last executing test programs: 9m18.532046136s ago: executing program 1 (id=2): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)={0xd, 0x4, 0xf4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x18, 0x5, 0xcfc2) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x2) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9m18.344668738s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @private0, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 9m17.081230958s ago: executing program 3 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) timerfd_create(0x8, 0x800) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m17.059325188s ago: executing program 2 (id=9): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002400010000002f9078ac141400e0000001000022eb0401907800d8621b00"], 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) syslog(0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x100017, 0x100074, 0x40000}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32, @ANYBLOB="021000000a000200"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)=0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvTOIkm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7dkLghih1HsVOa0EP6PyBRiRP8CRyQOCD1xJ0b3Li0B6QCFahB4mA09iRNUzvJtqlHij8faTTz5tn+vmdr3td+TvwCGFmXImIvIiYi4tOImM3PJ/kWH/a27HaPH91e3n90ezmJTueTfybd+uxcHLlP5tX8Maci4kffj/hp8mzc1s7u+lK9XtvKy5V2Y7PS2tm9utZYWq2t1jaq1cWFxfn3r71XPbe+vtX43cPvrX304z/+4av3/7z3nV9kzZrJ64724zz1ul46jJMZj4iPXkawAozl/ZkouiE8lzQiPhcRb2fXf6fo1gAAw9DpzEZn9mgZALjo0u4cWJKW87mAmUjTcrk3h/dmTKf1Zqt95UZze2OlN1c2F6X0xlq9Np/PFc5FKcnKC93jJ+XqsfK1iHgjIn45+Uq3XF5u1leKfOMDACPs1WP5/z+TvfwPAFxwU0U3AAAYOvkfAEaP/A8Ao0f+B4DRI/8DwOiR/wFg9Mj/ADBSfvjxx9nW2c9//3rl5s72evPm1ZVaa73c2F4uLze3NsurzeZq9zd7Gqc9Xr3Z3Fx4N7ZvVdq1VrvS2tm93mhub7Svd3/X+3qtNJReAQAneeOte39NImLvg1e6WxxZy0GuhostLboBQGHGim4AUJjxohsAFMZnfKDPEr1P6f8nQhMRd19Kc4AhuPwl8/8wqsz/w+jqP/8v88MoMP8Po6vTSaz5DwAjxid94Pm+/w/f/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDSZrpbkpbztcBnIk3L5YjXImIuSsmNtXptPiJej4i/TJYms/JC0Y0GAF5Q+vckX//r8uw7M8drJ5L/Tnb3EfHzX3/yq1tL7fbWQnb+X4fn23fz89Ui2g8AnOYgTx/k8QOPH91ePtiG2Z6H3+0tLprF3c+3Xs14jHf3U1GKiOl/J3m5J3u/MnYO8ffuRMQX+/U/6c6NzOUrnx6Pn8V+bajx06fip9263j57Lj5/Dm2BUXMvG38+7Hf9pXGpu+9//U91R6gXdzD+7T8z/qWH49/YgPHv0lljvPunHwysuxPx5fF+8ZPD+MmA+O+cMf7fvvK1twfVdX4TcTn6xz8aq9JubFZaO7tX1xpLq7XV2ka1uriwOP/+tfeqle4cdeVgpvpZ//jgyusn9X96QPypU/r/zTP2/7f/+/QnXz8h/re/0f/1f/OE+FlO/NYZ4y9N/37g8t1Z/JUB/T/t9b9yxvj3H+yunPGmAMAQtHZ215fq9dpWfjC+dfyMg/M+yN67FRZ9L3/hi34SLtLBg5/1ntMz36v0WW58wsEXXmK/ihyVgGF4ctEX3RIAAAAAAAAAAAAAAGCQYfybVNF9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OL6fwAAAP//M8rRSQ==") bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000006eed182e73cb44974281000000000000000095000000003d6a08"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m16.980417729s ago: executing program 1 (id=10): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000006700), 0x9, 0x61d, &(0x7f0000000700)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20000232, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x5, 0x5, 0x100, 0x80}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x9b81e9) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000440)={&(0x7f0000000080)={0xa, 0x5e20, 0x280000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)}, 0x40040) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f0000000340)={0x84881, 0x3, 0x24}, 0x18) write$binfmt_script(r5, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x18b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 9m16.812441792s ago: executing program 3 (id=11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m15.820485977s ago: executing program 32 (id=11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m13.447672454s ago: executing program 1 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@remote, @local, @void, {@llc_tr={0x11, {@llc={0x83, 0xe, 'K', "8c8739b80d1a397a02e0f2881828b91e95d6d8237fa1f67ce9eefb8a39d82f4ec89923146b6de880cbd838c6e32ebc45539ceb6deb541c00cbe6f31611a58d7944cdf71033c95a7aa7463b56574cb33755b8e334a18ec432d7ba7a9a4dd56bfc8c74e3cae1ed583415"}}}}}, &(0x7f0000000300)={0x0, 0x3, [0x2d5, 0x4ce, 0xd02, 0x11f]}) syz_emit_ethernet(0x2b, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@arp={0x806, @generic={0x0, 0x19, 0x6, 0x9, 0xa, @multicast, "69f6a1cf7a3f841a6b"}}}}, 0x0) 9m13.420073524s ago: executing program 4 (id=19): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)={0xd, 0x4, 0xf4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009a02"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x18, 0x5, 0xcfc2) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x2) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 9m13.419086214s ago: executing program 2 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0xa2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0xe, 0x96d8, 0x10, 0x400, 0x4, 0x83000241}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r6, &(0x7f0000000600)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000005900)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x3, 0xff) r8 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000001bc0)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r8, 0x5, 0x0, 0x5, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m13.025854131s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0000001080002007f1414aa08000300", @ANYRES32=r5], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000809500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r7, &(0x7f00000000c0)='./bus\x00', 0x0) 9m12.931181142s ago: executing program 33 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0000001080002007f1414aa08000300", @ANYRES32=r5], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000809500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r7, &(0x7f00000000c0)='./bus\x00', 0x0) 9m12.481778739s ago: executing program 2 (id=23): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x679}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x6a, 0x9}]}, 0x98}}, 0x0) listen(r0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000003080)={0x0, 0x0, 0x2, 0xf0}, 0x8) getpgrp(0xffffffffffffffff) 9m12.246550103s ago: executing program 4 (id=26): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000010008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000000000810083f7773616874390000200000000080000008ef34f32e294d9ffcf24998c8b5a83e6a81a6244ba6ad1bdfb7e4c3659efbc7da6ba11f1deef1de4ccb4b3ca967b015dbd88f27700c7eca7dd26151ae688ec2e71b0f84b00901b9182c00a5c87b56dd3854b89a65c3905ea15e0d7f2b9644d9022635614931d6126519a759bd986cd75c52159889e88d66b7bcbbc7becf5f72a2a22a5b29a74670ca6992b72a58e1f6ac5c0a2207939c2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f0000000280)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x38}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r8, 0x1, 0x22, 0x0, &(0x7f0000000540)) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x21, &(0x7f0000001640)=""/4126, 0x100f}, 0x2844cd75}], 0x1, 0x12101, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0x0) 9m12.146537764s ago: executing program 4 (id=27): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@orlov}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000440)=""/154) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) 9m11.355408496s ago: executing program 2 (id=29): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) bind$inet6(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 9m11.231370188s ago: executing program 4 (id=30): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @private0, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 9m10.165105635s ago: executing program 2 (id=33): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r6, 0x0, 0x0, 0x0, 0x0) 9m10.164398845s ago: executing program 4 (id=34): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.time\x00', 0x0, 0x0) ustat(0x3ff, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000070000000000000000000000085000000270000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x70, 0x0, &(0x7f00000001c0)="5472eedffcf1ffffffdc6f455bf045ecffad0b061bb06820a2c2ecbb7af34eb963224081937f9e846e8edce4bcef4fca743869faf8d4bbb8e5cb2936aceefe3a36f42bd6d748f23fa0cd674583e5e58034c971b89dfc212e2aea9665c31f3f7954b8233fe7e01b48fbcd6251b7ba361b", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000940200"]) r7 = gettid() syz_pidfd_open(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=r0, @ANYRES32=r1]) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r11}, 0x18) r12 = userfaultfd(0x801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r12, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 9m10.008359607s ago: executing program 2 (id=35): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)={0xd, 0x4, 0xf4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009a02"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x18, 0x5, 0xcfc2) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x2) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 9m10.007992747s ago: executing program 4 (id=36): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 9m9.948083188s ago: executing program 34 (id=35): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)={0xd, 0x4, 0xf4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009a02"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x18, 0x5, 0xcfc2) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x2) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 9m9.935244528s ago: executing program 35 (id=36): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 35.006615338s ago: executing program 0 (id=2409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b9ff0300100d690b98caa58c86dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 34.666827684s ago: executing program 0 (id=2410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xe4, &(0x7f0000005c00)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x83a, 0xa9f9, 0xfffffffffffffff7, 0x6, 0x24}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 34.648921724s ago: executing program 0 (id=2411): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newlinkprop={0x38, 0x6c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wlan0\x00'}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x1800840, &(0x7f0000000100)={[{@numtail}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@nocase}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@fat=@discard}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@rodir}]}, 0x1, 0x360, &(0x7f0000001280)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) 34.374200618s ago: executing program 0 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r2, 0xff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8], 0xff, 0x1f1, &(0x7f0000000900)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/4096, 0x1000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 34.24101201s ago: executing program 5 (id=2413): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r4, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x38}, 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/55, 0x37) keyctl$get_persistent(0x16, 0xee01, r0) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) sendmsg$sock(r8, &(0x7f0000000480)={&(0x7f0000000100)=@caif=@dbg={0x25, 0x2, 0x1}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001340)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff801}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0xffffffffffffffc7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x524}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}, 0x40841) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x93}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r2}, 0x8) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xd, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.192252731s ago: executing program 5 (id=2414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r5, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x2b, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@arp={0x806, @generic={0x0, 0x19, 0x6, 0x9, 0xa, @multicast, "69f6a1cf7a3f841a6b"}}}}, 0x0) 33.834946696s ago: executing program 6 (id=2416): r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='IS\x00 \x00\x00\x00\x00\x00\x00g\x00\x00\x00>S'], 0x24}}, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000740)=ANY=[], 0x150) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) r3 = syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1, 0x80}, &(0x7f00000003c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000280), 0x26) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) fchownat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 33.52891529s ago: executing program 7 (id=2417): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000de8400000023000000951e000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x83a, 0xa9f9, 0xfffffffffffffff7, 0x6, 0x24}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) getpid() 32.92522904s ago: executing program 5 (id=2418): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x55) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x6000000000000003, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 32.793061562s ago: executing program 0 (id=2419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000500000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) flock(0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000058c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x12}}], 0x18}}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000b2cc9afb3902ba1e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 32.792538672s ago: executing program 7 (id=2420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r5, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x2b, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@arp={0x806, @generic={0x0, 0x19, 0x6, 0x9, 0xa, @multicast, "69f6a1cf7a3f841a6b"}}}}, 0x0) 32.19653425s ago: executing program 6 (id=2422): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x4, {{0x2, 0x4e23, @multicast2}}, {{0x14, 0x2000, @loopback}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x2, 0x0, 0x80, 0x6}, {0x6, 0x10, 0x81, 0x9}, {0xa, 0x8, 0x1, 0x9}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0x12f440000]}, 0x0, 0x8) 30.029737413s ago: executing program 5 (id=2423): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newlinkprop={0x38, 0x6c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wlan0\x00'}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x1800840, &(0x7f0000000100)={[{@numtail}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@nocase}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@fat=@discard}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@rodir}]}, 0x1, 0x360, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 27.54439292s ago: executing program 7 (id=2424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x20, 0x0, 0x0, 0x4, 0x0) 27.462414671s ago: executing program 8 (id=2425): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000ff00000000000000e41c7b6a1007", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) 27.351686013s ago: executing program 0 (id=2426): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='IS\x00 \x00\x00\x00\x00\x00\x00g\x00\x00\x00>S'], 0x24}}, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000740)=ANY=[], 0x150) r2 = syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1, 0x80}, &(0x7f00000003c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000280), 0x26) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) fchownat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 26.951332058s ago: executing program 6 (id=2427): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r6, 0x0, 0x0, 0x0, 0x0) 26.075724021s ago: executing program 7 (id=2428): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) 24.80258213s ago: executing program 6 (id=2429): sigaltstack(0x0, 0x0) 23.280354163s ago: executing program 6 (id=2430): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 22.338183037s ago: executing program 7 (id=2431): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10005, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000002580)={&(0x7f0000000380)={0x1d, r3}, 0x10, &(0x7f0000002540)={&(0x7f00000024c0)={0x2, 0x0, 0x9, {0x0, 0xea60}, {0x77359400}, {0x3, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "56a46ef0da2a3074"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c080}, 0x95) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) fchown(r6, 0x0, 0x0) mount$overlay(0x1000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x44400, &(0x7f0000000400)={[{@metacopy_on}, {@verity_on}, {@verity_require}], [{@hash}, {@pcr={'pcr', 0x3d, 0x15}}, {@fowner_gt}, {@dont_appraise}]}) open(0x0, 0x143042, 0x83) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ffefffffffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21.908456654s ago: executing program 5 (id=2432): r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='IS\x00 \x00\x00\x00\x00\x00\x00g\x00\x00\x00>S'], 0x24}}, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000740)=ANY=[], 0x150) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) r3 = syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1, 0x80}, &(0x7f00000003c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000280), 0x26) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) fchownat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 20.381573777s ago: executing program 8 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000880), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x300}) 19.570593318s ago: executing program 6 (id=2434): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) unshare(0x62040200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x7003, [0x80002, 0xf, 0x5, 0x9, 0x70a]}, &(0x7f0000000100)=0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) setpgid(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6174000000000000000000000000380000000000000000000000000000000005000000000000000000"], 0x78) 18.82102241s ago: executing program 8 (id=2435): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x7, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x0, 0x4f, 0x0, 0x2e, 0x5f, 0x61, 0x3e]}}, &(0x7f00000004c0)=""/176, 0x32, 0xb0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 4) 17.999284052s ago: executing program 8 (id=2436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800090300000000000000000a008000fd00ff000000000008000400", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1000c840) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r13, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 17.076708436s ago: executing program 7 (id=2437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000040) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14.594157413s ago: executing program 8 (id=2438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socketpair(0xf, 0x3, 0x16, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) 12.019971871s ago: executing program 36 (id=2426): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='IS\x00 \x00\x00\x00\x00\x00\x00g\x00\x00\x00>S'], 0x24}}, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000740)=ANY=[], 0x150) r2 = syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1, 0x80}, &(0x7f00000003c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000280), 0x26) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) fchownat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 9.216085373s ago: executing program 5 (id=2440): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 5.515513098s ago: executing program 8 (id=2441): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000ff00000000000000e41c7b6a1007", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) 0s ago: executing program 37 (id=2434): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) unshare(0x62040200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x7003, [0x80002, 0xf, 0x5, 0x9, 0x70a]}, &(0x7f0000000100)=0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) setpgid(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6174000000000000000000000000380000000000000000000000000000000005000000000000000000"], 0x78) kernel console output (not intermixed with test programs): [ T1168] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 435.891109][ T1168] EXT4-fs error (device loop8): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 435.891156][ T7044] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.038073][ T471] EXT4-fs (loop8): unmounting filesystem. [ 436.092690][ T7053] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 436.355516][ T438] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 436.546668][ T438] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.557853][ T438] usb 8-1: config 0 has no interface number 0 [ 436.566713][ T438] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.584946][ T438] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.645681][ T438] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 436.655133][ T438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.677979][ T438] usb 8-1: config 0 descriptor?? [ 436.779225][ T7061] loop6: detected capacity change from 0 to 512 [ 436.837743][ T7061] EXT4-fs (loop6): 1 orphan inode deleted [ 436.845181][ T7065] loop5: detected capacity change from 0 to 128 [ 436.852992][ T7061] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 436.863605][ T346] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 436.875759][ T7061] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.889471][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.898483][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.905822][ T346] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:4: Failed to release dquot type 1 [ 436.936428][ T7065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 436.945007][ T7065] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.983178][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1926'. [ 437.101039][ T7068] 9pnet: Could not find request transport: xen [ 437.218313][ T438] hid (null): global environment stack underflow [ 437.256464][ T438] uclogic 0003:5543:0522.0024: global environment stack underflow [ 437.345361][ T438] uclogic 0003:5543:0522.0024: item 0 1 1 11 parsing failed [ 437.439700][ T438] uclogic 0003:5543:0522.0024: parse failed [ 437.456658][ T438] uclogic: probe of 0003:5543:0522.0024 failed with error -22 [ 437.482092][ T438] usb 8-1: USB disconnect, device number 24 [ 437.673321][ T409] EXT4-fs (loop6): unmounting filesystem. [ 437.714394][ T7074] loop6: detected capacity change from 0 to 1024 [ 437.755063][ T7074] EXT4-fs: Ignoring removed orlov option [ 437.770604][ T7074] EXT4-fs: Ignoring removed nobh option [ 437.777629][ T7074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 437.800789][ T7074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 437.840276][ T7065] EXT4-fs (loop5): unmounting filesystem. [ 438.549894][ T2170] Bluetooth: hci0: command 0x1003 tx timeout [ 438.565687][ T1501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 438.920748][ T409] EXT4-fs (loop6): unmounting filesystem. [ 439.071414][ T7099] loop6: detected capacity change from 0 to 512 [ 439.421773][ T7099] EXT4-fs (loop6): 1 orphan inode deleted [ 439.428945][ T7099] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 439.437986][ T346] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 439.449175][ T346] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:4: Failed to release dquot type 1 [ 439.450713][ T7099] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.478350][ T7093] xt_hashlimit: size too large, truncated to 1048576 [ 439.609055][ T409] EXT4-fs (loop6): unmounting filesystem. [ 439.684774][ T7110] loop0: detected capacity change from 0 to 512 [ 439.825154][ T7117] loop8: detected capacity change from 0 to 1024 [ 439.832945][ T7110] EXT4-fs (loop0): 1 orphan inode deleted [ 439.839936][ T7110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 439.849135][ T360] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 439.855596][ T7110] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.858838][ T360] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 439.870186][ T325] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 439.897168][ T7117] EXT4-fs: Ignoring removed orlov option [ 439.915774][ T7117] EXT4-fs: Ignoring removed nobh option [ 439.928295][ T7117] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 440.041676][ T7117] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 440.275537][ T325] usb 8-1: Using ep0 maxpacket: 16 [ 440.644834][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 440.665148][ T7140] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 440.680638][ T325] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 440.691446][ T325] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 440.701217][ T325] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.714626][ T471] EXT4-fs (loop8): unmounting filesystem. [ 440.739353][ T325] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.749401][ T325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.757576][ T325] usb 8-1: Product: syz [ 440.761690][ T325] usb 8-1: Manufacturer: syz [ 440.766444][ T325] usb 8-1: SerialNumber: syz [ 440.789446][ T7145] loop8: detected capacity change from 0 to 1024 [ 440.792503][ T7146] loop0: detected capacity change from 0 to 512 [ 440.815801][ T7145] EXT4-fs: Ignoring removed orlov option [ 440.821626][ T7145] EXT4-fs: Ignoring removed nobh option [ 440.827898][ T7145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 440.843267][ T7146] EXT4-fs (loop0): 1 orphan inode deleted [ 440.850989][ T7146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 440.860746][ T360] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 440.861286][ T7146] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.871118][ T360] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 440.891888][ T7145] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 442.469571][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 442.481952][ T471] EXT4-fs (loop8): unmounting filesystem. [ 442.513909][ T325] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 442.531338][ T325] usb 8-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 442.551990][ T325] usb 8-1: USB disconnect, device number 25 [ 442.673027][ T7164] loop7: detected capacity change from 0 to 128 [ 442.698850][ T7164] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 442.713641][ T7164] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 442.727354][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1949'. [ 442.735735][ T1501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 442.736801][ T2170] Bluetooth: hci0: command 0x1003 tx timeout [ 442.797663][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 442.971885][ T7190] loop5: detected capacity change from 0 to 1024 [ 442.983417][ T7190] EXT4-fs: Ignoring removed orlov option [ 442.992002][ T7190] EXT4-fs: Ignoring removed nobh option [ 443.002476][ T7190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 443.038521][ T7190] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 443.698355][ T7164] EXT4-fs (loop7): unmounting filesystem. [ 443.734832][ T28] audit: type=1400 audit(1743322110.137:446): avc: denied { set_context_mgr } for pid=7209 comm="syz.7.