x1803}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1}, 0xfffffffffffffcab) (async) syz_open_dev$vcsn(0x0, 0x8, 0x121300) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000014aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006"], 0xac}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) (async) recvmmsg(r0, &(0x7f0000000040), 0x401, 0x45833af96e4b39fe, 0x0) 27.175833569s ago: executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x8) 27.066619966s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) times(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ptrace(0x10, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000000) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') waitid(0x2, 0x0, &(0x7f00000001c0), 0x40000009, &(0x7f0000000240)) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b81021030109021200010700000009040000008d5c840000000000004000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='ext4_allocate_blocks\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x168e9e581ac83ef8, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r4}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 5.424239664s ago: executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x3, 0x7, 0x1, 0xffffff81}, {0x0, 0x2, 0xf2}]}) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) r10 = socket(0x0, 0x80002, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600), 0x70}}, 0x0) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000b00)="6455089ab9075e64c4bedb2b941533bc71ec4be38eeb5e2e6c9ecdda0c6ed7bd4706c3fb85575d0034077bb770e214219d50542e7e671050c17a8022b175ce074558fe4e94f15f588cb4a56928bae16bd7f992b843c5011456ed86b60133edc2903c9f6bdf9a3620f7577841abe2e06fef85eb3ee0091a527f0977e3ba534f7fa31caf7465d30df85587b36f219c23d089bbff7e259bffa1157b2393f0a3cd0a5bd97fadc821f659", 0xa8}], 0x4, &(0x7f00000012c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000fa000000", @ANYRESHEX=r6, @ANYRES32=r10, @ANYBLOB="00000000280000000100cc8d26e9ce24e5c36be347000001000000", @ANYRESOCT=r1, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r10], 0xa8, 0x40040}}], 0x1, 0x4000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/block/loop0', 0x200, 0x54) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="3d00001126ee28dcd11ce5ec583d7039267bfd91e686737de5b57db34d10740fd023", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990004000000580000000800010057000000080001002e0000000800", @ANYRES32=r11], 0x48}}, 0x11) ftruncate(r4, 0x2007ffb) sendfile(0xffffffffffffffff, r4, 0x0, 0x1000000211005) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) 4.543776618s ago: executing program 1: sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}}, &(0x7f00000004c0)) 3.658138403s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r4}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 3.497565927s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x41045508, &(0x7f0000002600)={0x0, 0x0, "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"}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x2b842ac, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000017ffffffce040000000000007b0300fe000000002d04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532e2df58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c52a2fc1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb000400000000000088d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf90060000000000000020726298dec1ae960e3d26cdaaa527ab9e2c41d177fdbaf462c2e45f6c261df0fa4934f81278477e00fd2eba63cf8dcbdec85fc3c6f146c53b701e446c218f02ca678b3e0bc4b5253ae32bace19fb0a10e3ff4bf0b870f399842f6966da779be2a481cac5f4f9cfa338df7640267c8c4dce6f6c41777f2606ae31230430052967bc0e3f69351c9f69363abf5bd30b875732a43413d9927435723577bdf74eb6f467dff089c14a4cae6ca551577a289d822aad77ec4701f57049e1222b692f7d8e299591925065907a6e16e962f7a886aa555b4674fdd575efcd14c8cc6edc971053695debde1bd37eb4cda"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x20421, &(0x7f0000001a40)=ANY=[@ANYBLOB="696f636861727365743d61736369692c646973636172642c646d61736b3d30303030303030303030303030303030303030303030b72c7569643d", @ANYRESDEC, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="c7f66d5a3cf83fe1ebe9"], 0x81, 0x1501, &(0x7f0000000500)="$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") 3.2206967s ago: executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x410}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x74, 0x42, &(0x7f00000005c0)=""/66, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xf, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x4, 0x2, 0x10, 0x9}, {0x4, 0x5, 0x1, 0x5}, {0x5, 0x5, 0x3, 0x6}, {0x5, 0x2, 0x9, 0x6}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000480)='kvm_ack_irq\x00', r1}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x0, @mcast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500eaff00000000d14e0ba3e5426f8c377a090aec70f8f55a6cdda39a345168fbc44d6e203557039b57dd7fcf049296299554943c8c1d17b0b0c081c6d074e836366dee43657d21cecf157927c38e335632637b58b72321b4a525e7d0ff100927c35a01243c601a9316050a0d9841cfa70b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1d6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x401) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c000080060001000200000008000200e0000002050003000300000028000080060001000a000000140002002001000000000000000000000000000105000300030000001c000080060001000200000008000200ac141400050003"], 0x1d8}}, 0x0) 3.15226198s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x5, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.100468828s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/igmp\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000180), 0xfe, 0x254, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2025) 3.058913414s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xd0e, 0x101, 0x8827, 0x400, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_svc_unwrap_failed\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0x10000004}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r2, @ANYRESOCT=0x0], 0x2c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x80002, 0x88) 2.998283473s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000b80), &(0x7f0000000600)}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r4, &(0x7f0000000980), 0x12) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x2000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.372225349s ago: executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000b3ac9608030448f41708010203010902120001000000000904"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) unshare(0x20000400) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) listen(r1, 0x0) syz_usb_connect$cdc_ecm(0x3, 0xd4, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x1, 0x1, 0x9, 0x70, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x6, 0x24, 0x6, 0x0, 0x0, "f5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x4}, [@mdlm_detail={0x59, 0x24, 0x13, 0x2, "ec5907697cb689b464dd74d8be3f91cb1b8b4189ab4d3846dba222c3f3afc81ec975716a13ecde97c43a133de659360eec1de892fec47c78baa56da38bc24cc460e1050d64b2c18d05af8349b37dabc30220fc31ea"}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x8}, @ncm={0x6, 0x24, 0x1a, 0xf2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x7, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x40, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1f, 0x3, 0x5e}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x23, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x1f, 0x3f, 0x40, 0x9}, 0x19a, &(0x7f0000000140)={0x5, 0xf, 0x19a, 0x2, [@generic={0xf2, 0x10, 0xd, "e61beecb29760d4ae26fcdc54c0d00431cde8a169b4b8da7dd6d9633c19fcd562f07f8ad62f530a2a20372196adeb52a61813b22b4b7a0039be3bbff0a22ac98230deffa620ffd142250a8ba9b1c4d9a440bfd487266175f96eaefb06ba04a207b0e2f5f8583935df4233d6fda8dceb092e6823a8a7466114be9768379dc13e6ef60081bbd8055d0ea8018775345fb3837ca4e5e3f91835b3e389359443abff47aaf016a4904308c90dfa41c190ca9a9420978794ae44a6983600173a0408deaf2339da48eda8cdd914adbccc1ff9fc90ac483149db6d74969d5fb595f1780fc763d7ab6e27d16a43cc21921be0788"}, @generic={0xa3, 0x10, 0x2, "0b483a517621daa80bb82c48b682764c66c7dcb64119e88d20b6a0fdcb1926ed476372e1343b553542c4c72412fc6f20f00f3a3da032739539e7750f313a7cc123de390e336ade52362c0f3eae4fb1dcc6c8c5db79eb63291614d996a35f3f84d5d361e174d6265dd745914344231588da5346b30d79e012b53467ecc723c097d1434e594b5cf87661af5662fbf530e20a9c0e353ae45be2214aa22196206d03"}]}, 0x6, [{0x7b, &(0x7f0000000300)=@string={0x7b, 0x3, "73412c22a44b72a3a404758b49f192cde9169da387f82524c58e3e74bdba0a8ce5e7cb2f256cc6c0d7be1be6513e179a3be9c91cfb612916027aa5ee7c6df237da9ac000d47ce76d60ddf0ca8a1afc71e63ccfd977706dcf578112810309154fab104c83a740e380d9bc6723d8cd5f2415fc753c08eef439b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xf2, &(0x7f00000003c0)=@string={0xf2, 0x3, "89ee0773230fd7e26fba88e1c44ed86aebd03d58cc6efd4cf31a2da0e87b3e5e07b195c0445852cb1d97d1ac17634a33853f11c35d33457f331452e598e5103202a5c01a6d8a6744a1262e82d66a7ab6d0a7df8fb0bc6648ea7a75ad473642bc2c154fbd546239d4b667c32a1222d7e3eb7917b395347dee580e3f5c91f3052e3a9d84a61d8225f02d22c7f8c70d863820edbed8ba049b607af95c32180992acd3e67ea9b7228261b12d95975b9679b1b25ff73b26e80a045cd5b8f4ae21d82925161faa6cd2642606f4c0373213d28a4f33bb79f0bc1c295de45f3631dab77edae2ba7200e312f1251f2321f8555255"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x459}}, {0x83, &(0x7f00000005c0)=@string={0x83, 0x3, "ac7dcec59293cce44f899694c5fac3be9e8bbd4b6c78acddc8199f62c0c416e4a2b2bb6e70aac06514d834283eddfa1488ee19b44fa08c1d93b9ac55221c767b3cc1880fc4fb2236752d3b73b89bb130cebfe707b5eeda26d66184b7192e41dae2a44eafa1cba1858aade842801db7cb5e50cb7e774172e2e9d2a27c484fe72199"}}]}) 2.16721985s ago: executing program 4: sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}}, &(0x7f00000004c0)) 2.033331961s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@quota}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@journal_checksum}, {@minixdf}, {@jqfmt_vfsv1}]}, 0x1, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r2, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af24, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL7zSioiCoFU0Nn60tKCycKPRxIUmJrrAZW0LqQzU0JoIabQag0tD4t64NPEvcOXKqCsTt7o3JEQbE9CNY+7MvW1nmCn9mDKV+f2SgXPmnrnnPD333DlzzkwAPWsw+yeJ+H9E/BIR/fVsY4HB+n83Fucn/lqcn0iiWn3j96RW7vri/ERRtHjdnjwzlEaknyR5JY1mL146O16pTF3I8yNz594dmb146enpc+Nnps5MnR87efLE8dHnnh17piNxZvFdP/TBzOGDr7x15bWJU1fe/uHrrL0HjtSPr4yjUwazwP+o1jQfe6zTlXXZP9XlOJNyt1vDWpUiIuuuvtr4749SLHdef7z8cVcbB2yp7J69s/3hhSpwB0ui2y0AuqN4o88+/xaP2zT12BauvVD/AJTFfSN/1I+UI83L9G1h/YMRcWrh7y+yRzStQ1RbrBsAAGzWt9n856lW8780DqwotzffGxqIiLsjYl9E3BMR+yPi3oha2fsi4v511t+8NXTz/DO9uqHA1iib/z2f7201zv+K2V8MlPLcXbX4+5LT05WpY/nfZCj6dmb50VYnL07x0s+ftat/5fwve2T1F3PB/CRXy00LdJPjc+OdmpRe+yjiULlV/MnSTkASEQcj4tD6Tr23SEw/8dXhdoVuHf8qOrDPVP0y4vF6/y9EU/yFZPX9yZFdUZk6NlJcFTf78afLr7erf1Pxd0DW/7sbr/+mEv1/Jiv3a2fXX8flXz9t+5myvMHrf0fyZm1Pd0f+3Pvjc3MXRiN2JK/W8g3Pjy2/tsgX5bP4h462Hv/78tdk8T8QEdlFfCQiHoyIh/K+ezgiHomIo6vE//2Lj77T7th26P/Jlve/pet/oLH/158onf3um3b1r+3+d6KWGsqfqd3/bqF9c3blJTZ6NQMAAMB/T1r7bnySDi+l03R4uP4d/v2xO63MzM49eXrmvfOT9e/QD0RfWqx09a9YDx1NFvIz1vNj+Vpxcfx4vm78eel/tfzwxExlssuxQ6/b02b8Z34rdbt1wJbzey3oXc3jP+1SO4Dbz/s/9C7jH3qX8Q+9q9X4/7Apby8A7kze/6F3Gf/Qu4x/6F3GP/Skzfyuf6sS5VV+vS+xXRKRbotmSLRIlDswurt8YwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQfwMAAP//EgHx+Q==") fchown(0xffffffffffffffff, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) unshare(0x4000400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 2.014540853s ago: executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000580)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") 1.948147624s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x121a00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='qdisc_dequeue\x00', r3}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='task_rename\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaa"], 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000040)) 1.307282981s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x3, 0x2000, 0x2000, &(0x7f0000013000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@gettaction={0xb8, 0x32, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x200}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c840}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x60, &(0x7f0000000200)={0x0, 'veth1_virt_wifi\x00'}, 0x18) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe4}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r13}, 0x10) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)) 1.037772812s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x5, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.033254693s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff04000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=']) 1.025003323s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="5f00000012edfffebfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000017ffffffce040000000000007b0300fe000000002d04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532e2df58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c52a2fc1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb000400000000000088d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf90060000000000000020726298dec1ae960e3d26cdaaa527ab9e2c41d177fdbaf462c2e45f6c261df0fa4934f81278477e00fd2eba63cf8dcbdec85fc3c6f146c53b701e446c218f02ca678b3e0bc4b5253ae32bace19fb0a10e3ff4bf0b870f399842f6966da779be2a481cac5f4f9cfa338df7640267c8c4dce6f6c41777f2606ae31230430052967bc0e3f69351c9f69363abf5bd30b875732a43413d9927435723577bdf74eb6f467dff089c14a4cae6ca551577a289d822aad77ec4701f57049e1222b692f7d8e299591925065907a6e16e962f7a886aa555b4674fdd575efcd14c8cc6edc971053695debde1bd37eb4cda"], &(0x7f00000001c0)='GPL\x00'}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000180), 0xee, 0x456, &(0x7f00000004c0)="$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") 897.831934ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="10000000", @ANYRES16=r9, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe6, 0x1}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r11}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x242, 0x165) socket$inet6(0xa, 0x2, 0x0) 507.498043ms ago: executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x410}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x74, 0x42, &(0x7f00000005c0)=""/66, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xf, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x4, 0x2, 0x10, 0x9}, {0x4, 0x5, 0x1, 0x5}, {0x5, 0x5, 0x3, 0x6}, {0x5, 0x2, 0x9, 0x6}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000480)='kvm_ack_irq\x00', r1}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x0, @mcast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500eaff00000000d14e0ba3e5426f8c377a090aec70f8f55a6cdda39a345168fbc44d6e203557039b57dd7fcf049296299554943c8c1d17b0b0c081c6d074e836366dee43657d21cecf157927c38e335632637b58b72321b4a525e7d0ff100927c35a01243c601a9316050a0d9841cfa70b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1d6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x401) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r9, @ANYBLOB="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"], 0x1d8}}, 0x0) 107.337113ms ago: executing program 3: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xd2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x79, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0xfffe, 0x0, @mcast2, 0x2}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r11}, 0x10) (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f00000005c0)=""/47, 0x2f) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async, rerun: 64) mmap(&(0x7f000011f000/0x2000)=nil, 0x2000, 0xa, 0x28011, r7, 0x1000) (async, rerun: 64) write(r6, &(0x7f0000000200)="89", 0x1) 71.119689ms ago: executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x3, 