last executing test programs: 15.968369905s ago: executing program 2 (id=7045): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000c00)={0x1, 0x1, &(0x7f0000000bc0)="b8"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0xe, 0x3, 0xf, 0x7}, {0xfffa, 0x10, 0xf3, 0x9}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007831c8235c045016"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x2395d4b2b223f749, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1, 0xffe0}, {0xd, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x48000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) 14.498282484s ago: executing program 2 (id=7048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000232c6a1a13ee26c07f2ab8482ff410b157b07be921773c6151a5c76d8529dc062f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 11.711632334s ago: executing program 1 (id=7051): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=r0], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800f31ed5e5f60d67f8de7677d0000000000000000b0000000000000000d8947ad50000008805c74fb8c6cdbb93886c88bb41a231d64b22bcd61e1ac11526f13559f64a61583272a463b71ee4c52677c9460cc935faf95ddab42d5191002bdc1cbc40a272ce3344a7d27a73ad3ed0f858bc40ccfc7dfc3580756dce4aa93e055c77aa6b63639830441759ee0ff2e35ee358ca241e68120f2c0b3356"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0184001108003950"], 0x15) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007002100010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400160000000085000000039df83fe577cd4c69fc050e1b3e2e2f5b05716ff831aecc96c9c9a5fab9ddf22493bf1b5cd8207eb2aa19265886f1ad19d18c2309a4e4c193124c638e71dfe9c06d609637bdcdcfe1afb6f97c0268c037fcf5c8b5a6de33f6f46d5133c16c2b8f6bf617a7345db0eb8fbe0529699af9ec9044a0ab9b1680fdf5422ca244c5bfec30258aead1a91abb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r8, 0x5de21d485e277b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) 10.897593618s ago: executing program 2 (id=7052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ff0100000000000000000000000000000000000039277048fc619597c1ba54d8b5043a5bcc29d53df3000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1f, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffff9, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0xcb0a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 10.719064748s ago: executing program 1 (id=7053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000b00)=';\'', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r2, r3, 0x0, 0xe066) sendfile(r2, r3, 0x0, 0xffff) 10.668251334s ago: executing program 4 (id=7054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000007c0)={[], [{@obj_user={'obj_user', 0x3d, ',\xe5'}}, {@smackfsroot={'smackfsroot', 0x3d, 'syzkaller0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xc}}, {@measure}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r7, 0x1, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 10.62016454s ago: executing program 0 (id=7055): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000006200)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000001000000000000000000000000000000000000a48a240f4300baa91f8407c569500b6257642ab23fe01f430275d69680bf5371c62df32b4e6974b934d2829a9fd281c209d846d45f3bd6673c5086b2e5943180db90dee27e65fb88b202a1dff729c6fd68da9b99f37e69e6e277845a7385cc52c8ad81dc23656f772e358a67294409756e2f5f08fb48b90817475b9f86c422305f5643e62f16bce6f164bb0a80358da9441aa6c8f636f662e81c2a4e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_yield() ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x4, 0x0, 0x4, 0x7, 0x7fff, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000", @ANYBLOB="0000000000090000000000c6d635ae37cce9", @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_usb_connect$cdc_ecm(0x6, 0x4d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.468068767s ago: executing program 1 (id=7056): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[0x0]) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r4, 0x0, r4) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.406455819s ago: executing program 4 (id=7057): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000c00)={0x1, 0x1, &(0x7f0000000bc0)="b8"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0xe, 0x3, 0xf, 0x7}, {0xfffa, 0x10, 0xf3, 0x9}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007831c8235c045016"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x2395d4b2b223f749, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1, 0xffe0}, {0xd, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x48000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) 8.775865081s ago: executing program 3 (id=7058): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) getitimer(0x1, &(0x7f0000000400)) 8.649294316s ago: executing program 3 (id=7059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1f, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffff9, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0xcb0a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 8.549941337s ago: executing program 2 (id=7060): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007c000000000000050000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace(0x10, r4) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000072b976c780ef1c3e0000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.478568955s ago: executing program 4 (id=7061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000232c6a1a13ee26c07f2ab8482ff410b157b07be921773c6151a5c76d8529dc062f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.176855845s ago: executing program 4 (id=7062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ff0100000000000000000000000000000000000039277048fc619597c1ba54d8b5043a5bcc29d53df300010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1f, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffff9, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0xcb0a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 7.108093383s ago: executing program 0 (id=7063): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 6.944279292s ago: executing program 0 (id=7064): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa18402, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/139, 0x8b) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000240)=0x840) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)) syz_emit_ethernet(0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 5.879912755s ago: executing program 4 (id=7065): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0180003aed135aa40c749d4e5905648682a6a621b3d9e1e4c93a2be9643d0393126ac5e60d871a75951fa1feb51ec72a441e50c0e1487d2e41de5d83f52a0d4453491fd362054012d1eaac75aef7faa83adc930e7adbbfb3766dcfaa4d3ebb6c838f27783d8fd719f646912388839375f429bd6c519fac140d10b8e1f5f666311b5003aa59f2782b45f59c14bb24b8e688c96102e8905d50fa81e584867d710e9941e167dffe44d311f1149502101a9ef6c71af801a46539c8fefc9e0541842675"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.960142845s ago: executing program 3 (id=7066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000b00)=';\'', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r2, r3, 0x0, 0xe066) sendfile(r2, r3, 0x0, 0xffff) 3.848078248s ago: executing program 3 (id=7067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ff0100000000000000000000000000000000000039277048fc619597c1ba54d8b5043a5bcc29d53df300010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1f, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffff9, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 3.66016315s ago: executing program 0 (id=7068): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000fd000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000240)=@v3={0x3000000, [{}, {0xffffffff}]}, 0x18, 0x0) 3.6585523s ago: executing program 1 (id=7069): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) getitimer(0x1, &(0x7f0000000400)) 3.435225725s ago: executing program 2 (id=7070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ff0100000000000000000000000000000000000039277048fc619597c1ba54d8b5043a5bcc29d53df3000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1f, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffff9, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0xcb0a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 2.866978111s ago: executing program 1 (id=7071): epoll_create(0x827) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0x9, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fremovexattr(r0, &(0x7f0000000100)=@random={'osx.', 'police\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet(0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@dev, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 2.736331676s ago: executing program 3 (id=7072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040000080000008500000095000000950006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000001800181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 264.88285ms ago: executing program 1 (id=7073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000280)}, 0x20) userfaultfd(0x80001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r7, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) epoll_pwait(r7, 0x0, 0x0, 0x4, 0x0, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 261.915161ms ago: executing program 3 (id=7074): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r1, &(0x7f0000000180)=""/66, 0x42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x10, &(0x7f00000005c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @void, @value}, 0xc3) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file1\x00', 0x2000040, &(0x7f0000000400)={[{@errors_remount}, {@nodiscard}, {@lazytime}, {@init_itable}, {@abort}, {@lazytime}, {@grpquota}, {@delalloc}, {@abort}], [{@dont_measure}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '/\xf4'}}, {@smackfsdef={'smackfsdef', 0x3d, ',:-!