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 443.737664][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1963'. [ 443.788914][ T7212] loop8: detected capacity change from 0 to 512 [ 443.855018][ T374] EXT4-fs (loop5): unmounting filesystem. [ 443.866735][ T7212] EXT4-fs: Ignoring removed mblk_io_submit option [ 443.912991][ T7212] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 443.976831][ T7212] EXT4-fs (loop8): 1 truncate cleaned up [ 443.982651][ T7212] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 444.201217][ T7226] FAULT_INJECTION: forcing a failure. [ 444.201217][ T7226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.241411][ T7226] CPU: 1 PID: 7226 Comm: syz.6.1969 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 444.251191][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.261227][ T7226] Call Trace: [ 444.264345][ T7226] [ 444.267126][ T7226] dump_stack_lvl+0x151/0x1b7 [ 444.271636][ T7226] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 444.276931][ T7226] ? vfs_write+0x952/0xed0 [ 444.281188][ T7226] ? __kasan_slab_free+0x11/0x20 [ 444.286150][ T7226] dump_stack+0x15/0x18 [ 444.290859][ T7226] should_fail_ex+0x3d0/0x520 [ 444.295416][ T7226] should_fail+0xb/0x10 [ 444.299405][ T7226] should_fail_usercopy+0x1a/0x20 [ 444.304586][ T7226] _copy_from_user+0x1e/0xc0 [ 444.309833][ T7226] __sys_bpf+0x23b/0x7f0 [ 444.317033][ T7226] ? bpf_link_show_fdinfo+0x300/0x300 [ 444.324021][ T7226] ? bpf_trace_run1+0x240/0x240 [ 444.331022][ T7226] ? __ia32_sys_read+0x90/0x90 [ 444.336958][ T7226] __x64_sys_bpf+0x7c/0x90 [ 444.341342][ T7226] x64_sys_call+0x87f/0x9a0 [ 444.345653][ T7226] do_syscall_64+0x3b/0xb0 [ 444.349908][ T7226] ? clear_bhb_loop+0x55/0xb0 [ 444.354422][ T7226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.360152][ T7226] RIP: 0033:0x7f2f8e18d169 [ 444.364428][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.384627][ T7226] RSP: 002b:00007f2f8f030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.393391][ T7226] RAX: ffffffffffffffda RBX: 00007f2f8e3a5fa0 RCX: 00007f2f8e18d169 [ 444.401323][ T7226] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 444.409136][ T7226] RBP: 00007f2f8f030090 R08: 0000000000000000 R09: 0000000000000000 [ 444.417135][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.426694][ T7226] R13: 0000000000000000 R14: 00007f2f8e3a5fa0 R15: 00007fffb7c5d1b8 [ 444.434598][ T7226] [ 444.524233][ T7242] FAULT_INJECTION: forcing a failure. [ 444.524233][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 444.537036][ T7242] CPU: 0 PID: 7242 Comm: syz.7.1973 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 444.547827][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.558846][ T7242] Call Trace: [ 444.561968][ T7242] [ 444.564862][ T7242] dump_stack_lvl+0x151/0x1b7 [ 444.569387][ T7242] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 444.575259][ T7242] dump_stack+0x15/0x18 [ 444.579250][ T7242] should_fail_ex+0x3d0/0x520 [ 444.583760][ T7242] __should_failslab+0xaf/0xf0 [ 444.588512][ T7242] should_failslab+0x9/0x20 [ 444.592855][ T7242] kmem_cache_alloc_node+0x42/0x330 [ 444.597980][ T7242] ? __alloc_skb+0xcc/0x2d0 [ 444.602309][ T7242] __alloc_skb+0xcc/0x2d0 [ 444.606477][ T7242] fdb_notify+0x77/0x130 [ 444.611479][ T7242] fdb_delete+0x870/0xaf0 [ 444.615727][ T7242] fdb_delete_local+0x3d1/0x470 [ 444.620406][ T7242] br_fdb_changeaddr+0x1bb/0x1c0 [ 444.625177][ T7242] br_device_event+0x3c4/0x7d0 [ 444.629775][ T7242] ? br_boolopt_multi_get+0x130/0x130 [ 444.634994][ T7242] ? packet_notifier+0x8c0/0x8e0 [ 444.639754][ T7242] ? ip6mr_device_event+0x1e3/0x210 [ 444.645004][ T7242] ? ipv6_mc_netdev_event+0xa4/0x480 [ 444.650772][ T7242] raw_notifier_call_chain+0x8c/0xf0 [ 444.656121][ T7242] dev_set_mac_address+0x325/0x470 [ 444.661260][ T7242] ? dev_pre_changeaddr_notify+0x220/0x220 [ 444.667712][ T7242] dev_set_mac_address_user+0x31/0x50 [ 444.673205][ T7242] dev_ifsioc+0x843/0x1150 [ 444.678351][ T7242] ? dev_ioctl+0xe60/0xe60 [ 444.682678][ T7242] ? __kasan_check_write+0x14/0x20 [ 444.687624][ T7242] ? mutex_lock+0xb1/0x1e0 [ 444.691877][ T7242] ? bit_wait_io_timeout+0x120/0x120 [ 444.696999][ T7242] dev_ioctl+0x543/0xe60 [ 444.701174][ T7242] sock_do_ioctl+0x26b/0x450 [ 444.705615][ T7242] ? has_cap_mac_admin+0x3c0/0x3c0 [ 444.710548][ T7242] ? sock_show_fdinfo+0xa0/0xa0 [ 444.715229][ T7242] ? selinux_file_ioctl+0x3cc/0x540 [ 444.720259][ T7242] sock_ioctl+0x455/0x740 [ 444.724427][ T7242] ? sock_poll+0x400/0x400 [ 444.728678][ T7242] ? __fget_files+0x2cb/0x330 [ 444.733197][ T7242] ? security_file_ioctl+0x84/0xb0 [ 444.738723][ T7242] ? sock_poll+0x400/0x400 [ 444.744023][ T7242] __se_sys_ioctl+0x114/0x190 [ 444.748628][ T7242] __x64_sys_ioctl+0x7b/0x90 [ 444.753665][ T7242] x64_sys_call+0x98/0x9a0 [ 444.758376][ T7242] do_syscall_64+0x3b/0xb0 [ 444.762684][ T7242] ? clear_bhb_loop+0x55/0xb0 [ 444.767132][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.773297][ T7242] RIP: 0033:0x7f949998d169 [ 444.777548][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.797000][ T7242] RSP: 002b:00007f949a756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.805241][ T7242] RAX: ffffffffffffffda RBX: 00007f9499ba5fa0 RCX: 00007f949998d169 [ 444.813140][ T7242] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 444.820946][ T7242] RBP: 00007f949a756090 R08: 0000000000000000 R09: 0000000000000000 [ 444.829058][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.837796][ T7242] R13: 0000000000000000 R14: 00007f9499ba5fa0 R15: 00007fffa422cc88 [ 444.845754][ T7242] [ 444.900902][ T471] EXT4-fs (loop8): unmounting filesystem. [ 444.924831][ T28] audit: type=1400 audit(1743322111.327:447): avc: denied { mount } for pid=7250 comm="syz.7.1976" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 444.933605][ T7253] loop8: detected capacity change from 0 to 1024 [ 444.955394][ T7251] loop7: detected capacity change from 0 to 512 [ 444.957997][ T7253] EXT4-fs: Ignoring removed orlov option [ 444.970379][ T7253] EXT4-fs: Ignoring removed nobh option [ 444.986320][ T28] audit: type=1400 audit(1743322111.367:448): avc: denied { unmount } for pid=7250 comm="syz.7.1976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 445.010432][ T28] audit: type=1400 audit(1743322111.397:449): avc: denied { mounton } for pid=7250 comm="syz.7.1976" path="/327/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 445.025790][ T7253] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 445.051337][ T7256] loop5: detected capacity change from 0 to 128 [ 445.077747][ T7251] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1976: bg 0: block 248: padding at end of block bitmap is not set [ 445.108246][ T7251] Quota error (device loop7): write_blk: dquota write failed [ 445.124171][ T7251] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 445.134098][ T7251] EXT4-fs error (device loop7): ext4_acquire_dquot:6782: comm syz.7.1976: Failed to acquire dquot type 1 [ 445.146817][ T7251] EXT4-fs (loop7): 1 truncate cleaned up [ 445.157299][ T7251] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 445.166130][ T7253] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 445.172610][ T7251] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.388550][ T471] EXT4-fs (loop8): unmounting filesystem. [ 446.442818][ T470] EXT4-fs (loop7): unmounting filesystem. [ 446.634739][ T7281] FAULT_INJECTION: forcing a failure. [ 446.634739][ T7281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.648439][ T7281] CPU: 1 PID: 7281 Comm: syz.5.1984 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 446.658707][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.669981][ T7281] Call Trace: [ 446.673103][ T7281] [ 446.675884][ T7281] dump_stack_lvl+0x151/0x1b7 [ 446.680396][ T7281] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 446.685698][ T7281] dump_stack+0x15/0x18 [ 446.689682][ T7281] should_fail_ex+0x3d0/0x520 [ 446.694191][ T7281] should_fail+0xb/0x10 [ 446.698182][ T7281] should_fail_usercopy+0x1a/0x20 [ 446.704020][ T7281] _copy_from_user+0x1e/0xc0 [ 446.709224][ T7281] kstrtouint_from_user+0xc2/0x180 [ 446.714271][ T7281] ? kstrtol_from_user+0x180/0x180 [ 446.719283][ T7281] ? __kasan_check_read+0x11/0x20 [ 446.724157][ T7281] proc_fail_nth_write+0xa6/0x290 [ 446.729619][ T7281] ? selinux_file_permission+0x2bb/0x560 [ 446.735167][ T7281] ? proc_fail_nth_read+0x210/0x210 [ 446.740197][ T7281] ? fsnotify_perm+0x6a/0x5b0 [ 446.744803][ T7281] ? security_file_permission+0x86/0xb0 [ 446.750954][ T7281] ? proc_fail_nth_read+0x210/0x210 [ 446.756614][ T7281] vfs_write+0x41d/0xed0 [ 446.761477][ T7281] ? __kasan_check_read+0x11/0x20 [ 446.766760][ T7281] ? file_end_write+0x1c0/0x1c0 [ 446.771492][ T7281] ? mutex_lock+0xb1/0x1e0 [ 446.775913][ T7281] ? bit_wait_io_timeout+0x120/0x120 [ 446.781305][ T7281] ? __fdget_pos+0x2e2/0x390 [ 446.785722][ T7281] ? ksys_write+0x77/0x2c0 [ 446.790106][ T7281] ksys_write+0x199/0x2c0 [ 446.794269][ T7281] ? __ia32_sys_read+0x90/0x90 [ 446.798871][ T7281] ? debug_smp_processor_id+0x17/0x20 [ 446.804955][ T7281] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 446.810875][ T7281] __x64_sys_write+0x7b/0x90 [ 446.815295][ T7281] x64_sys_call+0x2f/0x9a0 [ 446.819540][ T7281] do_syscall_64+0x3b/0xb0 [ 446.823801][ T7281] ? clear_bhb_loop+0x55/0xb0 [ 446.828420][ T7281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.837959][ T7281] RIP: 0033:0x7f852d78bc1f [ 446.842292][ T7281] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 446.861725][ T7281] RSP: 002b:00007f852e555030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 446.871120][ T7281] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f852d78bc1f [ 446.881221][ T7281] RDX: 0000000000000001 RSI: 00007f852e5550a0 RDI: 0000000000000006 [ 446.889835][ T7281] RBP: 00007f852e555090 R08: 0000000000000000 R09: 0000000000000000 [ 446.898566][ T7281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 446.906374][ T7281] R13: 0000000000000000 R14: 00007f852d9a5fa0 R15: 00007ffe166837e8 [ 446.914217][ T7281] [ 446.949459][ T7284] syzkaller0: tun_chr_ioctl cmd 35108 [ 447.010404][ T797] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 447.018237][ T438] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 447.054500][ T7289] loop0: detected capacity change from 0 to 256 [ 447.061376][ T7289] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.073575][ T7289] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 447.098541][ T7289] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 447.209558][ T797] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.221765][ T438] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.239923][ T7289] exFAT-fs (loop0): hint_cluster is invalid (17) [ 447.246678][ T438] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.257034][ T28] audit: type=1400 audit(1743322113.647:450): avc: denied { write } for pid=7288 comm="syz.0.1987" name="file1" dev="loop0" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.285691][ T797] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.323195][ T797] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.332435][ T28] audit: type=1400 audit(1743322113.647:451): avc: denied { open } for pid=7288 comm="syz.0.1987" name="file1" dev="loop0" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.335556][ T438] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.366291][ T28] audit: type=1400 audit(1743322113.717:452): avc: denied { remove_name } for pid=7288 comm="syz.0.1987" name="file0" dev="loop0" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.370424][ T797] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.392082][ T28] audit: type=1400 audit(1743322113.717:453): avc: denied { rmdir } for pid=7288 comm="syz.0.1987" name="file0" dev="loop0" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.423870][ T438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.432344][ T797] usb 9-1: SerialNumber: syz [ 447.437253][ T438] usb 8-1: SerialNumber: syz [ 447.647822][ T797] usb 9-1: 0:2 : does not exist [ 447.658572][ T797] usb 9-1: unit 255 not found! [ 447.674425][ T438] usb 8-1: 0:2 : does not exist [ 447.679798][ T438] usb 8-1: unit 255 not found! [ 447.686276][ T797] usb 9-1: USB disconnect, device number 20 [ 447.699604][ T438] usb 8-1: USB disconnect, device number 26 [ 447.892602][ T7301] loop0: detected capacity change from 0 to 4096 [ 447.909617][ T7301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 447.934118][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 448.096110][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 448.105551][ T1140] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 448.204803][ T7311] loop7: detected capacity change from 0 to 128 [ 448.214879][ T7311] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 448.226764][ T7311] ext4 filesystem being mounted at /329/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 448.242139][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1992'. [ 448.366676][ T1140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.386401][ T1140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.396803][ T1140] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 448.406456][ T1140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.415355][ T1140] usb 6-1: config 0 descriptor?? [ 448.962187][ T1140] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 449.008197][ T1140] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 449.458611][ T7321] loop8: detected capacity change from 0 to 2048 [ 449.510889][ T7321] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 449.536537][ T1140] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 449.570988][ T471] EXT4-fs (loop8): unmounting filesystem. [ 449.737368][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.758195][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.901226][ T7330] kvm: pic: non byte write [ 449.907536][ T7311] EXT4-fs (loop7): unmounting filesystem. [ 449.989797][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 449.989816][ T28] audit: type=1400 audit(1743322116.397:455): avc: denied { nlmsg_write } for pid=7299 comm="syz.5.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 450.021744][ T1140] cp2112 0003:10C4:EA90.0025: error setting SMBus config [ 450.031437][ T1140] cp2112: probe of 0003:10C4:EA90.0025 failed with error -71 [ 450.043464][ T1140] usb 6-1: USB disconnect, device number 23 [ 450.138715][ T7338] xt_hashlimit: size too large, truncated to 1048576 [ 450.354119][ T7345] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 450.361381][ T7345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52402 sclass=netlink_route_socket pid=7345 comm=syz.6.2001 [ 450.835689][ T566] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 456.172568][ T2170] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 456.179456][ T1501] Bluetooth: hci0: command 0x1003 tx timeout [ 456.521643][ T7365] loop5: detected capacity change from 0 to 128 [ 456.532571][ T7367] netem: change failed [ 456.550500][ T7365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 457.164899][ T7365] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.575640][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2007'. [ 457.987324][ T7389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2013'. [ 458.077136][ T7365] EXT4-fs (loop5): unmounting filesystem. [ 458.160749][ T7396] loop5: detected capacity change from 0 to 512 [ 458.185756][ T566] usb 6-1: device not accepting address 24, error -71 [ 458.195508][ T7396] EXT4-fs (loop5): 1 orphan inode deleted [ 458.201644][ T7396] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 458.225674][ T1168] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 458.309409][ T7396] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.481010][ T1168] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 458.686040][ T7408] loop7: detected capacity change from 0 to 512 [ 458.704237][ T7408] EXT4-fs (loop7): 1 orphan inode deleted [ 458.710034][ T7408] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 458.726680][ T1168] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 458.737040][ T1168] EXT4-fs error (device loop7): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 458.749173][ T7408] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.172844][ T374] EXT4-fs (loop5): unmounting filesystem. [ 459.362603][ T7415] loop5: detected capacity change from 0 to 512 [ 459.447611][ T7415] EXT4-fs (loop5): 1 orphan inode deleted [ 459.453290][ T7415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 459.462391][ T7415] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.472895][ T10] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 459.493042][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:1: Failed to release dquot type 1 [ 459.563323][ T470] EXT4-fs (loop7): unmounting filesystem. [ 459.635546][ T2170] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 459.641730][ T1501] Bluetooth: hci0: command 0x1003 tx timeout [ 460.933471][ T374] EXT4-fs (loop5): unmounting filesystem. [ 461.005112][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2023'. [ 466.465255][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 466.588494][ T7464] loop5: detected capacity change from 0 to 512 [ 466.597823][ T7462] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 466.612882][ T7462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52402 sclass=netlink_route_socket pid=7462 comm=syz.7.2030 [ 466.653407][ T7464] EXT4-fs (loop5): 1 orphan inode deleted [ 466.662556][ T7464] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 466.672500][ T8] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 466.723570][ T8] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 466.736914][ T7464] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.487355][ T374] EXT4-fs (loop5): unmounting filesystem. [ 467.815526][ T2383] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 468.015515][ T2383] usb 7-1: Using ep0 maxpacket: 16 [ 468.021540][ T2383] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 468.039733][ T2383] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.060060][ T2383] usb 7-1: config 0 has no interface number 0 [ 468.070203][ T2383] usb 7-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 468.089454][ T2383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.106499][ T2383] usb 7-1: config 0 descriptor?? [ 468.112541][ T2383] usb 7-1: Found UVC 0.00 device (0bd3:0555) [ 468.131720][ T2383] usb 7-1: No valid video chain found. [ 468.235524][ T221] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 468.446586][ T221] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.465471][ T221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.475035][ T221] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.494565][ T221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.502672][ T221] usb 6-1: SerialNumber: syz [ 468.655484][ T2170] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 468.655533][ T1501] Bluetooth: hci0: command 0x1003 tx timeout [ 468.716075][ T221] usb 6-1: 0:2 : does not exist [ 468.723566][ T221] usb 6-1: USB disconnect, device number 26 [ 468.883086][ T7492] xt_hashlimit: size too large, truncated to 1048576 [ 468.946316][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 468.997863][ T7496] bridge0: port 3(veth0_to_bridge) entered blocking state [ 469.004828][ T7496] bridge0: port 3(veth0_to_bridge) entered disabled state [ 469.035905][ T7496] device veth0_to_bridge entered promiscuous mode [ 469.042285][ T7496] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.063972][ T7496] bridge0: port 3(veth0_to_bridge) entered blocking state [ 469.071200][ T7496] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 470.608974][ T7514] loop0: detected capacity change from 0 to 1024 [ 470.706572][ T7514] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 470.750095][ T7514] EXT4-fs (loop0): write access will be enabled during recovery [ 470.805017][ T7514] EXT4-fs (loop0): barriers disabled [ 470.835125][ T7514] JBD2: no valid journal superblock found [ 470.842197][ T7514] EXT4-fs (loop0): error loading journal [ 470.931826][ T7438] usb 7-1: USB disconnect, device number 27 [ 471.245579][ T7530] loop5: detected capacity change from 0 to 2048 [ 471.280745][ T7514] loop0: detected capacity change from 0 to 2048 [ 471.313481][ T7514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 471.319516][ T7530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 471.345991][ T28] audit: type=1400 audit(1743322137.757:456): avc: denied { read } for pid=7513 comm="syz.0.2043" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 471.464244][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2047'. [ 471.848746][ T374] EXT4-fs (loop5): unmounting filesystem. [ 472.710449][ T28] audit: type=1400 audit(1743322139.117:457): avc: denied { rmdir } for pid=6936 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.757070][ T6936] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 472.821807][ T28] audit: type=1400 audit(1743322139.227:458): avc: denied { rmdir } for pid=6936 comm="syz-executor" name=".index" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 472.876412][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 472.898930][ T28] audit: type=1400 audit(1743322139.267:459): avc: denied { unlink } for pid=6936 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 472.959560][ T28] audit: type=1400 audit(1743322139.277:460): avc: denied { unlink } for pid=6936 comm="syz-executor" name="blkio.bfq.io_wait_time" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 472.980247][ T7550] loop5: detected capacity change from 0 to 1024 [ 473.045872][ T7550] EXT4-fs: Ignoring removed orlov option [ 473.075635][ T7550] EXT4-fs: Ignoring removed nobh option [ 473.115344][ T7550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 473.235763][ T7550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 474.655822][ T374] EXT4-fs (loop5): unmounting filesystem. [ 474.795898][ T7583] loop5: detected capacity change from 0 to 128 [ 474.841614][ T7583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 474.906018][ T7583] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 475.038000][ T7592] 9pnet: Could not find request transport: xen [ 475.630485][ T7583] EXT4-fs (loop5): unmounting filesystem. [ 475.915570][ T438] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 476.107880][ T438] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.138233][ T438] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.191148][ T438] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 476.212576][ T438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.225814][ T438] usb 8-1: config 0 descriptor?? [ 476.324258][ T7625] loop8: detected capacity change from 0 to 512 [ 476.358425][ T7625] EXT4-fs (loop8): 1 orphan inode deleted [ 476.364250][ T7625] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 476.373716][ T7625] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.384543][ T1168] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 476.411527][ T1168] EXT4-fs error (device loop8): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 476.636545][ T438] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 476.646860][ T438] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 476.807800][ T7632] xt_hashlimit: size too large, truncated to 1048576 [ 476.835845][ T438] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE [ 477.044454][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.066178][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.176819][ T471] EXT4-fs (loop8): unmounting filesystem. [ 477.240897][ T7639] loop8: detected capacity change from 0 to 512 [ 477.296815][ T438] cp2112 0003:10C4:EA90.0026: error setting SMBus config [ 477.310073][ T438] cp2112: probe of 0003:10C4:EA90.0026 failed with error -71 [ 477.317625][ T7639] EXT4-fs (loop8): 1 orphan inode deleted [ 477.323218][ T7639] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 477.345897][ T7639] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.441694][ T438] usb 8-1: USB disconnect, device number 27 [ 477.458382][ T7652] loop6: detected capacity change from 0 to 128 [ 477.470199][ T8] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 477.479922][ T8] EXT4-fs error (device loop8): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 477.482760][ T7652] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 477.500388][ T7652] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 477.679276][ T7657] 9pnet: Could not find request transport: xen [ 478.931959][ T471] EXT4-fs (loop8): unmounting filesystem. [ 479.230763][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2086'. [ 479.410203][ T7681] loop0: detected capacity change from 0 to 512 [ 479.523232][ T7681] EXT4-fs: Ignoring removed i_version option [ 479.612983][ T7681] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.688927][ T7681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 480.182372][ T7681] EXT4-fs (loop0): 1 truncate cleaned up [ 480.188074][ T7681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 480.250637][ T7652] EXT4-fs (loop6): unmounting filesystem. [ 480.327468][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 480.512147][ T438] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 480.879022][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2096'. [ 480.891179][ T438] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.901175][ T438] usb 8-1: config 0 has no interface number 0 [ 480.908244][ T438] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.919695][ T438] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.929714][ T438] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 480.939024][ T438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.948792][ T438] usb 8-1: config 0 descriptor?? [ 481.161312][ T7705] loop5: detected capacity change from 0 to 512 [ 481.161664][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.178070][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.204257][ T7705] EXT4-fs (loop5): 1 orphan inode deleted [ 481.210246][ T7705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 481.219571][ T7358] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 481.220821][ T7705] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.230892][ T7358] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:9: Failed to release dquot type 1 [ 481.439143][ T438] hid (null): global environment stack underflow [ 481.518364][ T438] uclogic 0003:5543:0522.0027: global environment stack underflow [ 481.526279][ T438] uclogic 0003:5543:0522.0027: item 0 1 1 11 parsing failed [ 481.533822][ T438] uclogic 0003:5543:0522.0027: parse failed [ 481.540012][ T438] uclogic: probe of 0003:5543:0522.0027 failed with error -22 [ 481.868231][ T438] usb 8-1: USB disconnect, device number 28 [ 482.131325][ T374] EXT4-fs (loop5): unmounting filesystem. [ 482.203886][ T7728] loop5: detected capacity change from 0 to 128 [ 482.228660][ T7728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 482.240196][ T7728] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 482.315581][ T2337] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 482.323939][ T7734] 9pnet: Could not find request transport: xen [ 482.412980][ T7733] xt_hashlimit: size too large, truncated to 1048576 [ 482.468953][ T7738] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 482.506732][ T2337] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.518070][ T2337] usb 9-1: config 0 has no interface number 0 [ 482.531144][ T2337] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.555125][ T2337] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.575745][ T2337] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 482.594463][ T2337] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.614676][ T2337] usb 9-1: config 0 descriptor?? [ 482.826921][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.835555][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.045487][ T7438] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 483.046257][ T2337] hid (null): global environment stack underflow [ 483.061281][ T2337] uclogic 0003:5543:0522.0028: global environment stack underflow [ 483.068984][ T2337] uclogic 0003:5543:0522.0028: item 0 1 1 11 parsing failed [ 483.076474][ T2337] uclogic 0003:5543:0522.0028: parse failed [ 483.082631][ T2337] uclogic: probe of 0003:5543:0522.0028 failed with error -22 [ 483.124270][ T7728] EXT4-fs (loop5): unmounting filesystem. [ 483.215528][ T7742] xt_hashlimit: size too large, truncated to 1048576 [ 483.227080][ T7438] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.234958][ T7438] usb 7-1: config 0 has no interface number 0 [ 483.241187][ T7438] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.248869][ T2337] usb 9-1: USB disconnect, device number 21 [ 483.252634][ T7438] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.276117][ T7438] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 483.285053][ T7438] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.297476][ T7438] usb 7-1: config 0 descriptor?? [ 483.506299][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.516012][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.732118][ T7438] hid (null): global environment stack underflow [ 483.739654][ T7438] uclogic 0003:5543:0522.0029: global environment stack underflow [ 483.747792][ T7438] uclogic 0003:5543:0522.0029: item 0 1 1 11 parsing failed [ 483.756147][ T7438] uclogic 0003:5543:0522.0029: parse failed [ 483.761954][ T7438] uclogic: probe of 0003:5543:0522.0029 failed with error -22 [ 483.933781][ T2337] usb 7-1: USB disconnect, device number 28 [ 484.019916][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2113'. [ 484.495633][ T2170] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 485.124520][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2115'. [ 485.181958][ T7763] loop8: detected capacity change from 0 to 512 [ 485.233729][ T7763] EXT4-fs (loop8): 1 orphan inode deleted [ 485.242942][ T7763] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 485.253176][ T8] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 485.274250][ T8] EXT4-fs error (device loop8): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 485.291432][ T7763] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.094820][ T7787] loop0: detected capacity change from 0 to 4096 [ 486.128246][ T7799] loop7: detected capacity change from 0 to 128 [ 486.156220][ T7787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 486.279410][ T7799] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 486.302177][ T471] EXT4-fs (loop8): unmounting filesystem. [ 486.308229][ T7799] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.498060][ T7799] 9pnet: Could not find request transport: xen [ 486.551939][ T7802] xt_hashlimit: size too large, truncated to 1048576 [ 486.654243][ T7811] xt_hashlimit: size too large, truncated to 1048576 [ 486.910595][ T7818] loop5: detected capacity change from 0 to 4096 [ 486.952228][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 487.036262][ T7818] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 487.297305][ T7799] EXT4-fs (loop7): unmounting filesystem. [ 487.578448][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 487.825600][ T2383] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 488.027642][ T2383] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.056855][ T2383] usb 9-1: config 0 has no interface number 0 [ 488.114284][ T2383] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.638576][ T374] EXT4-fs (loop5): unmounting filesystem. [ 488.645515][ T2383] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.753443][ T2383] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 488.780534][ T2383] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.870727][ T2383] usb 9-1: config 0 descriptor?? [ 489.088133][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.255792][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.422081][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2133'. [ 489.611686][ T2383] hid (null): global environment stack underflow [ 489.802020][ T2383] uclogic 0003:5543:0522.002A: global environment stack underflow [ 490.136029][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2138'. [ 490.148931][ T2383] uclogic 0003:5543:0522.002A: item 0 1 1 11 parsing failed [ 490.156294][ T2383] uclogic 0003:5543:0522.002A: parse failed [ 490.162066][ T2383] uclogic: probe of 0003:5543:0522.002A failed with error -22 [ 490.171321][ T2383] usb 9-1: USB disconnect, device number 22 [ 490.802885][ T7866] kvm: pic: non byte write [ 490.825513][ T438] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 491.047572][ T438] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.063137][ T438] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.086288][ T438] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 491.108253][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 491.131867][ T438] usb 6-1: SerialNumber: syz [ 491.420892][ T438] usb 6-1: 0:2 : does not exist [ 491.529284][ T438] usb 6-1: USB disconnect, device number 27 [ 492.626132][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 492.692196][ T7889] xt_hashlimit: size too large, truncated to 1048576 [ 493.035388][ T7902] loop0: detected capacity change from 0 to 128 [ 493.055070][ T7898] xt_hashlimit: size too large, truncated to 1048576 [ 493.146065][ T7902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 493.163784][ T7902] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.409528][ T7910] 9pnet: Could not find request transport: xen [ 493.724140][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2155'. [ 494.023869][ T7902] EXT4-fs (loop0): unmounting filesystem. [ 494.075505][ T221] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 494.118887][ T7931] netem: change failed [ 494.144387][ T7934] loop6: detected capacity change from 0 to 512 [ 494.168177][ T7934] EXT4-fs (loop6): 1 orphan inode deleted [ 494.173823][ T7934] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 494.184472][ T7934] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.194916][ T1168] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 494.204986][ T1168] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 494.235540][ T325] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 494.266629][ T221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.277515][ T221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.287238][ T221] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 494.296148][ T221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.305272][ T221] usb 9-1: config 0 descriptor?? [ 494.459103][ T325] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.469170][ T325] usb 6-1: config 0 has no interface number 0 [ 494.477684][ T325] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.495735][ T325] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.511731][ T325] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 494.520809][ T325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.534547][ T325] usb 6-1: config 0 descriptor?? [ 494.713569][ T221] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 494.725735][ T221] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 494.743168][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.759833][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.912793][ T221] cp2112 0003:10C4:EA90.002B: Part Number: 0x82 Device Version: 0xFE [ 494.985003][ T325] hid (null): global environment stack underflow [ 494.996580][ T325] uclogic 0003:5543:0522.002C: global environment stack underflow [ 495.004426][ T325] uclogic 0003:5543:0522.002C: item 0 1 1 11 parsing failed [ 495.039153][ T325] uclogic 0003:5543:0522.002C: parse failed [ 495.054114][ T325] uclogic: probe of 0003:5543:0522.002C failed with error -22 [ 495.093435][ T409] EXT4-fs (loop6): unmounting filesystem. [ 495.113442][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.139544][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.176082][ T7949] netem: change failed [ 495.187226][ T325] usb 6-1: USB disconnect, device number 28 [ 495.355015][ T221] cp2112 0003:10C4:EA90.002B: error setting SMBus config [ 495.366245][ T221] cp2112: probe of 0003:10C4:EA90.002B failed with error -71 [ 495.382280][ T7954] xt_hashlimit: size too large, truncated to 1048576 [ 495.391451][ T221] usb 9-1: USB disconnect, device number 23 [ 495.931501][ T7967] loop8: detected capacity change from 0 to 512 [ 495.959469][ T7967] EXT4-fs (loop8): 1 orphan inode deleted [ 495.965166][ T7967] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 495.974557][ T7967] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.985334][ T1168] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 496.004932][ T1168] EXT4-fs error (device loop8): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 496.108888][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2177'. [ 496.365680][ T438] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 496.393519][ T7983] loop7: detected capacity change from 0 to 512 [ 496.461640][ T7983] EXT4-fs (loop7): 1 orphan inode deleted [ 496.467681][ T7983] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 496.476741][ T1168] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 496.486951][ T7983] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.494995][ T1168] EXT4-fs error (device loop7): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 496.556661][ T438] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.575595][ T438] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.593425][ T438] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 496.602484][ T438] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 496.610618][ T438] usb 7-1: SerialNumber: syz [ 496.784577][ T7988] kvm: pic: non byte write [ 496.820159][ T438] usb 7-1: 0:2 : does not exist [ 496.830787][ T438] usb 7-1: USB disconnect, device number 29 [ 496.901157][ T471] EXT4-fs (loop8): unmounting filesystem. [ 497.046287][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 497.261822][ T470] EXT4-fs (loop7): unmounting filesystem. [ 497.359931][ T8001] netem: change failed [ 497.585482][ T7438] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 497.776677][ T7438] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.784546][ T7438] usb 8-1: config 0 has no interface number 0 [ 497.790689][ T7438] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.814895][ T7438] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.825373][ T7438] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 497.835171][ T7438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.844365][ T7438] usb 8-1: config 0 descriptor?? [ 498.001916][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2190'. [ 498.051580][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.060009][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.095590][ T2337] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 498.270690][ T7438] hid (null): global environment stack underflow [ 498.276810][ T2337] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.279064][ T7438] uclogic 0003:5543:0522.002D: global environment stack underflow [ 498.287228][ T2337] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.295889][ T7438] uclogic 0003:5543:0522.002D: item 0 1 1 11 parsing failed [ 498.312563][ T2337] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 498.319302][ T7438] uclogic 0003:5543:0522.002D: parse failed [ 498.333664][ T7438] uclogic: probe of 0003:5543:0522.002D failed with error -22 [ 498.347965][ T2337] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.361035][ T2337] usb 9-1: SerialNumber: syz [ 498.479619][ T221] usb 8-1: USB disconnect, device number 29 [ 498.573732][ T2337] usb 9-1: 0:2 : does not exist [ 498.589309][ T2337] usb 9-1: USB disconnect, device number 24 [ 498.625559][ T7438] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 498.653971][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 498.996792][ T7438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.007748][ T7438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.017612][ T7438] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 499.028114][ T7438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.041348][ T7438] usb 6-1: config 0 descriptor?? [ 499.239247][ T8034] netem: change failed [ 499.442546][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2197'. [ 499.564977][ T1501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.571014][ T2170] Bluetooth: hci0: command 0x1003 tx timeout [ 499.578961][ T2337] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 499.777670][ T2337] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.840038][ T2337] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.979132][ T2337] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.070275][ T2337] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.198722][ T2337] usb 8-1: SerialNumber: syz [ 500.261314][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.281254][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.355132][ T8044] xt_hashlimit: size too large, truncated to 1048576 [ 500.424621][ T2337] usb 8-1: 0:2 : does not exist [ 500.445558][ T2337] usb 8-1: USB disconnect, device number 30 [ 500.503316][ T7438] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 500.513241][ T7438] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 500.610679][ T7438] cp2112 0003:10C4:EA90.002E: Part Number: 0x82 Device Version: 0xFE [ 500.820513][ T7438] cp2112 0003:10C4:EA90.002E: error setting SMBus config [ 500.835897][ T7438] cp2112: probe of 0003:10C4:EA90.002E failed with error -71 [ 500.844476][ T7438] usb 6-1: USB disconnect, device number 29 [ 501.215684][ T2337] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 501.407649][ T2337] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.487510][ T2337] usb 8-1: config 0 has no interface number 0 [ 501.568501][ T28] audit: type=1400 audit(1743322167.977:461): avc: denied { read } for pid=8077 comm="syz.5.2209" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 501.577283][ T2337] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.594366][ T28] audit: type=1400 audit(1743322168.007:462): avc: denied { open } for pid=8077 comm="syz.5.2209" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 501.616233][ T2337] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.630091][ T28] audit: type=1400 audit(1743322168.007:463): avc: denied { ioctl } for pid=8077 comm="syz.5.2209" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 501.640031][ T2337] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 501.677582][ T2337] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.686798][ T2337] usb 8-1: config 0 descriptor?? [ 502.727814][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.745870][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.756266][ T438] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 502.946639][ T438] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.961655][ T438] usb 9-1: config 0 has no interface number 0 [ 502.979719][ T438] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.012905][ T438] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.022833][ T302] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 503.034188][ T2337] hid (null): global environment stack underflow [ 503.051789][ T2337] uclogic 0003:5543:0522.002F: global environment stack underflow [ 503.068133][ T438] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 503.079366][ T2337] uclogic 0003:5543:0522.002F: item 0 1 1 11 parsing failed [ 503.096824][ T2337] uclogic 0003:5543:0522.002F: parse failed [ 503.102824][ T438] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.118689][ T2337] uclogic: probe of 0003:5543:0522.002F failed with error -22 [ 503.134546][ T438] usb 9-1: config 0 descriptor?? [ 503.226618][ T302] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.261639][ T302] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.271724][ T2337] usb 8-1: USB disconnect, device number 31 [ 503.278970][ T302] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.300036][ T302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.308529][ T302] usb 7-1: SerialNumber: syz [ 503.351027][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.366228][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.391296][ T8098] xt_hashlimit: size too large, truncated to 1048576 [ 503.529917][ T302] usb 7-1: 0:2 : does not exist [ 503.567443][ T302] usb 7-1: USB disconnect, device number 30 [ 503.586949][ T438] hid (null): global environment stack underflow [ 503.601278][ T438] uclogic 0003:5543:0522.0030: global environment stack underflow [ 503.610347][ T438] uclogic 0003:5543:0522.0030: item 0 1 1 11 parsing failed [ 503.617964][ T438] uclogic 0003:5543:0522.0030: parse failed [ 503.624235][ T438] uclogic: probe of 0003:5543:0522.0030 failed with error -22 [ 503.804814][ T325] usb 9-1: USB disconnect, device number 25 [ 504.015532][ T438] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 504.103274][ T8112] xt_hashlimit: size too large, truncated to 1048576 [ 504.196655][ T438] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.204671][ T438] usb 6-1: config 0 has no interface number 0 [ 504.211087][ T438] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.222903][ T438] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.233427][ T438] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 504.245695][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.254920][ T438] usb 6-1: config 0 descriptor?? [ 504.348017][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2222'. [ 504.465037][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.476555][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.707147][ T438] hid (null): global environment stack underflow [ 504.734381][ T438] uclogic 0003:5543:0522.0031: global environment stack underflow [ 504.783263][ T438] uclogic 0003:5543:0522.0031: item 0 1 1 11 parsing failed [ 504.818860][ T438] uclogic 0003:5543:0522.0031: parse failed [ 504.825774][ T438] uclogic: probe of 0003:5543:0522.0031 failed with error -22 [ 504.916436][ T325] usb 6-1: USB disconnect, device number 30 [ 505.255764][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2230'. [ 505.343288][ T28] audit: type=1400 audit(1743322171.747:464): avc: denied { connect } for pid=8140 comm="syz.6.