0x40000000, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xd1, 0x6, "ee2f1566544a16da52201dbbb7b82d823fab31f639949d460a7ee14c9a93294ea1f4a5d53f422dc710e5d6407cceaad133332105a9193372a53c5f24f866734bd1c2425125ecfb784051a08dcdc406382981bd9bfdb5b8d7dad8f841d6cd2d84191caebe9a3d5e05256f3906ef9fffd7c7359e0eec45ed4698ab492f803a8487abc21860537de9cfc41de7be26705a757f1543efc71054522c70c421666211f04dc33025ec22affd378fdb379f16a9a835e0453887fda86a5751556c4f07dae9ac4bd17007bfa102dd4c3a77e2"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0xb, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x13c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x401, @private0, 0xfffe0000}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000280)="805c325b6bfaa0272a14db887a0fa1b9f4c0203f09176c0095f8746713013c12056864f358d8d1716355c74087c80a12a801b1968d44066ea625cd30b399e14f2a4a9936dd44c8dc2fc21b5691ecba8705c96290b862beff2db20c25fdb51f6e910af3baa3f63fc82b50769273520e41c9ea1b4ad8bb90605ba7ce0ae9bfcc4dcd70a025", 0x84}, {&(0x7f0000000f80)="cc8b5199b9e93d058c2b98f2e419372e83ae496b3024b25c1b943227c45e601ebc88f304098333794d586d4fbf33c720ef4ba6e075ff023c28226b8615ba190f6d07ad663fb5ef34805a7f3568398ff52fe05a8e98ced9d04485372f2bb7ca6e6ed9176577e6ef699c594b22ae3bca13ccb98b35ed7a87e17ca5d7b6809b8786015abf3b2441c3435d07d9bf818e047e5d681efd2e2b97f885dc56cc662b4a76a1ef9fdc099f1ea713c857d620730e94b5fbfbb8ea91209eafdac472efe9199c594e2441a5c0c2dbd1ec9586ad9871438e324280e4202dd63d23aec77d4d244606a0ea0f65f69137db25201a7e495bc558a1321e6593ccaa4e", 0xf9}, {&(0x7f0000000480)="cd0571412bda18009a8520142f7450b08985d626f8c3242c817048d7d34b99d842406f6a4fc61934feb00bfa79bb27a31ea4f2454785824ee480bbd0879b6e5adc72d238e14a176679123b817e52a71af7858c79e8c2a395b10167e2b4632e88bbf68bdf1e0ee83c063efd4664ab9d4555ef0e742567e6474228450cfd9fcea9a2a9330b0bdb06ea4dc9326bd2719f", 0x8f}, {&(0x7f0000000540)="8596c8b86e9b0b306344061ade953232cb09cead163cc55ac901170bcdf2f8960c8eb3cd3a7dfd0040b5ce8082888ec22b9c88981a83266a3f386ebfbed1a7b4fcdb2adc1f20a18ebc475c2d1ef1f2a839986da20ecafbf4c2e7cafe43edd195b925dbfe1552236733a33c44891373561acc29ae6973a62d9ddf524f88cb1d110be0e751a749b33467703f7a0d878dcd4db356bade7abe6d2acfdd", 0x9b}, {0x0}, {&(0x7f0000000640)="4feff2cccb367f5805395b5c7fef06f30d4c5613a1f3250e8e67791860b89b19da97d261a4b60ecbfd196befcb76a293656aef8ddc6aca2357b2bb7cea4f055b8e3df8b4a92aaaf29d751ead51fb64e49e854f46cec227fbea283caf0b9e2a0e874f3bf9aac3047b67ca33b164ec6adc0f1aa330c458d5f75513cd07fdae4cbbdd45753e6c2e3afd", 0x88}, {&(0x7f0000000700)="436165d11a4f36ed9f7ff72696018ca03df693ec48c321ca", 0x18}], 0x7, &(0x7f0000002600)=ANY=[@ANYBLOB="a80000000000000029000000390000003312013f00000000fc00000000000000000000000000000000000000000000000000ffffac1e01010000000000000000000000000000000000000000000000000000ffff64010100fe80000000000000000000000000000ffc010000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000ffffac141444fc020000000000000000000000000000140000000000000029000000430000000300000000000000140000000000000029000000080000000300000000004ef389a2ee1e4c920000"], 0xd8}}, {{&(0x7f0000001080)={0xa, 0x4e22, 0x9636, @private1, 0x5}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="8897b9599483b65752ab4afa990b85b53ed46e478a33bc71a3155334bfe7e0cc159cdd9554227168212951db2f5a18959aad49aa4a8288cda1a8c597b9ff792ccabfdaf0a915de381b01c6ac604fc1cc7d3fc685d63773f4ba2dabc958f0e2627b2b916a919bd0610f76ebf3fae556511b781f08e3ba8374295072555e24544390720f959f5aa77104d673c40c56a19a0a7aa1f153433712f9465e575e10c9", 0x9f}, {&(0x7f0000001180)="7f6a68bc1817b5b9c55b5e3f44e6ed3f65ed5dbcb56539ab74f3616b1ab0e841af6b19e1cfba8805aaf02aa58b8346832b166daa986c2b17e845227f6493c0f3d9c96f8ccda121739ea6ddb25ac37114aeaeac8473848d9501dc4044f3237001978faa77f20eefa80b490b214509a67837b8315bb955653ff1384031b6cfe4be0ef3cf35f6d5d2f6923d048405c78a3c0d380ad437b458e839a62e5bcbddb600105a9b9745b9f28dca7595f08e546369d58399def62371a2fe6e17b8a01739cd47a16e82834465c2ed4dcc363c1dd95d723482b16c6621e4a4909e9126346c5792cdef982601f1a58f05f70cd09553a880ca0a9c80", 0xf5}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="67e34f27df6a51d7bfd1c876d28ef6ff0c01e953cb13a6105d61c97ab691937fdce74cb975441f60dcfca94549ddca123ff83a5cf7b27010027daa5138268dbe288271d9f7", 0x45}, {&(0x7f0000002340)="87bc5ada776c8b133bc656ef522e91b820fa1b0384d6643c77c62e0da29c9a60d358301d4f215b", 0x27}, {&(0x7f0000002380)="a23b7aeb1c02cea8bf9613f2205ef6061090273bda3957", 0x17}, {&(0x7f00000023c0)="e1a053f443771d6812652f211a17bc850906596e2db95d55d3bcc60601db9efaac3078893c9b31aee1fdc785e0009756257ab2daa1a0589999331ed7ede218a37c05de86661ee6ef07f582650fb5b28f2219d358c653d46280ba818914be01c6318d61ce133e6928f60b7eff987dbfc70e3b3dcd13d764f61cade6806157dde9eff4328736c945e02eaf948f1863034b06c071c87a0ca3c347562fa3e36d20ae986ba699eab0388df537df6f715b0bef9168ae39d3c0bcca28b34f868058a8c9fa6880a50c28871e036e570417c1fe6e5c3b278f3f62c2567e04aecc2e34656202e085d44d4075e09d09212f010ca86e749211d9", 0xf4}, {&(0x7f00000024c0)="f531215579712cae096586dd613a03bfc707d83d5c0964aa06e68e61b99f41ce3225d7802727dd5b272d0b5ffb8970c3d4cbeb5a7543594ac6c44591c09c383ca0dacc343ac8654eda814ed56ae79bc50d79a6d87bb6ad34b519f101261cda6eadcc1aa485dfd0af1e84fdeaccb5aa32f0fac19a2a94c82e2ea6c018f4c5dd72690c686da1592b30945eff88d74b4ef94cbbdcb1c03a6877347208833f4b", 0x9e}], 0x6, &(0x7f0000002600)}}, {{&(0x7f00000028c0)={0xa, 0x4e21, 0x1f, @private0, 0x3}, 0x1c, &(0x7f0000002940)}}, {{&(0x7f0000002980)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000002a40)=[{&(0x7f00000029c0)="774cdff691989f598eb19ba1011cc7fe5210059005dc9f3b83036d38acb7cd0bd5d22073d430693afe9721ad7fd352346de3b2f6bfe7ceee97cf9109b6cfb6d3391ab2b784a3997a21e5232e1121bcd9d991c2f88b672d2ad04acc", 0x5b}], 0x1, &(0x7f0000002a80)=[@hoplimit={{0x14, 0x29, 0x34, 0xf7c2}}], 0x18}}], 0x5, 0x40090) 64.661ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000180), &(0x7f0000000200)=r8}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 15.453237ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x0, 0x8}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x0) 0s ago: executing program 3: sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}}, &(0x7f00000004c0)) kernel console output (not intermixed with test programs): 741.358793][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.479558][ T6298] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 741.493200][ T48] device veth1_macvtap left promiscuous mode [ 741.501958][ T48] device veth0_vlan left promiscuous mode [ 741.634197][T17400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17400 comm=syz-executor.0 [ 741.647616][T17400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=17400 comm=syz-executor.0 [ 741.718476][ T6298] usb 2-1: Using ep0 maxpacket: 8 [ 741.723444][ T1223] handle_bad_sector: 8322 callbacks suppressed [ 741.723452][ T1223] attempt to access beyond end of device [ 741.723452][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 741.740874][ T1223] attempt to access beyond end of device [ 741.740874][ T1223] loop0: rw=0, want=57352, limit=40427 [ 741.751978][ T1223] attempt to access beyond end of device [ 741.751978][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 741.763705][ T1223] attempt to access beyond end of device [ 741.763705][ T1223] loop0: rw=0, want=57352, limit=40427 [ 741.774820][ T1223] attempt to access beyond end of device [ 741.774820][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 741.786382][ T1223] attempt to access beyond end of device [ 741.786382][ T1223] loop0: rw=0, want=57352, limit=40427 [ 741.797474][ T1223] attempt to access beyond end of device [ 741.797474][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 741.808918][ T1223] attempt to access beyond end of device [ 741.808918][ T1223] loop0: rw=0, want=57352, limit=40427 [ 741.819981][ T1223] attempt to access beyond end of device [ 741.819981][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 741.831333][ T1223] attempt to access beyond end of device [ 741.831333][ T1223] loop0: rw=0, want=57352, limit=40427 [ 741.848519][ T6298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.019160][ T6298] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 742.028261][ T6298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.036423][ T6298] usb 2-1: Product: syz [ 742.044565][ T6298] usb 2-1: Manufacturer: syz [ 742.052238][ T6298] usb 2-1: SerialNumber: syz [ 742.061757][ T6298] usb 2-1: config 0 descriptor?? [ 742.500388][T17423] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.196306][T17442] 9pnet: Insufficient options for proto=fd [ 743.458988][T17444] fuse: Bad value for 'max_read' [ 743.469616][T17444] overlayfs: overlapping lowerdir path [ 743.490156][ T24] audit: type=1326 audit(2000000004.770:27582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.529863][T17446] fuse: Bad value for 'user_id' [ 743.599764][ T24] audit: type=1326 audit(2000000004.810:27583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.625024][ T24] audit: type=1326 audit(2000000004.810:27584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.630289][T17446] input: syz1 as /devices/virtual/input/input77 [ 743.649633][ T24] audit: type=1326 audit(2000000004.810:27585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.698363][ T24] audit: type=1326 audit(2000000004.810:27586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.731796][T17460] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.741974][ T24] audit: type=1326 audit(2000000004.810:27587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.769079][ T6298] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 743.779172][ T6298] uvcvideo: No valid video chain found. [ 743.785503][ T6298] usb 2-1: USB disconnect, device number 99 [ 743.796532][ T24] audit: type=1326 audit(2000000004.810:27588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.832953][ T24] audit: type=1326 audit(2000000004.810:27589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 743.857677][ T24] audit: type=1326 audit(2000000004.810:27590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6010bc70a9 code=0x7ffc0000 [ 744.300257][T17482] 9pnet: Insufficient options for proto=fd [ 744.306756][ T6270] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 744.558541][ T6270] usb 1-1: Using ep0 maxpacket: 8 [ 744.678543][ T6270] usb 1-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 744.696069][ T6270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 744.726852][ T6270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41675, setting to 1024 [ 744.758369][ T6270] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 744.888572][ T6270] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 744.897424][ T6270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 744.918058][ T6270] usb 1-1: SerialNumber: syz [ 744.968984][ T6270] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 744.983654][ T6270] usb-storage 1-1:1.0: USB Mass Storage device detected [ 745.004062][ T6270] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 745.100786][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 745.100798][ T24] audit: type=1326 audit(2000000006.380:27617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe794ab90a9 code=0x0 [ 745.196745][ T6270] usb 1-1: USB disconnect, device number 91 [ 745.695082][T17516] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 745.800102][T17521] syz-executor.2[17521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 745.800163][T17521] syz-executor.2[17521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 746.392317][T17547] 9pnet: Insufficient options for proto=fd [ 746.428481][ T6270] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 746.678480][ T6270] usb 5-1: Using ep0 maxpacket: 16 [ 746.728669][ T1223] handle_bad_sector: 5811 callbacks suppressed [ 746.728681][ T1223] attempt to access beyond end of device [ 746.728681][ T1223] loop0: rw=0, want=57352, limit=40427 [ 746.770178][ T1223] attempt to access beyond end of device [ 746.770178][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 746.782145][ T1223] attempt to access beyond end of device [ 746.782145][ T1223] loop0: rw=0, want=57352, limit=40427 [ 746.797243][ T1223] attempt to access beyond end of device [ 746.797243][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 746.798639][ T6270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.808886][ T1223] attempt to access beyond end of device [ 746.808886][ T1223] loop0: rw=0, want=57352, limit=40427 [ 746.827320][ T6270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.846596][ T6270] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 746.849799][ T1223] attempt to access beyond end of device [ 746.849799][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 746.857463][ T6270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.870182][ T1223] attempt to access beyond end of device [ 746.870182][ T1223] loop0: rw=0, want=57352, limit=40427 [ 746.875268][ T6270] usb 5-1: config 0 descriptor?? [ 746.886027][ T1223] attempt to access beyond end of device [ 746.886027][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 746.905252][ T1223] attempt to access beyond end of device [ 746.905252][ T1223] loop0: rw=0, want=57352, limit=40427 [ 746.916760][ T1223] attempt to access beyond end of device [ 746.916760][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 747.108595][ T3026] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 747.117980][T17564] overlayfs: missing 'lowerdir' [ 747.210069][T17567] x_tables: duplicate underflow at hook 2 [ 747.230145][ T24] audit: type=1400 audit(2000000008.510:27618): avc: denied { map } for pid=17566 comm="syz-executor.1" path="socket:[88677]" dev="sockfs" ino=88677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.258568][ T6298] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 747.299717][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.307019][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.328782][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.336000][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.348598][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.349197][T17538] udc-core: couldn't find an available UDC or it's busy [ 747.355920][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.388649][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.395867][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x4 [ 747.399330][T17538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 747.418727][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.426029][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x2 [ 747.438674][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.446040][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.458579][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.465964][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.469402][ T6270] konepure 0003:1E7D:2DB4.0078: report_id 0 is invalid [ 747.482437][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.490035][ T3026] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 747.498502][ T6270] konepure 0003:1E7D:2DB4.0078: item 0 0 1 8 parsing failed [ 747.508485][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.515689][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.517862][ T6270] konepure 0003:1E7D:2DB4.0078: parse failed [ 747.522931][ T3026] usb 4-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.536971][ T6270] konepure: probe of 0003:1E7D:2DB4.0078 failed with error -22 [ 747.548476][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.548994][ T6298] usb 1-1: device descriptor read/64, error -71 [ 747.556057][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.556075][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.577297][ T3026] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 747.588451][ T3026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.598483][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.605682][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.618470][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.625674][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.632984][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.640207][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.647473][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.655242][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.662475][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.669693][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.676851][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.684080][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.688985][ T6270] usb 5-1: USB disconnect, device number 89 [ 747.691371][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.704324][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.711510][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.718784][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.725971][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.733415][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.740647][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.747816][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.755066][ T8471] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 747.770314][ T8471] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz0] on syz0 [ 747.949106][ T6298] usb 1-1: device descriptor read/64, error -71 [ 748.188535][ T3026] usb 4-1: string descriptor 0 read error: -71 [ 748.384801][ T6298] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 748.391777][ T3026] usbhid 4-1:8.0: couldn't find an input interrupt endpoint [ 748.404517][ T3026] usb 4-1: USB disconnect, device number 98 [ 748.605500][T17596] syz-executor.4[17596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.605590][T17596] syz-executor.4[17596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.696573][ T6298] usb 1-1: device descriptor read/64, error -71 [ 749.176658][ T6298] usb 1-1: device descriptor read/64, error -71 [ 749.454490][ T6298] usb usb1-port1: attempt power cycle [ 749.817574][ T24] audit: type=1326 audit(2000000011.090:27619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe794ab90a9 code=0x0 [ 749.939220][T17628] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 749.958549][ T6270] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 749.999734][ T24] audit: type=1326 audit(2000000011.280:27620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.045433][ T24] audit: type=1326 audit(2000000011.310:27621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.070145][ T6298] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 750.098020][ T24] audit: type=1326 audit(2000000011.310:27622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.132224][ T24] audit: type=1326 audit(2000000011.310:27623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.157590][ T24] audit: type=1326 audit(2000000011.310:27624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.182030][ T24] audit: type=1326 audit(2000000011.310:27625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.206158][ T24] audit: type=1326 audit(2000000011.310:27626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.234312][ T6273] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 750.245493][ T24] audit: type=1326 audit(2000000011.310:27627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.270124][ T24] audit: type=1326 audit(2000000011.310:27628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.294394][ T6298] usb 1-1: device descriptor read/8, error -71 [ 750.301105][ T24] audit: type=1326 audit(2000000011.310:27629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 750.325712][ T24] audit: type=1326 audit(2000000011.310:27630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.349881][ T24] audit: type=1326 audit(2000000011.310:27631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.381776][ T24] audit: type=1326 audit(2000000011.310:27632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3a204f0a9 code=0x7ffc0000 [ 750.418566][ T6270] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 750.438491][ T6270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 750.454612][ T6270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.518526][ T6273] usb 2-1: Using ep0 maxpacket: 16 [ 750.629743][ T6298] usb 1-1: device descriptor read/8, error -71 [ 750.648356][T17641] overlayfs: invalid redirect ((null)) [ 750.668549][ T6270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 750.677501][ T6270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.685454][ T6273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.697126][ T6270] usb 5-1: Product: syz [ 750.701418][ T6270] usb 5-1: Manufacturer: syz [ 750.705890][ T6270] usb 5-1: SerialNumber: syz [ 750.710335][ T6273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.723725][ T6273] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 750.732678][ T6273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.752116][ T6273] usb 2-1: config 0 descriptor?? [ 750.959365][ T6298] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 751.128622][ T6298] usb 1-1: device descriptor read/8, error -71 [ 751.270700][T17626] udc-core: couldn't find an available UDC or it's busy [ 751.277507][T17626] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.289375][ T6273] konepure 0003:1E7D:2DB4.0079: report_id 0 is invalid [ 751.296110][ T6273] konepure 0003:1E7D:2DB4.0079: item 0 0 1 8 parsing failed [ 751.303441][ T6273] konepure 0003:1E7D:2DB4.0079: parse failed [ 751.309321][ T6273] konepure: probe of 0003:1E7D:2DB4.0079 failed with error -22 [ 751.378891][ T6270] usb 5-1: USB disconnect, device number 90 [ 751.398554][ T6298] usb 1-1: device descriptor read/8, error -71 [ 751.446047][T17665] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 751.500699][ T6273] usb 2-1: USB disconnect, device number 100 [ 751.518552][ T6298] usb usb1-port1: unable to enumerate USB device [ 751.638850][T17682] udc-core: couldn't find an available UDC or it's busy [ 751.646672][T17682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.682110][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.689167][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.696335][T17684] device bridge_slave_0 entered promiscuous mode [ 751.703418][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.710546][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.717897][T17684] device bridge_slave_1 entered promiscuous mode [ 751.738682][ T1223] handle_bad_sector: 9035 callbacks suppressed [ 751.738695][ T1223] attempt to access beyond end of device [ 751.738695][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 751.758916][ T1223] attempt to access beyond end of device [ 751.758916][ T1223] loop0: rw=0, want=57352, limit=40427 [ 751.770219][ T1223] attempt to access beyond end of device [ 751.770219][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 751.781692][ T1223] attempt to access beyond end of device [ 751.781692][ T1223] loop0: rw=0, want=57352, limit=40427 [ 751.797083][ T1223] attempt to access beyond end of device [ 751.797083][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 751.805924][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.809358][ T1223] attempt to access beyond end of device [ 751.809358][ T1223] loop0: rw=0, want=57352, limit=40427 [ 751.815189][T17684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.827990][ T1223] attempt to access beyond end of device [ 751.827990][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 751.833050][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.844455][ T1223] attempt to access beyond end of device [ 751.844455][ T1223] loop0: rw=0, want=57352, limit=40427 [ 751.851184][T17684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.869781][ T1223] attempt to access beyond end of device [ 751.869781][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 751.881334][ T1223] attempt to access beyond end of device [ 751.881334][ T1223] loop0: rw=0, want=57352, limit=40427 [ 751.925935][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.933518][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.940735][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.959136][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 751.967673][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 751.976480][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.983376][ T8476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.008708][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.018480][ T8471] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 752.046586][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.054854][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.061732][ T8476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.081442][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 752.098806][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 752.133683][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 752.149351][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 752.165223][T17684] device veth0_vlan entered promiscuous mode [ 752.179297][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 752.187844][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.207801][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 752.226448][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.251829][T17684] device veth1_macvtap entered promiscuous mode [ 752.269152][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.276474][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.294150][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.314354][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.322684][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.345250][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.353869][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.371158][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.379550][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.438624][ T8471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 752.458616][ T8471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26367, setting to 1024 [ 752.476496][ T8471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.494121][ T8471] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.503001][ T8471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.514951][ T8471] usb 4-1: config 0 descriptor?? [ 752.538523][T17683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 752.803143][T17708] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 752.816034][ T382] device bridge_slave_1 left promiscuous mode [ 752.825147][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.837672][T17708] ------------[ cut here ]------------ [ 752.843779][ T382] device bridge_slave_0 left promiscuous mode [ 752.854138][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.866483][T17708] WARNING: CPU: 1 PID: 17708 at fs/overlayfs/util.c:450 ovl_dir_modified+0x2f4/0x3e0 [ 752.879736][ T382] device veth1_macvtap left promiscuous mode [ 752.885572][ T382] device veth0_vlan left promiscuous mode [ 752.890230][T17708] Modules linked in: [ 752.901053][T17708] CPU: 1 PID: 17708 Comm: syz-executor.4 Tainted: G W 5.10.215-syzkaller-00370-gb58b8f9dad93 #0 [ 752.930617][T17708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 752.950864][ T8471] plantronics 0003:047F:FFFF.007A: No inputs registered, leaving [ 752.964129][ T8471] plantronics 0003:047F:FFFF.007A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 752.968273][T17708] RIP: 0010:ovl_dir_modified+0x2f4/0x3e0 [ 752.982572][T17708] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 83 60 a1 ff 49 ff 06 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cc cc 63 ff <0f> 0b e9 14 ff ff ff e8 c0 cc 63 ff 0f 0b e9 4e ff ff ff 44 89 f9 [ 753.003146][T17708] RSP: 0018:ffffc90001ae79e8 EFLAGS: 00010287 [ 753.028467][T17708] RAX: ffffffff8206e094 RBX: 0000000000000000 RCX: 0000000000040000 [ 753.048478][T17708] RDX: ffffc90002585000 RSI: 0000000000007dd1 RDI: 0000000000007dd2 [ 753.056276][T17708] RBP: ffffc90001ae7a30 R08: ffffffff8206dfa1 R09: ffffed1026c0d101 [ 753.088694][T17708] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888144d7d7a0 [ 753.116729][T17708] R13: 1ffff110289afaf4 R14: ffff888136068760 R15: dffffc0000000000 [ 753.135158][T17708] FS: 00007f656158a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 753.158925][T17708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.175490][T17708] CR2: 00007f6007b40000 CR3: 000000017745a000 CR4: 00000000003526b0 [ 753.195669][T17708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 753.225919][T17708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 753.246080][T17708] Call Trace: [ 753.256182][T17708] ? show_regs+0x58/0x60 [ 753.306181][T17708] ? __warn+0x160/0x2f0 [ 753.316269][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.321254][T17708] ? report_bug+0x3d9/0x5b0 [ 753.325544][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.330511][T17708] ? handle_bug+0x41/0x70 [ 753.334570][T17708] ? exc_invalid_op+0x1b/0x50 [ 753.339105][T17708] ? asm_exc_invalid_op+0x12/0x20 [ 753.343982][T17708] ? ovl_dir_modified+0x201/0x3e0 [ 753.348878][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.353661][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.358597][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.363387][T17708] ovl_do_remove+0x656/0xc90 [ 753.367810][T17708] ? ovl_set_redirect+0x630/0x630 [ 753.372756][T17708] ? down_write+0xd7/0x150 [ 753.376931][T17708] ? selinux_inode_rmdir+0x22/0x30 [ 753.381902][T17708] ovl_rmdir+0x1a/0x20 [ 753.385818][T17708] vfs_rmdir+0x2b7/0x3f0 [ 753.395935][T17708] incfs_kill_sb+0x108/0x220 [ 753.406006][T17708] deactivate_locked_super+0xad/0x110 [ 753.426180][T17708] fc_drop_locked+0x7f/0x90 [ 753.430572][T17708] vfs_get_tree+0x1d2/0x290 [ 753.434849][T17708] do_new_mount+0x2ba/0xb30 [ 753.448581][T17708] ? do_move_mount_old+0x160/0x160 [ 753.458455][T17708] ? security_capable+0x87/0xb0 [ 753.463204][T17708] ? ns_capable+0x89/0xe0 [ 753.477501][T17708] path_mount+0x56f/0xcb0 [ 753.481693][T17708] __se_sys_mount+0x2c4/0x3b0 [ 753.486162][T17708] ? __x64_sys_mount+0xd0/0xd0 [ 753.508657][T17708] ? __bpf_trace_sys_enter+0x62/0x70 [ 753.513809][T17708] __x64_sys_mount+0xbf/0xd0 [ 753.518190][T17708] do_syscall_64+0x34/0x70 [ 753.533992][T17708] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 753.544070][T17708] RIP: 0033:0x7f65622100a9 [ 753.548303][T17708] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 753.567866][T17708] RSP: 002b:00007f656158a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 753.568591][ T6271] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 753.576689][T17708] RAX: ffffffffffffffda RBX: 00007f6562346f80 RCX: 00007f65622100a9 [ 753.591974][T17708] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000080 [ 753.611667][T17708] RBP: 00007f656227f074 R08: 0000000020001700 R09: 0000000000000000 [ 753.638730][ T3026] usb 4-1: USB disconnect, device number 99 [ 753.648321][T17708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.656953][T17708] R13: 000000000000000b R14: 00007f6562346f80 R15: 00007ffcf6061958 [ 753.666017][T17708] ---[ end trace 296a554bc72f2103 ]--- [ 753.672573][T17708] ------------[ cut here ]------------ [ 753.677854][T17708] WARNING: CPU: 0 PID: 17708 at fs/overlayfs/util.c:450 ovl_dir_modified+0x2f4/0x3e0 [ 753.687441][T17708] Modules linked in: [ 753.691509][T17708] CPU: 0 PID: 17708 Comm: syz-executor.4 Tainted: G W 5.10.215-syzkaller-00370-gb58b8f9dad93 #0 [ 753.703202][T17708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 753.713176][T17708] RIP: 0010:ovl_dir_modified+0x2f4/0x3e0 [ 