last executing test programs: 6.183735402s ago: executing program 4 (id=359): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/124, 0x7c, 0x2b) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x4}, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x8003, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b001808003950323030302e4c"], 0x15) 5.59922006s ago: executing program 2 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 5.59204952s ago: executing program 2 (id=368): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@data_err_ignore}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x7ff) lseek(r0, 0x0, 0x3) 5.444797103s ago: executing program 2 (id=370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.309922044s ago: executing program 4 (id=372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.152172627s ago: executing program 4 (id=373): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x0) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r5 = syz_open_pts(r4, 0x42) dup3(r5, r4, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) 4.786125747s ago: executing program 4 (id=374): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.49988901s ago: executing program 2 (id=375): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x400) setresuid(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 3.968849254s ago: executing program 4 (id=376): r0 = syz_usb_connect(0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003c1000000c103470b21e540dabe9f695470e161eab05daf76310b51e4298031049bd41f7eb33b59b36fbdbbe46397f200deecd7b8b1b07d0b8681282f3b320b9303f3071db3339ae0574151b291780d308c892f400c937b4584c8dc125a78ef2fee67bae82d43d78df18f1703ec6ad9052ca5bc5f214db6657ac7b335649a80efe1aac6b1f306eb028b769e462262390ed1bf4d6d0094064afc2c2b17caa32d57c6c54714da22634c3f7684c1f95e106b2a6310318da1811b2332f794ba35b08b6e00000000"], 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0600270000ff"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x4}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) vmsplice(r6, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000280)="03", 0xfffffff2}, {&(0x7f0000000340)="8f", 0x1}], 0x4, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='t', 0x1) splice(r4, 0x0, r5, 0x0, 0xffffffe1, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r1], 0x0) 3.625257052s ago: executing program 2 (id=377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022220000009623130776940ef7070c00000016b8ef0a1a7083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 3.386550461s ago: executing program 0 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a00), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 3.069008388s ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001000000080007000000000008000800", @ANYRES32], 0x30}}, 0x0) 2.502342904s ago: executing program 1 (id=381): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.498266105s ago: executing program 0 (id=382): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/124, 0x7c, 0x2b) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x4}, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x8003, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b001808003950323030302e4c"], 0x15) 2.06968953s ago: executing program 3 (id=383): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000006f25f66a5fbb37186000000600"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) 1.931715262s ago: executing program 3 (id=384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_tid_address(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.568079001s ago: executing program 0 (id=385): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) creat(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.408185374s ago: executing program 0 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000580)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 1.255380187s ago: executing program 1 (id=387): syz_open_dev$usbfs(0x0, 0x0, 0x101301) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) chdir(0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0x0, 0x11012, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1.163762855s ago: executing program 0 (id=388): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2400000000000000000000000700000001071336ac1414aaac1414aaac1e080100000000000000001c000000000000000000000008000000", @ANYRES64=r3], 0x48}}], 0x1, 0x0) 1.108128519s ago: executing program 0 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "133afb57"}]}}, 0x0}, 0x0) 1.032815295s ago: executing program 3 (id=390): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) 787.441376ms ago: executing program 3 (id=391): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000885f74a100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) brk(0x0) creat(0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 772.083527ms ago: executing program 4 (id=392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf974a457bb636ff6}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='ext4_request_inode\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x4, 0x0, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', r4, 0x2f, 0xfe, 0x0, 0xf60, 0x3c, @empty, @mcast1, 0x8000, 0x10, 0x5, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0xee, &(0x7f00000006c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e208e7f49ad068c4ffce4c6b81fdb183acf730ddbf395346f7fd23f2e107b224e7ea1deb33c65c884689393c15d155a710eb972acd778cd33d3a8a9cf9000000003da8dd3898c315943f48ff06761880b65af57bfd7dea10c0dce889c610bdafcc160d7c453163670206007fcd28d20e282d7cc68ebcd3a55ba06daabdb5b6168158aea2d2282a4352edeeb08063fe2761a374c7000000000000ab1bfef70376eac0f39353b39851eaa5fb23ff14841cf4d1c270630347cd3d84471d69c55b82a1ccb4ce31ebb7f8b44400000000000000000000db78") prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) r7 = open(&(0x7f0000000400)='./bus\x00', 0x402100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000dc0)=@srh={0xc, 0xc, 0x4, 0x6, 0x0, 0x48, 0x4, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}, 0x68) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 757.223247ms ago: executing program 2 (id=393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @dev, @broadcast, @dev, @multicast2}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x204, 0x7fe2, 0x1, 0x1081, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9f0a94c3360a2d68cc09b77bdfa1056feb010018000000000000006c0000006c0000000600000004000000070000050200000005000000010000000400000005000000000000000c00000004000000030000000700000007000000040000000f0000000500000005000000050000000f000000030000000000a0160200000000000000070000000000305f00"/153], &(0x7f0000000300)=""/127, 0x8a, 0x7f, 0x0, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000018910000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "38af"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') r6 = syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7}, [@country_functional={0xe, 0x24, 0x7, 0xa, 0x1, [0x1d4, 0x3ff, 0x40, 0x8]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 344.854552ms ago: executing program 1 (id=394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @loopback}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000140)=0xe1) 344.046862ms ago: executing program 1 (id=395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 343.631782ms ago: executing program 1 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 312.116225ms ago: executing program 1 (id=397): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b80)={0x0, ""/256, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000014c0)={{}, r5, 0x4, @unused=[0x8000000000000001, 0x6, 0x0, 0x1f], @name="e6e7fcf4d71395a02890e3c4ead28bf949675b0b8b3bbce5648370cf4b27b991759e1e74619731c1fa8759d936246eaf20c94ee32ae0540ff4ff7a8ee798ff08c0b237c7a478a6412406f119d510f7cee93ed0fde6d38f43872e7821a94012ae8909501eac3aa3eeaa35a79561ae1d4889b153431768d7d3a270f7c04c49653f82ddf112984861605cef92e335bd3d46a4da82f977187867beb2f83fc9d857c3aca458404f211d94d4e329dc6b4e335576415489016faf2c3ae93a89fa5b3b958e2c821126dbae527a740df9b1a5f38604236ef1a31541dc8a6c5881cd9e27d3eb23b3485b5e24c53fb5e2cb9794495659cc8049d9fef148a32c40d25fea4e24ab653622aefe410ce9564334dadc4bcaf5b7086a45212a08ef7189a28216215815dc00dedf3c4a4249ea6a57b87f786897ba74074b1acf4b4f9678662f2654fdb0cfc65c49c268cb03c65255d2e523b95ec640edfd374b55f418fbb511ba4076eb40994867b7985753cd6239ba83f0b335341f7773066d5f3c23b0d8ff41d51cd76c851520894712235dff1e5c3f3e97d80a85f5a053eaff565429a213310c537647948d8e5af6690c42ffadf5f8a0d1b138373cbdefe856050085f216b43a4fb039eba3c2bf61e91f34ff0c7296a1afeb12ece5d38f7c83e2cb3d1a753e1aa47a0871cc355d2a57d40c8e6ad31ceb7148f5b0bbd40aeb25a4c8804587e1d109fa91c79ef2e9deaf0560602a4e31473773df7ab396ae06de19126d011a37b87540da0e5aadd842ddcde4a0ba5fe7619d106cd09843301c52660e01eb9400b17ab2a299076e2f865783a33efcbfb2dcb54406f16b0a8310a533e211c5e2f73909a05abb170093d773e6d7dce6889db38ade464c2583249dfcdbc49cad607315655153a8800fa4c867e696fce7fc6ef0f5e62650b0f675993b129eece7b65c47ff4a10d2296e46940f06476efeb20a00f59246447b601e9e7e988463a8ed07a62ada0256e47660dd938bad96e6a133fcc301047d020c9993035a16f44b55d8d6248cdd24852e35f0d97274ae72d8b285be7ffd02e9e4aec4e90acd4b58432be09816a036ffdcf19ec008cda4ec93bb36474a4e1bc90da115199840ea5b868ac6d563f5f1a18e45018153260c1fa70dbebd98afccb170eeb4cd4926656e5886ba4dc1c3b52bf668f65c0848d99880dd570b4632eb720660782983c3759de60dd6871b7a299f6a4b90f9fb7716eba12dc12ec0a9c501392a9cc7e56f7a5ffca9f5c867de252b62cd67e7e7461b552dd9dcac1fc55bf49adef017fe5efd2c0d516ba0c4ad829a725e409d0264f4bfcdd916a6c68afdcf61b99b892801fd80b9f381eb352c8fac33f975f24bfabe1e2cddbadb5ef979c9ebe4bf19b73c8595277650d43087199e8c53acb7615934518b9470af2e12d3c5d81935472d9c17c1a3e406fb05138a9043db17d12c097a4150e4fc92d04edcf3eec547a4c18dc0baa0ce0be78136f1dd896f8a344d984d5df1283ab2e750dbc4310bc8e44c9041815ec1b239c50a7c010f9b4689d9d790388b44f70243717f8936e28d9a24898e607952e7519d0dd0dd5be50f7e8ae4eec4cf2d444a66952dbf4e712aa90c687931235aa20209cf0473da7b0869ab862ad9465e4705353777685c7f20cdf5e932b055df538f4fb8cdc923213573ba3d5bbcdee906afa7b5198c1e8203747f132ad6b606e2b60082a1fe63392d816004e7851e6c7e6032825213d0d0f551b6e8a81e9241430c2f077a896eb34ca6afb4238203176b36fb80370f13258fbe554d41ebaed294babf013c410b6d293b8f9c9bc9cca4da9841498febaee259af5690b16848f70ed69426325354cc58d351577361ee9d920cebfe39fd771c72e44b42e4a336c74cc6900cd50afa22e43b58fa021a34e37f3236c7f360b0d38550562430d4636cdd0da379715b7bd4a29668c875221cb09a329fb9d7de7f70ffa7bf753f754e9603a8405737bc0550f27dd01887203fe1173bb2d68075618f49528f11f4835f00ab08c9ea636dd153db2916cf81b28eaceb99c13a2bd42a9b4bb93730da41c9b5702229d05583d8ae7cfeeb96ffcc047835a360c584db29ff0112f1db64e42f1334e53f57adb4e137b8dd97d23dd6f76fee62d28afb15675ecb4a05ace031d36fb72fe37d1aa96d53c291234a0d0ec4c4785b45bdd09dfba7f6513d8c1c54bd4e9010c5d1f6c2e424d4a4aa14aede4503d36dd00ef01d3813e50f0fd7ed9ad73f72c293059dc55123d3d33e7f946f38a7767bd863d1ae232f6912d76fbca6fe3ade8546c058363bc7a5b159d16680b860feae5b806d6020c3786323288316f027981b689197604d09a54d3f0cd3309d8848ebf81c1c69c7ce343e0d129ae5e2f11bdd452ed88f10a818222a204980c75603ee7a4974994f5fedffb2a430fb0575fd88a7921887ba3919d69d25f4a96f0e00d7b85790a3f50257886764c72226a67b3f7264385e563269ad981bb4aa427719691db6c00a340105aec6c98293b54bfe3e1ba0541e379dd186876068bf1ada1e5ee4fd0a382c70c842a54e20c315a77b79dde7bc33d62829575625123bc03baec29217e4c793da758a8d53324020890f03744b975ed184ba95c33259f0b243766d43ca14b0ebe0e22921806b4342cc62367d14a5dd1c4c6bf8ae7239884bd9d220cfd5ac07199477fb410b39ae77c73692d58ed3c12c7996c9bb978a72b48234841aa18f0e7cc0eef09024af0af8ea4fd9f7ce26178bac098d39102ccec8612451a5388f886396f86f475af5adeca564a668eca5ef6ef2f656c828c64cac9fa89d427e7097f8b9e1d84cdd9a434072b7402fef1395f3e87f27a1ef8506043ee12e15f3d99aed9f84f9be8d9e14abed7fe3548123925d0f2a1b7d487c1040a1e4c07846747eba825708b662a132758bfc482f3980e3e7a86fb3d8a41a243c4a4bdb3f61c2e533d83a1a32ba09424ff521ed1a40ccc5fe4bb70c5cca292aaf0eebe28e6f60ffbd9ccebf41a4632c606a725aea5d748204ad7106732e8e2f08ba27a7f34db2a084139da885cbc6f7d6dbe998f1c597902bed39210ff0e97fb24a3406a1c5ac0bd51289a5a1a83262b12645c789b767e03250932d702593e7b16f66283dc97d4a47f4bee0fcf5b62b08a7e76a12fe6fca4f09485240addaae0dea53c026d54cc6b3e756197f4c3eb77445bb102ed9debea19d0721e41f0d38cc885daf5c4c58db6327268d393bd567f81f1c275ded83ea4306c2ae1a070d666baedcfa2cc91b73f14b0fddc0ad4481863e2a8b5290ce2fb8d359f52eaa0c11417563b49fc0dd76e53e30d7189fc741cbb789be3f77bf19189d85d336e7644bb9695f3fa3da4a00c704f97ed6df5edf75ad4d0782e28e979d8e225620aa647e077ec95757f596a0f3ccf0175494f2a4d78334048eaf8189c8ae6bf3cd98078733859d7cafd68c2a6aa178c67442300908c24da85138247d908fa74cd7fa99e4a5279388929e6752c01479b5addb68d5b413a5e33de2a69996b2ed6d53367e0104dbc7b63fbe05885ec7048a5d795c5275447d294efa97793f49b111b109bef33aa8c9d5b2bde85b7e8f8e9745942906221b62557d8364e4876db45f9d660a9ec91c71c15fec75e7803b7509090fb5fa0ccf5444e6d1b98965e7a1d80587f9f0202edb6c0ac328c6e89aaca5d2c9ed4c83f8b693a3b355d05e6566d1c69da6cc7fade69eb21912adb99c964360d5fb0f39394cb3c0c76ca710f21f76c652ef9e805a6dc54df761481af497d8b8c2dcd90a03c6f891d7d87d48637fc8bc6fb92eee225e73665195b56103c99eaed7db567c5472b7bc7c9b8b7622aed5909e6de018f4a4db18b238e2195e4fe9f13b27f94e17827ee606206c00321bede33c0b7090dbbb9931ef822bad345b73391a2d54dcee73b97cd74f317597e8137a47f90e9daa4b1feffa066c8bc8ef52bae46b70197f70538d199e1aab12bdfebcd97bdb7589439f1efbcdabd9464db15554921245b08784bfceb7c5f0c98db5b6e3bdc2e5608f7b1a32976c70bc012025443e6e36db3e0a45e881c964f0bb91c4e001b9d5e1a813dffc8eb9f884f2a00d9c059feb9cd4438c350455b37b4bb14b6e3b66be1633797ddb3a5ef220cfdf240ad375dcaae6c0561c261a1c73eac683c5d31e4f6eb866b86e4ebebc793a986883b084e678e19eeb256aad52e6d6ff85122394bfdb931692067c638f6fa184b4ef7de38d65fb27bea64ad5713cb5709355ba2e78176fd9747ca71438f0497081d5e0e2f3c4e04a49b2784bda1828280c40a160da7a6a238f0902b9d2ee5e5d55ab5101d0eb529d57147796fc3315c74c53c91198ad0703f2f56c5e2f24c76bd924ae30ef1a6c8181c594645dc6b3a1e8d35596ee0c67c743c556168cf453eb2f123633066389dd75b1acd7b621cdb32ae4377816ffb1f1c82e430059f2870125eee624d53736259643e01526ade49006173acebc5d5d3430011d8491288454c000684736125a194b3665a04693f8d5661efbf4a3b816f0837ee30fb4c818bc8f7111571605015c190e3fac23224b01360f4f3032cc1793b8fdd3234ae92937d481225ccd0b8f54ddffad8d55afe667d6a38dfe3dfb2b491e20ef65ca08146e32702ec4323e1000b14cfaef77b8b905df3a04cf055237469bde68da4ea3b6d600e7961eb54c32279f2b9478dc81c3effbc38b6af575c66b4f90f691f54c1c0702734d18291a2bed0912616c904a11aaa7e4953e0baab39e7004f14198b83aedbb1628328562c5e49f92f6ccae7408cd332921d3dd528278d87c1d38a0a5748897965451f887533e0b6648ef1216f044daa1c95bae19d7552163eeb95b745f3ae4982a7f7f43e21d02e7c60d4d1ede3b387ec34ea7c58e744ce3a2d65c48b41e19a58c31d0e2c25cd9054847ff7059dd9c912ae638be18e058a7c7383116c2589d3bae3bcd0710a3c8bc53869f959a75a510e8e07300850c30185da0ad258f0a72aa196aa824bb8265453a0bd8b4cf9833058e7e32eaa4c96fff0ab769b250218990beea47e6f1226c068cbac025a33ce9237c56fa4963c52d1c8e24e87d0677de79a618d0f09d85119a6667cdaabcb05cbca2c53098f39f6ab126995ddabb938088c78902ebf5fc50e94fcc5ac1e1472d5d7702adf08555eda14cc9ba0cd25e78842af2be30efda8c4f131a6bb56cc0dc60a7edfeff8a453477c47814d981ca6989d1b9751b9a581bb5c74c800f15470d3a2f188ce60a25e359fd5202a10a0e4e6eb1cab131a30425f9ba58f82afbdf02501ea23181d48a8a1d06a13a87727fcb83b6001e6fe4ae2439bdeee516a6c970d70a6a992b3b40a4e641e4af24ea5a750e581ef3cd1ad14396b8a433a5faf6286e9fbd23bf143f014854efd3f1715f09445ca5833346bed7aeab2ed9b4b38630d8c1f1b65f79a9203f29d7a4ea5d77bd0b8049628a9d40c4dba9e4d4cee5dd1b6c77e314fb3abba500ff3070e219ee218b81d4044098a4ec65a19e5116df9bcd8457ccdb3a3290dbb8c39e6f1097e12fc47c2c4fe0172480821a294b7efbcd2103ee2068859b3f6a83e1086688bc6e342978d00729ed945895e455c2258429affec7dd6329b90b5d0df76005bbfcd15e366db57a51cba9b8d926abc70b6f3d376f428f1c34a97b8043315bfe6cb2937557a1162a85c0dff0d30c18b82bcb4c"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x1, 