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.406739][ T8149] device lo entered promiscuous mode [ 505.463487][ T8148] xt_hashlimit: size too large, truncated to 1048576 [ 505.697126][ T8159] loop8: detected capacity change from 0 to 512 [ 505.708633][ T8159] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 505.718194][ T8159] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.815634][ T325] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 506.191634][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2239'. [ 506.216710][ T325] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.224912][ T325] usb 6-1: config 0 has no interface number 0 [ 506.231548][ T325] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.248478][ T325] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.258514][ T325] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 506.270152][ T325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.280321][ T325] usb 6-1: config 0 descriptor?? [ 506.487296][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.495865][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.586957][ T471] EXT4-fs (loop8): unmounting filesystem. [ 506.703285][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'. [ 506.712551][ T325] hid (null): global environment stack underflow [ 506.722394][ T325] uclogic 0003:5543:0522.0032: global environment stack underflow [ 506.730996][ T325] uclogic 0003:5543:0522.0032: item 0 1 1 11 parsing failed [ 507.171872][ T325] uclogic 0003:5543:0522.0032: parse failed [ 507.177765][ T325] uclogic: probe of 0003:5543:0522.0032 failed with error -22 [ 507.186858][ T325] usb 6-1: USB disconnect, device number 31 [ 507.518330][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 507.759677][ T8193] kvm: pic: non byte write [ 507.856278][ T438] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 508.138253][ T438] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.162361][ T438] usb 6-1: config 0 has no interface number 0 [ 508.194946][ T438] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.261823][ T438] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.371954][ T8149] device lo left promiscuous mode [ 508.388148][ T438] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 508.401627][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.413498][ T438] usb 6-1: config 0 descriptor?? [ 508.416415][ T8208] loop6: detected capacity change from 0 to 128 [ 508.438993][ T8208] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 508.455958][ T8208] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 508.457372][ T8205] kvm: pic: non byte write [ 508.551830][ T8217] 9pnet: Could not find request transport: xen [ 508.686961][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.696562][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.149148][ T438] hid (null): global environment stack underflow [ 509.243103][ T438] uclogic 0003:5543:0522.0033: global environment stack underflow [ 509.251731][ T438] uclogic 0003:5543:0522.0033: item 0 1 1 11 parsing failed [ 509.252523][ T8226] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 509.330850][ T438] uclogic 0003:5543:0522.0033: parse failed [ 509.347027][ T438] uclogic: probe of 0003:5543:0522.0033 failed with error -22 [ 509.356155][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 509.409532][ T438] usb 6-1: USB disconnect, device number 32 [ 509.421424][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2259'. [ 509.494790][ T8233] loop7: detected capacity change from 0 to 512 [ 509.514646][ T8233] EXT4-fs (loop7): 1 orphan inode deleted [ 509.520380][ T8233] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 509.529544][ T8] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 509.539826][ T8233] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.539860][ T8] EXT4-fs error (device loop7): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 509.571936][ T8208] EXT4-fs (loop6): unmounting filesystem. [ 509.964174][ T8242] kvm: pic: non byte write [ 510.085235][ T8245] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 510.150539][ T8251] loop0: detected capacity change from 0 to 512 [ 510.196508][ T8251] EXT4-fs (loop0): 1 orphan inode deleted [ 510.203247][ T8251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 510.215668][ T1168] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 510.231479][ T1168] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 510.244166][ T8251] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.442358][ T470] EXT4-fs (loop7): unmounting filesystem. [ 510.765537][ T325] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 510.795539][ T2337] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 510.960763][ T325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.971652][ T325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.976794][ T2337] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.982445][ T325] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 510.999358][ T325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.007910][ T2337] usb 8-1: config 0 has no interface number 0 [ 511.013846][ T2337] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.025137][ T2337] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.025972][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 511.035374][ T2337] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 511.045055][ T325] usb 7-1: config 0 descriptor?? [ 511.049536][ T2337] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.067380][ T2337] usb 8-1: config 0 descriptor?? [ 511.271633][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2270'. [ 511.289767][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.299209][ T1500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 511.305245][ T2170] Bluetooth: hci0: command 0x1003 tx timeout [ 511.425659][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.790598][ T2337] hid (null): global environment stack underflow [ 511.798519][ T2337] uclogic 0003:5543:0522.0035: global environment stack underflow [ 511.806816][ T2337] uclogic 0003:5543:0522.0035: item 0 1 1 11 parsing failed [ 511.814408][ T2337] uclogic 0003:5543:0522.0035: parse failed [ 511.820735][ T2337] uclogic: probe of 0003:5543:0522.0035 failed with error -22 [ 512.010368][ T2337] usb 8-1: USB disconnect, device number 32 [ 512.071883][ T325] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 512.081084][ T325] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 512.095586][ T1500] Bluetooth: hci1: command 0x1003 tx timeout [ 512.105476][ T1501] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 512.141269][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.150420][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.164950][ T325] cp2112 0003:10C4:EA90.0034: Part Number: 0x82 Device Version: 0xFE [ 512.251432][ T8282] kvm: pic: non byte write [ 512.501609][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2275'. [ 512.602609][ T325] cp2112 0003:10C4:EA90.0034: error setting SMBus config [ 512.614171][ T325] cp2112: probe of 0003:10C4:EA90.0034 failed with error -71 [ 512.623554][ T325] usb 7-1: USB disconnect, device number 31 [ 513.035651][ T8301] loop6: detected capacity change from 0 to 512 [ 513.070064][ T8301] EXT4-fs (loop6): 1 orphan inode deleted [ 513.085555][ T360] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 513.089647][ T8302] kvm: pic: non byte write [ 513.095195][ T360] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 513.100009][ T8301] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 513.170339][ T8301] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.189656][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2283'. [ 515.203847][ T409] EXT4-fs (loop6): unmounting filesystem. [ 515.605707][ T797] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 515.710065][ T8344] loop8: detected capacity change from 0 to 256 [ 515.716679][ T8344] FAT-fs (loop8): Unrecognized mount option "uni_xlatY=0" or missing value [ 515.818878][ T8347] kvm: pic: non byte write [ 515.836755][ T797] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.844689][ T797] usb 8-1: config 0 has no interface number 0 [ 515.850759][ T797] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.861683][ T797] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.872090][ T797] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 515.881246][ T797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.889976][ T797] usb 8-1: config 0 descriptor?? [ 516.005834][ T221] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 516.067155][ T8353] xt_hashlimit: size too large, truncated to 1048576 [ 516.109021][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.121355][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.205503][ T221] usb 9-1: Invalid ep0 maxpacket: 16 [ 516.355138][ T797] hid (null): global environment stack underflow [ 516.388355][ T797] uclogic 0003:5543:0522.0036: global environment stack underflow [ 516.431666][ T797] uclogic 0003:5543:0522.0036: item 0 1 1 11 parsing failed [ 516.482021][ T797] uclogic 0003:5543:0522.0036: parse failed [ 516.515757][ T797] uclogic: probe of 0003:5543:0522.0036 failed with error -22 [ 516.660549][ T797] usb 8-1: USB disconnect, device number 33 [ 517.052316][ T8361] loop6: detected capacity change from 0 to 512 [ 517.169910][ T8361] EXT4-fs (loop6): 1 orphan inode deleted [ 517.182121][ T8361] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 517.211793][ T8361] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.345486][ T221] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 517.525473][ T221] usb 9-1: Invalid ep0 maxpacket: 16 [ 517.530871][ T221] usb usb9-port1: attempt power cycle [ 517.586125][ T8363] xt_hashlimit: size too large, truncated to 1048576 [ 517.613129][ T8376] kvm: pic: non byte write [ 517.859602][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2304'. [ 517.889425][ T409] EXT4-fs (loop6): unmounting filesystem. [ 517.985665][ T221] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 518.025839][ T221] usb 9-1: Invalid ep0 maxpacket: 16 [ 518.175479][ T221] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 518.226404][ T221] usb 9-1: Invalid ep0 maxpacket: 16 [ 518.234898][ T221] usb usb9-port1: unable to enumerate USB device [ 518.260662][ T8389] loop5: detected capacity change from 0 to 2048 [ 518.297147][ T8389] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 519.516078][ T8389] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2307: bg 0: block 234: padding at end of block bitmap is not set [ 519.555980][ T8389] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 946 with error 28 [ 519.639129][ T8409] FAULT_INJECTION: forcing a failure. [ 519.639129][ T8409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.749161][ T8389] EXT4-fs (loop5): This should not happen!! Data will be lost [ 519.749161][ T8389] [ 519.865895][ T8409] CPU: 0 PID: 8409 Comm: syz.8.2311 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 519.875810][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 519.885706][ T8409] Call Trace: [ 519.888828][ T8409] [ 519.891716][ T8409] dump_stack_lvl+0x151/0x1b7 [ 519.896245][ T8409] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 519.901524][ T8409] ? kasan_set_track+0x1/0x70 [ 519.906034][ T8409] dump_stack+0x15/0x18 [ 519.910025][ T8409] should_fail_ex+0x3d0/0x520 [ 519.914536][ T8409] should_fail+0xb/0x10 [ 519.918522][ T8409] should_fail_usercopy+0x1a/0x20 [ 519.923386][ T8409] strncpy_from_user+0x24/0x2b0 [ 519.928087][ T8409] ? getname_flags+0xba/0x520 [ 519.932587][ T8409] getname_flags+0xf2/0x520 [ 519.936929][ T8409] __x64_sys_renameat+0xa8/0xd0 [ 519.941646][ T8409] x64_sys_call+0x6f0/0x9a0 [ 519.945948][ T8409] do_syscall_64+0x3b/0xb0 [ 519.950262][ T8409] ? clear_bhb_loop+0x55/0xb0 [ 519.954728][ T8409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.960446][ T8409] RIP: 0033:0x7f638bb8d169 [ 519.964699][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.985031][ T8409] RSP: 002b:00007f638c977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 519.993280][ T8409] RAX: ffffffffffffffda RBX: 00007f638bda6080 RCX: 00007f638bb8d169 [ 520.002243][ T8409] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 520.010494][ T8409] RBP: 00007f638c977090 R08: 0000000000000000 R09: 0000000000000000 [ 520.018408][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.026834][ T8409] R13: 0000000000000000 R14: 00007f638bda6080 R15: 00007ffe09c6e2e8 [ 520.034641][ T8409] [ 520.049592][ T8389] EXT4-fs (loop5): Total free blocks count 0 [ 520.058385][ T8389] EXT4-fs (loop5): Free/Dirty block details [ 520.064193][ T8389] EXT4-fs (loop5): free_blocks=0 [ 520.078383][ T8389] EXT4-fs (loop5): dirty_blocks=960 [ 520.083490][ T8389] EXT4-fs (loop5): Block reservation details [ 520.089684][ T8389] EXT4-fs (loop5): i_reserved_data_blocks=60 [ 520.131842][ T8418] loop8: detected capacity change from 0 to 512 [ 520.158217][ T8420] loop0: detected capacity change from 0 to 512 [ 520.182397][ T374] EXT4-fs (loop5): unmounting filesystem. [ 520.189898][ T8418] EXT4-fs: Ignoring removed i_version option [ 520.206051][ T8418] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.217385][ T8420] EXT4-fs (loop0): 1 orphan inode deleted [ 520.225508][ T8420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 520.226052][ T8418] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 520.246737][ T8420] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.257569][ T360] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 520.275510][ T360] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 520.322102][ T8418] EXT4-fs (loop8): 1 truncate cleaned up [ 520.335954][ T8418] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 520.479015][ T8433] loop7: detected capacity change from 0 to 512 [ 520.513561][ T8433] EXT4-fs (loop7): orphan cleanup on readonly fs [ 520.523676][ T8433] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 520.539627][ T8436] netem: change failed [ 520.545691][ T8433] EXT4-fs warning (device loop7): ext4_enable_quotas:7017: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 520.578636][ T8433] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 520.587792][ T8433] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2317: bg 0: block 97: padding at end of block bitmap is not set [ 520.678050][ T8433] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 520.689121][ T8433] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2925: inode #15: comm syz.7.2317: corrupted xattr block 19 [ 520.702041][ T8433] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 520.711671][ T8433] EXT4-fs (loop7): 1 orphan inode deleted [ 520.718494][ T8433] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 521.109183][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 521.116492][ T471] EXT4-fs (loop8): unmounting filesystem. [ 521.196219][ T470] EXT4-fs (loop7): unmounting filesystem. [ 521.314655][ T8449] FAULT_INJECTION: forcing a failure. [ 521.314655][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 521.327607][ T8449] CPU: 1 PID: 8449 Comm: syz.5.2322 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 521.337731][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 521.348761][ T8449] Call Trace: [ 521.351881][ T8449] [ 521.354756][ T8449] dump_stack_lvl+0x151/0x1b7 [ 521.359276][ T8449] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 521.365074][ T8449] dump_stack+0x15/0x18 [ 521.369073][ T8449] should_fail_ex+0x3d0/0x520 [ 521.373576][ T8449] __should_failslab+0xaf/0xf0 [ 521.378181][ T8449] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 521.383727][ T8449] should_failslab+0x9/0x20 [ 521.388069][ T8449] __kmem_cache_alloc_node+0x3d/0x2a0 [ 521.393317][ T8449] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 521.398834][ T8449] kmalloc_trace+0x2a/0xa0 [ 521.403097][ T8449] selinux_sk_alloc_security+0x7d/0x1a0 [ 521.408468][ T8449] security_sk_alloc+0x72/0xb0 [ 521.413068][ T8449] sk_prot_alloc+0x114/0x330 [ 521.417587][ T8449] sk_alloc+0x38/0x440 [ 521.421485][ T8449] ? security_inode_alloc+0xc0/0x120 [ 521.426874][ T8449] pppol2tp_create+0x33/0x200 [ 521.431398][ T8449] pppox_create+0x14a/0x1c0 [ 521.436437][ T8449] __sock_create+0x3be/0x7e0 [ 521.441470][ T8449] __sys_socket+0x136/0x3a0 [ 521.445825][ T8449] ? __sys_socket_file+0x1d0/0x1d0 [ 521.450749][ T8449] ? debug_smp_processor_id+0x17/0x20 [ 521.456089][ T8449] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 521.461991][ T8449] __x64_sys_socket+0x7a/0x90 [ 521.467741][ T8449] x64_sys_call+0x147/0x9a0 [ 521.472408][ T8449] do_syscall_64+0x3b/0xb0 [ 521.477258][ T8449] ? clear_bhb_loop+0x55/0xb0 [ 521.481856][ T8449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.487586][ T8449] RIP: 0033:0x7f852d78d169 [ 521.492097][ T8449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.511648][ T8449] RSP: 002b:00007f852e534038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 521.520269][ T8449] RAX: ffffffffffffffda RBX: 00007f852d9a6080 RCX: 00007f852d78d169 [ 521.528029][ T8449] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 521.535925][ T8449] RBP: 00007f852e534090 R08: 0000000000000000 R09: 0000000000000000 [ 521.543733][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.551919][ T8449] R13: 0000000000000000 R14: 00007f852d9a6080 R15: 00007ffe166837e8 [ 521.559720][ T8449] [ 521.567503][ T8445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20224 sclass=netlink_route_socket pid=8445 comm=syz.8.2321 [ 521.621572][ T8462] loop6: detected capacity change from 0 to 256 [ 521.635915][ T8462] FAT-fs (loop6): Unrecognized mount option "ÿ" or missing value [ 521.637039][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'. [ 521.935611][ T438] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 522.036371][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2328'. [ 522.152090][ T438] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.164984][ T438] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.186080][ T438] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.195171][ T438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.223381][ T438] usb 8-1: SerialNumber: syz [ 522.323941][ T8473] loop5: detected capacity change from 0 to 512 [ 522.358923][ T8473] EXT4-fs (loop5): 1 orphan inode deleted [ 522.364651][ T8473] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 522.373821][ T8473] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.384450][ T387] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 522.394625][ T387] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:6: Failed to release dquot type 1 [ 522.435080][ T438] usb 8-1: 0:2 : does not exist [ 522.440211][ T438] usb 8-1: unit 255 not found! [ 522.455816][ T438] usb 8-1: USB disconnect, device number 34 [ 522.567841][ T8481] loop6: detected capacity change from 0 to 512 [ 522.591692][ T8481] EXT4-fs: Ignoring removed i_version option [ 522.598726][ T8481] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.605925][ T8481] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 522.643735][ T8481] EXT4-fs (loop6): 1 truncate cleaned up [ 522.649374][ T8481] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 523.549824][ T8492] loop7: detected capacity change from 0 to 512 [ 523.671177][ T8492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.707942][ T374] EXT4-fs (loop5): unmounting filesystem. [ 523.865557][ T8492] EXT4-fs (loop7): orphan cleanup on readonly fs [ 523.876707][ T8492] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2334: bg 0: block 248: padding at end of block bitmap is not set [ 523.892417][ T8492] Quota error (device loop7): write_blk: dquota write failed [ 523.899926][ T8492] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 523.909837][ T8492] EXT4-fs error (device loop7): ext4_acquire_dquot:6782: comm syz.7.2334: Failed to acquire dquot type 1 [ 523.925586][ T8492] EXT4-fs (loop7): 1 truncate cleaned up [ 523.932396][ T8492] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 524.003445][ T8492] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2334'. [ 524.037580][ T28] audit: type=1326 audit(1743322190.387:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 524.339655][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2335'. [ 525.675965][ T470] EXT4-fs (loop7): unmounting filesystem. [ 525.703384][ T409] EXT4-fs (loop6): unmounting filesystem. [ 525.735495][ T28] audit: type=1326 audit(1743322190.387:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 525.758857][ T28] audit: type=1326 audit(1743322190.397:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 525.782899][ T28] audit: type=1326 audit(1743322190.397:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 525.806470][ T28] audit: type=1326 audit(1743322190.397:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 525.895254][ T8515] loop6: detected capacity change from 0 to 256 [ 526.316971][ T8515] FAT-fs (loop6): Unrecognized mount option "uni_xlatY=0" or missing value [ 526.502102][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20224 sclass=netlink_route_socket pid=8518 comm=syz.7.2338 [ 526.654929][ T28] audit: type=1326 audit(1743322190.397:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 526.921353][ T8520] netem: change failed [ 526.948641][ T28] audit: type=1326 audit(1743322190.397:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 526.974484][ T5994] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 527.092557][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2343'. [ 527.319786][ T28] audit: type=1326 audit(1743322190.397:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 527.423136][ T8535] 9pnet_fd: Insufficient options for proto=fd [ 527.443811][ T28] audit: type=1326 audit(1743322190.397:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 527.641453][ T28] audit: type=1326 audit(1743322190.397:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 527.939535][ T8539] loop7: detected capacity change from 0 to 512 [ 528.851868][ T28] audit: type=1326 audit(1743322190.397:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.7.