753.724720][T17708] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 83 60 a1 ff 49 ff 06 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cc cc 63 ff <0f> 0b e9 14 ff ff ff e8 c0 cc 63 ff 0f 0b e9 4e ff ff ff 44 89 f9 [ 753.744391][T17708] RSP: 0018:ffffc90001ae79e8 EFLAGS: 00010246 [ 753.752208][T17708] RAX: ffffffff8206e094 RBX: 0000000000000000 RCX: 0000000000040000 [ 753.760152][T17708] RDX: ffffc90002585000 RSI: 000000000003ffff RDI: 0000000000040000 [ 753.767950][T17708] RBP: ffffc90001ae7a30 R08: ffffffff8206dfa1 R09: ffffed1026c0d101 [ 753.777562][T17708] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888144d7d7a0 [ 753.785439][T17708] R13: 1ffff110289afaf4 R14: ffff888136068760 R15: dffffc0000000000 [ 753.793293][T17708] FS: 00007f656158a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 753.803558][T17708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.816380][T17708] CR2: 0000000020000040 CR3: 000000017745a000 CR4: 00000000003526b0 [ 753.835150][T17730] device pim6reg1 entered promiscuous mode [ 753.838511][ T6271] usb 3-1: Using ep0 maxpacket: 32 [ 753.841064][T17708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 753.858269][T17708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 753.883662][T17708] Call Trace: [ 753.886788][T17708] ? show_regs+0x58/0x60 [ 753.891673][T17708] ? __warn+0x160/0x2f0 [ 753.895749][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.903541][T17708] ? report_bug+0x3d9/0x5b0 [ 753.911328][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.917291][T17708] ? handle_bug+0x41/0x70 [ 753.922153][T17708] ? exc_invalid_op+0x1b/0x50 [ 753.926937][T17708] ? asm_exc_invalid_op+0x12/0x20 [ 753.931925][T17708] ? ovl_dir_modified+0x201/0x3e0 [ 753.936797][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.951103][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.958416][T17708] ? ovl_dir_modified+0x2f4/0x3e0 [ 753.963561][ T6271] usb 3-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.963978][T17708] ovl_do_remove+0x656/0xc90 [ 753.982839][ T6271] usb 3-1: config 1 interface 0 has no altsetting 0 [ 753.983891][T17708] ? ovl_set_redirect+0x630/0x630 [ 753.994449][T17708] ? down_write+0xd7/0x150 [ 753.998800][T17708] ? selinux_inode_rmdir+0x22/0x30 [ 754.003651][T17708] ovl_rmdir+0x1a/0x20 [ 754.007674][T17708] vfs_rmdir+0x2b7/0x3f0 [ 754.011790][T17708] incfs_kill_sb+0x1a2/0x220 [ 754.016345][T17708] deactivate_locked_super+0xad/0x110 [ 754.021639][T17708] fc_drop_locked+0x7f/0x90 [ 754.025951][T17708] vfs_get_tree+0x1d2/0x290 [ 754.039427][T17735] syz-executor.3[17735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.039490][T17735] syz-executor.3[17735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.053402][T17708] do_new_mount+0x2ba/0xb30 [ 754.069887][T17708] ? do_move_mount_old+0x160/0x160 [ 754.074931][T17708] ? security_capable+0x87/0xb0 [ 754.118547][T17708] ? ns_capable+0x89/0xe0 [ 754.148776][T17708] path_mount+0x56f/0xcb0 [ 754.153002][T17708] __se_sys_mount+0x2c4/0x3b0 [ 754.157466][T17708] ? __x64_sys_mount+0xd0/0xd0 [ 754.162198][T17708] ? __bpf_trace_sys_enter+0x62/0x70 [ 754.167277][T17708] __x64_sys_mount+0xbf/0xd0 [ 754.172896][T17708] do_syscall_64+0x34/0x70 [ 754.177152][T17708] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 754.183372][T17708] RIP: 0033:0x7f65622100a9 [ 754.187709][T17708] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 754.238781][ T6271] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 754.269004][ T6271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.276845][ T6271] usb 3-1: Product: Р [ 754.281187][ T6271] usb 3-1: Manufacturer: ჺﺆ [ 754.285879][ T6271] usb 3-1: SerialNumber: 㠁 [ 754.291408][T17708] RSP: 002b:00007f656158a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.299862][T17708] RAX: ffffffffffffffda RBX: 00007f6562346f80 RCX: 00007f65622100a9 [ 754.307817][T17708] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000080 [ 754.315779][T17708] RBP: 00007f656227f074 R08: 0000000020001700 R09: 0000000000000000 [ 754.324197][T17708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.333242][T17708] R13: 000000000000000b R14: 00007f6562346f80 R15: 00007ffcf6061958 [ 754.342804][T17708] ---[ end trace 296a554bc72f2104 ]--- [ 754.634047][T17743] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.648110][T17743] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.655487][T17743] device bridge_slave_0 entered promiscuous mode [ 754.662625][T17743] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.669588][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.676905][T17743] device bridge_slave_1 entered promiscuous mode [ 754.791656][T17743] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.798551][T17743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.805628][T17743] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.812529][T17743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.883981][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 754.893163][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.908843][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.927852][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 754.989590][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.996438][ T6270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.170607][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.178659][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.185495][ T6270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.192848][ T6271] usbhid 3-1:1.0: can't add hid device: -71 [ 755.198887][ T6271] usbhid: probe of 3-1:1.0 failed with error -71 [ 755.206118][ T6271] usb 3-1: USB disconnect, device number 106 [ 755.243163][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 755.253689][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 755.267653][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 755.279931][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 755.302248][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 755.313097][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 755.330589][T17743] device veth0_vlan entered promiscuous mode [ 755.337296][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 755.346472][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 755.365354][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 755.374653][T17758] 9pnet: Insufficient options for proto=fd [ 755.380696][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 755.388112][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 755.396793][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 755.412155][T17743] device veth1_macvtap entered promiscuous mode [ 755.423694][ T382] device bridge_slave_1 left promiscuous mode [ 755.433379][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.449133][ T382] device bridge_slave_0 left promiscuous mode [ 755.465609][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.476219][ T382] device veth1_macvtap left promiscuous mode [ 755.483023][ T382] device veth0_vlan left promiscuous mode [ 755.491770][T17764] syz-executor.0[17764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.493942][T17764] syz-executor.0[17764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.914569][T17772] device vlan2 entered promiscuous mode [ 755.986718][T17772] bridge0: port 3(vlan2) entered blocking state [ 755.993411][T17772] bridge0: port 3(vlan2) entered disabled state [ 756.011195][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 756.028930][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 756.037272][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 756.045441][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 756.054317][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 756.287176][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 756.319500][T17784] 9pnet: Insufficient options for proto=fd [ 756.439390][T17790] 9pnet: Insufficient options for proto=fd [ 756.458621][ T8471] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 757.015757][ T1223] handle_bad_sector: 8442 callbacks suppressed [ 757.015766][ T1223] attempt to access beyond end of device [ 757.015766][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 757.033433][ T1223] attempt to access beyond end of device [ 757.033433][ T1223] loop0: rw=0, want=57352, limit=40427 [ 757.045029][ T1223] attempt to access beyond end of device [ 757.045029][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 757.056504][ T1223] attempt to access beyond end of device [ 757.056504][ T1223] loop0: rw=0, want=57352, limit=40427 [ 757.067869][ T1223] attempt to access beyond end of device [ 757.067869][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 757.079532][ T1223] attempt to access beyond end of device [ 757.079532][ T1223] loop0: rw=0, want=57352, limit=40427 [ 757.091861][ T1223] attempt to access beyond end of device [ 757.091861][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 757.104556][ T1223] attempt to access beyond end of device [ 757.104556][ T1223] loop0: rw=0, want=57352, limit=40427 [ 757.116094][ T1223] attempt to access beyond end of device [ 757.116094][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 757.128282][ T1223] attempt to access beyond end of device [ 757.128282][ T1223] loop0: rw=0, want=57352, limit=40427 [ 757.428585][ T8471] usb 1-1: config 0 has no interfaces? [ 757.433989][ T8471] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 757.445027][ T8471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.448876][T17813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17813 comm=syz-executor.4 [ 757.467526][ T8471] usb 1-1: config 0 descriptor?? [ 757.472616][T17813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=17813 comm=syz-executor.4 [ 757.710725][ T3026] usb 1-1: USB disconnect, device number 96 [ 757.883514][T17815] binder_alloc: 17814: binder_alloc_buf, no vma [ 758.264318][T17823] device vlan1 entered promiscuous mode [ 758.286114][T17823] bridge0: port 3(vlan1) entered blocking state [ 758.297348][T17823] bridge0: port 3(vlan1) entered disabled state [ 759.837096][T17855] incfs: mount failed -22 [ 759.864218][T17847] tipc: Left network mode [ 760.032143][T17867] device vlan2 entered promiscuous mode [ 760.039752][T17867] bridge0: port 3(vlan2) entered blocking state [ 760.048488][T17867] bridge0: port 3(vlan2) entered disabled state [ 760.072459][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.089766][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.103206][T17861] device bridge_slave_0 entered promiscuous mode [ 760.121580][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.128650][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.135927][T17861] device bridge_slave_1 entered promiscuous mode [ 760.218398][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.225319][T17861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.232479][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.239328][T17861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.287801][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 760.300074][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.310059][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.331664][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 760.342673][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.349596][ T8474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.361118][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 760.369308][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.376166][ T8474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.391526][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 760.399914][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 760.427890][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 760.441548][T17861] device veth0_vlan entered promiscuous mode [ 760.448077][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 760.459517][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 760.466809][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 760.484171][T17861] device veth1_macvtap entered promiscuous mode [ 760.493420][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 760.508538][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 760.516917][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 760.691105][T17847] device bridge_slave_1 left promiscuous mode [ 760.699513][T17847] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.716842][T17847] device bridge_slave_0 left promiscuous mode [ 760.731831][T17847] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.750651][T17847] device veth1_macvtap left promiscuous mode [ 761.018564][ T6272] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 761.818560][ T6272] usb 3-1: config 1 interface 0 has no altsetting 0 [ 762.018550][ T1223] handle_bad_sector: 15436 callbacks suppressed [ 762.018561][ T1223] attempt to access beyond end of device [ 762.018561][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 762.035972][ T1223] attempt to access beyond end of device [ 762.035972][ T1223] loop0: rw=0, want=57352, limit=40427 [ 762.047249][ T1223] attempt to access beyond end of device [ 762.047249][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 762.059468][ T1223] attempt to access beyond end of device [ 762.059468][ T1223] loop0: rw=0, want=57352, limit=40427 [ 762.073448][ T1223] attempt to access beyond end of device [ 762.073448][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 762.085340][ T6272] usb 3-1: string descriptor 0 read error: -22 [ 762.091974][ T6272] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.40 [ 762.102432][ T1223] attempt to access beyond end of device [ 762.102432][ T1223] loop0: rw=0, want=57352, limit=40427 [ 762.118519][ T6272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.184171][ T1223] attempt to access beyond end of device [ 762.184171][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 762.199123][ T1223] attempt to access beyond end of device [ 762.199123][ T1223] loop0: rw=0, want=57352, limit=40427 [ 762.210286][ T1223] attempt to access beyond end of device [ 762.210286][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 762.221616][ T1223] attempt to access beyond end of device [ 762.221616][ T1223] loop0: rw=0, want=57352, limit=40427 [ 762.689292][ T6272] usbhid 3-1:1.0: can't add hid device: -71 [ 762.695486][ T6272] usbhid: probe of 3-1:1.0 failed with error -71 [ 762.702660][ T6272] usb 3-1: USB disconnect, device number 107 [ 762.991774][T17921] 9pnet: Insufficient options for proto=fd [ 765.008753][ T8478] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 765.218485][ T6270] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 765.278495][ T8478] usb 3-1: device descriptor read/64, error -71 [ 765.635685][T17975] device pim6reg1 entered promiscuous mode [ 765.693231][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 765.693242][ T24] audit: type=1400 audit(2000000026.970:27687): avc: denied { nlmsg_read } for pid=17976 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 765.719985][ T8478] usb 3-1: device descriptor read/64, error -71 [ 765.726094][ T6270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.748497][ T6270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.758174][ T6270] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 765.767115][ T6270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.777343][ T6270] usb 2-1: config 0 descriptor?? [ 765.988954][ T8478] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 766.269484][ T6270] hid-multitouch 0003:1FD2:6007.007B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 766.472870][ T3026] usb 2-1: USB disconnect, device number 101 [ 766.528832][ T8478] usb 3-1: device descriptor read/64, error -71 [ 766.948477][ T8478] usb 3-1: device descriptor read/64, error -71 [ 766.967921][ T24] audit: type=1400 audit(2000000028.240:27688): avc: denied { relabelfrom } for pid=18007 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=90934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 767.028674][ T1223] handle_bad_sector: 13642 callbacks suppressed [ 767.028687][ T1223] attempt to access beyond end of device [ 767.028687][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 767.047204][ T1223] attempt to access beyond end of device [ 767.047204][ T1223] loop0: rw=0, want=57352, limit=40427 [ 767.058755][ T1223] attempt to access beyond end of device [ 767.058755][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 767.070303][ T1223] attempt to access beyond end of device [ 767.070303][ T1223] loop0: rw=0, want=57352, limit=40427 [ 767.081714][ T1223] attempt to access beyond end of device [ 767.081714][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 767.086884][ T8478] usb usb3-port1: attempt power cycle [ 767.093343][ T1223] attempt to access beyond end of device [ 767.093343][ T1223] loop0: rw=0, want=57352, limit=40427 [ 767.118956][ T1223] attempt to access beyond end of device [ 767.118956][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 767.130409][ T1223] attempt to access beyond end of device [ 767.130409][ T1223] loop0: rw=0, want=57352, limit=40427 [ 767.141835][ T1223] attempt to access beyond end of device [ 767.141835][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 767.153837][ T1223] attempt to access beyond end of device [ 767.153837][ T1223] loop0: rw=0, want=57352, limit=40427 [ 768.167526][T18029] fuse: Unknown parameter 'dB3*|BA_OUg<c' [ 768.329897][T18029] 9pnet: Insufficient options for proto=fd [ 768.349819][T18029] overlayfs: missing 'lowerdir' [ 768.442713][T18037] 9pnet: Could not find request transport: fd0x0000000000000006 [ 768.997628][T18054] device syzkaller0 entered promiscuous mode [ 769.038539][ T6271] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 769.328497][ T6271] usb 1-1: Using ep0 maxpacket: 16 [ 769.619892][T18073] fuse: Unknown parameter 'dB3*|BA_OUg<c' [ 769.628584][ T6271] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 769.640841][ T6271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.654702][ T6271] usb 1-1: Product: syz [ 769.666450][ T6271] usb 1-1: Manufacturer: syz [ 769.671203][T18073] 9pnet: Insufficient options for proto=fd [ 769.674119][ T6271] usb 1-1: SerialNumber: syz [ 769.687905][T18073] overlayfs: missing 'lowerdir' [ 769.687937][ T6271] usb 1-1: config 0 descriptor?? [ 769.948507][ T6271] r8152 1-1:0.0: Unknown version 0x0000 [ 769.956661][ T8478] usb 1-1: USB disconnect, device number 97 [ 770.170295][T18090] 9pnet: Could not find request transport: fd0x0000000000000006 [ 770.393651][T18101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 770.498518][T18104] x_tables: duplicate underflow at hook 1 [ 770.972714][ T24] audit: type=1400 audit(2000000032.250:27689): avc: denied { map } for pid=18115 comm="syz-executor.0" path="socket:[91777]" dev="sockfs" ino=91777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 770.999858][T18116] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 771.012548][ T24] audit: type=1400 audit(2000000032.250:27690): avc: denied { accept } for pid=18115 comm="syz-executor.0" path="socket:[91777]" dev="sockfs" ino=91777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 772.038916][ T1223] handle_bad_sector: 10135 callbacks suppressed [ 772.038948][ T1223] attempt to access beyond end of device [ 772.038948][ T1223] loop0: rw=0, want=57352, limit=40427 [ 772.061520][ T1223] attempt to access beyond end of device [ 772.061520][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 772.073432][ T1223] attempt to access beyond end of device [ 772.073432][ T1223] loop0: rw=0, want=57352, limit=40427 [ 772.086297][ T1223] attempt to access beyond end of device [ 772.086297][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 772.098254][ T1223] attempt to access beyond end of device [ 772.098254][ T1223] loop0: rw=0, want=57352, limit=40427 [ 772.109378][ T1223] attempt to access beyond end of device [ 772.109378][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 772.120837][ T1223] attempt to access beyond end of device [ 772.120837][ T1223] loop0: rw=0, want=57352, limit=40427 [ 772.132235][ T1223] attempt to access beyond end of device [ 772.132235][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 772.143565][ T1223] attempt to access beyond end of device [ 772.143565][ T1223] loop0: rw=0, want=57352, limit=40427 [ 772.154810][ T1223] attempt to access beyond end of device [ 772.154810][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 772.393531][T18156] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 772.476481][T18159] 9pnet: Insufficient options for proto=fd [ 772.638702][ T6272] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 773.308550][ T6272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.328545][ T6272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.338073][ T6272] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 773.350867][ T6272] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.359728][ T6272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.368190][ T6272] usb 3-1: config 0 descriptor?? [ 773.915952][ T6272] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0 [ 773.923456][ T6272] plantronics 0003:047F:FFFF.007C: No inputs registered, leaving [ 773.931978][ T6272] plantronics 0003:047F:FFFF.007C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 774.268474][ T8474] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 774.508479][ T8474] usb 4-1: Using ep0 maxpacket: 32 [ 774.693072][T18206] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 774.904858][ T8474] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 774.928479][ T8474] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.938370][ T8474] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.958542][ T8474] usb 4-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 774.978731][ T8474] usb 4-1: config 1 interface 0 has no altsetting 1 [ 775.249038][T18154] usb 3-1: string descriptor 0 read error: -71 [ 775.273320][ T8474] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 775.291558][ T8474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.302481][ T8474] usb 4-1: Product: syz [ 775.307490][ T8474] usb 4-1: Manufacturer: syz [ 775.316036][ T8474] usb 4-1: SerialNumber: syz [ 776.110120][T18228] 9pnet: Insufficient options for proto=fd [ 776.371735][ T6273] usb 3-1: USB disconnect, device number 111 [ 777.048581][ T1223] handle_bad_sector: 10383 callbacks suppressed [ 777.048593][ T1223] attempt to access beyond end of device [ 777.048593][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 777.116100][ T1223] attempt to access beyond end of device [ 777.116100][ T1223] loop0: rw=0, want=57352, limit=40427 [ 777.130398][ T1223] attempt to access beyond end of device [ 777.130398][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 777.142002][ T1223] attempt to access beyond end of device [ 777.142002][ T1223] loop0: rw=0, want=57352, limit=40427 [ 777.154056][ T8474] usb 4-1: 0:2 : does not exist [ 777.157570][ T1223] attempt to access beyond end of device [ 777.157570][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 777.170638][ T1223] attempt to access beyond end of device [ 777.170638][ T1223] loop0: rw=0, want=57352, limit=40427 [ 777.171276][ T8474] usb 4-1: USB disconnect, device number 100 [ 777.182054][ T1223] attempt to access beyond end of device [ 777.182054][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 777.198646][ T1223] attempt to access beyond end of device [ 777.198646][ T1223] loop0: rw=0, want=57352, limit=40427 [ 777.211958][ T1223] attempt to access beyond end of device [ 777.211958][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 777.223805][ T1223] attempt to access beyond end of device [ 777.223805][ T1223] loop0: rw=0, want=57352, limit=40427 [ 777.538497][ T8478] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 777.548472][ T8475] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 777.558475][ T8474] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 777.808541][ T8474] usb 4-1: Using ep0 maxpacket: 16 [ 777.908615][ T8478] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 777.921580][ T8475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.937204][ T8474] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 777.948464][ T8474] usb 4-1: config 0 has no interface number 0 [ 777.954383][ T8474] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 777.966263][ T8475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.975891][ T8478] usb 5-1: New USB device found, idVendor=49d3, idProduct=317c, bcdDevice= 4.5e [ 777.995090][ T8475] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.007959][ T8478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.015735][ T8474] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 778.036512][ T8478] usb 5-1: config 0 descriptor?? [ 778.041388][ T8475] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.058642][ T8475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.088994][ T8478] usb 5-1: bad CDC descriptors [ 778.094567][ T8475] usb 1-1: config 0 descriptor?? [ 778.159574][ T8474] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 778.171721][ T8474] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 778.180421][ T8474] usb 4-1: Product: syz [ 778.184668][ T8474] usb 4-1: SerialNumber: syz [ 778.191171][ T8474] usb 4-1: config 0 descriptor?? [ 778.289781][ T6271] usb 5-1: USB disconnect, device number 91 [ 778.458522][ T8478] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 778.469275][ T8474] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 778.477178][ T8474] usb 4-1: USB disconnect, device number 101 [ 778.579394][ T8475] plantronics 0003:047F:FFFF.007D: unknown main item tag 0x0 [ 778.586904][ T8475] plantronics 0003:047F:FFFF.007D: No inputs registered, leaving [ 778.595712][ T8475] plantronics 0003:047F:FFFF.007D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 778.868589][ T8478] usb 3-1: unable to get BOS descriptor or descriptor too short [ 778.918548][ T8478] usb 3-1: not running at top speed; connect to a high speed hub [ 778.991446][T18269] overlayfs: missing 'lowerdir' [ 779.238800][ T8478] usb 3-1: config 3 has an invalid interface number: 240 but max is 2 [ 779.250041][ T8478] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 779.260177][ T8478] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 779.268942][ T8478] usb 3-1: config 3 has no interface number 0 [ 779.274944][ T8478] usb 3-1: config 3 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 779.386725][T18275] 9pnet: Insufficient options for proto=fd [ 779.547345][ T8478] usb 3-1: New USB device found, idVendor=2019, idProduct=ed16, bcdDevice=19.e0 [ 779.558332][ T8478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.567174][ T8478] usb 3-1: Product: syz [ 779.574318][ T8478] usb 3-1: Manufacturer: syz [ 779.579780][ T8478] usb 3-1: SerialNumber: syz [ 779.916923][T18258] usb 1-1: string descriptor 0 read error: -71 [ 780.709939][ T3026] usb 1-1: USB disconnect, device number 98 [ 781.069417][ T8478] usb 3-1: USB disconnect, device number 112 [ 781.275202][T18311] overlayfs: missing 'lowerdir' [ 781.428191][T18313] 9pnet: Insufficient options for proto=fd [ 781.938500][ T8478] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 782.058755][ T1223] handle_bad_sector: 14113 callbacks suppressed [ 782.058768][ T1223] attempt to access beyond end of device [ 782.058768][ T1223] loop0: rw=0, want=57352, limit=40427 [ 782.077379][ T1223] attempt to access beyond end of device [ 782.077379][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 782.088825][ T1223] attempt to access beyond end of device [ 782.088825][ T1223] loop0: rw=0, want=57352, limit=40427 [ 782.100224][ T1223] attempt to access beyond end of device [ 782.100224][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 782.111871][ T1223] attempt to access beyond end of device [ 782.111871][ T1223] loop0: rw=0, want=57352, limit=40427 [ 782.123227][ T1223] attempt to access beyond end of device [ 782.123227][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 782.137146][ T1223] attempt to access beyond end of device [ 782.137146][ T1223] loop0: rw=0, want=57352, limit=40427 [ 782.160412][ T1223] attempt to access beyond end of device [ 782.160412][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 782.174099][ T1223] attempt to access beyond end of device [ 782.174099][ T1223] loop0: rw=0, want=57352, limit=40427 [ 782.215692][ T1223] attempt to access beyond end of device [ 782.215692][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 782.218517][ T6269] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 782.468590][ T8478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.479636][ T8478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.489266][ T8478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 782.507147][ T8478] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 782.517785][ T8478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.527090][ T8478] usb 5-1: config 0 descriptor?? [ 782.532035][ T6269] usb 1-1: Using ep0 maxpacket: 16 [ 782.668550][ T6269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.680381][ T6269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.691672][ T6269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.704717][ T6269] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 782.713727][ T6269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.723483][ T6269] usb 1-1: config 0 descriptor?? [ 782.966653][T18356] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 783.009307][ T8478] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 783.023080][ T8478] plantronics 0003:047F:FFFF.007E: No inputs registered, leaving [ 783.032319][ T8478] plantronics 0003:047F:FFFF.007E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 783.040171][T18352] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.054912][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.062353][T18352] device bridge_slave_0 entered promiscuous mode [ 783.072213][T18352] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.079793][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.088057][T18352] device bridge_slave_1 entered promiscuous mode [ 783.144273][T18352] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.151166][T18352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.158245][T18352] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.165029][T18352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.197545][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.206574][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.218741][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.219523][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x0 [ 783.232761][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x0 [ 783.239947][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x4 [ 783.247146][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x0 [ 783.254307][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x0 [ 783.262785][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x0 [ 783.270202][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 783.274305][ T6269] microsoft 0003:045E:07DA.007F: unknown main item tag 0x0 [ 783.280752][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.289134][ T6269] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.007F/input/input83 [ 783.291922][ T8471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.311326][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 783.313427][ T6269] microsoft 0003:045E:07DA.007F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 