0x9, {0x34f2dffa, @usage=0x566c, 0x0, 0x0, 0x5, 0x3, 0x4, 0x9, 0x4, @usage=0x2, 0x2, 0x7, [0x3, 0x9, 0x6, 0xffffffffffffffff, 0x4, 0x4]}, {0x5, @struct={0x7, 0x1}, 0x0, 0x2, 0x1, 0x3, 0x240, 0xfffffffffffffffe, 0x400, @struct={0x4}, 0x200, 0x21fa, [0x7, 0x8, 0x3, 0x9, 0xfcb, 0x2]}, {0x3, @usage=0x51a507e1, 0x0, 0x100000004, 0x8000, 0x7fffffffffffffff, 0x8, 0x5, 0x50, @struct={0x4, 0x146}, 0x5, 0x6, [0x8000000000000001, 0x5, 0x6, 0xe44e, 0x3, 0x1]}, {0x9797, 0x1, 0x5a}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000840)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000000)={0x0, 0x8, 0x2, 0xfffffffffffffff9, {0x0, 0x1b84e177, 0x4, 0x9, 0xf8}, [0x63, 0x8000, 0x401, 0xffffffff, 0x8, 0x4, 0x2, 0xdd]}}, @devid=r8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=398): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg$unix(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000540)="ce966893ffb05ffac67725c545826081671e1f50a2f88e2bbe535fe73b6b2333ad91d82dd7c4a8aa9173460b74355ef25afb06273a9681ef7a882a6a55ccb3d3f9a41fe75fbdd647210d3db8e24c9e2b121f6a5f0e4c9256f2c458b547799229a71603df174364af938e18e4b94f01d061ded21a45cdc1ed4a0ceff8e39388d28484123f0ba51b43bf9e07319beeaa63a38101a092397d4f8a7def986475167d66b6755c6262a4c38cfeb29e268f53", 0xaf}, {&(0x7f0000000600)="478497813717f9d817936bd52fe6e6a5a7cee00fcf6063fa6664fccca256fad90ea34e3c78ff04040a5d2c06318825713c5851503e153a331a93579725b8afbee3a827841febbdbf58470345d71ad620923c72ccc6bd4ffb5ff6ee6e9336efc0aa1080e0", 0x64}, {&(0x7f0000001480)="84a13f5db46521d1c680585a417396fa3a38c1036194db971226ddb9a710bbcf04ec5db1348729a48e71ebe5b6977b0d5c27b8991a0256aa96dc6fe189631dde4ef5c8edde469d61a4cd2a16bd7a17f104aac6755c389937c8a6bccb31793727f3bad854fb9e65d04cedaab0547ff72493128387cf385153f6bd2b9bebd164270a2a553631558dfa80fffab821efabc00067a714f433bc044452352b5874d698d1e4c66673dfa299c6ec391f011633bdc00a680a4cdd47bbca124d193178e377352d0225d8e7dbf859d91b9c99dd4d24b9a134ca2e693d01054cabf1d7c3a70b8e7a5045523e761ac7682351fa54", 0xffc6}, {&(0x7f0000000780)="0100f94945de15ae1b313eaa6869b3e26002c9d0d6c7f71ea65cc6e63e970913fdf880198807394b7254e54f274d4a18af84c893d9f8415cea7ad9def74b81ebcc00dabea85cc664b083d7a58a822bc720236070c9d1ed132adc1f41842a9404143a4b4d5fadbb81f57023a5e8396a50ebe5329990e52a0ff67e8174db0aab6dfe2e0eb2edf960", 0x87}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="c485ae5463e7373921aedf2b7f3ae0a8ca79444055ffcf6255979ed13acbb80c6c24ae23d9cd68c29e71179e603b5a7717414c78fd06b7e6fba140d99fb90339afecfcf70226b4c3cb279deade7ea2faac187730d9c71b13baa3785a902a13a2a6eaf38897f74e3f2d95b85e3ed05fcdf8b0f816609ec82877bb99096f1ea9cabeaca507ca87e4d1d4639bef", 0x8c}, {&(0x7f0000000e00)="8b98cc2669d0a84b16b18485e3b802e1a345a2f3c74c6e268b06dafc8d209377a5f6f4f27f66694c92d88c41c6c52719f4111a4789847b715f48d7bfdc03b4349a0943c963db4bc0333edc", 0x4b}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="30000002b5371de60000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0xc040041}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="893958bb763d38091e7e242e6b89748e3ae0e526db912907f759bc2da4327401b44bb9cbd9420fd576eeac9c46c7d3a21d84aa3bbb63db4454d363cb9d87a0a72ec46625171cadc7be01cdcfc4bd17e09d0ffe8e3d65175491881c81a2ef8257beea93031b11889c28a46ec4e5bd48f92f08a9b66a331e00e0b1d5e413b9b1b110fc3619d4ce658d63b1ebca69fca2afa68a8ac0d1339abf12ef5bc3aa5f10223527c3f42aa9d10b4459ed9a54e16836", 0xb0}], 0x1, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x5, 0x0) kernel console output (not intermixed with test programs): 85831][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 33.295803][ T20] ftdi_sio 1-1:0.136: device disconnected [ 33.359210][ T620] F2FS-fs (loop1): invalid crc value [ 33.381222][ T620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.410861][ T620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.515521][ T24] audit: type=1400 audit(1722357922.920:204): avc: denied { read } for pid=634 comm="syz.2.106" name="usbmon4" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.539112][ T24] audit: type=1400 audit(1722357922.920:205): avc: denied { open } for pid=634 comm="syz.2.106" path="/dev/usbmon4" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.562638][ T24] audit: type=1400 audit(1722357922.930:206): avc: denied { ioctl } for pid=634 comm="syz.2.106" path="/dev/usbmon4" dev="devtmpfs" ino=146 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.652197][ T640] input: syz0 as /devices/virtual/input/input5 [ 33.828170][ T313] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 33.835059][ T313] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 33.841998][ T313] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 33.856403][ T313] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 33.863278][ T313] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 33.896381][ T24] audit: type=1400 audit(1722357923.000:207): avc: denied { setopt } for pid=634 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.925511][ T282] attempt to access beyond end of device [ 33.925511][ T282] loop1: rw=2049, want=45104, limit=40427 [ 33.966529][ T313] hid-rmi 0003:0461:4E72.0005: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 34.506711][ T25] usb 4-1: USB disconnect, device number 3 [ 34.531036][ T645] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.617419][ T645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 34.625279][ T645] System zones: 1-12 [ 34.629879][ T645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.109: bg 0: block 131: padding at end of block bitmap is not set [ 34.645612][ T645] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 34.647711][ T24] audit: type=1400 audit(1722357924.050:208): avc: denied { name_bind } for pid=657 comm="syz.2.110" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 34.654545][ T645] EXT4-fs (loop4): 1 truncate cleaned up [ 34.706646][ T645] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,grpquota,i_version,data_err=ignore,,errors=continue [ 34.936199][ T664] netlink: 'syz.0.112': attribute type 27 has an invalid length. [ 34.973786][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.980835][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.006418][ T24] audit: type=1400 audit(1722357924.160:209): avc: denied { setopt } for pid=653 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.085378][ T667] device veth0_vlan left promiscuous mode [ 35.092491][ T667] device veth0_vlan entered promiscuous mode [ 35.099594][ T667] device veth1_macvtap left promiscuous mode [ 35.107454][ T667] device veth1_macvtap entered promiscuous mode [ 35.114681][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.180018][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.187546][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.195784][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.198476][ T673] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.202650][ T594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.220341][ T676] mmap: syz.2.113 (676) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 35.241546][ T675] FAT-fs (loop0): Directory bread(block 64) failed [ 35.556761][ T678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.558150][ T675] FAT-fs (loop0): Directory bread(block 65) failed [ 35.573064][ T675] FAT-fs (loop0): Directory bread(block 66) failed [ 35.579616][ T675] FAT-fs (loop0): Directory bread(block 67) failed [ 35.586098][ T675] FAT-fs (loop0): Directory bread(block 68) failed [ 35.592544][ T675] FAT-fs (loop0): Directory bread(block 69) failed [ 35.660730][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 35.660754][ T24] audit: type=1400 audit(1722357925.070:213): avc: denied { getopt } for pid=672 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.686674][ T681] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 35.740988][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.797655][ T675] FAT-fs (loop0): Directory bread(block 70) failed [ 35.804069][ T675] FAT-fs (loop0): Directory bread(block 71) failed [ 35.813102][ T675] FAT-fs (loop0): Directory bread(block 72) failed [ 35.819516][ T675] FAT-fs (loop0): Directory bread(block 73) failed [ 35.819909][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.838464][ T594] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.845339][ T594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.853256][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.861459][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 35.869460][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.877519][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 35.885317][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.893400][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.901506][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.909422][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.917280][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.925142][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.933177][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.941248][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.949277][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.957499][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.965204][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.973345][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.037803][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.045603][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.054019][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.062293][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.070249][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.078040][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.085184][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.092418][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.100300][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.108209][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.115778][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.136378][ T54] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.188005][ T24] audit: type=1400 audit(1722357925.600:214): avc: denied { sys_module } for pid=694 comm="syz.0.119" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 36.188229][ T695] Module has invalid ELF structures [ 36.211292][ T24] audit: type=1400 audit(1722357925.600:215): avc: denied { module_load } for pid=694 comm="syz.0.119" path="/33/bus" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 36.244584][ T24] audit: type=1400 audit(1722357925.650:216): avc: denied { bind } for pid=698 comm="syz.0.123" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.267796][ T24] audit: type=1400 audit(1722357925.650:217): avc: denied { node_bind } for pid=698 comm="syz.0.123" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 36.623602][ T594] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 36.633237][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 36.806526][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.817430][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.827031][ T54] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 36.835893][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.844414][ T54] usb 3-1: config 0 descriptor?? [ 36.866423][ T594] usb 5-1: Using ep0 maxpacket: 16 [ 36.986716][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.999232][ T594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.012681][ T594] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.021856][ T594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.199867][ T594] usb 5-1: config 0 descriptor?? [ 37.252005][ T24] audit: type=1326 audit(1722357926.660:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz.1.129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67a4673b9 code=0x0 [ 37.417070][ T54] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 37.423841][ T54] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 37.430716][ T54] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 37.437624][ T54] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 37.444399][ T54] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 37.451696][ T54] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 37.526414][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.626438][ T54] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 37.680505][ T594] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input6 [ 37.757620][ T594] microsoft 0003:045E:07DA.0007: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 37.776413][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 37.841241][ T725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 37.849412][ T725] System zones: 1-12 [ 37.853745][ T725] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.131: bg 0: block 131: padding at end of block bitmap is not set [ 37.868474][ T725] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 37.877585][ T725] EXT4-fs (loop3): 1 truncate cleaned up [ 37.883049][ T725] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,grpquota,i_version,data_err=ignore,,errors=continue [ 37.926507][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.937449][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.950297][ T311] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.959217][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.970881][ T311] usb 1-1: config 0 descriptor?? [ 38.089900][ T693] udc-core: couldn't find an available UDC or it's busy [ 38.103628][ T693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.113209][ T594] usb 5-1: USB disconnect, device number 5 [ 38.463377][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input7 [ 38.501903][ T685] device syzkaller0 entered promiscuous mode [ 38.547941][ T311] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 39.028035][ T311] usb 1-1: USB disconnect, device number 4 [ 39.120566][ T754] netlink: 88 bytes leftover after parsing attributes in process `syz.1.140'. [ 39.129423][ T754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 39.167204][ T24] audit: type=1400 audit(1722357928.580:219): avc: denied { write } for pid=751 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.248251][ T762] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 39.258012][ T762] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 39.271442][ T24] audit: type=1400 audit(1722357928.680:220): avc: denied { setattr } for pid=761 comm="syz.3.143" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.319252][ T24] audit: type=1400 audit(1722357928.730:221): avc: denied { read write } for pid=766 comm="syz.2.144" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.347712][ T24] audit: type=1400 audit(1722357928.730:222): avc: denied { open } for pid=766 comm="syz.2.144" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.436420][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 40.027599][ T638] usb 3-1: USB disconnect, device number 6 [ 40.696557][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 40.707608][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 