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949998d169 code=0x7ffc0000 [ 528.998527][ T8539] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 529.008529][ T8539] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.611862][ T470] EXT4-fs (loop7): unmounting filesystem. [ 529.625943][ T8545] loop6: detected capacity change from 0 to 512 [ 529.670931][ T8552] loop8: detected capacity change from 0 to 512 [ 529.694354][ T8552] EXT4-fs: Ignoring removed i_version option [ 529.713535][ T8545] EXT4-fs (loop6): 1 orphan inode deleted [ 529.719641][ T8545] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 529.728803][ T8] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 529.735789][ T8552] EXT4-fs: Ignoring removed mblk_io_submit option [ 529.746542][ T8545] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.772719][ T8552] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 529.801369][ T8552] EXT4-fs (loop8): 1 truncate cleaned up [ 529.807250][ T8552] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 529.995485][ T302] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 530.101112][ T409] EXT4-fs (loop6): unmounting filesystem. [ 530.196845][ T302] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.204737][ T302] usb 8-1: config 0 has no interface number 0 [ 530.210641][ T302] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.221380][ T302] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.231281][ T302] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 530.240300][ T302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.253465][ T302] usb 8-1: config 0 descriptor?? [ 530.405599][ T438] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 530.526714][ T471] EXT4-fs (loop8): unmounting filesystem. [ 530.559248][ T8571] loop8: detected capacity change from 0 to 512 [ 530.565761][ T8571] ext4: Unknown parameter 'euid' [ 530.583624][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.593753][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.707726][ T438] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.718021][ T438] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.728381][ T438] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 530.737648][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 530.764576][ T8576] FAULT_INJECTION: forcing a failure. [ 530.764576][ T8576] name failslab, interval 1, probability 0, space 0, times 0 [ 530.777099][ T8576] CPU: 1 PID: 8576 Comm: syz.8.2355 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 530.786655][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 530.796551][ T8576] Call Trace: [ 530.799675][ T8576] [ 530.802453][ T8576] dump_stack_lvl+0x151/0x1b7 [ 530.806971][ T8576] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 530.812265][ T8576] dump_stack+0x15/0x18 [ 530.816255][ T8576] should_fail_ex+0x3d0/0x520 [ 530.820770][ T8576] __should_failslab+0xaf/0xf0 [ 530.825364][ T8576] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 530.830920][ T8576] should_failslab+0x9/0x20 [ 530.835264][ T8576] __kmem_cache_alloc_node+0x3d/0x2a0 [ 530.840468][ T8576] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 530.845946][ T8576] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 530.851495][ T8576] kmalloc_trace+0x2a/0xa0 [ 530.855875][ T8576] selinux_sk_alloc_security+0x7d/0x1a0 [ 530.861248][ T8576] security_sk_alloc+0x72/0xb0 [ 530.865838][ T8576] sk_prot_alloc+0x114/0x330 [ 530.870273][ T8576] sk_alloc+0x38/0x440 [ 530.874172][ T8576] ? ns_capable+0x89/0xe0 [ 530.878332][ T8576] packet_create+0xf6/0x7c0 [ 530.882682][ T8576] __sock_create+0x3be/0x7e0 [ 530.887197][ T8576] __sys_socket+0x136/0x3a0 [ 530.891534][ T8576] ? __sys_socket_file+0x1d0/0x1d0 [ 530.896475][ T8576] __x64_sys_socket+0x7a/0x90 [ 530.901424][ T8576] x64_sys_call+0x147/0x9a0 [ 530.905760][ T8576] do_syscall_64+0x3b/0xb0 [ 530.910151][ T8576] ? clear_bhb_loop+0x55/0xb0 [ 530.914660][ T8576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.920398][ T8576] RIP: 0033:0x7f638bb8d169 [ 530.924752][ T8576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.944371][ T8576] RSP: 002b:00007f638c956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 530.952616][ T8576] RAX: ffffffffffffffda RBX: 00007f638bda6160 RCX: 00007f638bb8d169 [ 530.960425][ T8576] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 530.968235][ T8576] RBP: 00007f638c956090 R08: 0000000000000000 R09: 0000000000000000 [ 530.976048][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.983857][ T8576] R13: 0000000000000000 R14: 00007f638bda6160 R15: 00007ffe09c6e2e8 [ 530.991783][ T8576] [ 531.003958][ T8578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20224 sclass=netlink_route_socket pid=8578 comm=syz.0.2356 [ 531.094788][ T302] hid (null): global environment stack underflow [ 531.101494][ T438] usb 6-1: SerialNumber: syz [ 531.119564][ T302] uclogic 0003:5543:0522.0037: global environment stack underflow [ 531.132526][ T302] uclogic 0003:5543:0522.0037: item 0 1 1 11 parsing failed [ 531.164544][ T302] uclogic 0003:5543:0522.0037: parse failed [ 531.172227][ T302] uclogic: probe of 0003:5543:0522.0037 failed with error -22 [ 531.351386][ T438] usb 6-1: 0:2 : does not exist [ 531.442091][ T438] usb 6-1: USB disconnect, device number 33 [ 531.578546][ T302] usb 8-1: USB disconnect, device number 35 [ 531.603902][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2357'. [ 531.829705][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 531.829726][ T28] audit: type=1400 audit(1743322198.237:558): avc: denied { read write } for pid=8584 comm="syz.0.2359" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 531.862558][ T28] audit: type=1400 audit(1743322198.237:559): avc: denied { open } for pid=8584 comm="syz.0.2359" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 531.935495][ T797] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 531.985519][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2360'. [ 532.002312][ T28] audit: type=1400 audit(1743322198.407:560): avc: denied { map } for pid=8588 comm="syz.7.2360" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 532.037760][ T28] audit: type=1400 audit(1743322198.407:561): avc: denied { read write } for pid=8588 comm="syz.7.2360" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 532.081032][ T8596] loop5: detected capacity change from 0 to 512 [ 532.104770][ T8596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 532.137862][ T8596] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 532.146333][ T8596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 532.154357][ T8596] System zones: 0-1, 15-15, 18-18, 34-34 [ 532.160986][ T8596] EXT4-fs (loop5): orphan cleanup on readonly fs [ 532.167600][ T8596] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 532.177157][ T8596] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 532.185892][ T797] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.192062][ T8596] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 532.202396][ T797] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.218574][ T797] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 532.218939][ T8596] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2363: bg 0: block 40: padding at end of block bitmap is not set [ 532.227676][ T797] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.228590][ T797] usb 9-1: config 0 descriptor?? [ 532.244448][ T8596] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 532.263786][ T8596] EXT4-fs (loop5): 1 truncate cleaned up [ 532.318896][ T8596] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 532.324180][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 532.426180][ T8606] loop6: detected capacity change from 0 to 512 [ 532.493522][ T8606] EXT4-fs: Ignoring removed i_version option [ 532.660762][ T8606] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.674812][ T797] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 532.691120][ T8606] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 532.713717][ T797] cp2112 0003:10C4:EA90.0038: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 532.819028][ T8606] EXT4-fs (loop6): 1 truncate cleaned up [ 532.859767][ T797] cp2112 0003:10C4:EA90.0038: Part Number: 0x82 Device Version: 0xFE [ 532.870181][ T8606] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 532.915552][ T302] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 533.068915][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.079137][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.128695][ T302] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.140409][ T302] usb 6-1: config 0 has no interface number 0 [ 533.146620][ T302] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.168846][ T302] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.181323][ T302] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 533.191365][ T409] EXT4-fs (loop6): unmounting filesystem. [ 533.197161][ T302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.227156][ T302] usb 6-1: config 0 descriptor?? [ 533.317533][ T797] cp2112 0003:10C4:EA90.0038: error setting SMBus config [ 533.327412][ T797] cp2112: probe of 0003:10C4:EA90.0038 failed with error -71 [ 533.337163][ T797] usb 9-1: USB disconnect, device number 30 [ 533.756372][ T28] audit: type=1400 audit(1743322200.167:562): avc: denied { create } for pid=8595 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.776568][ T28] audit: type=1400 audit(1743322200.167:563): avc: denied { connect } for pid=8595 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.797563][ T302] prodikeys 0003:041E:2801.0039: unknown main item tag 0x0 [ 533.805105][ T302] prodikeys 0003:041E:2801.0039: unknown main item tag 0x0 [ 533.814545][ T302] prodikeys 0003:041E:2801.0039: item fetching failed at offset 2/7 [ 533.823025][ T302] prodikeys 0003:041E:2801.0039: hid parse failed [ 533.829537][ T302] prodikeys: probe of 0003:041E:2801.0039 failed with error -22 [ 534.141867][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2368'. [ 537.486490][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2370'. [ 537.561240][ T302] usb 6-1: USB disconnect, device number 34 [ 537.644946][ T374] EXT4-fs (loop5): unmounting filesystem. [ 537.681421][ T28] audit: type=1400 audit(1743322204.087:564): avc: denied { mount } for pid=8636 comm="syz.6.2372" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 537.985950][ T2383] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 538.065680][ T325] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 538.175533][ T2383] usb 7-1: Using ep0 maxpacket: 32 [ 538.186947][ T2383] usb 7-1: unable to get BOS descriptor or descriptor too short [ 538.198448][ T2383] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 538.212130][ T2383] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 538.236493][ T2383] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 538.256541][ T2383] usb 7-1: config 128 has no interface number 0 [ 538.271695][ T2383] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 157, changing to 11 [ 538.288674][ T325] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.289607][ T2383] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33761, setting to 1024 [ 538.314953][ T2383] usb 7-1: config 128 interface 127 has no altsetting 0 [ 538.315101][ T325] usb 8-1: config 0 has no interface number 0 [ 538.328251][ T325] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.339439][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2377'. [ 538.356652][ T325] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.372294][ T2383] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 538.390899][ T325] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 538.422499][ T325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.424694][ T2383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.448638][ T2383] usb 7-1: Product: syz [ 538.450548][ T325] usb 8-1: config 0 descriptor?? [ 538.452891][ T2383] usb 7-1: Manufacturer: syz [ 538.471665][ T2383] usb 7-1: SerialNumber: syz [ 538.678922][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.690963][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.720487][ T2383] usb 7-1: USB disconnect, device number 32 [ 538.905896][ T325] hid (null): global environment stack underflow [ 538.915173][ T325] uclogic 0003:5543:0522.003A: global environment stack underflow [ 538.930567][ T325] uclogic 0003:5543:0522.003A: item 0 1 1 11 parsing failed [ 538.936175][ T7296] udevd[7296]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 538.947028][ T325] uclogic 0003:5543:0522.003A: parse failed [ 538.991917][ T325] uclogic: probe of 0003:5543:0522.003A failed with error -22 [ 539.054059][ T28] audit: type=1400 audit(1743322205.467:565): avc: denied { mount } for pid=8650 comm="syz.8.2378" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 539.125858][ T325] usb 8-1: USB disconnect, device number 36 [ 539.134868][ T28] audit: type=1400 audit(1743322205.537:566): avc: denied { mount } for pid=8652 comm="syz.8.2379" name="/" dev="ramfs" ino=59860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 539.175660][ T28] audit: type=1400 audit(1743322205.537:567): avc: denied { execute } for pid=8652 comm="syz.8.2379" path="/423/file0/bus" dev="ramfs" ino=59124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 539.213694][ T28] audit: type=1400 audit(1743322205.627:568): avc: denied { unmount } for pid=471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 539.242379][ T28] audit: type=1400 audit(1743322205.627:569): avc: denied { unmount } for pid=409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 539.280046][ T8657] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 539.453565][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2380'. [ 539.939757][ T1500] Bluetooth: hci0: command 0x1003 tx timeout [ 539.939827][ T1501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 540.521002][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2382'. [ 540.884680][ T28] audit: type=1400 audit(1743322207.287:570): avc: denied { wake_alarm } for pid=8666 comm="syz.8.2383" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 541.540985][ T8678] loop8: detected capacity change from 0 to 256 [ 541.571366][ T8678] exfat: Bad value for 'uid' [ 541.585628][ T2170] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 541.645609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.649869][ T8678] loop8: detected capacity change from 0 to 512 [ 541.662440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.686687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.687725][ T28] audit: type=1400 audit(1743322208.107:571): avc: denied { mounton } for pid=8677 comm="syz.8.2387" path="/426/file1" dev="tmpfs" ino=2263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 541.704690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.751717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.752348][ T8678] EXT4-fs (loop8): Test dummy encryption mode enabled [ 541.768376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.794718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.809577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.814294][ T8678] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 541.825540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.861253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.061691][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2389'. [ 542.118391][ T8678] EXT4-fs (loop8): 1 truncate cleaned up [ 542.138885][ T8678] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 542.191351][ T8678] EXT4-fs (loop8): unmounting filesystem. [ 543.274517][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2388'. [ 543.358469][ T28] audit: type=1400 audit(1743322209.767:572): avc: denied { unlink } for pid=8693 comm="syz.5.2391" name="#7" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 543.399272][ T8678] loop8: detected capacity change from 0 to 128 [ 543.467712][ T28] audit: type=1400 audit(1743322209.787:573): avc: denied { bind } for pid=8693 comm="syz.5.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 543.500650][ T8699] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 543.517279][ T28] audit: type=1400 audit(1743322209.867:574): avc: denied { mount } for pid=8677 comm="syz.8.2387" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 543.858785][ T28] audit: type=1400 audit(1743322210.187:575): avc: denied { bind } for pid=8677 comm="syz.8.2387" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 543.886646][ T28] audit: type=1400 audit(1743322210.197:576): avc: denied { node_bind } for pid=8677 comm="syz.8.2387" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 543.996635][ T28] audit: type=1400 audit(1743322210.387:577): avc: denied { unmount } for pid=471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 544.062070][ T28] audit: type=1400 audit(1743322210.397:578): avc: denied { create } for pid=8702 comm="syz.7.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.084429][ T28] audit: type=1400 audit(1743322210.397:579): avc: denied { bind } for pid=8702 comm="syz.7.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.111439][ T8708] loop8: detected capacity change from 0 to 512 [ 544.188610][ T8708] EXT4-fs: Ignoring removed i_version option [ 544.194553][ T28] audit: type=1400 audit(1743322210.487:580): avc: denied { bind } for pid=8706 comm="syz.7.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.215677][ T8708] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.222490][ T8708] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 544.232607][ T28] audit: type=1400 audit(1743322210.507:581): avc: denied { setopt } for pid=8706 comm="syz.7.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.276625][ T8708] EXT4-fs (loop8): 1 truncate cleaned up [ 544.282315][ T8708] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 544.584877][ T8715] loop0: detected capacity change from 0 to 512 [ 544.611999][ T8715] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 544.626531][ T8715] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 544.634617][ T8715] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 544.642970][ T8715] System zones: 0-1, 15-15, 18-18, 34-34 [ 544.649528][ T8715] EXT4-fs (loop0): orphan cleanup on readonly fs [ 544.656389][ T8715] EXT4-fs warning (device loop0): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 544.671689][ T8715] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 544.678973][ T8715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2398: bg 0: block 40: padding at end of block bitmap is not set [ 544.693710][ T8715] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 544.702777][ T8715] EXT4-fs (loop0): 1 truncate cleaned up [ 544.708800][ T8715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 544.966795][ T8719] input: syz1 as /devices/virtual/input/input16 [ 545.195071][ T8721] loop7: detected capacity change from 0 to 512 [ 545.221562][ T8721] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 545.229822][ T8721] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 545.240655][ T471] EXT4-fs (loop8): unmounting filesystem. [ 545.247413][ T8721] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.2399: bad orphan inode 13 [ 545.282624][ T8721] EXT4-fs (loop7): Remounting filesystem read-only [ 545.289527][ T8721] ext4_test_bit(bit=12, block=4) = 1 [ 545.294770][ T8721] is_bad_inode(inode)=0 [ 545.299112][ T8721] NEXT_ORPHAN(inode)=17694720 [ 545.303815][ T8721] max_ino=32 [ 545.307190][ T8721] i_nlink=0 [ 545.310302][ T8721] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 545.326405][ T8721] EXT4-fs (loop7): unmounting filesystem. [ 545.584775][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2400'. [ 546.480672][ T1501] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 546.547970][ T3058] Bluetooth: hci0: command 0x1003 tx timeout [ 546.593284][ T1500] Bluetooth: hci1: command 0x1003 tx timeout [ 546.649375][ T2170] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 546.658125][ C1] net_ratelimit: 31375 callbacks suppressed [ 546.658152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.658479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.658573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.658658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.658743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.658840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.658926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.659024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.659110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.659196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.029946][ T6936] EXT4-fs (loop0): unmounting filesystem. [ 547.167455][ T8732] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 547.191379][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2404'. [ 547.271527][ T8730] loop7: detected capacity change from 0 to 256 [ 547.277976][ T8730] exfat: Deprecated parameter 'namecase' [ 547.300802][ T8730] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 547.518514][ T7438] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 547.717690][ T7438] usb 6-1: not running at top speed; connect to a high speed hub [ 547.726319][ T7438] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.737820][ T7438] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.750836][ T7438] usb 6-1: config 1 interface 0 has no altsetting 0 [ 547.760247][ T7438] usb 6-1: language id specifier not provided by device, defaulting to English [ 547.770630][ T7438] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 547.779917][ T7438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.788030][ T7438] usb 6-1: Product: syz [ 547.792336][ T7438] usb 6-1: Manufacturer: syz [ 547.797598][ T7438] usb 6-1: SerialNumber: syz [ 548.015054][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 548.052852][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.126518][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.186863][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.195605][ T321] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 548.203322][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.235289][ T7438] usbhid 6-1:1.0: can't add hid device: -71 [ 548.241181][ T7438] usbhid: probe of 6-1:1.0 failed with error -71 [ 548.249788][ T7438] usb 6-1: USB disconnect, device number 35 [ 548.302556][ T8753] FAULT_INJECTION: forcing a failure. [ 548.302556][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 548.315335][ T8753] CPU: 0 PID: 8753 Comm: syz.0.2409 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 548.324980][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 548.334880][ T8753] Call Trace: [ 548.338003][ T8753] [ 548.340775][ T8753] dump_stack_lvl+0x151/0x1b7 [ 548.345288][ T8753] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 548.350587][ T8753] dump_stack+0x15/0x18 [ 548.354573][ T8753] should_fail_ex+0x3d0/0x520 [ 548.359088][ T8753] __should_failslab+0xaf/0xf0 [ 548.363687][ T8753] ? sk_prot_alloc+0xf9/0x330 [ 548.368198][ T8753] should_failslab+0x9/0x20 [ 548.372541][ T8753] __kmem_cache_alloc_node+0x3d/0x2a0 [ 548.377750][ T8753] ? sk_prot_alloc+0xf9/0x330 [ 548.382262][ T8753] __kmalloc+0xa3/0x1e0 [ 548.386254][ T8753] sk_prot_alloc+0xf9/0x330 [ 548.390592][ T8753] sk_alloc+0x38/0x440 [ 548.394500][ T8753] ? bpf_test_init+0x169/0x190 [ 548.399102][ T8753] bpf_prog_test_run_skb+0x384/0x13a0 [ 548.404313][ T8753] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 548.410038][ T8753] ? __kasan_check_write+0x14/0x20 [ 548.414980][ T8753] ? fput+0x15b/0x1b0 [ 548.418797][ T8753] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 548.424530][ T8753] bpf_prog_test_run+0x3b0/0x630 [ 548.429303][ T8753] ? bpf_prog_query+0x260/0x260 [ 548.433993][ T8753] ? selinux_bpf+0xd2/0x100 [ 548.438332][ T8753] ? security_bpf+0x82/0xb0 [ 548.442669][ T8753] __sys_bpf+0x59f/0x7f0 [ 548.446749][ T8753] ? bpf_link_show_fdinfo+0x300/0x300 [ 548.452049][ T8753] ? __ia32_sys_read+0x90/0x90 [ 548.456645][ T8753] ? debug_smp_processor_id+0x17/0x20 [ 548.461847][ T8753] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 548.467762][ T8753] __x64_sys_bpf+0x7c/0x90 [ 548.472008][ T8753] x64_sys_call+0x87f/0x9a0 [ 548.476342][ T8753] do_syscall_64+0x3b/0xb0 [ 548.480595][ T8753] ? clear_bhb_loop+0x55/0xb0 [ 548.485113][ T8753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.490842][ T8753] RIP: 0033:0x7f4b8038d169 [ 548.495094][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.514534][ T8753] RSP: 002b:00007f4b81254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.522782][ T8753] RAX: ffffffffffffffda RBX: 00007f4b805a5fa0 RCX: 00007f4b8038d169 [ 548.530588][ T8753] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 548.538401][ T8753] RBP: 00007f4b81254090 R08: 0000000000000000 R09: 0000000000000000 [ 548.546212][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.554024][ T8753] R13: 0000000000000000 R14: 00007f4b805a5fa0 R15: 00007ffc581bdf18 [ 548.561842][ T8753] [ 548.596704][ T321] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.610722][ T321] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.628469][ T321] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 548.649276][ T321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.662614][ T321] usb 9-1: config 0 descriptor?? [ 548.672600][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 548.672616][ T28] audit: type=1400 audit(1743322215.077:596): avc: denied { ioctl } for pid=8756 comm="syz.0.2411" path="socket:[60480]" dev="sockfs" ino=60480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 548.724172][ T8757] loop0: detected capacity change from 0 to 256 [ 548.752488][ T8757] FAT-fs (loop0): Directory bread(block 64) failed [ 548.759628][ T8757] FAT-fs (loop0): Directory bread(block 65) failed [ 548.766783][ T8757] FAT-fs (loop0): Directory bread(block 66) failed [ 548.774526][ T8757] FAT-fs (loop0): Directory bread(block 67) failed [ 548.781729][ T8757] FAT-fs (loop0): Directory bread(block 68) failed [ 548.788397][ T8757] FAT-fs (loop0): Directory bread(block 69) failed [ 548.794918][ T8757] FAT-fs (loop0): Directory bread(block 70) failed [ 548.801875][ T8757] FAT-fs (loop0): Directory bread(block 71) failed [ 548.809730][ T8757] FAT-fs (loop0): Directory bread(block 72) failed [ 548.822695][ T8757] FAT-fs (loop0): Directory bread(block 73) failed [ 548.871981][ T8757] syz.0.2411: attempt to access beyond end of device [ 548.871981][ T8757] loop0: rw=2049, sector=1224, nr_sectors = 136 limit=256 [ 548.888145][ T8757] syz.0.2411: attempt to access beyond end of device [ 548.888145][ T8757] loop0: rw=2051, sector=1288, nr_sectors = 96 limit=256 [ 548.912217][ T7358] kworker/u4:9: attempt to access beyond end of device [ 548.912217][ T7358] loop0: rw=1, sector=1268, nr_sectors = 4 limit=256 [ 548.925739][ T7358] Buffer I/O error on dev loop0, logical block 317, lost async page write [ 549.022080][ T28] audit: type=1400 audit(1743322215.427:597): avc: denied { write } for pid=8760 comm="syz.5.