783.319396][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.337803][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.365931][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.374178][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.391894][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 783.407559][T18352] device veth0_vlan entered promiscuous mode [ 783.415598][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 783.425726][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 783.434219][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 783.585097][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 783.602917][T18352] device veth1_macvtap entered promiscuous mode [ 783.624550][ T6271] usb 1-1: USB disconnect, device number 99 [ 783.627830][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 783.645737][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 783.669893][ T48] device bridge_slave_1 left promiscuous mode [ 783.676995][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.686477][ T48] device bridge_slave_0 left promiscuous mode [ 783.694407][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.703594][ T48] device veth1_macvtap left promiscuous mode [ 783.709610][ T8471] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 783.717297][ T48] device veth0_vlan left promiscuous mode [ 783.869697][T18371] overlayfs: missing 'lowerdir' [ 784.158559][ T8471] usb 4-1: Using ep0 maxpacket: 16 [ 784.278611][ T8471] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.289183][ T8471] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 784.302266][ T8471] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 784.311185][ T8471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.371559][T18375] 9pnet: Insufficient options for proto=fd [ 784.607273][ T8471] usb 4-1: config 0 descriptor?? [ 784.618609][T18318] usb 5-1: string descriptor 0 read error: -2 [ 784.649137][ T8471] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 784.877096][T18361] input: syz0 as /devices/virtual/input/input84 [ 785.124032][T18388] overlayfs: missing 'lowerdir' [ 785.653074][ T6266] usb 5-1: USB disconnect, device number 92 [ 785.660035][T18398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18398 comm=syz-executor.2 [ 785.688487][T18398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 785.842050][ T24] audit: type=1326 audit(2000000047.120:27691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 785.875049][ T24] audit: type=1326 audit(2000000047.150:27692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 786.457151][T18417] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 786.465929][T18417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 786.926722][ T8475] usb 4-1: USB disconnect, device number 102 [ 787.070636][ T1223] handle_bad_sector: 8064 callbacks suppressed [ 787.070884][ T1223] attempt to access beyond end of device [ 787.070884][ T1223] loop0: rw=0, want=57352, limit=40427 [ 787.113564][T18437] 9pnet: Insufficient options for proto=fd [ 787.154752][ T1223] attempt to access beyond end of device [ 787.154752][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 787.187077][ T1223] attempt to access beyond end of device [ 787.187077][ T1223] loop0: rw=0, want=57352, limit=40427 [ 787.289049][ T3026] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 787.350713][ T1223] attempt to access beyond end of device [ 787.350713][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 787.604499][ T1223] attempt to access beyond end of device [ 787.604499][ T1223] loop0: rw=0, want=57352, limit=40427 [ 787.670077][ T3026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.716948][ T1223] attempt to access beyond end of device [ 787.716948][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 787.775724][ T3026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.785535][ T3026] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.798954][ T1223] attempt to access beyond end of device [ 787.798954][ T1223] loop0: rw=0, want=57352, limit=40427 [ 787.821329][ T3026] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.831290][ T1223] attempt to access beyond end of device [ 787.831290][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 787.859811][ T3026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.878575][ T3026] usb 5-1: config 0 descriptor?? [ 787.897773][ T1223] attempt to access beyond end of device [ 787.897773][ T1223] loop0: rw=0, want=57352, limit=40427 [ 787.909133][ T1223] attempt to access beyond end of device [ 787.909133][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 788.554374][T18460] tipc: Enabling of bearer rejected, failed to enable media [ 788.710087][T18462] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 788.718948][T18462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 788.910502][ T3026] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 788.925319][ T3026] plantronics 0003:047F:FFFF.0080: No inputs registered, leaving [ 788.939951][ T3026] plantronics 0003:047F:FFFF.0080: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 789.622131][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.629161][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.636556][T18481] device bridge_slave_0 entered promiscuous mode [ 789.643670][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.650822][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.658206][T18481] device bridge_slave_1 entered promiscuous mode [ 789.738956][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.745845][T18481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.752970][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.759810][T18481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.784242][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 789.792337][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.799686][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.826174][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 789.838368][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.845242][ T8475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.855293][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 789.863390][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.870252][ T8475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.888768][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 789.900802][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 789.919973][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 789.934699][T18481] device veth0_vlan entered promiscuous mode [ 789.943176][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 789.962171][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.973364][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 789.984972][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 790.149324][T18481] device veth1_macvtap entered promiscuous mode [ 790.309869][T18431] usb 5-1: string descriptor 0 read error: -71 [ 790.310256][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 790.329467][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 790.353069][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 790.364508][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 790.456858][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 790.468000][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.027098][T18509] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 791.036018][T18509] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 791.218835][ T3026] usb 5-1: USB disconnect, device number 93 [ 791.627962][T18528] tipc: Enabling of bearer rejected, failed to enable media [ 791.848497][ T6291] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 792.078532][ T1223] handle_bad_sector: 3923 callbacks suppressed [ 792.078546][ T1223] attempt to access beyond end of device [ 792.078546][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 792.096319][ T1223] attempt to access beyond end of device [ 792.096319][ T1223] loop0: rw=0, want=57352, limit=40427 [ 792.107795][ T1223] attempt to access beyond end of device [ 792.107795][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 792.119350][ T1223] attempt to access beyond end of device [ 792.119350][ T1223] loop0: rw=0, want=57352, limit=40427 [ 792.139057][ T1223] attempt to access beyond end of device [ 792.139057][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 792.156722][ T1223] attempt to access beyond end of device [ 792.156722][ T1223] loop0: rw=0, want=57352, limit=40427 [ 792.179286][ T1223] attempt to access beyond end of device [ 792.179286][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 792.181177][ T6291] usb 5-1: device descriptor read/64, error -71 [ 792.200499][ T1223] attempt to access beyond end of device [ 792.200499][ T1223] loop0: rw=0, want=57352, limit=40427 [ 792.223794][T18548] fuse: Bad value for 'rootmode' [ 792.232430][T18548] 9pnet: Insufficient options for proto=fd [ 792.238198][T18549] 9pnet: Insufficient options for proto=fd [ 792.242415][ T1223] attempt to access beyond end of device [ 792.242415][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 792.255273][ T1223] attempt to access beyond end of device [ 792.255273][ T1223] loop0: rw=0, want=57352, limit=40427 [ 792.368918][ T6265] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 792.588514][ T6291] usb 5-1: device descriptor read/64, error -71 [ 792.848519][ T8478] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 792.878487][ T6291] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 793.018479][ T3026] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 793.088503][ T8478] usb 1-1: Using ep0 maxpacket: 16 [ 793.163795][T18577] overlayfs: failed to resolve './file1': -2 [ 793.188486][ T6291] usb 5-1: device descriptor read/64, error -71 [ 793.208565][ T8478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.228497][ T8478] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 793.250613][ T8478] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 793.268475][ T8478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.284517][ T8478] usb 1-1: config 0 descriptor?? [ 793.289424][ T3026] usb 3-1: device descriptor read/64, error -71 [ 793.658484][ T6291] usb 5-1: device descriptor read/64, error -71 [ 793.678484][ T3026] usb 3-1: device descriptor read/64, error -71 [ 793.778561][ T6291] usb usb5-port1: attempt power cycle [ 793.789636][ T8478] microsoft 0003:045E:07DA.0081: No inputs registered, leaving [ 793.797600][ T8478] microsoft 0003:045E:07DA.0081: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 793.809309][ T8478] microsoft 0003:045E:07DA.0081: no inputs found [ 793.815484][ T8478] microsoft 0003:045E:07DA.0081: could not initialize ff, continuing anyway [ 793.958524][ T3026] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 794.049964][T18584] fuse: Bad value for 'fd' [ 794.253802][ T6291] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 794.258473][ T3026] usb 3-1: device descriptor read/64, error -71 [ 794.390419][T18588] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 794.508677][ T6291] usb 5-1: device descriptor read/8, error -71 [ 794.580966][ T24] audit: type=1326 audit(2000000055.860:27693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.610502][ T24] audit: type=1326 audit(2000000055.880:27694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.634768][ T24] audit: type=1326 audit(2000000055.880:27695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.658930][ T24] audit: type=1326 audit(2000000055.880:27696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.683323][ T24] audit: type=1326 audit(2000000055.880:27697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.711487][ T24] audit: type=1326 audit(2000000055.880:27698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.735615][ T24] audit: type=1326 audit(2000000055.880:27699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.759728][ T24] audit: type=1326 audit(2000000055.880:27700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.784814][ T6291] usb 5-1: device descriptor read/8, error -71 [ 794.789920][T18593] xt_CT: No such helper "netbios-ns" [ 794.796182][ T24] audit: type=1326 audit(2000000055.880:27701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.820324][ T24] audit: type=1326 audit(2000000055.880:27702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd64dd0a9 code=0x7ffc0000 [ 794.830487][T18593] incfs: Can't find or create .index dir in ./file0 [ 794.851809][ T3026] usb 3-1: device descriptor read/64, error -71 [ 794.857984][T18593] incfs: mount failed -14 [ 794.928120][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 794.937896][T18595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 794.968564][ T3026] usb usb3-port1: attempt power cycle [ 795.141508][T18603] device pim6reg1 entered promiscuous mode [ 795.378474][ T3026] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 795.548617][ T3026] usb 3-1: device descriptor read/8, error -71 [ 795.588788][ T8478] usb 1-1: USB disconnect, device number 100 [ 795.818510][ T3026] usb 3-1: device descriptor read/8, error -71 [ 795.898530][ T6269] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 796.088510][ T3026] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 796.258506][ T3026] usb 3-1: device descriptor read/8, error -71 [ 796.258575][ T6269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 796.275835][ T6269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 796.286923][ T6269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 796.299745][ T6269] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.308651][ T6269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.326805][ T6269] usb 2-1: config 0 descriptor?? [ 796.348537][T18633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 796.418478][ T6265] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 796.548577][ T3026] usb 3-1: device descriptor read/8, error -71 [ 796.679009][ T6265] usb 4-1: Using ep0 maxpacket: 16 [ 796.798944][ T6265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.831544][ T6265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 796.834507][ T3026] usb usb3-port1: unable to enumerate USB device [ 796.858597][ T6265] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 796.867850][ T6265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.884428][ T6265] usb 4-1: config 0 descriptor?? [ 796.898519][ T6269] usbhid 2-1:0.0: can't add hid device: -71 [ 796.904375][ T6269] usbhid: probe of 2-1:0.0 failed with error -71 [ 796.915489][ T6269] usb 2-1: USB disconnect, device number 102 [ 797.088669][ T1223] handle_bad_sector: 19039 callbacks suppressed [ 797.088677][ T1223] attempt to access beyond end of device [ 797.088677][ T1223] loop0: rw=0, want=57352, limit=40427 [ 797.105998][ T1223] attempt to access beyond end of device [ 797.105998][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 797.118064][ T1223] attempt to access beyond end of device [ 797.118064][ T1223] loop0: rw=0, want=57352, limit=40427 [ 797.129749][ T1223] attempt to access beyond end of device [ 797.129749][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 797.141083][ T1223] attempt to access beyond end of device [ 797.141083][ T1223] loop0: rw=0, want=57352, limit=40427 [ 797.152279][ T1223] attempt to access beyond end of device [ 797.152279][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 797.163690][ T1223] attempt to access beyond end of device [ 797.163690][ T1223] loop0: rw=0, want=57352, limit=40427 [ 797.174898][ T1223] attempt to access beyond end of device [ 797.174898][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 797.186195][ T1223] attempt to access beyond end of device [ 797.186195][ T1223] loop0: rw=0, want=57352, limit=40427 [ 797.197274][ T1223] attempt to access beyond end of device [ 