40.750934][ T594] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.759211][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 40.759241][ T24] audit: type=1326 audit(1722357929.970:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.790043][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 40.799623][ T25] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 40.802439][ T24] audit: type=1326 audit(1722357929.970:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.808497][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.831666][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.839731][ T25] usb 2-1: config 0 descriptor?? [ 40.847801][ T24] audit: type=1326 audit(1722357929.970:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.875208][ T24] audit: type=1326 audit(1722357929.970:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.897489][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 40.899522][ T24] audit: type=1326 audit(1722357929.970:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.928627][ T24] audit: type=1326 audit(1722357929.970:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.951925][ T24] audit: type=1326 audit(1722357929.970:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.975034][ T24] audit: type=1326 audit(1722357929.970:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 40.998244][ T24] audit: type=1326 audit(1722357929.970:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 41.021330][ T24] audit: type=1326 audit(1722357929.970:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db04223b9 code=0x7ffc0000 [ 41.066390][ T594] usb 4-1: Using ep0 maxpacket: 16 [ 41.265816][ T793] process 'syz.4.150' launched './file0' with NULL argv: empty string added [ 41.314819][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 41.397049][ T594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.408011][ T594] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.411889][ T311] usb 2-1: USB disconnect, device number 2 [ 41.420942][ T594] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.435980][ T594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.456832][ T594] usb 4-1: config 0 descriptor?? [ 41.466468][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.477591][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.487412][ T54] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 41.496529][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.504810][ T54] usb 1-1: config 0 descriptor?? [ 41.940065][ T594] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input9 [ 41.997230][ T54] hid-rmi 0003:0461:4E72.000A: item fetching failed at offset 1/5 [ 42.005394][ T54] hid-rmi 0003:0461:4E72.000A: parse failed [ 42.011310][ T54] hid-rmi: probe of 0003:0461:4E72.000A failed with error -22 [ 42.017181][ T594] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 42.116380][ T638] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.204560][ T594] usb 1-1: USB disconnect, device number 5 [ 42.276436][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.349224][ T782] udc-core: couldn't find an available UDC or it's busy [ 42.356044][ T782] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.356368][ T638] usb 5-1: Using ep0 maxpacket: 16 [ 42.364056][ T311] usb 4-1: USB disconnect, device number 4 [ 42.486489][ T638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.497225][ T638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.506743][ T638] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 42.515552][ T638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.523396][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 42.528913][ T638] usb 5-1: config 0 descriptor?? [ 42.646460][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.657139][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.669768][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.678591][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.686982][ T25] usb 2-1: config 0 descriptor?? [ 42.716400][ T54] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.818714][ T831] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 42.826190][ T831] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.834959][ T831] F2FS-fs (loop0): invalid crc value [ 42.841556][ T831] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.862873][ T831] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.869782][ T831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.956448][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 43.031361][ T841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 43.536493][ T54] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 43.545018][ T54] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 43.614144][ T54] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 43.624734][ T54] usb 3-1: config 250 has no interface number 0 [ 43.631551][ T54] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 43.634202][ T638] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 43.643473][ T54] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 43.660334][ T54] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12592, setting to 1024 [ 43.670318][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input10 [ 43.672382][ T54] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 43.683042][ T638] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 43.693609][ T54] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 43.713485][ T54] usb 3-1: config 250 interface 228 has no altsetting 0 [ 43.729212][ T638] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 43.748810][ T638] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 43.755589][ T638] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 43.763842][ T638] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 43.777745][ T25] microsoft 0003:045E:07DA.000B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 43.869092][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 43.878243][ T54] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 43.886269][ T54] usb 3-1: Product: syz [ 43.890540][ T54] usb 3-1: SerialNumber: syz [ 43.894056][ T849] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 43.894056][ T849] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 43.894056][ T849] [ 43.912656][ T638] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 43.991219][ T852] bridge0: port 3(syz_tun) entered blocking state [ 43.997503][ T852] bridge0: port 3(syz_tun) entered disabled state [ 44.005753][ T852] device syz_tun entered promiscuous mode [ 44.011693][ T852] bridge0: port 3(syz_tun) entered blocking state [ 44.017923][ T852] bridge0: port 3(syz_tun) entered forwarding state [ 44.083393][ T54] hub 3-1:250.228: bad descriptor, ignoring hub [ 44.089688][ T54] hub: probe of 3-1:250.228 failed with error -5 [ 44.101398][ T311] usb 2-1: USB disconnect, device number 3 [ 44.105338][ T849] EXT4-fs (loop0): 1 orphan inode deleted [ 44.112624][ T849] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue [ 44.132426][ T849] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038 (0x7fffffff) [ 44.147390][ T54] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 44.506365][ C1] usblp0: nonzero read bulk status received: -71 [ 44.706521][ T25] usb 3-1: USB disconnect, device number 7 [ 44.719787][ T25] usblp0: removed [ 44.790395][ T806] device syzkaller0 entered promiscuous mode [ 44.956396][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.046387][ T54] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.196457][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 45.286411][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 45.370819][ T312] usb 4-1: config 0 has an invalid interface number: 136 but max is 1 [ 45.378928][ T312] usb 4-1: config 0 has no interface number 1 [ 45.384957][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.395727][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.406137][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.406856][ T54] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 45.416757][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.437779][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.439405][ T54] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.490492][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.607588][ T594] usb 5-1: USB disconnect, device number 6 [ 45.670100][ T54] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 45.749900][ T882] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.758958][ T882] EXT4-fs error (device loop1): ext4_find_extent:928: inode #4: comm syz.1.176: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 45.776105][ T882] __quota_error: 37 callbacks suppressed [ 45.776118][ T882] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 45.791247][ T882] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 45.805794][ T882] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 45.812421][ T882] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 45.826436][ T312] usb 4-1: New USB device found, idVendor=0403, idProduct=8a98, bcdDevice=a6.12 [ 45.836237][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.836504][ T54] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.844429][ T312] usb 4-1: Product: syz [ 45.853072][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.857367][ T312] usb 4-1: Manufacturer: syz [ 45.864904][ T54] usb 1-1: Product: syz [ 45.869722][ T312] usb 4-1: SerialNumber: syz [ 45.873271][ T54] usb 1-1: Manufacturer: syz [ 45.873279][ T54] usb 1-1: SerialNumber: syz [ 45.887401][ T312] usb 4-1: config 0 descriptor?? [ 46.146451][ T594] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 46.177107][ T312] ftdi_sio 4-1:0.136: FTDI USB Serial Device converter detected [ 46.184906][ T312] usb 4-1: Detected FT2232C [ 46.206543][ T54] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 46.213899][ T54] usb 1-1: 2:1 : invalid channels 0 [ 46.231994][ T312] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 46.248919][ T54] usb 1-1: USB disconnect, device number 6 [ 46.257545][ T312] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 46.264623][ T312] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.273327][ T312] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 46.282472][ T312] usb 4-1: USB disconnect, device number 5 [ 46.288898][ T312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.299592][ T312] ftdi_sio 4-1:0.136: device disconnected [ 46.586579][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.597552][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.607687][ T594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.620605][ T594] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.629659][ T594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.638408][ T594] usb 5-1: config 0 descriptor?? [ 46.808331][ T900] bridge0: port 3(syz_tun) entered blocking state [ 46.814621][ T900] bridge0: port 3(syz_tun) entered disabled state [ 46.823475][ T900] device syz_tun entered promiscuous mode [ 46.829457][ T900] bridge0: port 3(syz_tun) entered blocking state [ 46.835672][ T900] bridge0: port 3(syz_tun) entered forwarding state [ 46.986156][ T24] audit: type=1326 audit(1722357936.390:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=901 comm="syz.3.182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x0 [ 47.065261][ T910] serio: Serial port ptm1 [ 47.127205][ T594] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 47.134790][ T594] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 47.154879][ T594] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 47.406994][ T887] Zero length message leads to an empty skb [ 47.415235][ T594] usb 5-1: USB disconnect, device number 7 [ 47.598402][ T918] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.608540][ T918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 47.616755][ T918] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 47.623232][ T918] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,commit=0x0000000000000005,norecovery,,errors=continue [ 47.656747][ T918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 47.665507][ T918] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.870615][ T24] audit: type=1326 audit(1722357937.280:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 47.893766][ T24] audit: type=1326 audit(1722357937.280:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 47.916935][ T24] audit: type=1326 audit(1722357937.280:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 48.177274][ T24] audit: type=1326 audit(1722357937.280:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 48.203914][ T24] audit: type=1326 audit(1722357937.280:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 48.229667][ T24] audit: type=1326 audit(1722357937.280:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 48.268348][ T24] audit: type=1326 audit(1722357937.300:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 48.336459][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.607294][ T24] audit: type=1400 audit(1722357937.990:280): avc: denied { map } for pid=934 comm="syz.4.193" path="socket:[16744]" dev="sockfs" ino=16744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 48.797882][ T945] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 48.807585][ T945] SELinux: security_context_str_to_sid(root) failed for (dev loop2, type ext4) errno=-22 [ 49.056497][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 49.069514][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 49.079420][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 49.093899][ T313] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 49.103010][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.112648][ T313] usb 2-1: config 0 descriptor?? [ 49.157020][ T313] usb 2-1: MIDIStreaming interface descriptor not found [ 49.470468][ T312] usb 2-1: USB disconnect, device number 4 [ 49.533660][ T978] syz.2.206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.104536][ T999] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.383834][ T999] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.209: bg 0: block 64: padding at end of block bitmap is not set [ 50.411993][ T999] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.209: Failed to acquire dquot type 0 [ 50.426474][ T999] EXT4-fs (loop3): 1 truncate cleaned up [ 50.431990][ T999] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 50.466743][ T999] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.209: Failed to acquire dquot type 0 [ 50.748641][ T1020] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.789113][ T1020] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.822407][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 50.822419][ T24] audit: type=1400 audit(1722357940.230:316): avc: denied { mounton } for pid=1019 comm="syz.4.220" path="/33/file0/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.850938][ T24] audit: type=1400 audit(1722357940.250:317): avc: denied { write } for pid=1019 comm="syz.4.220" name="bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.873074][ T24] audit: type=1400 audit(1722357940.250:318): avc: denied { add_name } for pid=1019 comm="syz.4.220" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.893221][ T24] audit: type=1400 audit(1722357940.250:319): avc: denied { remove_name } for pid=1019 comm="syz.4.220" name="#3" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.915816][ T24] audit: type=1400 audit(1722357940.250:320): avc: denied { rename } for pid=1019 comm="syz.4.220" name="#3" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.937396][ T313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 50.944785][ T24] audit: type=1400 audit(1722357940.250:321): avc: denied { unlink } for pid=1019 comm="syz.4.220" name="#3" dev="loop4" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.968693][ T24] audit: type=1400 audit(1722357940.250:322): avc: denied { unlink } for pid=1019 comm="syz.4.220" name="#4" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.094610][ T24] audit: type=1326 audit(1722357940.500:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 51.189655][ T1045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.224'. [ 51.215714][ T24] audit: type=1326 audit(1722357940.570:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 51.256395][ T24] audit: type=1326 audit(1722357940.570:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0ad023b9 code=0x7ffc0000 [ 51.321537][ T1042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.224'. [ 51.367579][ T283] attempt to access beyond end of device [ 51.367579][ T283] loop4: rw=524288, want=45072, limit=40427 [ 51.380143][ T283] attempt to access beyond end of device [ 51.380143][ T283] loop4: rw=0, want=45072, limit=40427 [ 51.411138][ T689] attempt to access beyond end of device [ 51.411138][ T689] loop4: rw=2049, want=41088, limit=40427 [ 51.454226][ T1047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.463193][ T1047] ext4 filesystem being mounted at /50/bus supports timestamps until 2038 (0x7fffffff) [ 51.576629][ T1054] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.725546][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.737324][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.750003][ T313] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 51.759917][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.763163][ T1056] syz.0.227[1056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.767906][ T1056] syz.0.227[1056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.016695][ T313] usb 2-1: config 0 descriptor?? [ 52.123375][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.130495][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.138583][ T1063] device bridge_slave_0 entered promiscuous mode [ 52.145435][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.152644][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.160030][ T1063] device bridge_slave_1 entered promiscuous mode [ 52.219322][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.226203][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.233318][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.240075][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.507379][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.520011][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.528796][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.537487][ T9] device bridge_slave_1 left promiscuous mode [ 52.543488][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.551287][ T9] device bridge_slave_0 left promiscuous mode [ 52.557577][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.568856][ T9] device veth1_macvtap left promiscuous mode [ 52.574741][ T9] device veth0_vlan left promiscuous mode [ 52.664847][ T1079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.238'. [ 52.684379][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.692565][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.699449][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.706665][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.714643][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.721513][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.729472][ T1080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.238'. [ 52.757420][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.765945][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.773757][ T313] hid-multitouch 0003:1FD2:6007.000E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 52.774210][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.806404][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.816038][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.824086][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.832574][ T1063] device veth0_vlan entered promiscuous mode [ 52.849650][ T1084] EXT4-fs (loop2): 1 orphan inode deleted [ 52.856520][ T1084] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x000000000000ffff,noquota,init_itable,stripe=0x0000000000000078,resgid=0x0000000000000000,norecovery,delalloc,usrquota, [ 52.877555][ T1084] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 52.877560][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.905759][ T1063] device veth1_macvtap entered promiscuous mode [ 52.925239][ T285] EXT4-fs error (device loop2): ext4_map_blocks:600: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.939933][ T285] EXT4-fs (loop2): Remounting filesystem read-only [ 52.940510][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.946299][ T285] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1062: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 52.955210][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.984007][ T313] usb 2-1: USB disconnect, device number 5 [ 53.002125][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.009228][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.016852][ T1082] device bridge_slave_0 entered promiscuous mode [ 53.023620][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.030603][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.037888][ T1082] device bridge_slave_1 entered promiscuous mode [ 53.142209][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.149597][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.160068][ T1093] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 53.180234][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.201338][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.212115][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.218983][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.226791][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.253588][ T1093] device syzkaller0 entered promiscuous mode [ 53.260248][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.268930][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.277162][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.284026][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.322787][ T1082] device veth0_vlan entered promiscuous mode [ 53.331056][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.341173][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.350476][ T1100] xt_hashlimit: max too large, truncated to 1048576 [ 53.357286][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.364327][ T1100] xt_hashlimit: overflow, try lower: 0/0 [ 53.370258][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.377694][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.385423][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.406951][ T1082] device veth1_macvtap entered promiscuous mode [ 53.414867][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.445785][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.461712][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.469794][ T1099] device bridge_slave_0 entered promiscuous mode [ 53.483809][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.505420][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.519805][ T1099] device bridge_slave_1 entered promiscuous mode [ 53.538039][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.564883][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.668533][ T1113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.914604][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.921506][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.928562][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.935347][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.982770][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.991887][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.000644][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.067706][ T1120] overlayfs: failed to resolve './file0': -2 [ 54.132884][ T1121] netlink: 300 bytes leftover after parsing attributes in process `syz.0.240'. [ 54.265515][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.283344][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.290294][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.314642][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.322665][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.329532][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.338450][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.346268][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.396532][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.425891][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.439811][ T1099] device veth0_vlan entered promiscuous mode [ 54.476233][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.484494][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.492809][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.500320][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.541871][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.553164][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.566767][ T1099] device veth1_macvtap entered promiscuous mode [ 54.581155][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.596518][ T594] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 54.803717][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.811975][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.820149][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.828312][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.896368][ T594] usb 2-1: Using ep0 maxpacket: 16 [ 54.977971][ T9] device bridge_slave_1 left promiscuous mode [ 54.989098][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.009213][ T9] device bridge_slave_0 left promiscuous mode [ 55.027373][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.051190][ T9] device bridge_slave_1 left promiscuous mode [ 55.067461][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.078283][ T9] device bridge_slave_0 left promiscuous mode [ 55.086589][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.099067][ T9] device veth1_macvtap left promiscuous mode [ 55.108225][ T9] device veth0_vlan left promiscuous mode [ 55.116255][ T9] device veth1_macvtap left promiscuous mode [ 55.126397][ T9] device veth0_vlan left promiscuous mode [ 55.216485][ T594] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 55.227859][ T594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.245011][ T594] usb 2-1: Product: syz [ 55.256403][ T594] usb 2-1: Manufacturer: syz [ 55.263994][ T594] usb 2-1: SerialNumber: syz [ 55.271229][ T594] usb 2-1: config 0 descriptor?? [ 55.424403][ T1161] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 55.474678][ T1167] kvm: emulating exchange as write [ 55.562675][ T1170] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 55.577639][ T1161] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 55.590358][ T1170] EXT4-fs (loop3): group descriptors corrupted! [ 55.915468][ T1192] netlink: 300 bytes leftover after parsing attributes in process `syz.4.261'. [ 56.006616][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 56.006672][ T24] audit: type=1400 audit(1722357945.360:360): avc: denied { getopt } for pid=1122 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.052739][ T1195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 56.471797][ T1208] netlink: 76 bytes leftover after parsing attributes in process `syz.3.273'. [ 56.677975][ T24] audit: type=1400 audit(1722357946.040:361): avc: denied { accept } for pid=1214 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 56.909041][ T1223] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 56.919574][ T1223] EXT4-fs (loop4): group descriptors corrupted! [ 57.137069][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 57.221708][ T1246] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 57.221846][ T1246] loop4: p2 size 8388352 extends beyond EOD, [ 57.312151][ T1249] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.326226][ T1249] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.286: invalid block [ 57.333925][ T15] usb 2-1: USB disconnect, device number 6 [ 57.340185][ T1246] truncated [ 57.351693][ T1246] loop4: p5 size 8388352 extends beyond EOD, truncated [ 57.367275][ T1246] loop4: p7 size 8388352 extends beyond EOD, truncated [ 57.374977][ T1246] loop4: p9 size 8388352 extends beyond EOD, truncated [ 57.382335][ T1249] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.286: couldn't read orphan inode 11 (err -117) [ 57.387990][ T1246] loop4: p11 size 8388352 extends beyond EOD, truncated [ 57.415552][ T1255] xt_bpf: check failed: parse error [ 57.426664][ T1249] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 57.451325][ T638] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 57.473726][ T1246] loop4: p13 size 8388352 extends beyond EOD, truncated [ 57.473921][ T1249] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 57.481948][ T1246] loop4: p15 size 8388352 extends beyond EOD, truncated [ 57.495379][ T1246] loop4: p17 size 8388352 extends beyond EOD, truncated [ 57.497018][ T1249] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 57.503220][ T1246] loop4: p19 size 8388352 extends beyond EOD, truncated [ 57.518098][ T1246] loop4: p21 size 8388352 extends beyond EOD, truncated [ 57.523187][ T24] audit: type=1400 audit(1722357946.930:362): avc: denied { rename } for pid=1248 comm="syz.2.286" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.612793][ T24] audit: type=1400 audit(1722357946.930:363): avc: denied { reparent } for pid=1248 comm="syz.2.286" name="#b" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.639509][ T1246] loop4: p23 size 8388352 extends beyond EOD, truncated [ 57.654571][ T1246] loop4: p25 size 8388352 extends beyond EOD, truncated [ 57.663423][ T24] audit: type=1400 audit(1722357946.930:364): avc: denied { setattr } for pid=1248 comm="syz.2.286" name="#24" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.725070][ T1246] loop4: p27 size 8388352 extends beyond EOD, truncated [ 57.725956][ T24] audit: type=1400 audit(1722357946.930:365): avc: denied { link } for pid=1248 comm="syz.2.286" name="#24" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.735504][ T1246] loop4: p29 size 8388352 extends beyond EOD, [ 57.753367][ T638] usb 4-1: Using ep0 maxpacket: 16 [ 57.764648][ T1246] truncated [ 57.768920][ T1246] loop4: p31 size 8388352 extends beyond EOD, truncated [ 57.777100][ T1246] loop4: p33 size 8388352 extends beyond EOD, truncated [ 57.784976][ T1246] loop4: p35 size 8388352 extends beyond EOD, truncated [ 57.793189][ T1246] loop4: p37 size 8388352 extends beyond EOD, truncated [ 57.804015][ T1246] loop4: p39 size 8388352 extends beyond EOD, truncated [ 57.811657][ T1246] loop4: p41 size 8388352 extends beyond EOD, truncated [ 57.819325][ T1246] loop4: p43 size 8388352 extends beyond EOD, truncated [ 57.827010][ T1246] loop4: p45 size 8388352 extends beyond EOD, truncated [ 57.834427][ T1246] loop4: p47 size 8388352 extends beyond EOD, truncated [ 57.842131][ T1246] loop4: p49 size 8388352 extends beyond EOD, truncated [ 57.849739][ T1246] loop4: p51 size 8388352 extends beyond EOD, truncated [ 57.857348][ T1246] loop4: p53 size 8388352 extends beyond EOD, truncated [ 57.864740][ T1246] loop4: p55 size 8388352 extends beyond EOD, truncated [ 57.872391][ T1246] loop4: p57 size 8388352 extends beyond EOD, truncated [ 57.879923][ T1246] loop4: p59 size 8388352 extends beyond EOD, truncated [ 57.886825][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.887907][ T1246] loop4: p61 size 8388352 extends beyond EOD, [ 57.897610][ T638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.897853][ T1246] truncated [ 57.903669][ T638] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 57.917620][ T1246] loop4: p63 size 8388352 extends beyond EOD, [ 57.919329][ T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.928087][ T1246] truncated [ 57.939887][ T638] usb 4-1: config 0 descriptor?? [ 57.943984][ T1246] loop4: p65 size 8388352 extends beyond EOD, truncated [ 57.957167][ T1246] loop4: p67 size 8388352 extends beyond EOD, truncated [ 57.964596][ T1246] loop4: p69 size 8388352 extends beyond EOD, truncated [ 57.971538][ T15] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 57.972542][ T1246] loop4: p71 size 8388352 extends beyond EOD, truncated [ 57.987299][ T1246] loop4: p73 size 8388352 extends beyond EOD, truncated [ 57.995055][ T1246] loop4: p75 size 8388352 extends beyond EOD, truncated [ 58.002653][ T1246] loop4: p77 size 8388352 extends beyond EOD, truncated [ 58.010267][ T1246] loop4: p79 size 8388352 extends beyond EOD, truncated [ 58.017801][ T1246] loop4: p81 size 8388352 extends beyond EOD, truncated [ 58.025327][ T1246] loop4: p83 size 8388352 extends beyond EOD, truncated [ 58.032998][ T1246] loop4: p85 size 8388352 extends beyond EOD, truncated [ 58.040534][ T1246] loop4: p87 size 8388352 extends beyond EOD, truncated [ 58.048436][ T1246] loop4: p89 size 8388352 extends beyond EOD, truncated [ 58.056154][ T1246] loop4: p91 size 8388352 extends beyond EOD, truncated [ 58.063794][ T1246] loop4: p93 size 8388352 extends beyond EOD, truncated [ 58.070630][ T1175] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 58.071650][ T1246] loop4: p95 size 8388352 extends beyond EOD, truncated [ 58.085796][ T1246] loop4: p97 size 8388352 extends beyond EOD, truncated [ 58.093419][ T1246] loop4: p99 size 8388352 extends beyond EOD, truncated [ 58.101078][ T1246] loop4: p101 size 8388352 extends beyond EOD, truncated [ 58.108859][ T1246] loop4: p103 size 8388352 extends beyond EOD, truncated [ 58.116612][ T1246] loop4: p105 size 8388352 extends beyond EOD, truncated [ 58.124203][ T1246] loop4: p107 size 8388352 extends beyond EOD, truncated [ 58.132070][ T1246] loop4: p109 size 8388352 extends beyond EOD, truncated [ 58.139758][ T1246] loop4: p111 size 8388352 extends beyond EOD, truncated [ 58.147385][ T1246] loop4: p113 size 8388352 extends beyond EOD, truncated [ 58.154921][ T1246] loop4: p115 size 8388352 extends beyond EOD, truncated [ 58.162558][ T1246] loop4: p117 size 8388352 extends beyond EOD, truncated [ 58.170250][ T1246] loop4: p119 size 8388352 extends beyond EOD, truncated [ 58.177853][ T1246] loop4: p121 size 8388352 extends beyond EOD, truncated [ 58.185373][ T1246] loop4: p123 size 8388352 extends beyond EOD, truncated [ 58.193050][ T1246] loop4: p125 size 8388352 extends beyond EOD, truncated [ 58.200897][ T1246] loop4: p127 size 8388352 extends beyond EOD, truncated [ 58.208832][ T1246] loop4: p129 size 8388352 extends beyond EOD, truncated [ 58.216615][ T1246] loop4: p131 size 8388352 extends beyond EOD, truncated [ 58.224161][ T1246] loop4: p133 size 8388352 extends beyond EOD, truncated [ 58.232164][ T1246] loop4: p135 size 8388352 extends beyond EOD, truncated [ 58.240578][ T1246] loop4: p137 size 8388352 extends beyond EOD, truncated [ 58.257471][ T1246] loop4: p139 size 8388352 extends beyond EOD, truncated [ 58.265079][ T1246] loop4: p141 size 8388352 extends beyond EOD, truncated [ 58.273772][ T1246] loop4: p143 size 8388352 extends beyond EOD, truncated [ 58.283871][ T1246] loop4: p145 size 8388352 extends beyond EOD, truncated [ 58.293048][ T1246] loop4: p147 size 8388352 extends beyond EOD, truncated [ 58.301452][ T1246] loop4: p149 size 8388352 extends beyond EOD, truncated [ 58.306815][ T1267] netlink: 76 bytes leftover after parsing attributes in process `syz.0.291'. [ 58.309008][ T1246] loop4: p151 size 8388352 extends beyond EOD, truncated [ 58.325117][ T1246] loop4: p153 size 8388352 extends beyond EOD, truncated [ 58.333156][ T1246] loop4: p155 size 8388352 extends beyond EOD, truncated [ 58.340155][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.350969][ T15] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.360026][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.360594][ T1246] loop4: p157 size 8388352 extends beyond EOD, truncated [ 58.368665][ T15] usb 2-1: config 0 descriptor?? [ 58.380823][ T1246] loop4: p159 size 8388352 extends beyond EOD, truncated [ 58.388524][ T1246] loop4: p161 size 8388352 extends beyond EOD, truncated [ 58.396141][ T1246] loop4: p163 size 8388352 extends beyond EOD, truncated [ 58.403942][ T1246] loop4: p165 size 8388352 extends beyond EOD, truncated [ 58.412383][ T1246] loop4: p167 size 8388352 extends beyond EOD, truncated [ 58.420463][ T1246] loop4: p169 size 8388352 extends beyond EOD, truncated [ 58.428487][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.428747][ T1246] loop4: p171 size 8388352 extends beyond EOD, [ 58.435509][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.435524][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.435539][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.441727][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.449042][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.455813][ T1246] truncated [ 58.462802][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.473608][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.480549][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.483574][ T1175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.490426][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.501201][ T1246] loop4: p173 size 8388352 extends beyond EOD, [ 58.507177][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.519781][ T1175] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.526926][ T638] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 58.533025][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.545270][ T638] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input11 [ 58.549143][ T1246] truncated [ 58.578820][ T1175] usb 3-1: config 0 descriptor?? [ 58.583723][ T1246] loop4: p175 size 8388352 extends beyond EOD, truncated [ 58.591519][ T1246] loop4: p177 size 8388352 extends beyond EOD, truncated [ 58.599116][ T1246] loop4: p179 size 8388352 extends beyond EOD, truncated [ 58.607996][ T1246] loop4: p181 size 8388352 extends beyond EOD, truncated [ 58.615573][ T1246] loop4: p183 size 8388352 extends beyond EOD, truncated [ 58.623054][ T24] audit: type=1400 audit(1722357948.030:366): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=768 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.627148][ T638] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 58.645742][ T24] audit: type=1400 audit(1722357948.030:367): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=768 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.656997][ T1246] loop4: p185 size 8388352 extends beyond EOD, truncated [ 58.680757][ T24] audit: type=1400 audit(1722357948.030:368): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=768 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.705363][ T1246] loop4: p187 size 8388352 extends beyond EOD, truncated [ 58.719527][ T1246] loop4: p189 size 8388352 extends beyond EOD, truncated [ 58.727425][ T1246] loop4: p191 size 8388352 extends beyond EOD, truncated [ 58.735016][ T1246] loop4: p193 size 8388352 extends beyond EOD, truncated [ 58.742686][ T1246] loop4: p195 size 8388352 extends beyond EOD, truncated [ 58.750436][ T1246] loop4: p197 size 8388352 extends beyond EOD, truncated [ 58.758179][ T1246] loop4: p199 size 8388352 extends beyond EOD, truncated [ 58.765798][ T1246] loop4: p201 size 8388352 extends beyond EOD, truncated [ 58.773617][ T1246] loop4: p203 size 8388352 extends beyond EOD, truncated [ 58.781685][ T1246] loop4: p205 size 8388352 extends beyond EOD, truncated [ 58.789364][ T1246] loop4: p207 size 8388352 extends beyond EOD, truncated [ 58.797346][ T1246] loop4: p209 size 8388352 extends beyond EOD, truncated [ 58.804902][ T1246] loop4: p211 size 8388352 extends beyond EOD, truncated [ 58.812607][ T1246] loop4: p213 size 8388352 extends beyond EOD, truncated [ 58.820287][ T1246] loop4: p215 size 8388352 extends beyond EOD, truncated [ 58.827937][ T1246] loop4: p217 size 8388352 extends beyond EOD, truncated [ 58.835445][ T1246] loop4: p219 size 8388352 extends beyond EOD, truncated [ 58.843109][ T1246] loop4: p221 size 8388352 extends beyond EOD, truncated [ 58.856828][ T1246] loop4: p223 size 8388352 extends beyond EOD, truncated [ 58.865185][ T1246] loop4: p225 size 8388352 extends beyond EOD, truncated [ 58.872939][ T15] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 58.882881][ T312] usb 4-1: USB disconnect, device number 6 [ 58.882974][ T1246] loop4: p227 size 8388352 extends beyond EOD, [ 58.890087][ T15] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input12 [ 58.891689][ T1246] truncated [ 58.913770][ T1246] loop4: p229 size 8388352 extends beyond EOD, truncated [ 58.921471][ T1246] loop4: p231 size 8388352 extends beyond EOD, truncated [ 58.929523][ T1246] loop4: p233 size 8388352 extends beyond EOD, truncated [ 58.937264][ T1246] loop4: p235 size 8388352 extends beyond EOD, truncated [ 58.944797][ T1246] loop4: p237 size 8388352 extends beyond EOD, truncated [ 58.952440][ T1246] loop4: p239 size 8388352 extends beyond EOD, truncated [ 58.960094][ T1246] loop4: p241 size 8388352 extends beyond EOD, truncated [ 58.967715][ T1246] loop4: p243 size 8388352 extends beyond EOD, truncated [ 58.975225][ T1246] loop4: p245 size 8388352 extends beyond EOD, truncated [ 58.983013][ T1246] loop4: p247 size 8388352 extends beyond EOD, truncated [ 58.987191][ T15] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 58.991594][ T1246] loop4: p249 size 8388352 extends beyond EOD, truncated [ 59.009583][ T1246] loop4: p251 size 8388352 extends beyond EOD, truncated [ 59.017307][ T1246] loop4: p253 size 8388352 extends beyond EOD, truncated [ 59.025271][ T1246] loop4: p255 size 8388352 extends beyond EOD, truncated [ 59.046921][ T1175] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 59.054267][ T1175] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 59.062808][ T1175] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 59.186912][ T373] udevd[373]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 59.199479][ T310] udevd[310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.199496][ T370] udevd[370]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 59.210187][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 59.229101][ T367] udevd[367]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 59.254566][ T1282] udevd[1282]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 59.263410][ T1284] udevd[1284]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 59.272615][ T1283] udevd[1283]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 59.298426][ T373] udevd[373]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 59.298431][ T1278] udevd[1278]: inotify_add_watch(7, /dev/loop4p13, 10) failed: No such file or directory [ 59.408620][ T24] audit: type=1400 audit(1722357948.820:369): avc: denied { mounton } for pid=1295 comm="syz.4.300" path="/proc/36/task" dev="proc" ino=19745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 59.577600][ T5] usb 3-1: USB disconnect, device number 8 [ 60.163555][ T1305] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 60.178860][ T1305] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff) [ 60.315539][ T1316] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 60.343956][ T1316] device syzkaller0 entered promiscuous mode [ 60.518849][ T1327] EXT4-fs (loop3): 1 orphan inode deleted [ 60.524525][ T1327] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 60.543479][ T1327] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 60.676681][ T1340] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.684776][ T1340] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.314: invalid block [ 60.696575][ T1340] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.314: couldn't read orphan inode 11 (err -117) [ 60.712344][ T1175] usb 2-1: USB disconnect, device number 7 [ 60.981141][ T1340] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 61.190997][ T1348] EXT4-fs (loop1): 1 orphan inode deleted [ 61.196651][ T1348] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 61.215924][ T1348] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 61.387755][ T286] EXT4-fs error (device loop3): ext4_map_blocks:600: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 61.402051][ T1355] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.418488][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 61.438973][ T1355] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.316: bg 0: block 64: padding at end of block bitmap is not set [ 61.453365][ T1355] __quota_error: 2 callbacks suppressed [ 61.453374][ T1355] Quota error (device loop4): write_blk: dquota write failed [ 61.468447][ T1355] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 61.478233][ T1355] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.316: Failed to acquire dquot type 0 [ 61.491185][ T1355] EXT4-fs (loop4): 1 truncate cleaned up [ 61.494467][ T1365] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.497633][ T1355] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 61.515389][ T286] bridge0: port 3(syz_tun) entered disabled state [ 61.529583][ T286] device syz_tun left promiscuous mode [ 61.534861][ T286] bridge0: port 3(syz_tun) entered disabled state [ 61.534869][ T1355] Quota error (device loop4): write_blk: dquota write failed [ 61.534902][ T1355] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 61.542330][ T1365] EXT4-fs (loop2): failed to initialize system zone (-117) [ 61.548592][ T1355] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.316: Failed to acquire dquot type 0 [ 61.558906][ T1365] EXT4-fs (loop2): mount failed [ 61.696375][ T1175] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 61.789032][ T1372] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.795953][ T1372] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.813922][ T1372] device bridge_slave_0 entered promiscuous mode [ 61.835378][ T1372] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.862794][ T1372] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.870509][ T24] audit: type=1400 audit(1722357951.280:372): avc: denied { setopt } for pid=1364 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.895183][ T1372] device bridge_slave_1 entered promiscuous mode [ 62.056451][ T1175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.057830][ T1372] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.073841][ T1175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.083543][ T1372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.083630][ T1372] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.097432][ T1372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.116414][ T1175] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.134614][ T1175] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.150002][ T1175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.157969][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.166212][ T1175] usb 1-1: config 0 descriptor?? [ 62.176715][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.202824][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.252192][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.316573][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.323421][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.330843][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.338850][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.345687][ T638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.365188][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.373358][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.381315][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.408627][ T1372] device veth0_vlan entered promiscuous mode [ 62.417040][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.426255][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.467696][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.575080][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.585035][ T1372] device veth1_macvtap entered promiscuous mode [ 62.595333][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.604721][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.624235][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.632772][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.665451][ T376] device bridge_slave_1 left promiscuous mode [ 62.671534][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.679482][ T376] device bridge_slave_0 left promiscuous mode [ 62.685818][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.693777][ T376] device veth1_macvtap left promiscuous mode [ 62.699712][ T376] device veth0_vlan left promiscuous mode [ 62.797913][ T1175] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 62.815642][ T1175] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 62.837467][ T1175] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 62.915768][ T1397] EXT4-fs (loop1): Ignoring removed orlov option [ 62.927040][ T594] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 62.935615][ T1397] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro, [ 63.282906][ T1404] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.298806][ T1404] EXT4-fs (loop1): Remounting filesystem read-only [ 63.484244][ T638] usb 1-1: USB disconnect, device number 7 [ 63.538690][ T1413] EXT4-fs (loop4): journaled quota format not specified [ 63.656570][ T594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.667711][ T594] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.676626][ T594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.686170][ T594] usb 4-1: config 0 descriptor?? [ 63.741058][ T282] bridge0: port 3(syz_tun) entered disabled state [ 63.748161][ T282] device syz_tun left promiscuous mode [ 63.753449][ T282] bridge0: port 3(syz_tun) entered disabled state [ 63.855538][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.862449][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.870243][ T1416] device bridge_slave_0 entered promiscuous mode [ 63.877287][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.886440][ T5] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.889052][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.901666][ T1416] device bridge_slave_1 entered promiscuous mode [ 63.909709][ T24] audit: type=1400 audit(1722357953.320:373): avc: denied { read } for pid=1420 comm="syz.2.335" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.936491][ T24] audit: type=1400 audit(1722357953.320:374): avc: denied { open } for pid=1420 comm="syz.2.335" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.992117][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.999001][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.006066][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.012900][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.043700][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.051608][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.059218][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.080214][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.089295][ T1426] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 64.102768][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.109620][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.117523][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.125792][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.132669][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.140147][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.152012][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.169676][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.182029][ T1416] device veth0_vlan entered promiscuous mode [ 64.188690][ T594] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 64.194374][ T1416] device veth1_macvtap entered promiscuous mode [ 64.199485][ T594] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0013/input/input13 [ 64.271569][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.280098][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.288809][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.302099][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.311266][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.319168][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.428108][ T24] audit: type=1400 audit(1722357953.810:375): avc: denied { map } for pid=1434 comm="syz.0.341" path="socket:[20606]" dev="sockfs" ino=20606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.465234][ T594] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 64.521976][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.534143][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.543079][ T24] audit: type=1400 audit(1722357953.810:376): avc: denied { read } for pid=1434 comm="syz.0.341" path="socket:[20606]" dev="sockfs" ino=20606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.891347][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.902453][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.915532][ T5] usb 5-1: Product: ᭓俻⑛ﻋ㸨庅Ĭ憧묂㒓욖䥁棨驻†ᢓ炠ч醯꒼⃁γſt箔ﯔ즜䔓⼙ꧮ整㽢ଡ଼扐⼽ኰ覺 [ 64.931022][ T5] usb 5-1: Manufacturer: 襈폠趷㕕䜴액霴쥱穬ᒪ惷︞넔䪲ꀱࠤ不掝㨌讀ర칹虽냙玩沁ퟭ抢୳籸䡩ʞ殮妻淓㉦뭣ణࡰ⌼軦쒦윈ϊ╠發㑏㑡샡左఍鈤澾ﵔ勉귿鰩猾勺䇸뛨⑖㏷ⲧ怠풚裠輟ᵱ垝於䠟ᖜ䉗ޏ撱肌퍎힔嬥ᐌ탤।맸 [ 64.960333][ T24] audit: type=1400 audit(1722357954.370:377): avc: denied { connect } for pid=1392 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.980083][ T5] usb 5-1: SerialNumber: Ѝ [ 65.021955][ T376] device bridge_slave_1 left promiscuous mode [ 65.028393][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.035816][ T376] device bridge_slave_0 left promiscuous mode [ 65.042367][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.051826][ T376] device veth1_macvtap left promiscuous mode [ 65.057787][ T376] device veth0_vlan left promiscuous mode [ 65.110458][ T1456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=1456 comm=syz.0.346 [ 65.138741][ T1450] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 65.366497][ T1469] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 65.446736][ T638] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 65.464815][ T1466] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,stripe=0x00000000000000b3,journal_ioprio=0x0000000000000006,abort,,errors=continue [ 65.596532][ T5] usb 5-1: 0:2 : does not exist [ 65.602375][ T5] usb 5-1: USB disconnect, device number 8 [ 65.608121][ T1175] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 65.846380][ T1175] usb 2-1: Using ep0 maxpacket: 16 [ 65.846415][ T638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.871674][ T638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.881562][ T638] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.894829][ T638] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.905195][ T638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.915502][ T638] usb 1-1: config 0 descriptor?? [ 65.986628][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.997416][ T1175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.010332][ T1175] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.019394][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.028239][ T1175] usb 2-1: config 0 descriptor?? [ 66.073838][ T594] usb 4-1: USB disconnect, device number 7 [ 66.137992][ T1483] EXT4-fs (loop4): 1 orphan inode deleted [ 66.143574][ T1483] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 66.162292][ T1483] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 66.206391][ T5] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 66.267430][ T1465] bridge0: port 3(syz_tun) entered blocking state [ 66.273685][ T1465] bridge0: port 3(syz_tun) entered disabled state [ 66.282056][ T1465] device syz_tun entered promiscuous mode [ 66.288193][ T1465] bridge0: port 3(syz_tun) entered blocking state [ 66.294412][ T1465] bridge0: port 3(syz_tun) entered forwarding state [ 66.313574][ T1465] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 66.420989][ T638] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 66.429782][ T638] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 66.455341][ T638] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 66.556464][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 66.605758][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 66.605770][ T24] audit: type=1400 audit(1722357956.010:381): avc: denied { mounton } for pid=1464 comm="syz.1.349" path="/2/file0" dev="incremental-fs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.635502][ T1175] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 66.643285][ T1175] microsoft 0003:045E:07DA.0015: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 66.654585][ T1175] microsoft 0003:045E:07DA.0015: no inputs found [ 66.660834][ T1175] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 66.686783][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.697617][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.698545][ T594] usb 1-1: USB disconnect, device number 8 [ 66.710632][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.726879][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.735254][ T5] usb 3-1: config 0 descriptor?? [ 66.976727][ T1063] EXT4-fs error (device loop4): ext4_map_blocks:600: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 66.991216][ T1063] EXT4-fs (loop4): Remounting filesystem read-only [ 67.037782][ T1465] udc-core: couldn't find an available UDC or it's busy [ 67.044613][ T1465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.052561][ T712] usb 2-1: USB disconnect, device number 8 [ 67.115481][ T24] audit: type=1400 audit(1722357956.520:382): avc: denied { mounton } for pid=1494 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.144677][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.151834][ T1494] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.159179][ T1494] device bridge_slave_0 entered promiscuous mode [ 67.167577][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.174416][ T1494] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.182153][ T1494] device bridge_slave_1 entered promiscuous mode [ 67.214415][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.217513][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.221276][ T1494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.228763][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.235385][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.242600][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.249230][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.263649][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.271132][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.279703][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.286847][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.293966][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.300928][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.308214][ T5] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 67.320719][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input15 [ 67.333711][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.342259][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.349823][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.377029][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.385442][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.393616][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.400477][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.407820][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.623185][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.630090][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.637428][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.645255][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.653768][ T5] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 67.669648][ T5] usb 3-1: USB disconnect, device number 9 [ 67.697099][ T24] audit: type=1400 audit(1722357957.110:383): avc: denied { unlink } for pid=1416 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.721209][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.730631][ T1494] device veth0_vlan entered promiscuous mode [ 67.738649][ T1416] bridge0: port 3(syz_tun) entered disabled state [ 67.745562][ T1416] device syz_tun left promiscuous mode [ 67.750893][ T1416] bridge0: port 3(syz_tun) entered disabled state [ 67.758346][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.765785][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.778389][ T1494] device veth1_macvtap entered promiscuous mode [ 67.784942][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.797038][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.811580][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.879942][ T1506] EXT4-fs (loop4): Ignoring removed orlov option [ 67.901501][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.910358][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.915016][ T1506] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro, [ 67.917715][ T1510] device bridge_slave_0 entered promiscuous mode [ 67.935328][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.944625][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.953280][ T1510] device bridge_slave_1 entered promiscuous mode [ 68.003241][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.010148][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.017225][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.023981][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.049175][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.056593][ T638] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.063655][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.073253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.081506][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.089581][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.096448][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.326301][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 