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.087296][ T321] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 549.095349][ T321] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 549.173502][ T8764] loop0: detected capacity change from 0 to 16 [ 549.180958][ T8764] erofs: Unknown parameter 'ÿÿÿÿ' [ 549.253304][ T2170] Bluetooth: hci0: command 0x1003 tx timeout [ 549.253338][ T8729] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 549.286095][ T28] audit: type=1400 audit(1743322215.637:598): avc: denied { append } for pid=8758 comm="syz.0.2412" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 549.323700][ T321] cp2112 0003:10C4:EA90.003B: Part Number: 0x82 Device Version: 0xFE [ 549.333386][ T28] audit: type=1400 audit(1743322215.647:599): avc: denied { ioctl } for pid=8758 comm="syz.0.2412" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 549.421250][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2416'. [ 549.567809][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2414'. [ 549.617651][ T2170] Bluetooth: hci1: command 0x1003 tx timeout [ 549.626068][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 549.627550][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.751011][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.329337][ T321] cp2112 0003:10C4:EA90.003B: error setting SMBus config [ 550.337572][ T321] cp2112: probe of 0003:10C4:EA90.003B failed with error -71 [ 550.369318][ T321] usb 9-1: USB disconnect, device number 31 [ 550.475110][ T8782] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 550.827647][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2420'. [ 551.139655][ T28] audit: type=1326 audit(1743322217.547:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 552.466855][ C0] net_ratelimit: 48078 callbacks suppressed [ 552.466886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.484651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.496620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.508796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.520768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.532749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.544700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.556638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.568593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.580538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 552.759618][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 552.767919][ T2170] Bluetooth: hci0: command 0x1003 tx timeout [ 554.830008][ T8800] loop5: detected capacity change from 0 to 256 [ 555.939963][ T8800] FAT-fs (loop5): Directory bread(block 64) failed [ 556.070595][ T8800] FAT-fs (loop5): Directory bread(block 65) failed [ 556.109751][ T8800] FAT-fs (loop5): Directory bread(block 66) failed [ 556.138317][ T8800] FAT-fs (loop5): Directory bread(block 67) failed [ 556.389918][ T8800] FAT-fs (loop5): Directory bread(block 68) failed [ 556.557911][ T28] audit: type=1326 audit(1743322217.567:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 556.866836][ T8800] FAT-fs (loop5): Directory bread(block 69) failed [ 556.873267][ T8800] FAT-fs (loop5): Directory bread(block 70) failed [ 556.947356][ T8800] FAT-fs (loop5): Directory bread(block 71) failed [ 556.954061][ T8800] FAT-fs (loop5): Directory bread(block 72) failed [ 557.475464][ C1] net_ratelimit: 125611 callbacks suppressed [ 557.475493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.494095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.507185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.519149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.531019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.543063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.554915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.566797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.578733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.591014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.319808][ T8800] FAT-fs (loop5): Directory bread(block 73) failed [ 559.906270][ T28] audit: type=1326 audit(1743322217.567:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 560.908414][ T2383] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 561.268168][ T2383] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.278202][ T28] audit: type=1326 audit(1743322217.577:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278245][ T28] audit: type=1326 audit(1743322217.577:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278276][ T28] audit: type=1326 audit(1743322217.577:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278305][ T28] audit: type=1326 audit(1743322217.577:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278335][ T28] audit: type=1326 audit(1743322217.577:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278365][ T28] audit: type=1326 audit(1743322217.577:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278395][ T28] audit: type=1326 audit(1743322217.577:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.6.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f8e18d169 code=0x7ffc0000 [ 561.278426][ T28] audit: type=1400 audit(1743322217.907:610): avc: denied { read write } for pid=8791 comm="syz.8.2421" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 562.485414][ C1] net_ratelimit: 119412 callbacks suppressed [ 562.485441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.485478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.491412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.503117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 562.515138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.526813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.540116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.551768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.563558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.575291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 564.118963][ T8845] loop6: detected capacity change from 0 to 128 [ 564.571454][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 564.571474][ T28] audit: type=1400 audit(1743322230.977:627): avc: denied { map } for pid=8832 comm="syz.7.2431" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 564.625183][ T8838] __vm_enough_memory: pid: 8838, comm: syz.7.2431, no enough memory for the allocation [ 564.649352][ T8845] EXT4-fs (loop6): Test dummy encryption mode enabled [ 565.136222][ T8845] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 565.185710][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2432'. [ 565.590264][ T8845] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.495459][ C0] net_ratelimit: 133757 callbacks suppressed [ 567.495494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.514301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 567.526486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.538489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.550883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 567.562956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.574926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.587321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 567.599447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.611489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.634212][ T28] audit: type=1400 audit(1743322234.037:628): avc: denied { read } for pid=8855 comm="syz.8.2436" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 568.067430][ T28] audit: type=1400 audit(1743322234.037:629): avc: denied { open } for pid=8855 comm="syz.8.2436" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 568.342420][ T8862] xt_hashlimit: size too large, truncated to 1048576 [ 568.515701][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2436'. [ 569.029811][ T28] audit: type=1400 audit(1743322234.037:630): avc: denied { ioctl } for pid=8855 comm="syz.8.2436" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 570.449774][ T8869] loop8: detected capacity change from 0 to 512 [ 570.477595][ T2383] usb 7-1: config 0 has no interface number 0 [ 570.483535][ T2383] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.438735][ T28] audit: type=1400 audit(1743322234.737:631): avc: denied { create } for pid=8860 comm="syz.7.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 571.449098][ T2383] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.190351][ T8869] EXT4-fs (loop8): 1 orphan inode deleted [ 572.248143][ T2383] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 572.367140][ T8869] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 572.505409][ C1] net_ratelimit: 131223 callbacks suppressed [ 572.505433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.505476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 572.511405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.523128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.535485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.547072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.558758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.570646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 572.582452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.594496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.897903][ T2383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.341308][ T8869] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.592020][ T2383] usb 7-1: config 0 descriptor?? [ 577.515426][ C0] net_ratelimit: 138467 callbacks suppressed [ 577.515452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.515500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.521423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.534136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.545946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 577.558085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.569708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.581907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.595468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.609832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.716208][ T2383] usb 7-1: can't set config #0, error -71 [ 580.907843][ T28] audit: type=1400 audit(1743322235.477:632): avc: denied { name_bind } for pid=8860 comm="syz.7.2437" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 582.525426][ C0] net_ratelimit: 138303 callbacks suppressed [ 582.525450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.525625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.531501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 582.543554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.555018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.567073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.578601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.590581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.601989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 582.614028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.535441][ C0] net_ratelimit: 89556 callbacks suppressed [ 587.535468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.535722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.541339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 587.553401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.564859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.576948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.588417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.600346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.611942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 587.624565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.545449][ C0] net_ratelimit: 89736 callbacks suppressed [ 592.545476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.545642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.551339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 592.563612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.574984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.587033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.598526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.610445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.621940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 592.634376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.555441][ C1] net_ratelimit: 89306 callbacks suppressed [ 597.555467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.555495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.561530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.573112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.585023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.596521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 597.608735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.620140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.632161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.643977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.458002][ T28] audit: type=1400 audit(1743322235.487:633): avc: denied { node_bind } for pid=8860 comm="syz.7.2437" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 602.565437][ C0] net_ratelimit: 85117 callbacks suppressed [ 602.565462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.565511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.576625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.599040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.623353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 602.641802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.662380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.678129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.694212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.710926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.575445][ C0] net_ratelimit: 79551 callbacks suppressed [ 607.575469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 607.575613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.581302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.593814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.605321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.618779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.630357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 607.642281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.653787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.665783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.585399][ C1] net_ratelimit: 85421 callbacks suppressed [ 612.585425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.585462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.591710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.603277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.615319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.626786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 612.638760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.653134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.665776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.677514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.237442][ T2383] usb 7-1: USB disconnect, device number 33 [ 617.595414][ C1] net_ratelimit: 88068 callbacks suppressed [ 617.595439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.595460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.601526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.613111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.625030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.636529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 617.648556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.660094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.672441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.683917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.605401][ C0] net_ratelimit: 89128 callbacks suppressed [ 622.605426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 622.605612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.612124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.624206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.636074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.648145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.659840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 622.671834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.683325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.695552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.615401][ C0] net_ratelimit: 92944 callbacks suppressed [ 627.615426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 627.615537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.621245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.633332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.644867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.656753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.668253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 627.680295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.691743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.703823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.625427][ C0] net_ratelimit: 91361 callbacks suppressed [ 632.625453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.625688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.631504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.644811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.657239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 632.669431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.681400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.693744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.705517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.717613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.635402][ C1] net_ratelimit: 93792 callbacks suppressed [ 637.635427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.635470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.641492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.653085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 637.665058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.676530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.688681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.700208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.712133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.723634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 642.645407][ C0] net_ratelimit: 92416 callbacks suppressed [ 642.645431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 642.645442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.645699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.651271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.663315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.674831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.686743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.698249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 642.710159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.721772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.655403][ C0] net_ratelimit: 91839 callbacks suppressed [ 647.655426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.655576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.661260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 647.673345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.684803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.696847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.708363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.720267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.731768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 647.743878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.665404][ C0] net_ratelimit: 92385 callbacks suppressed [ 652.665428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.665451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.671282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 652.683323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.694811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.706863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.718370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.730264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.741783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 652.753775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.675377][ C0] net_ratelimit: 93445 callbacks suppressed [ 657.675404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.675497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.681262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.693263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.704702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 657.716732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.728184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.740227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.751750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.763675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.685396][ C0] net_ratelimit: 95577 callbacks suppressed [ 662.685421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 662.685581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.691221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.703298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.714814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.726689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.738676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 662.750662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.762167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.774247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.695398][ C0] net_ratelimit: 92554 callbacks suppressed [ 667.695423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 667.695631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.701219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.713370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.724901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.736771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.748319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 