797.197274][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 797.361808][ T6265] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 797.368886][ T6291] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 797.380701][ T6265] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 797.387794][ T6265] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 797.397116][ T6265] microsoft 0003:045E:07DA.0082: No inputs registered, leaving [ 797.407433][ T6265] microsoft 0003:045E:07DA.0082: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 797.419170][ T6265] microsoft 0003:045E:07DA.0082: no inputs found [ 797.425609][ T6265] microsoft 0003:045E:07DA.0082: could not initialize ff, continuing anyway [ 797.642060][T18679] tipc: Started in network mode [ 797.646847][T18679] tipc: Own node identity ac1414aa, cluster identity 4711 [ 797.654157][T18679] tipc: New replicast peer: 100.1.1.1 [ 797.659769][T18679] tipc: Enabled bearer , priority 10 [ 797.740301][ T6269] usb 4-1: USB disconnect, device number 104 [ 797.803290][T18682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18682 comm=syz-executor.3 [ 797.808675][ T6291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.816292][T18682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18682 comm=syz-executor.3 [ 797.848552][ T6291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.858564][ T8473] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 797.862509][ T6291] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 797.884188][ T6291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.895542][ T6291] usb 5-1: config 0 descriptor?? [ 798.302325][T18691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18691 comm=syz-executor.3 [ 798.308482][ T8473] usb 1-1: device descriptor read/64, error -71 [ 798.668471][ T6265] tipc: 32-bit node address hash set to aa1414ac [ 798.678492][ T8477] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 798.698879][ T6269] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 798.718650][ T8473] usb 1-1: device descriptor read/64, error -71 [ 798.918517][ T8477] usb 2-1: Using ep0 maxpacket: 16 [ 798.988490][ T8473] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 799.038536][ T8477] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.048804][ T8477] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 799.061533][ T8477] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 799.070425][ T8477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.079364][ T8477] usb 2-1: config 0 descriptor?? [ 799.098532][ T6269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 799.109535][ T6269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 799.118948][ T8477] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 799.120447][ T6269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.140355][ T6269] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.149138][ T6269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.168682][ T6269] usb 4-1: config 0 descriptor?? [ 799.198533][T18695] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 799.258503][ T8473] usb 1-1: device descriptor read/64, error -71 [ 799.332441][T18694] input: syz0 as /devices/virtual/input/input87 [ 799.533363][T18699] overlayfs: missing 'lowerdir' [ 799.768553][ T6269] usbhid 4-1:0.0: can't add hid device: -71 [ 799.774399][ T6269] usbhid: probe of 4-1:0.0 failed with error -71 [ 799.781919][ T6269] usb 4-1: USB disconnect, device number 105 [ 799.878475][ T8473] usb 1-1: device descriptor read/64, error -71 [ 799.998538][ T8473] usb usb1-port1: attempt power cycle [ 800.209158][T18701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 800.228516][ T6291] usbhid 5-1:0.0: can't add hid device: -71 [ 800.234369][ T6291] usbhid: probe of 5-1:0.0 failed with error -71 [ 800.300242][ T6291] usb 5-1: USB disconnect, device number 98 [ 800.621949][ T8473] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 800.775138][T18726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18726 comm=syz-executor.0 [ 800.789858][T18726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18726 comm=syz-executor.0 [ 801.129935][ T8473] usb 1-1: device not accepting address 103, error -71 [ 801.700305][ T6291] usb 2-1: USB disconnect, device number 103 [ 802.048657][ T6265] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 802.139804][T18763] overlayfs: missing 'lowerdir' [ 802.213123][ T1223] handle_bad_sector: 16555 callbacks suppressed [ 802.213137][ T1223] attempt to access beyond end of device [ 802.213137][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 802.230694][ T1223] attempt to access beyond end of device [ 802.230694][ T1223] loop0: rw=0, want=57352, limit=40427 [ 802.243073][ T1223] attempt to access beyond end of device [ 802.243073][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 802.254555][ T1223] attempt to access beyond end of device [ 802.254555][ T1223] loop0: rw=0, want=57352, limit=40427 [ 802.266599][ T1223] attempt to access beyond end of device [ 802.266599][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 802.285454][ T1223] attempt to access beyond end of device [ 802.285454][ T1223] loop0: rw=0, want=57352, limit=40427 [ 802.296798][ T1223] attempt to access beyond end of device [ 802.296798][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 802.308332][ T1223] attempt to access beyond end of device [ 802.308332][ T1223] loop0: rw=0, want=57352, limit=40427 [ 802.319946][ T1223] attempt to access beyond end of device [ 802.319946][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 802.331615][ T1223] attempt to access beyond end of device [ 802.331615][ T1223] loop0: rw=0, want=57352, limit=40427 [ 803.024214][T18774] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 803.132071][T18782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18782 comm=syz-executor.1 [ 803.188586][ T6265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 803.212486][ T6265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 803.213885][T18782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18782 comm=syz-executor.1 [ 803.224088][T18784] 9pnet: Insufficient options for proto=fd [ 803.242123][ T6265] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 803.308668][ T6265] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.317525][ T6265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.326318][ T6265] usb 5-1: config 0 descriptor?? [ 803.370141][T18739] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 804.148616][ T6265] usbhid 5-1:0.0: can't add hid device: -71 [ 804.154521][ T6265] usbhid: probe of 5-1:0.0 failed with error -71 [ 804.168268][ T6265] usb 5-1: USB disconnect, device number 99 [ 804.483289][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.487290][T18830] syz-executor.3[18830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.498575][T18830] syz-executor.3[18830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.461121][T18856] 9pnet: Insufficient options for proto=fd [ 805.530010][T18866] syz-executor.4[18866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.530069][T18866] syz-executor.4[18866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.744069][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.783324][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.798262][T18870] device bridge_slave_0 entered promiscuous mode [ 805.818652][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.826665][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.841484][T18870] device bridge_slave_1 entered promiscuous mode [ 805.908532][ T8473] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 805.969491][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.976359][T18870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.983487][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.990242][T18870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.063609][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 806.073485][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.088812][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.114813][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 806.131600][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.138479][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.161329][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 806.178227][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.185207][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.211315][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.221392][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 806.247754][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 806.264414][T18870] device veth0_vlan entered promiscuous mode [ 806.280339][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 806.288159][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 806.288592][ T8473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 806.295820][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 806.324503][ T8473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 806.327852][T18870] device veth1_macvtap entered promiscuous mode [ 806.349077][ T8473] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 806.362967][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 806.364148][ T8473] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.378772][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 806.380026][ T8473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.387547][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 806.403368][ T8473] usb 5-1: config 0 descriptor?? [ 806.418524][T18872] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 806.430840][ T8140] device bridge_slave_1 left promiscuous mode [ 806.436784][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.459207][ T8140] device bridge_slave_0 left promiscuous mode [ 806.465167][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.479598][ T8140] device veth1_macvtap left promiscuous mode [ 806.621984][T18883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18883 comm=syz-executor.3 [ 806.658246][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 806.669131][T18883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18883 comm=syz-executor.3 [ 806.682996][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 806.703073][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 806.718819][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 806.958515][ T8473] usbhid 5-1:0.0: can't add hid device: -71 [ 806.964385][ T8473] usbhid: probe of 5-1:0.0 failed with error -71 [ 806.975795][ T8473] usb 5-1: USB disconnect, device number 100 [ 807.189765][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 807.189781][ T24] audit: type=1400 audit(2000000068.470:27746): avc: denied { getattr } for pid=18879 comm="syz-executor.1" path="mnt:[4026532313]" dev="nsfs" ino=4026532313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 807.219952][ T1223] handle_bad_sector: 8230 callbacks suppressed [ 807.219965][ T1223] attempt to access beyond end of device [ 807.219965][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 807.239008][ T1223] attempt to access beyond end of device [ 807.239008][ T1223] loop0: rw=0, want=57352, limit=40427 [ 807.252168][ T1223] attempt to access beyond end of device [ 807.252168][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 807.263738][ T1223] attempt to access beyond end of device [ 807.263738][ T1223] loop0: rw=0, want=57352, limit=40427 [ 807.276591][ T1223] attempt to access beyond end of device [ 807.276591][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 807.288046][ T1223] attempt to access beyond end of device [ 807.288046][ T1223] loop0: rw=0, want=57352, limit=40427 [ 807.299277][ T1223] attempt to access beyond end of device [ 807.299277][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 807.310748][ T1223] attempt to access beyond end of device [ 807.310748][ T1223] loop0: rw=0, want=57352, limit=40427 [ 807.323201][ T1223] attempt to access beyond end of device [ 807.323201][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 807.335158][ T1223] attempt to access beyond end of device [ 807.335158][ T1223] loop0: rw=0, want=57352, limit=40427 [ 807.620404][T18900] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 807.637937][T18902] fuse: Bad value for 'fd' [ 809.685680][T18938] device syzkaller0 entered promiscuous mode [ 809.692315][ T8475] syzkaller0: tun_net_xmit 48 [ 809.700403][T18938] syzkaller0: tun_net_xmit 1280 [ 809.705271][T18938] syzkaller0: create flow: hash 3749059396 index 1 [ 809.738504][ T6270] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 809.988478][ T8475] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 810.188530][ T6270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 810.199483][ T6270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 810.210622][ T6270] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.223333][ T6270] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.228475][ T8475] usb 2-1: Using ep0 maxpacket: 32 [ 810.232154][ T6270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.232816][ T6270] usb 5-1: config 0 descriptor?? [ 810.278617][T18928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 810.348577][ T8475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.366922][ T24] audit: type=1326 audit(2000000071.640:27747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.367047][ T8475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.413299][ T24] audit: type=1326 audit(2000000071.680:27748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.435136][ T8475] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.437576][ T24] audit: type=1326 audit(2000000071.680:27749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.456500][ T8475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.480506][ T24] audit: type=1326 audit(2000000071.680:27750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.504970][ T8475] usb 2-1: config 0 descriptor?? [ 810.505040][ T24] audit: type=1326 audit(2000000071.690:27751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.549048][ T8475] hub 2-1:0.0: USB hub found [ 810.568554][ T24] audit: type=1326 audit(2000000071.690:27752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.593917][ T24] audit: type=1326 audit(2000000071.690:27753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.618066][ T24] audit: type=1326 audit(2000000071.690:27754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.641949][ T24] audit: type=1326 audit(2000000071.690:27755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dd82d0a9 code=0x7ffc0000 [ 810.750283][T18937] syzkaller0: delete flow: hash 3749059396 index 1 [ 810.798516][ T6270] usbhid 5-1:0.0: can't add hid device: -71 [ 810.804352][ T6270] usbhid: probe of 5-1:0.0 failed with error -71 [ 810.808623][ T8475] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 810.819796][ T6270] usb 5-1: USB disconnect, device number 101 [ 810.928556][ T8475] usbhid 2-1:0.0: can't add hid device: -71 [ 810.934459][ T8475] usbhid: probe of 2-1:0.0 failed with error -71 [ 810.979050][ T8475] usb 2-1: USB disconnect, device number 104 [ 811.600288][T18964] fuse: Bad value for 'fd' [ 812.228570][ T1223] handle_bad_sector: 14508 callbacks suppressed [ 812.228585][ T1223] attempt to access beyond end of device [ 812.228585][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 812.250081][ T1223] attempt to access beyond end of device [ 812.250081][ T1223] loop0: rw=0, want=57352, limit=40427 [ 812.261514][ T1223] attempt to access beyond end of device [ 812.261514][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 812.290653][ T1223] attempt to access beyond end of device [ 812.290653][ T1223] loop0: rw=0, want=57352, limit=40427 [ 812.314270][ T1223] attempt to access beyond end of device [ 812.314270][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 