68.337088][ T689] device bridge_slave_1 left promiscuous mode [ 68.342993][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.350416][ T689] device bridge_slave_0 left promiscuous mode [ 68.356365][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.363853][ T689] device veth1_macvtap left promiscuous mode [ 68.369812][ T689] device veth0_vlan left promiscuous mode [ 68.450309][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.458905][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.467112][ T712] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.473974][ T712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.489482][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.500841][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.508696][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.520275][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.535341][ T1510] device veth0_vlan entered promiscuous mode [ 68.542072][ T1526] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,data_err=ignore,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue [ 68.566834][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.575004][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.583819][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.591665][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.599596][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.606997][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.618656][ T1510] device veth1_macvtap entered promiscuous mode [ 68.624797][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 68.630344][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.639004][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.647149][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.657040][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.665359][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.697319][ T24] audit: type=1400 audit(1722357958.100:384): avc: denied { read } for pid=1533 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.720367][ T1494] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.736605][ T1494] EXT4-fs (loop4): Remounting filesystem read-only [ 68.744366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.752726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.766618][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.780754][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.785821][ T1539] xt_bpf: check failed: parse error [ 68.795425][ T25] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 68.805061][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.816820][ T25] usb 4-1: config 0 descriptor?? [ 68.890483][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.897421][ T1541] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.904438][ T1541] device bridge_slave_0 entered promiscuous mode [ 68.911185][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.918107][ T1541] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.925112][ T1541] device bridge_slave_1 entered promiscuous mode [ 68.960821][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.967683][ T1541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.974748][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.981568][ T1541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.988878][ T594] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 69.004197][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.011698][ T638] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.018819][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.037549][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.045590][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.054238][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.061091][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.066407][ T5] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 69.068557][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.083450][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.090292][ T638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.097449][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.105233][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.120061][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.127843][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.135568][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.143451][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.153855][ T1541] device veth0_vlan entered promiscuous mode [ 69.163287][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.171543][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.182955][ T1541] device veth1_macvtap entered promiscuous mode [ 69.191570][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.198998][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.207213][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.217070][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.225015][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.277041][ T25] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 69.283911][ T25] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 69.290965][ T25] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 69.297803][ T25] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 69.304517][ T25] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 69.312048][ T25] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 69.366511][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.377516][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.387141][ T594] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 69.395917][ T594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.405776][ T594] usb 1-1: config 0 descriptor?? [ 69.426420][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.437240][ T5] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.446089][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.457982][ T5] usb 2-1: config 0 descriptor?? [ 69.488784][ T689] device bridge_slave_1 left promiscuous mode [ 69.494930][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.502257][ T25] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 69.502376][ T689] device bridge_slave_0 left promiscuous mode [ 69.516128][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.524099][ T689] device bridge_slave_1 left promiscuous mode [ 69.531739][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.539995][ T689] device bridge_slave_0 left promiscuous mode [ 69.545928][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.554224][ T689] device veth1_macvtap left promiscuous mode [ 69.560116][ T689] device veth0_vlan left promiscuous mode [ 69.565932][ T689] device veth1_macvtap left promiscuous mode [ 69.572130][ T689] device veth0_vlan left promiscuous mode [ 69.785820][ T24] audit: type=1326 audit(1722357959.160:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0a6e3b9 code=0x7ffc0000 [ 69.826149][ T24] audit: type=1326 audit(1722357959.160:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0a6e3b9 code=0x7ffc0000 [ 69.851228][ T24] audit: type=1326 audit(1722357959.160:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e0a6e3b9 code=0x7ffc0000 [ 69.875967][ T24] audit: type=1326 audit(1722357959.160:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0a6e3b9 code=0x7ffc0000 [ 69.899380][ T24] audit: type=1326 audit(1722357959.160:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0a6e3b9 code=0x7ffc0000 [ 69.918505][ T594] hid-multitouch 0003:1FD2:6007.0018: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 69.922865][ T24] audit: type=1326 audit(1722357959.160:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd4e0a6e3b9 code=0x7ffc0000 [ 69.957906][ T5] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 69.967667][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input16 [ 70.048993][ T5] keytouch 0003:0926:3333.0019: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 70.123776][ T311] usb 1-1: USB disconnect, device number 9 [ 70.336663][ T5] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.394513][ T1518] device syzkaller0 entered promiscuous mode [ 70.476508][ T25] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 70.517397][ T1558] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 70.596541][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 70.676398][ T638] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 70.716635][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.846868][ T5] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 70.856402][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 70.866178][ T5] usb 5-1: SerialNumber: syz [ 70.915583][ T5] usb 5-1: config 0 descriptor?? [ 71.066583][ T638] usb 3-1: Using ep0 maxpacket: 16 [ 71.124167][ T1570] netlink: 'syz.3.380': attribute type 8 has an invalid length. [ 71.226706][ T638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.230511][ T5] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 71.237589][ T638] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.257238][ T638] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.257252][ T638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.266097][ T638] usb 3-1: config 0 descriptor?? [ 71.267015][ T5] uvcvideo: No valid video chain found. [ 71.376710][ T594] usb 4-1: USB disconnect, device number 8 [ 71.411267][ T1554] netlink: 'syz.4.376': attribute type 8 has an invalid length. [ 71.496127][ T348] usb 2-1: USB disconnect, device number 9 [ 71.635907][ T1572] udc-core: couldn't find an available UDC or it's busy [ 71.643316][ T1572] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.959852][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 71.967346][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 71.976142][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 71.983649][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 71.990921][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 71.998477][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 72.005530][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 72.012902][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 72.026485][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 72.033532][ T638] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 72.047256][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 72.047267][ T24] audit: type=1400 audit(1722357961.460:419): avc: denied { map } for pid=1581 comm="syz.3.383" path="/dev/ashmem" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.047940][ T638] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input17 [ 72.206973][ T638] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 72.543764][ T24] audit: type=1400 audit(1722357961.950:420): avc: denied { write } for pid=1587 comm="syz.0.385" name="fdinfo" dev="proc" ino=21263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.574217][ T5] usb 3-1: USB disconnect, device number 10 [ 72.578727][ T24] audit: type=1400 audit(1722357961.970:421): avc: denied { add_name } for pid=1587 comm="syz.0.385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 72.580005][ T24] audit: type=1400 audit(1722357961.970:422): avc: denied { create } for pid=1587 comm="syz.0.385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 72.671463][ T24] audit: type=1400 audit(1722357961.980:423): avc: denied { associate } for pid=1587 comm="syz.0.385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 73.155519][ T5] usb 5-1: USB disconnect, device number 9 [ 73.206506][ T638] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 73.262724][ T1607] xt_bpf: check failed: parse error [ 73.566685][ T348] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 73.648603][ T24] audit: type=1400 audit(1722357963.060:424): avc: denied { setcurrent } for pid=1614 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.668324][ T24] audit: type=1401 audit(1722357963.060:425): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 73.686445][ T638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.698382][ T638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.708223][ T638] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 73.717640][ T638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.726240][ T638] usb 1-1: config 0 descriptor?? [ 73.836366][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 73.836413][ T5] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.966453][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.977337][ T348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.990101][ T348] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.999001][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.007307][ T348] usb 3-1: config 0 descriptor?? [ 74.197894][ T638] hid-multitouch 0003:1FD2:6007.001B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 74.277680][ T1609] bridge0: port 3(syz_tun) entered blocking state [ 74.284148][ T1609] bridge0: port 3(syz_tun) entered disabled state [ 74.292602][ T1609] device syz_tun entered promiscuous mode [ 74.298533][ T1609] bridge0: port 3(syz_tun) entered blocking state [ 74.304768][ T1609] bridge0: port 3(syz_tun) entered forwarding state [ 74.312603][ T1609] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.448405][ T25] usb 1-1: USB disconnect, device number 10 [ 74.547529][ T348] microsoft 0003:045E:07DA.001C: No inputs registered, leaving [ 74.555887][ T348] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 74.573676][ T348] microsoft 0003:045E:07DA.001C: no inputs found [ 74.580009][ T348] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 74.959645][ T1609] udc-core: couldn't find an available UDC or it's busy [ 74.966551][ T1609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.974325][ T25] usb 3-1: USB disconnect, device number 11 [ 75.266390][ T594] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 75.626447][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.637218][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.647155][ T594] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 75.656089][ T594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.666821][ T594] usb 1-1: config 0 descriptor?? [ 80.866426][ T594] usbhid 1-1:0.0: can't add hid device: -32 [ 80.872218][ T594] usbhid: probe of 1-1:0.0 failed with error -32 [ 84.393337][ T1643] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.400254][ T1643] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.407646][ T1643] device bridge_slave_0 entered promiscuous mode [ 84.428404][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.435248][ T1643] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.442787][ T1643] device bridge_slave_1 entered promiscuous mode [ 84.462277][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.469510][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.476976][ T1644] device bridge_slave_0 entered promiscuous mode [ 84.495261][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.502281][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.509675][ T1644] device bridge_slave_1 entered promiscuous mode [ 84.555528][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.562393][ T1643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.569492][ T1643] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.576260][ T1643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.810358][ T24] audit: type=1400 audit(1722358002.220:426): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.086319][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 174.092751][ C0] rcu: 0-....: (10002 ticks this GP) idle=d56/1/0x4000000000000000 softirq=9524/9525 fqs=4995 last_accelerate: a774/ce84 dyntick_enabled: 1 [ 174.106874][ C0] (t=10000 jiffies g=8761 q=4392) [ 174.111817][ C0] NMI backtrace for cpu 0 [ 174.115988][ C0] CPU: 0 PID: 1625 Comm: syz.3.398 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 174.125620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.135522][ C0] Call Trace: [ 174.138636][ C0] [ 174.141344][ C0] dump_stack_lvl+0x1e2/0x24b [ 174.145843][ C0] ? panic+0x812/0x812 [ 174.149748][ C0] ? bfq_pos_tree_add_move+0x43b/0x43b [ 174.155044][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 174.160339][ C0] ? vprintk_func+0x19d/0x1e0 [ 174.164851][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 174.169537][ C0] ? printk+0xd1/0x111 [ 174.173448][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.179343][ C0] dump_stack+0x15/0x17 [ 174.183337][ C0] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 174.189152][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.195055][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 174.200785][ C0] rcu_dump_cpu_stacks+0x199/0x2b0 [ 174.205731][ C0] rcu_sched_clock_irq+0xf8a/0x1890 [ 174.210764][ C0] ? rcutree_dead_cpu+0x340/0x340 [ 174.215625][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 174.220658][ C0] update_process_times+0x198/0x200 [ 174.225695][ C0] tick_sched_timer+0x188/0x240 [ 174.230380][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 174.235759][ C0] __hrtimer_run_queues+0x3d7/0xa50 [ 174.240795][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 174.245741][ C0] ? clockevents_program_event+0x214/0x2c0 [ 174.251385][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 174.257286][ C0] hrtimer_interrupt+0x39a/0x8b0 [ 174.262062][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 174.267791][ C0] asm_call_irq_on_stack+0xf/0x20 [ 174.272646][ C0] [ 174.275426][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 174.280897][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 174.286711][ C0] RIP: 0010:tipc_sk_rcv+0x17a3/0x1e30 [ 174.291922][ C0] Code: 93 fc fe ff 48 8b 7c 24 28 48 83 ef 80 48 89 7c 24 28 be 04 00 00 00 e8 ab 49 0f fd bb ff ff ff ff f0 41 0f c1 9d 80 00 00 00 01 00 00 00 89 de e8 71 b3 d1 fc 83 fb 01 75 0f e8 b7 af d1 fc [ 174.311358][ C0] RSP: 0018:ffffc90000ea6a40 EFLAGS: 00000213 [ 174.317259][ C0] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff8498f925 [ 174.325071][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88810b8b9980 [ 174.332882][ C0] RBP: ffffc90000ea6cd0 R08: dffffc0000000000 R09: ffffed1021717331 [ 174.340692][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 174.348509][ C0] R13: ffff88810b8b9900 R14: 00000000d773a20c R15: ffffc90000ea6e80 [ 174.356326][ C0] ? tipc_sk_rcv+0x1795/0x1e30 [ 174.360923][ C0] ? exc_page_fault+0x33d/0x5b0 [ 174.365783][ C0] ? copy_user_enhanced_fast_string+0x29/0x40 [ 174.371680][ C0] ? __skb_queue_purge+0x180/0x180 [ 174.376628][ C0] ? memset+0x35/0x40 [ 174.380449][ C0] ? kfree_skbmem+0x104/0x170 [ 174.384960][ C0] ? bpf_trace_run2+0xf4/0x280 [ 174.389560][ C0] tipc_node_xmit+0x34b/0xe30 [ 174.394074][ C0] ? kfree_skbmem+0x104/0x170 [ 174.398586][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 174.403707][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 174.409086][ C0] ? kfree_skbmem+0x104/0x170 [ 174.413601][ C0] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 174.419256][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 174.424017][ C0] ? kfree_skbmem+0x104/0x170 [ 174.428530][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 174.433390][ C0] ? __skb_queue_purge+0x180/0x180 [ 174.438338][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 174.443546][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 174.447975][ C0] ? __skb_queue_purge+0x180/0x180 [ 174.452917][ C0] ? search_extable+0xf0/0xf0 [ 174.457432][ C0] ? copy_user_enhanced_fast_string+0x27/0x40 [ 174.463333][ C0] ? search_extable+0xaf/0xf0 [ 174.467846][ C0] ? copy_user_enhanced_fast_string+0x27/0x40 [ 174.473748][ C0] ? copy_user_enhanced_fast_string+0x27/0x40 [ 174.479650][ C0] tipc_node_xmit+0x34b/0xe30 [ 174.484163][ C0] ? fixup_exception+0x94/0xd0 [ 174.488779][ C0] ? no_context+0x107/0xd20 [ 174.493129][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 174.498486][ C0] ? __kasan_check_write+0x14/0x20 [ 174.503434][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 174.508726][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 174.513418][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 174.518454][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 174.522963][ C0] ? __kasan_check_write+0x14/0x20 [ 174.527907][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 174.532770][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 174.537455][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 174.541795][ C0] ? kfree_skbmem+0x104/0x170 [ 174.546310][ C0] ? __skb_queue_purge+0x180/0x180 [ 174.551254][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 174.556464][ C0] tipc_node_xmit+0x34b/0xe30 [ 174.560976][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 174.566361][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 174.571398][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 174.576443][ C0] ? __kasan_check_write+0x14/0x20 [ 174.581376][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 174.586672][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 174.591530][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 174.596478][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 174.601253][ C0] __release_sock+0x148/0x410 [ 174.605776][ C0] release_sock+0x65/0x1b0 [ 174.610104][ C0] tipc_release+0xb6b/0x1440 [ 174.614528][ C0] sock_close+0xdf/0x270 [ 174.618608][ C0] ? sock_mmap+0xa0/0xa0 [ 174.622688][ C0] __fput+0x33d/0x7b0 [ 174.626509][ C0] ____fput+0x15/0x20 [ 174.630328][ C0] task_work_run+0x129/0x190 [ 174.634755][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 174.639786][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 174.645172][ C0] do_syscall_64+0x40/0x70 [ 174.649426][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 174.655147][ C0] RIP: 0033:0x7f0980c2a3b9 [ 174.659401][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.678841][ C0] RSP: 002b:00007f097f8aa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.687084][ C0] RAX: 00000000000203a0 RBX: 00007f0980db8f80 RCX: 00007f0980c2a3b9 [ 174.694910][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 174.702857][ C0] RBP: 00007f0980c978e6 R08: 0000000000000000 R09: 0000000000000000 [ 174.710661][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.718472][ C0] R13: 000000000000000b R14: 00007f0980db8f80 R15: 00007ffd843b6278 [ 177.887877][ T348] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10330 jiffies s: 6061 root: 0x1/. [ 177.900622][ T348] rcu: blocking rcu_node structures: [ 177.905717][ T348] Task dump for CPU 0: [ 177.909650][ T348] task:syz.3.398 state:R running task stack: 0 pid: 1625 ppid: 1372 flags:0x0000400c [ 177.920243][ T348] Call Trace: [ 177.923358][ T348] ? tipc_sk_dump+0xf50/0xf50 [ 177.927869][ T348] ? __kasan_check_write+0x14/0x20 [ 177.932804][ T348] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 177.937676][ T348] ? kmem_cache_free+0xa9/0x1e0 [ 177.942352][ T348] ? tipc_sk_rcv+0x8a1/0x1e30 [ 177.946891][ T348] ? kfree_skbmem+0x104/0x170 [ 177.951380][ T348] ? __skb_queue_purge+0x180/0x180 [ 177.956339][ T348] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 177.961535][ T348] ? tipc_node_xmit+0x34b/0xe30 [ 177.966217][ T348] ? tipc_node_get_linkname+0x190/0x190 [ 177.971612][ T348] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 177.976828][ T348] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 177.981839][ T348] ? __kasan_check_write+0x14/0x20 [ 177.986799][ T348] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 177.992081][ T348] ? __tipc_shutdown+0xe7c/0x1510 [ 177.996961][ T348] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 178.002065][ T348] ? tipc_sk_timeout+0xab0/0xab0 [ 178.006850][ T348] ? __release_sock+0x148/0x410 [ 178.011527][ T348] ? release_sock+0x65/0x1b0 [ 178.015954][ T348] ? tipc_release+0xb6b/0x1440 [ 178.020563][ T348] ? sock_close+0xdf/0x270 [ 178.024802][ T348] ? sock_mmap+0xa0/0xa0 [ 178.028892][ T348] ? __fput+0x33d/0x7b0 [ 178.032874][ T348] ? ____fput+0x15/0x20 [ 178.036914][ T348] ? task_work_run+0x129/0x190 [ 178.041467][ T348] ? exit_to_user_mode_loop+0xbf/0xd0 [ 178.046686][ T348] ? syscall_exit_to_user_mode+0xa2/0x1a0 [ 178.052226][ T348] ? do_syscall_64+0x40/0x70 [ 178.056668][ T348] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 308.900198][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.3.398:1625] [ 308.908181][ C0] Modules linked in: [ 308.911917][ C0] CPU: 0 PID: 1625 Comm: syz.3.398 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 308.921543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 308.931444][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x42/0x60 [ 308.937434][ C0] Code: c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 <48> 8b 32 48 8d 7e 01 8b 89 bc 0a 00 00 48 39 cf 73 08 48 89 44 f2 [ 308.957479][ C0] RSP: 0018:ffffc90000ea6a30 EFLAGS: 00000246 [ 308.963373][ C0] RAX: ffffffff8498f991 RBX: 0000000000000005 RCX: ffff88810d4793c0 [ 308.971186][ C0] RDX: ffffc90002565000 RSI: 000000000003ffff RDI: 0000000000040000 [ 308.979000][ C0] RBP: ffffc90000ea6a30 R08: ffffffff8498f95c R09: ffffed1021717331 [ 308.986811][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 308.994625][ C0] R13: ffff88810b8b9900 R14: 00000000d773a20c R15: ffffc90000ea6e80 [ 309.002436][ C0] FS: 00007f097f8aa6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.011210][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.017627][ C0] CR2: 0000000000000000 CR3: 000000011a560000 CR4: 00000000003506b0 [ 309.025438][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.033243][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.041060][ C0] Call Trace: [ 309.044180][ C0] [ 309.046876][ C0] ? show_regs+0x58/0x60 [ 309.050953][ C0] ? watchdog_timer_fn+0x471/0x590 [ 309.055899][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 309.061020][ C0] ? __hrtimer_run_queues+0x3d7/0xa50 [ 309.066229][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 309.071173][ C0] ? clockevents_program_event+0x214/0x2c0 [ 309.076830][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 309.082718][ C0] ? hrtimer_interrupt+0x39a/0x8b0 [ 309.087671][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 309.093568][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 309.098600][ C0] [ 309.101387][ C0] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 309.107024][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 309.113048][ C0] ? tipc_sk_rcv+0x17cc/0x1e30 [ 309.117611][ C0] ? tipc_sk_rcv+0x1801/0x1e30 [ 309.122214][ C0] ? __sanitizer_cov_trace_pc+0x42/0x60 [ 309.127592][ C0] tipc_sk_rcv+0x1801/0x1e30 [ 309.132019][ C0] ? exc_page_fault+0x33d/0x5b0 [ 309.136708][ C0] ? copy_user_enhanced_fast_string+0x29/0x40 [ 309.142607][ C0] ? __skb_queue_purge+0x180/0x180 [ 309.147555][ C0] ? memset+0x35/0x40 [ 309.151371][ C0] ? kfree_skbmem+0x104/0x170 [ 309.155889][ C0] ? bpf_trace_run2+0xf4/0x280 [ 309.160487][ C0] tipc_node_xmit+0x34b/0xe30 [ 309.164999][ C0] ? kfree_skbmem+0x104/0x170 [ 309.169518][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 309.174632][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 309.180015][ C0] ? kfree_skbmem+0x104/0x170 [ 309.184528][ C0] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 309.190173][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 309.194942][ C0] ? kfree_skbmem+0x104/0x170 [ 309.199456][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 309.204317][ C0] ? __skb_queue_purge+0x180/0x180 [ 309.209265][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 309.214472][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 309.218914][ C0] ? __skb_queue_purge+0x180/0x180 [ 309.223843][ C0] ? search_extable+0xf0/0xf0 [ 309.228360][ C0] ? copy_user_enhanced_fast_string+0x27/0x40 [ 309.234259][ C0] ? search_extable+0xaf/0xf0 [ 309.238781][ C0] ? copy_user_enhanced_fast_string+0x27/0x40 [ 309.244673][ C0] ? copy_user_enhanced_fast_string+0x27/0x40 [ 309.250581][ C0] tipc_node_xmit+0x34b/0xe30 [ 309.255093][ C0] ? fixup_exception+0x94/0xd0 [ 309.259688][ C0] ? no_context+0x107/0xd20 [ 309.264294][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 309.269674][ C0] ? __kasan_check_write+0x14/0x20 [ 309.274619][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 309.279930][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 309.284603][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 309.289648][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 309.294151][ C0] ? __kasan_check_write+0x14/0x20 [ 309.299094][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 309.303953][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 309.308644][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 309.312982][ C0] ? kfree_skbmem+0x104/0x170 [ 309.317498][ C0] ? __skb_queue_purge+0x180/0x180 [ 309.322441][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 309.327651][ C0] tipc_node_xmit+0x34b/0xe30 [ 309.332161][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 309.337546][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 309.342578][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 309.347613][ C0] ? __kasan_check_write+0x14/0x20 [ 309.352559][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 309.357853][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 309.362713][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 309.367663][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 309.372434][ C0] __release_sock+0x148/0x410 [ 309.376951][ C0] release_sock+0x65/0x1b0 [ 309.381200][ C0] tipc_release+0xb6b/0x1440 [ 309.385626][ C0] sock_close+0xdf/0x270 [ 309.389745][ C0] ? sock_mmap+0xa0/0xa0 [ 309.393787][ C0] __fput+0x33d/0x7b0 [ 309.397608][ C0] ____fput+0x15/0x20 [ 309.401422][ C0] task_work_run+0x129/0x190 [ 309.405852][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 309.411002][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 309.416375][ C0] do_syscall_64+0x40/0x70 [ 309.420633][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 309.426347][ C0] RIP: 0033:0x7f0980c2a3b9 [ 309.430602][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.450044][ C0] RSP: 002b:00007f097f8aa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.458285][ C0] RAX: 00000000000203a0 RBX: 00007f0980db8f80 RCX: 00007f0980c2a3b9 [ 309.466092][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 309.473907][ C0] RBP: 00007f0980c978e6 R08: 0000000000000000 R09: 0000000000000000 [ 309.481804][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.489615][ C0] R13: 000000000000000b R14: 00007f0980db8f80 R15: 00007ffd843b6278 [ 309.497443][ C0] Sending NMI from CPU 0 to CPUs 1: [ 309.502508][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_enter+0x416/0x760