667.760335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.771919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.783933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.705405][ C0] net_ratelimit: 93769 callbacks suppressed [ 672.705429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.705453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.711239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 672.723290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.734757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.746871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.758374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.770266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.781791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 672.793759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.715405][ C1] net_ratelimit: 94228 callbacks suppressed [ 677.715428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.715483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.721451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.733009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 677.744992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.756500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.768512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.780054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.791946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.803462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 682.725431][ C0] net_ratelimit: 94335 callbacks suppressed [ 682.725455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.725550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.731297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 682.743401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.754825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.766899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.778380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.790278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.801786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 682.813835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.735372][ C1] net_ratelimit: 92545 callbacks suppressed [ 687.735397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.735410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 687.735466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.741454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.752997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.765019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.776494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 687.788447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.800029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.811948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.745351][ C0] net_ratelimit: 93233 callbacks suppressed [ 692.745373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.745420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.751216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 692.763346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.774761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.786742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.798301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.810184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.821723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 692.833709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.059790][ T29] INFO: task kworker/u4:5:360 blocked for more than 122 seconds. [ 697.070023][ T29] Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 697.755411][ C0] net_ratelimit: 93898 callbacks suppressed [ 697.755435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.755543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.761259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 697.773270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.784790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.796814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.808368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.820236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.831775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 697.843746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.067119][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.075772][ T29] task:kworker/u4:5 state:D stack:20104 pid:360 ppid:2 flags:0x00004000 [ 698.084758][ T29] Workqueue: events_unbound quota_release_workfn [ 698.091081][ T29] Call Trace: [ 698.094124][ T29] [ 698.096943][ T29] __schedule+0xcb5/0x1560 [ 698.101153][ T29] ? __virt_addr_valid+0x242/0x2f0 [ 698.106123][ T29] ? __sched_text_start+0x8/0x8 [ 698.110785][ T29] ? kthread_data+0x53/0xc0 [ 698.115124][ T29] ? wq_worker_sleeping+0x64/0x290 [ 698.120121][ T29] schedule+0xc3/0x180 [ 698.123978][ T29] schedule_timeout+0xa9/0x380 [ 698.128605][ T29] ? console_conditional_schedule+0x10/0x10 [ 698.134309][ T29] ? delayed_work_timer_fn+0x80/0x80 [ 698.139453][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 698.144115][ T29] wait_for_common+0x39a/0x640 [ 698.148742][ T29] ? wait_for_completion+0x20/0x20 [ 698.153658][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 698.158716][ T29] ? sched_clock+0x9/0x10 [ 698.162859][ T29] ? sched_clock_cpu+0x71/0x2b0 [ 698.167581][ T29] wait_for_completion+0x18/0x20 [ 698.172320][ T29] __synchronize_srcu+0x19c/0x230 [ 698.177214][ T29] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 698.182473][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 698.188052][ T29] ? rcu_test_sync_prims+0x10/0x10 [ 698.192985][ T29] ? __kasan_check_write+0x14/0x20 [ 698.197944][ T29] ? _raw_spin_lock+0xa4/0x1b0 [ 698.202522][ T29] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 698.207936][ T29] synchronize_srcu+0x1d2/0x1f0 [ 698.212592][ T29] quota_release_workfn+0x12e/0x630 [ 698.217651][ T29] ? dquot_quota_disable+0x3a0/0x3a0 [ 698.222749][ T29] ? __kasan_check_read+0x11/0x20 [ 698.227628][ T29] ? read_word_at_a_time+0x12/0x20 [ 698.232557][ T29] ? strscpy+0x9c/0x260 [ 698.236585][ T29] process_one_work+0x73d/0xcb0 [ 698.241239][ T29] worker_thread+0xa60/0x1260 [ 698.245774][ T29] kthread+0x26d/0x300 [ 698.249742][ T29] ? worker_clr_flags+0x1a0/0x1a0 [ 698.254604][ T29] ? kthread_blkcg+0xd0/0xd0 [ 698.259059][ T29] ret_from_fork+0x1f/0x30 [ 698.263287][ T29] [ 702.765355][ C0] net_ratelimit: 93585 callbacks suppressed [ 702.765381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.765415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.771190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 702.783254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.794713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.806977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.818490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.830429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.841904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 702.854001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.378292][ T29] INFO: task kworker/u4:6:387 blocked for more than 129 seconds. [ 703.952324][ T29] Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 703.959606][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.968099][ T29] task:kworker/u4:6 state:D stack:20104 pid:387 ppid:2 flags:0x00004000 [ 703.977095][ T29] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 703.983927][ T29] Call Trace: [ 703.987183][ T29] [ 703.989919][ T29] __schedule+0xcb5/0x1560 [ 703.994174][ T29] ? __sched_text_start+0x8/0x8 [ 703.998878][ T29] ? kthread_data+0x53/0xc0 [ 704.003198][ T29] ? wq_worker_sleeping+0x64/0x290 [ 704.008165][ T29] schedule+0xc3/0x180 [ 704.012062][ T29] schedule_timeout+0xa9/0x380 [ 704.016698][ T29] ? console_conditional_schedule+0x10/0x10 [ 704.022396][ T29] ? _raw_spin_trylock+0xcd/0x1a0 [ 704.027272][ T29] ? __lock_text_start+0x8/0x8 [ 704.031841][ T29] wait_for_common+0x39a/0x640 [ 704.036463][ T29] ? wait_for_completion+0x20/0x20 [ 704.041527][ T29] ? save_fpregs_to_fpstate+0x18f/0x220 [ 704.046947][ T29] wait_for_completion+0x18/0x20 [ 704.051676][ T29] __synchronize_srcu+0x19c/0x230 [ 704.056553][ T29] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 704.061841][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 704.067404][ T29] ? rcu_test_sync_prims+0x10/0x10 [ 704.072338][ T29] ? __kasan_check_write+0x14/0x20 [ 704.077564][ T29] ? _raw_spin_lock+0xa4/0x1b0 [ 704.082135][ T29] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 704.087537][ T29] synchronize_srcu+0x1d2/0x1f0 [ 704.092205][ T29] fsnotify_mark_destroy_workfn+0x142/0x340 [ 704.097974][ T29] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 704.104096][ T29] ? __kasan_check_read+0x11/0x20 [ 704.109099][ T29] ? read_word_at_a_time+0x12/0x20 [ 704.114029][ T29] ? strscpy+0x9c/0x260 [ 704.118036][ T29] process_one_work+0x73d/0xcb0 [ 704.122711][ T29] worker_thread+0xa60/0x1260 [ 704.127241][ T29] kthread+0x26d/0x300 [ 704.131125][ T29] ? worker_clr_flags+0x1a0/0x1a0 [ 704.136003][ T29] ? kthread_blkcg+0xd0/0xd0 [ 704.140414][ T29] ret_from_fork+0x1f/0x30 [ 704.144668][ T29] [ 707.775358][ C0] net_ratelimit: 91195 callbacks suppressed [ 707.775385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 707.775394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.775671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.781188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.793365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.804900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.816910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.828376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 707.840387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.851953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.785363][ C1] net_ratelimit: 96309 callbacks suppressed [ 712.785388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.785416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.791529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.803075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 712.815094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.826566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.838615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.850123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.862040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.873536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 717.795352][ C0] net_ratelimit: 94562 callbacks suppressed [ 717.795375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.795520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.801301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 717.813368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.824818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.836877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.848417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.860400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.871821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 717.883816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.805368][ C0] net_ratelimit: 95384 callbacks suppressed [ 722.805393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 722.805576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.811206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.823260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.834952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.846856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.858398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 722.870493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.881812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.893849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.677577][ T29] INFO: task syz-executor:471 blocked for more than 130 seconds. [ 724.685144][ T29] Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 726.375763][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.384291][ T29] task:syz-executor state:D stack:21040 pid:471 ppid:465 flags:0x00004000 [ 726.393410][ T29] Call Trace: [ 726.396449][ T29] [ 726.399209][ T29] __schedule+0xcb5/0x1560 [ 726.403463][ T29] ? __sched_text_start+0x8/0x8 [ 726.408170][ T29] ? __update_idle_core+0x310/0x310 [ 726.413184][ T29] schedule+0xc3/0x180 [ 726.417130][ T29] schedule_timeout+0xa9/0x380 [ 726.421687][ T29] ? __kasan_check_write+0x14/0x20 [ 726.426653][ T29] ? console_conditional_schedule+0x10/0x10 [ 726.432369][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x704/0x9e0 [ 726.438806][ T29] wait_for_common+0x39a/0x640 [ 726.443390][ T29] ? wait_for_completion+0x20/0x20 [ 726.448377][ T29] ? kasan_addr_to_slab+0xd/0x80 [ 726.453109][ T29] ? preempt_schedule_thunk+0x16/0x18 [ 726.458337][ T29] wait_for_completion+0x18/0x20 [ 726.463088][ T29] __flush_work+0x5be/0x710 [ 726.467459][ T29] ? flush_work+0x20/0x20 [ 726.471594][ T29] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 726.477262][ T29] ? move_linked_works+0x260/0x260 [ 726.482184][ T29] ? __flush_workqueue+0x135b/0x15a0 [ 726.487323][ T29] ? __kasan_check_read+0x11/0x20 [ 726.492164][ T29] flush_delayed_work+0x87/0xb0 [ 726.496935][ T29] dquot_writeback_dquots+0xef/0xa90 [ 726.501971][ T29] ? rcu_work_rcufn+0x50/0x50 [ 726.506523][ T29] ? dqput+0x450/0x450 [ 726.510386][ T29] ? __writeback_inodes_sb_nr+0x2d5/0x370 [ 726.515971][ T29] ? _raw_spin_trylock_bh+0x190/0x190 [ 726.521155][ T29] ext4_sync_fs+0x14b/0x5f0 [ 726.525512][ T29] ? ext4_put_super+0xd60/0xd60 [ 726.530177][ T29] ? get_nr_dirty_inodes+0x2be/0x2f0 [ 726.535301][ T29] sync_filesystem+0xfa/0x250 [ 726.539813][ T29] ? shrink_dcache_for_umount+0xa9/0x120 [ 726.545283][ T29] generic_shutdown_super+0x6e/0x370 [ 726.550405][ T29] kill_block_super+0x7e/0xe0 [ 726.554913][ T29] deactivate_locked_super+0xad/0x110 [ 726.560176][ T29] deactivate_super+0xbe/0xf0 [ 726.564634][ T29] cleanup_mnt+0x485/0x510 [ 726.568929][ T29] ? user_path_at_empty+0x14e/0x1a0 [ 726.573928][ T29] __cleanup_mnt+0x19/0x20 [ 726.578196][ T29] task_work_run+0x24d/0x2e0 [ 726.582600][ T29] ? task_work_cancel+0x2e0/0x2e0 [ 726.587490][ T29] ? __x64_sys_umount+0x122/0x170 [ 726.592320][ T29] exit_to_user_mode_loop+0x94/0xa0 [ 726.597376][ T29] exit_to_user_mode_prepare+0x5a/0xa0 [ 726.602648][ T29] syscall_exit_to_user_mode+0x26/0x130 [ 726.608056][ T29] do_syscall_64+0x47/0xb0 [ 726.612368][ T29] ? clear_bhb_loop+0x55/0xb0 [ 726.616907][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.622623][ T29] RIP: 0033:0x7f638bb8e497 [ 726.626897][ T29] RSP: 002b:00007ffe09c6d578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 726.635110][ T29] RAX: 0000000000000000 RBX: 00007f638bc0e08c RCX: 00007f638bb8e497 [ 726.642949][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe09c6d630 [ 726.650766][ T29] RBP: 00007ffe09c6d630 R08: 0000000000000000 R09: 0000000000000000 [ 726.658566][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe09c6e6c0 [ 726.666635][ T29] R13: 00007f638bc0e08c R14: 000000000008b59c R15: 00007ffe09c6e700 [ 726.674432][ T29] [ 727.815379][ C0] net_ratelimit: 91032 callbacks suppressed [ 727.815403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 727.815620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.821207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.833254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.844873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.856769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.868296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 727.880320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.891796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.903890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.825390][ C0] net_ratelimit: 92808 callbacks suppressed [ 732.825415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.825504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.831259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 732.843294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.854801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.866821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.878576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.890429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.901958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 732.913985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.835344][ C0] net_ratelimit: 94300 callbacks suppressed [ 737.835369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 737.835515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.841176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.853263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.864766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.876638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.888189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 737.905504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.911691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.923742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.845380][ C1] net_ratelimit: 95746 callbacks suppressed [ 742.845403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.845453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 742.851445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.862998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.875019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.886527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.898463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.909965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 742.922030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.933671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.855343][ C0] net_ratelimit: 93644 callbacks suppressed [ 747.855365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.855630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.861233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.873164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.884671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 747.896699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.908146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.920440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.931862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.943766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.865350][ C1] net_ratelimit: 92406 callbacks suppressed [ 752.865375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.865392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.865496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.871426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.883132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 752.895145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.906740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.918699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.930281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.942274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.875354][ C0] net_ratelimit: 93355 callbacks suppressed [ 757.875378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.875554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.881240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.893181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.904768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 757.916769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.928188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.940230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.951718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.963635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.885363][ C0] net_ratelimit: 92935 callbacks suppressed [ 762.885387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.885619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.891272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 762.903335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.914819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.926849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.938309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.950219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.961739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 762.973811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.895411][ C0] net_ratelimit: 91051 callbacks suppressed [ 767.895434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.895668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.901253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 767.913528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.924891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.936957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.948472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.960464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.971973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 767.983962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.905362][ C0] net_ratelimit: 91814 callbacks suppressed [ 772.905384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 772.905399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.905681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.911180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.923236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.934778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.946717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.958194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 772.970126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.981691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.748603][ T29] INFO: task kworker/u4:9:7358 blocked for more than 200 seconds. [ 775.707964][ T29] Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 775.715190][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.732784][ T29] task:kworker/u4:9 state:D stack:24704 pid:7358 ppid:2 flags:0x00004000 [ 775.741878][ T29] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 775.749178][ T29] Call Trace: [ 775.752268][ T29] [ 775.755042][ T29] __schedule+0xcb5/0x1560 [ 775.759330][ T29] ? __virt_addr_valid+0x242/0x2f0 [ 775.764243][ T29] ? __sched_text_start+0x8/0x8 [ 775.768947][ T29] ? kthread_data+0x53/0xc0 [ 775.773267][ T29] ? wq_worker_sleeping+0x64/0x290 [ 775.778232][ T29] schedule+0xc3/0x180 [ 775.782118][ T29] schedule_timeout+0xa9/0x380 [ 775.786766][ T29] ? console_conditional_schedule+0x10/0x10 [ 775.792451][ T29] ? delayed_work_timer_fn+0x80/0x80 [ 775.797588][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 775.802256][ T29] wait_for_common+0x39a/0x640 [ 775.806874][ T29] ? wait_for_completion+0x20/0x20 [ 775.811810][ T29] wait_for_completion+0x18/0x20 [ 775.816617][ T29] __synchronize_srcu+0x19c/0x230 [ 775.821438][ T29] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 775.826749][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 775.832284][ T29] ? rcu_test_sync_prims+0x10/0x10 [ 775.837252][ T29] ? __kasan_check_write+0x14/0x20 [ 775.842177][ T29] ? _raw_spin_lock+0xa4/0x1b0 [ 775.846820][ T29] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 775.852174][ T29] synchronize_srcu+0x1d2/0x1f0 [ 775.856868][ T29] fsnotify_connector_destroy_workfn+0x44/0xa0 [ 775.862840][ T29] process_one_work+0x73d/0xcb0 [ 775.867547][ T29] worker_thread+0xa60/0x1260 [ 775.872049][ T29] kthread+0x26d/0x300 [ 775.875979][ T29] ? worker_clr_flags+0x1a0/0x1a0 [ 775.880804][ T29] ? kthread_blkcg+0xd0/0xd0 [ 775.885229][ T29] ret_from_fork+0x1f/0x30 [ 775.889517][ T29] [ 777.915346][ C0] net_ratelimit: 87998 callbacks suppressed [ 777.915368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 777.915607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.921158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.933274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.944755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.956649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.968171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 