812.330174][T18980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.339600][ T1223] attempt to access beyond end of device [ 812.339600][ T1223] loop0: rw=0, want=57352, limit=40427 [ 812.351097][T18980] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 812.367081][ T1223] attempt to access beyond end of device [ 812.367081][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 812.379096][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.389099][T18979] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 812.404854][ T1223] attempt to access beyond end of device [ 812.404854][ T1223] loop0: rw=0, want=57352, limit=40427 [ 812.416270][ T1223] attempt to access beyond end of device [ 812.416270][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 812.428825][ T1223] attempt to access beyond end of device [ 812.428825][ T1223] loop0: rw=0, want=57352, limit=40427 [ 812.429105][T18980] udc-core: couldn't find an available UDC or it's busy [ 812.455525][T18980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 812.882672][T18999] incfs: Options parsing error. -22 [ 812.887805][T18999] incfs: mount failed -22 [ 812.968488][ T3026] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 813.328615][ T3026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 813.339885][ T3026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 813.351009][ T3026] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.363830][ T3026] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.372843][ T3026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.381415][ T3026] usb 2-1: config 0 descriptor?? [ 813.398571][T18993] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 813.498750][T19005] udc-core: couldn't find an available UDC or it's busy [ 813.505516][T19005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 813.669060][T19015] syz-executor.0[19015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.669145][T19015] syz-executor.0[19015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.684721][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 813.684734][ T24] audit: type=1326 audit(2000000074.970:27758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a77c890a9 code=0x7ffc0000 [ 813.736433][ T24] audit: type=1326 audit(2000000074.970:27759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a77c890a9 code=0x7ffc0000 [ 813.760429][ T24] audit: type=1326 audit(2000000074.970:27760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a77c890a9 code=0x7ffc0000 [ 813.784568][ T24] audit: type=1326 audit(2000000075.000:27761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a77c890a9 code=0x7ffc0000 [ 813.808978][ T24] audit: type=1326 audit(2000000075.000:27762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a77c890a9 code=0x7ffc0000 [ 813.818479][ T6265] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 813.833230][ T24] audit: type=1326 audit(2000000075.000:27763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a77c86827 code=0x7ffc0000 [ 813.864734][ T24] audit: type=1326 audit(2000000075.000:27764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a77c4c4e9 code=0x7ffc0000 [ 813.889391][ T24] audit: type=1326 audit(2000000075.000:27765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f0a77c890a9 code=0x7ffc0000 [ 813.913703][ T24] audit: type=1326 audit(2000000075.000:27766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a77c86827 code=0x7ffc0000 [ 813.944480][ T24] audit: type=1326 audit(2000000075.000:27767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a77c4c4e9 code=0x7ffc0000 [ 813.968496][ T3026] usbhid 2-1:0.0: can't add hid device: -71 [ 813.974299][ T3026] usbhid: probe of 2-1:0.0 failed with error -71 [ 813.987698][ T3026] usb 2-1: USB disconnect, device number 105 [ 814.255390][T19020] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.298478][ T6265] usb 4-1: Using ep0 maxpacket: 32 [ 814.519241][ T6265] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.532137][ T6265] usb 4-1: config 1 interface 0 has no altsetting 0 [ 814.729133][ T6265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 814.753057][ T6265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.797835][ T6265] usb 4-1: Product: 凳஬뢌֚ה㦮辀闯뒭棨Ↄ뉹啕톨篝㈿黙ꟈ㒻䡞蜞糲焁轪憱邫ꯡ㘣䶁뛓桛⍠ܱ鎴᤻ⶡ첄 [ 814.875975][ T6265] usb 4-1: Manufacturer: 〉 [ 814.900833][ T6265] usb 4-1: SerialNumber: ড়굸ꓻ篪俳 [ 814.938647][T19006] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 815.270123][ T6265] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 815.290318][ T6265] usb 4-1: USB disconnect, device number 106 [ 815.300635][ T6265] usblp0: removed [ 815.694723][T19050] tipc: Enabling of bearer rejected, failed to enable media [ 815.976410][T19057] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 816.170911][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.188269][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.195517][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.212907][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.228481][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.235722][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.258493][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.265732][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x4 [ 816.268567][ T3026] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 816.272935][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.287572][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x2 [ 816.294982][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.302202][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.309390][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.316587][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.323843][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.332497][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.341290][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.348520][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.355695][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.362922][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.370149][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.377305][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.384541][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.391728][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.399370][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.406549][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.413923][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.421112][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.428393][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.435626][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.442913][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.450104][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.457439][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.464658][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.471871][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.479111][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.486242][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.493463][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.500681][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.507867][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.515118][ T6270] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 816.522847][ T6270] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz0] on syz0 [ 816.638865][ T3026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 816.663805][ T3026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 816.687128][ T3026] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 816.717254][ T3026] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 816.730258][ T3026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.746011][ T3026] usb 1-1: config 0 descriptor?? [ 816.822479][T19059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 817.088639][ T8475] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 817.238627][ T1223] handle_bad_sector: 15122 callbacks suppressed [ 817.238635][ T1223] attempt to access beyond end of device [ 817.238635][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 817.256215][ T1223] attempt to access beyond end of device [ 817.256215][ T1223] loop0: rw=0, want=57352, limit=40427 [ 817.267332][ T1223] attempt to access beyond end of device [ 817.267332][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 817.278678][ T1223] attempt to access beyond end of device [ 817.278678][ T1223] loop0: rw=0, want=57352, limit=40427 [ 817.289696][ T1223] attempt to access beyond end of device [ 817.289696][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 817.300971][ T1223] attempt to access beyond end of device [ 817.300971][ T1223] loop0: rw=0, want=57352, limit=40427 [ 817.311885][ T1223] attempt to access beyond end of device [ 817.311885][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 817.323169][ T1223] attempt to access beyond end of device [ 817.323169][ T1223] loop0: rw=0, want=57352, limit=40427 [ 817.334279][ T1223] attempt to access beyond end of device [ 817.334279][ T1223] loop0: rw=524288, want=57352, limit=40427 [ 817.338610][ T3026] usbhid 1-1:0.0: can't add hid device: -71 [ 817.345698][ T1223] attempt to access beyond end of device [ 817.345698][ T1223] loop0: rw=0, want=57352, limit=40427 [ 817.351498][ T3026] usbhid: probe of 1-1:0.0 failed with error -71 [ 817.369789][ T3026] usb 1-1: USB disconnect, device number 105 [ 817.448570][ T8475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.459397][ T8475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.472755][ T8475] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 817.481719][ T8475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.490811][ T8475] usb 4-1: config 0 descriptor?? [ 817.718504][ T6270] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 817.980680][T19084] udc-core: couldn't find an available UDC or it's busy [ 817.988300][T19084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 817.998514][ T6270] usb 2-1: Using ep0 maxpacket: 8 [ 818.058725][ T8475] hid (null): bogus close delimiter [ 818.298599][ T8475] usb 4-1: string descriptor 0 read error: -71 [ 818.318529][ T8475] uclogic 0003:256C:006D.0084: failed retrieving string descriptor #200: -71 [ 818.328577][ T6270] usb 2-1: New USB device found, idVendor=0403, idProduct=f448, bcdDevice= 8.17 [ 818.337299][ T8475] uclogic 0003:256C:006D.0084: failed retrieving pen parameters: -71 [ 818.340398][ T6270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.345689][ T8475] uclogic 0003:256C:006D.0084: failed probing pen v2 parameters: -71 [ 818.366912][ T6270] usb 2-1: Product: syz [ 818.367644][ T8475] uclogic 0003:256C:006D.0084: failed probing parameters: -71 [ 818.397259][ T6270] usb 2-1: Manufacturer: syz [ 818.407501][ T8475] uclogic: probe of 0003:256C:006D.0084 failed with error -71 [ 818.426651][ T6270] usb 2-1: SerialNumber: syz [ 818.428589][ T8475] usb 4-1: USB disconnect, device number 107 [ 818.436688][ T6270] usb 2-1: config 0 descriptor?? [ 818.479143][ T6270] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 818.494481][ T6270] usb 2-1: Detected FT232RL [ 818.504944][ T8140] device bridge_slave_1 left promiscuous mode [ 818.512705][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.526288][ T8140] device bridge_slave_0 left promiscuous mode [ 818.538370][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.553066][ T8140] device veth1_macvtap left promiscuous mode [ 818.563990][ T8140] device veth0_vlan left promiscuous mode [ 818.586009][T19109] syz-executor.4[19109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 818.586072][T19109] syz-executor.4[19109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 818.680321][T19088] udc-core: couldn't find an available UDC or it's busy [ 818.709886][T19088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 818.786903][T19114] syz-executor.0[19114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 818.786965][T19114] syz-executor.0[19114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 818.889765][T19114] 9pnet: Insufficient options for proto=fd [ 819.169131][ T8478] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 819.273616][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.283975][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.291747][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.307042][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.314778][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.322237][ T6270] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 819.329902][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.337350][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.347560][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.355042][ T6270] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 819.375783][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.383374][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.390821][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.398175][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.405487][ T6270] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 819.412079][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.420060][ T6270] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 819.427971][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.437916][ T6270] usb 2-1: USB disconnect, device number 106 [ 819.443853][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.458221][ T6270] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 819.467523][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.475033][ T6270] ftdi_sio 2-1:0.0: device disconnected [ 819.480541][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.489078][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.496433][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.503674][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.510977][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.518205][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.525552][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.532803][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.541574][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.548606][ T8478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.549117][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.578238][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.582162][ T8478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.585517][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.602393][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.606250][ T8478] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 819.609715][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.623575][ T8478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.625767][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.640872][ T6266] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 819.648738][ T6266] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 819.669620][ T8478] usb 5-1: config 0 descriptor?? [ 819.748329][T19137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=19137 comm=syz-executor.0 [ 819.763062][T19137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19137 comm=syz-executor.0 [ 819.763214][T19139] syz-executor.3[19139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 2033/05/18 03:34:41 SYZFATAL: executor 2 failed 11 times: executor 2: EOF remote cover enable write trace failed (errno 17) [ 819.782440][T19139] syz-executor.3[19139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 820.058606][ T8478] usbhid 5-1:0.0: can't add hid device: -71 [ 820.088566][ T8478] usbhid: probe of 5-1:0.0 failed with error -71 [ 820.108582][ T8478] usb 5-1: USB disconnect, device number 102