777.980178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.991650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.003717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.925375][ C0] net_ratelimit: 91304 callbacks suppressed [ 782.925399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 782.925428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.931194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.943257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.954799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.966717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.978192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 782.990177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.001686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.013717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.935363][ C0] net_ratelimit: 93622 callbacks suppressed [ 787.935388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 787.935536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.941180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.953253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.964780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.976654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.988186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 788.000184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.011680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.023709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.945333][ C0] net_ratelimit: 92467 callbacks suppressed [ 792.945357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.945475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.951195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 792.963220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.974751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.986724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.998277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.010168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.021768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 793.034068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.955309][ C1] net_ratelimit: 94694 callbacks suppressed [ 797.955332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.955359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.961378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.972917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 797.984895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.996532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.008572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.020113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.032077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.043599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 801.108349][ T29] NMI backtrace for cpu 1 [ 801.112522][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 801.121980][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.131877][ T29] Call Trace: [ 801.135009][ T29] [ 801.137775][ T29] dump_stack_lvl+0x151/0x1b7 [ 801.142290][ T29] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 801.147585][ T29] dump_stack+0x15/0x18 [ 801.151574][ T29] nmi_cpu_backtrace+0x2e4/0x2f0 [ 801.156350][ T29] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 801.162341][ T29] ? sched_show_task+0x3e2/0x620 [ 801.167117][ T29] ? nmi_trigger_cpumask_backtrace+0x10f/0x3b0 [ 801.173101][ T29] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 801.179004][ T29] nmi_trigger_cpumask_backtrace+0x196/0x3b0 [ 801.184819][ T29] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 801.190724][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 801.196448][ T29] watchdog+0xdb0/0xf20 [ 801.200442][ T29] ? __kasan_check_write+0x14/0x20 [ 801.205399][ T29] ? hungtask_pm_notify+0x50/0x50 [ 801.210248][ T29] ? __kasan_check_read+0x11/0x20 [ 801.215105][ T29] ? __kthread_parkme+0x12d/0x180 [ 801.219972][ T29] kthread+0x26d/0x300 [ 801.223874][ T29] ? hungtask_pm_notify+0x50/0x50 [ 801.228732][ T29] ? kthread_blkcg+0xd0/0xd0 [ 801.233164][ T29] ret_from_fork+0x1f/0x30 [ 801.237417][ T29] [ 801.242853][ T29] Sending NMI from CPU 1 to CPUs 0: [ 801.250543][ C0] NMI backtrace for cpu 0 [ 801.250557][ C0] CPU: 0 PID: 8845 Comm: syz.6.2434 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 801.250578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.250589][ C0] RIP: 0010:update_stack_state+0x345/0x460 [ 801.250620][ C0] Code: 00 00 48 8b 45 d0 4c 8d 70 38 4c 89 f0 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 44 85 00 <48> 8b 45 c0 49 89 06 48 8b 4d 90 42 80 3c 39 00 48 8b 5d c8 4c 8b [ 801.250635][ C0] RSP: 0018:ffffc90000006b10 EFLAGS: 00000246 [ 801.250652][ C0] RAX: 1ffff92000000d93 RBX: ffffc90000006c88 RCX: ffffc900000074c0 [ 801.250667][ C0] RDX: 1ffff92000000d8e RSI: ffffc900000074b0 RDI: ffffc90000006cb8 [ 801.250681][ C0] RBP: ffffc90000006bc8 R08: ffffc90000006d48 R09: 000000000000000a [ 801.250694][ C0] R10: ffffc90000006d50 R11: dffffc0000000001 R12: 1ffff92000000d94 [ 801.250708][ C0] R13: 0000000000000000 R14: ffffc90000006c98 R15: dffffc0000000000 [ 801.250722][ C0] FS: 00007f2f8f0306c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 801.250739][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.250753][ C0] CR2: 00007f9a060d56e8 CR3: 000000012fa3b000 CR4: 00000000003506b0 [ 801.250770][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.250781][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 801.250793][ C0] Call Trace: [ 801.250799][ C0] [ 801.250805][ C0] ? show_regs+0x58/0x60 [ 801.250825][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 801.250844][ C0] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 801.250865][ C0] ? update_stack_state+0x345/0x460 [ 801.250887][ C0] ? update_stack_state+0x345/0x460 [ 801.250909][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 801.250931][ C0] ? nmi_handle+0xa7/0x280 [ 801.250951][ C0] ? update_stack_state+0x345/0x460 [ 801.250973][ C0] ? default_do_nmi+0x69/0x160 [ 801.250999][ C0] ? exc_nmi+0xad/0x100 [ 801.251024][ C0] ? end_repeat_nmi+0x16/0x31 [ 801.251043][ C0] ? update_stack_state+0x345/0x460 [ 801.251066][ C0] ? update_stack_state+0x345/0x460 [ 801.251089][ C0] ? update_stack_state+0x345/0x460 [ 801.251111][ C0] [ 801.251117][ C0] [ 801.251127][ C0] unwind_next_frame+0x3cb/0x700 [ 801.251151][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 801.251171][ C0] arch_stack_walk+0x10d/0x140 [ 801.251196][ C0] ? __netif_receive_skb+0x1c6/0x530 [ 801.251216][ C0] stack_trace_save+0x113/0x1c0 [ 801.251235][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 801.251254][ C0] ? ip6_pol_route+0x100e/0x14a0 [ 801.251274][ C0] ? ip6_pol_route+0x583/0x14a0 [ 801.251293][ C0] ? kfree_skbmem+0x104/0x170 [ 801.251317][ C0] ? kfree_skbmem+0x104/0x170 [ 801.251333][ C0] kasan_set_track+0x4b/0x70 [ 801.251358][ C0] ? kasan_set_track+0x4b/0x70 [ 801.251381][ C0] ? kasan_save_free_info+0x2b/0x40 [ 801.251398][ C0] ? ____kasan_slab_free+0x131/0x180 [ 801.251423][ C0] ? __kasan_slab_free+0x11/0x20 [ 801.251448][ C0] ? kmem_cache_free+0x291/0x560 [ 801.251467][ C0] ? kfree_skbmem+0x104/0x170 [ 801.251483][ C0] ? kfree_skb_reason+0xdb/0x250 [ 801.251499][ C0] ? ip6_mc_input+0x533/0x710 [ 801.251521][ C0] ? ip6_rcv_finish+0x186/0x350 [ 801.251544][ C0] ? ipv6_rcv+0xeb/0x270 [ 801.251565][ C0] ? __netif_receive_skb+0x1c6/0x530 [ 801.251593][ C0] ? ip6_route_input+0x242/0xc50 [ 801.251612][ C0] kasan_save_free_info+0x2b/0x40 [ 801.251630][ C0] ____kasan_slab_free+0x131/0x180 [ 801.251656][ C0] __kasan_slab_free+0x11/0x20 [ 801.251680][ C0] kmem_cache_free+0x291/0x560 [ 801.251700][ C0] ? kfree_skbmem+0x104/0x170 [ 801.251717][ C0] kfree_skbmem+0x104/0x170 [ 801.251733][ C0] ? ip6_mc_input+0x533/0x710 [ 801.251756][ C0] kfree_skb_reason+0xdb/0x250 [ 801.251771][ C0] ? ip6_mc_input+0x524/0x710 [ 801.251794][ C0] ip6_mc_input+0x533/0x710 [ 801.251819][ C0] ? ip6_input_finish+0x1b0/0x1b0 [ 801.251841][ C0] ? ip6_rcv_core+0xe19/0x13e0 [ 801.251866][ C0] ip6_rcv_finish+0x186/0x350 [ 801.251889][ C0] ipv6_rcv+0xeb/0x270 [ 801.251911][ C0] ? ip6_rcv_finish+0x350/0x350 [ 801.251934][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 801.251956][ C0] ? br_dev_queue_push_xmit+0x595/0x730 [ 801.251974][ C0] ? __napi_poll+0xbe/0x5c0 [ 801.251989][ C0] ? net_rx_action+0x595/0xdd0 [ 801.252007][ C0] ? __do_softirq+0xb/0xd [ 801.252024][ C0] ? __local_bh_enable_ip+0x75/0x80 [ 801.252045][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 801.252070][ C0] ? tcp_metrics_flush_all+0x1b1/0x210 [ 801.252096][ C0] ? tcp_net_metrics_exit_batch+0x10/0x20 [ 801.252123][ C0] ? ip6_rcv_finish+0x350/0x350 [ 801.252146][ C0] __netif_receive_skb+0x1c6/0x530 [ 801.252163][ C0] ? do_syscall_64+0x3b/0xb0 [ 801.252185][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.252214][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 801.252233][ C0] ? br_forward_finish+0x136/0x360 [ 801.252250][ C0] ? br_dev_queue_push_xmit+0x730/0x730 [ 801.252269][ C0] netif_receive_skb+0xb0/0x480 [ 801.252293][ C0] ? enqueue_to_backlog+0x9d0/0x9d0 [ 801.252320][ C0] ? __br_forward+0x473/0x5b0 [ 801.252336][ C0] ? br_multicast_has_router_adjacent+0x240/0x240 [ 801.252360][ C0] ? br_forward+0x360/0x360 [ 801.252376][ C0] br_pass_frame_up+0x223/0x480 [ 801.252395][ C0] ? br_multicast_is_router+0x190/0x190 [ 801.252413][ C0] ? skb_clone+0x22c/0x380 [ 801.252431][ C0] ? br_flood+0x39d/0x420 [ 801.252448][ C0] br_handle_frame_finish+0x12a4/0x1660 [ 801.252467][ C0] ? unshare_nsproxy_namespaces+0x126/0x180 [ 801.252488][ C0] ? ksys_unshare+0x545/0x980 [ 801.252514][ C0] ? brport_get_ownership+0x80/0x80 [ 801.252536][ C0] br_handle_frame+0x984/0x1070 [ 801.252556][ C0] ? br_get_rx_handler+0x20/0x20 [ 801.252575][ C0] ? kfree_skbmem+0x104/0x170 [ 801.252592][ C0] ? br_get_rx_handler+0x20/0x20 [ 801.252610][ C0] __netif_receive_skb_core+0x1264/0x43d0 [ 801.252633][ C0] ? qdisc_run+0x260/0x260 [ 801.252649][ C0] ? ipv6_rcv+0xeb/0x270 [ 801.252673][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 801.252695][ C0] ? enqueue_timer+0x1b0/0x480 [ 801.252722][ C0] __netif_receive_skb+0x11c/0x530 [ 801.252751][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 801.252771][ C0] ? __kasan_check_write+0x14/0x20 [ 801.252789][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 801.252812][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 801.252839][ C0] process_backlog+0x32c/0x630 [ 801.252860][ C0] __napi_poll+0xbe/0x5c0 [ 801.252878][ C0] net_rx_action+0x595/0xdd0 [ 801.252900][ C0] ? net_tx_action+0x560/0x560 [ 801.252920][ C0] ? irqtime_account_irq+0x79/0x260 [ 801.252949][ C0] handle_softirqs+0x1db/0x650 [ 801.252973][ C0] __do_softirq+0xb/0xd [ 801.252989][ C0] do_softirq+0xf6/0x150 [ 801.253009][ C0] [ 801.253015][ C0] [ 801.253021][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 801.253042][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 801.253066][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 801.253100][ C0] __local_bh_enable_ip+0x75/0x80 [ 801.253122][ C0] _raw_spin_unlock_bh+0x50/0x60 [ 801.253145][ C0] tcp_metrics_flush_all+0x1b1/0x210 [ 801.253172][ C0] ? tcp_net_metrics_init+0x150/0x150 [ 801.253199][ C0] tcp_net_metrics_exit_batch+0x10/0x20 [ 801.253253][ C0] setup_net+0x966/0xd60 [ 801.253279][ C0] ? copy_net_ns+0x5b0/0x5b0 [ 801.253335][ C0] ? __kasan_kmalloc+0x9c/0xb0 [ 801.253362][ C0] copy_net_ns+0x35f/0x5b0 [ 801.253388][ C0] create_new_namespaces+0x416/0x670 [ 801.253411][ C0] unshare_nsproxy_namespaces+0x126/0x180 [ 801.253443][ C0] ksys_unshare+0x545/0x980 [ 801.253469][ C0] ? sighand_ctor+0x60/0x60 [ 801.253492][ C0] ? fpregs_restore_userregs+0x130/0x290 [ 801.253513][ C0] ? switch_fpu_return+0xe/0x10 [ 801.253533][ C0] __x64_sys_unshare+0x38/0x40 [ 801.253557][ C0] x64_sys_call+0x728/0x9a0 [ 801.253577][ C0] do_syscall_64+0x3b/0xb0 [ 801.253599][ C0] ? clear_bhb_loop+0x55/0xb0 [ 801.253615][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.253642][ C0] RIP: 0033:0x7f2f8e18d169 [ 801.253657][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.253672][ C0] RSP: 002b:00007f2f8f030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 801.253690][ C0] RAX: ffffffffffffffda RBX: 00007f2f8e3a5fa0 RCX: 00007f2f8e18d169 [ 801.253704][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 801.253715][ C0] RBP: 00007f2f8e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 801.253727][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.253738][ C0] R13: 0000000000000000 R14: 00007f2f8e3a5fa0 R15: 00007fffb7c5d1b8 [ 801.253755][ C0] [ 802.965322][ C0] net_ratelimit: 90419 callbacks suppressed [ 802.965346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.965450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.971179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.983235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.994701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 803.006726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.018301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.030312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.041807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.053794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.975344][ C0] net_ratelimit: 91830 callbacks suppressed [ 807.975367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.975421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.981260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.993143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.004717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 808.016732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.028217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.040222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.051718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.063617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.985373][ C0] net_ratelimit: 93941 callbacks suppressed [ 812.985396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.985480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.991208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 813.003253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.014757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.026761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.038300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.050182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.061798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 813.073870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.995309][ C0] net_ratelimit: 97799 callbacks suppressed [ 817.995332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.995526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.001173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.013105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.024619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 818.036587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.048087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.060372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.071892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.083817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.005296][ C0] net_ratelimit: 98285 callbacks suppressed [ 823.005320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 823.005432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.011207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.023251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.034807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.046682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.058285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 823.070262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.081776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.093806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.015304][ C0] net_ratelimit: 96598 callbacks suppressed [ 828.015332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 828.015455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.021121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.033229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.044791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.056655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.068146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 828.080200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.091624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.103687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.025315][ C0] net_ratelimit: 96568 callbacks suppressed [ 833.025339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.025420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.031159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 833.043318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.054762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.066820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.078327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.090407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.101914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 833.113885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.035299][ C0] net_ratelimit: 93290 callbacks suppressed [ 838.035322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.035438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.041164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.053125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.064760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 838.076715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.088290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.100318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.112188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.124033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.045312][ C0] net_ratelimit: 94942 callbacks suppressed [ 843.045337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.045609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.051185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.063140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.074701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 843.086727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.098121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.110175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.121708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.133585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 845.949439][ T28] audit: type=1400 audit(1743322512.357:634): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.055301][ C0] net_ratelimit: 93018 callbacks suppressed [ 848.055324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 848.055484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.061151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.073342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.084738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.096864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.108387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 848.120756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.132133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.144211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.065320][ C0] net_ratelimit: 97492 callbacks suppressed [ 853.065343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.065550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.071190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.083121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.094628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 853.106636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.118117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.130142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.141698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.153551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 855.448125][ T28] audit: type=1400 audit(1743322512.387:635): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.075340][ C0] net_ratelimit: 95486 callbacks suppressed [ 858.075363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.075410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.081291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 858.093305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.104820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.116833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.128365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.140257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.151777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 858.163775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.085298][ C0] net_ratelimit: 93032 callbacks suppressed [ 863.085321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.085461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.091165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 863.103230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.114783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.126755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.138253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.150142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.161849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 863.173908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.401357][ T360] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 867.515650][ T360] EXT4-fs error (device loop8): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 867.538031][ T28] audit: type=1400 audit(1743322512.387:636): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 868.095313][ C1] net_ratelimit: 94801 callbacks suppressed [ 868.095337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.095357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.101643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.113134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.125003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.136479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 868.148475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.159963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.172000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.183526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.241432][ T8845] EXT4-fs (loop6): unmounting filesystem. [ 868.250432][ T471] EXT4-fs (loop8): unmounting filesystem. [ 871.538760][ T28] audit: type=1400 audit(1743322512.387:637): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.105332][ C0] net_ratelimit: 91282 callbacks suppressed [ 873.105355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 873.105425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.111144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.123240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.135039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.146951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.158439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 873.170440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.181954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.193974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 877.797645][ T28] audit: type=1400 audit(1743322512.387:638): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 878.115281][ C0] net_ratelimit: 92421 callbacks suppressed [ 878.115304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.115356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.121145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 878.133174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.144683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.156693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.168226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.180185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.191657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 878.203662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)