^'}}, {@context={'context', 0x3d, 'staff_u'}}, {@flag='nolazytime'}]}, 0x12, 0x4df, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) fcntl$dupfd(r0, 0x0, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x42, 0x1, 0x0, 0x25dfdbff, {0xa}}, 0x14}}, 0x0) unshare(0x22020400) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x240008c0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000050000004121000032f318e0b594b74e49c0460e37baa2ef4ca12c9c5a2b6a044dcd87e8d0e3f138c4a53dec3143e0509a5f678a809a864b5105b7223b86057d201b7249892fcb86f436eb259daa28796174a4ab7c4ab9cdeee1041f2a3791420dd4009ba604ebb43df969626200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x2, 0xc20, 0x9, 0x12083, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000680)="c1c8e3c7b15e7b2718cc2aa2fc8f0f0118d37c20a68b9d0784134dda823be3cf250df48f0dd4d874db5c41c454c9d3eac632289bd4a1324320ac5b881dcd5d7a71aca185e89622f74aaa72cbc3269d4db5ccae88055243d90be9cca1f9f41b0bb66e533c0f955d1efdf12b7bd8b4153e6de1ea251728487e0f08c837253eb22b8107b27eb75c5767b2eed8fc270a98d2f067675a1385", &(0x7f0000000740)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 261.325011ms ago: executing program 4 (id=7075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ff0100000000000000000000000000000000000039277048fc619597c1ba54d8b5043a5bcc29d53d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1f, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffff9, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2], &(0x7f0000000a40)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 183.746719ms ago: executing program 2 (id=7076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x105}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r7}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="000000e2ffffff00b70800040019ccd30000007b8af8ff00000000bf0000f8fffffffbf10000080000c7ba1df1bad4803000b704000000000000851afa00010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) timerfd_create(0x0, 0x0) 174.004941ms ago: executing program 0 (id=7077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000b00)=';\'', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r2, r3, 0x0, 0xe066) sendfile(r2, r3, 0x0, 0xffff) 0s ago: executing program 0 (id=7078): openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x103000, 0x0) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000000c0)=@sg0, r5, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000040)={&(0x7f0000000100)={0x1d, 0x0, 0x10000000}, 0x10, &(0x7f00000004c0)={&(0x7f0000000180)={0x4, 0x423, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x4, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): .184227][T26679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3374.293524][T26679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3374.393029][T26679] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 3374.488261][T26679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3374.824473][T26679] usb 5-1: config 0 descriptor?? [ 3374.930556][T26679] usb 5-1: can't set config #0, error -71 [ 3374.978783][T26679] usb 5-1: USB disconnect, device number 101 [ 3377.916280][T28794] syz.4.6647[28794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3377.916407][T28794] syz.4.6647[28794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3378.012056][ T323] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3378.041416][T28794] input: syz0 as /devices/virtual/input/input101 [ 3379.122129][ T323] usb 4-1: Using ep0 maxpacket: 16 [ 3379.272338][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3379.293840][ T323] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3379.340787][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3379.417711][ T323] usb 4-1: config 0 descriptor?? [ 3379.580481][T28790] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 3379.655397][T28790] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3379.878772][T28790] F2FS-fs (loop1): invalid crc value [ 3380.134088][ T323] usb 4-1: can't set config #0, error -71 [ 3380.140736][ T323] usb 4-1: USB disconnect, device number 63 [ 3380.161438][T28790] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3380.446256][T28790] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3380.457332][T28790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3380.622219][ T323] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3380.702340][T19102] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 3381.022133][ T323] usb 4-1: Using ep0 maxpacket: 32 [ 3381.152204][T19102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3381.163286][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3381.197959][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3381.208500][T19102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3381.218528][ T323] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3381.227872][T19102] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 3381.237204][T19102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.245301][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.378297][ T1391] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 3382.165936][T19102] usb 5-1: config 0 descriptor?? [ 3382.171291][ T323] usb 4-1: config 0 descriptor?? [ 3382.213491][ T323] hub 4-1:0.0: USB hub found [ 3382.462087][ T323] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 3382.489503][T28838] FAULT_INJECTION: forcing a failure. [ 3382.489503][T28838] name failslab, interval 1, probability 0, space 0, times 0 [ 3382.503349][T28838] CPU: 1 PID: 28838 Comm: syz.3.6657 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3382.513165][T28838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3382.523059][T28838] Call Trace: [ 3382.526204][T28838] dump_stack_lvl+0x1e2/0x24b [ 3382.530710][T28838] ? panic+0x812/0x812 [ 3382.534720][T28838] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3382.540023][T28838] ? unwind_get_return_address+0x4d/0x90 [ 3382.545566][T28838] ? arch_stack_walk+0xf3/0x140 [ 3382.550257][T28838] dump_stack+0x15/0x17 [ 3382.554242][T28838] should_fail+0x3c6/0x510 [ 3382.558517][T28838] ? usb_hcd_submit_urb+0x8c4/0x1b70 [ 3382.563627][T28838] __should_failslab+0xa4/0xe0 [ 3382.568229][T28838] should_failslab+0x9/0x20 [ 3382.572581][T28838] __kmalloc+0x60/0x330 [ 3382.576651][T28838] ? _raw_spin_unlock+0x4d/0x70 [ 3382.581340][T28838] ? usb_hcd_link_urb_to_ep+0x252/0x320 [ 3382.586729][T28838] usb_hcd_submit_urb+0x8c4/0x1b70 [ 3382.591667][T28838] ? usb_alloc_urb+0x3d/0x140 [ 3382.596185][T28838] ? calculate_sizes+0x10/0x420 [ 3382.600864][T28838] ? dma_map_single_attrs+0x160/0x160 [ 3382.606076][T28838] ? do_proc_control+0x427/0xe30 [ 3382.610849][T28838] ? usbdev_ioctl+0x3eb2/0x5e10 [ 3382.615539][T28838] ? __se_sys_ioctl+0x114/0x190 [ 3382.620221][T28838] ? __x64_sys_ioctl+0x7b/0x90 [ 3382.624825][T28838] ? do_syscall_64+0x34/0x70 [ 3382.629378][T28838] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3382.635294][T28838] usb_submit_urb+0x106e/0x15c0 [ 3382.639981][T28838] usb_start_wait_urb+0x120/0x350 [ 3382.644828][T28838] ? usb_api_blocking_completion+0xb0/0xb0 [ 3382.650468][T28838] ? __kmalloc+0x1aa/0x330 [ 3382.654720][T28838] ? __kasan_check_write+0x14/0x20 [ 3382.659757][T28838] usb_control_msg+0x2ad/0x4c0 [ 3382.664363][T28838] ? usb_anchor_empty+0x40/0x40 [ 3382.669063][T28838] do_proc_control+0x427/0xe30 [ 3382.673638][T28838] ? mutex_lock+0xa5/0x110 [ 3382.677900][T28838] ? _copy_from_user+0x96/0xd0 [ 3382.682495][T28838] usbdev_ioctl+0x3eb2/0x5e10 [ 3382.687018][T28838] ? usbdev_poll+0x200/0x200 [ 3382.691429][T28838] ? 0xffffffffa00022a8 [ 3382.695457][T28838] ? is_bpf_text_address+0x172/0x190 [ 3382.700551][T28838] ? stack_trace_save+0x1c0/0x1c0 [ 3382.705421][T28838] ? __kernel_text_address+0x9b/0x110 [ 3382.710715][T28838] ? unwind_get_return_address+0x4d/0x90 [ 3382.716175][T28838] ? arch_stack_walk+0xf3/0x140 [ 3382.720874][T28838] ? stack_trace_save+0x113/0x1c0 [ 3382.725722][T28838] ? terminate_walk+0x407/0x4f0 [ 3382.730410][T28838] ? avc_has_extended_perms+0x1e3/0xf70 [ 3382.735792][T28838] ? memcpy+0x56/0x70 [ 3382.739611][T28838] ? avc_has_extended_perms+0x975/0xf70 [ 3382.745080][T28838] ? kasan_set_free_info+0x23/0x40 [ 3382.750022][T28838] ? ____kasan_slab_free+0x121/0x160 [ 3382.755139][T28838] ? __kasan_slab_free+0x11/0x20 [ 3382.759924][T28838] ? slab_free_freelist_hook+0xc0/0x190 [ 3382.765300][T28838] ? kmem_cache_free+0xa9/0x1e0 [ 3382.769988][T28838] ? putname+0xe7/0x140 [ 3382.773974][T28838] ? do_sys_openat2+0x1fc/0x710 [ 3382.778667][T28838] ? _kstrtoull+0x3a0/0x4a0 [ 3382.783115][T28838] ? kstrtouint_from_user+0x20a/0x2a0 [ 3382.788321][T28838] ? kstrtol_from_user+0x310/0x310 [ 3382.793278][T28838] ? __fsnotify_parent+0x4b9/0x6c0 [ 3382.798228][T28838] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 3382.804634][T28838] ? proc_fail_nth_write+0x20b/0x290 [ 3382.809759][T28838] ? ioctl_has_perm+0x1f8/0x560 [ 3382.814442][T28838] ? do_vfs_ioctl+0x798/0x1a30 [ 3382.819040][T28838] ? ioctl_has_perm+0x3f0/0x560 [ 3382.823728][T28838] ? preempt_count_add+0x92/0x1a0 [ 3382.828587][T28838] ? __x32_compat_sys_ioctl+0x90/0x90 [ 3382.833797][T28838] ? has_cap_mac_admin+0x3c0/0x3c0 [ 3382.838751][T28838] ? kernel_write+0x3d0/0x3d0 [ 3382.843271][T28838] ? selinux_file_ioctl+0x3cc/0x540 [ 3382.848301][T28838] ? selinux_file_alloc_security+0x120/0x120 [ 3382.854119][T28838] ? __fget_files+0x31e/0x380 [ 3382.858640][T28838] ? security_file_ioctl+0x84/0xb0 [ 3382.863603][T28838] ? usbdev_poll+0x200/0x200 [ 3382.868000][T28838] __se_sys_ioctl+0x114/0x190 [ 3382.872510][T28838] __x64_sys_ioctl+0x7b/0x90 [ 3382.876944][T28838] do_syscall_64+0x34/0x70 [ 3382.881198][T28838] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3382.886910][T28838] RIP: 0033:0x7f7a3140bff9 [ 3382.891172][T28838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3382.910606][T28838] RSP: 002b:00007f7a30085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3382.918854][T28838] RAX: ffffffffffffffda RBX: 00007f7a315c3f80 RCX: 00007f7a3140bff9 [ 3382.926662][T28838] RDX: 0000000020000000 RSI: 00000000c0105500 RDI: 0000000000000006 [ 3382.934482][T28838] RBP: 00007f7a30085090 R08: 0000000000000000 R09: 0000000000000000 [ 3382.942287][T28838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3382.950107][T28838] R13: 0000000000000000 R14: 00007f7a315c3f80 R15: 00007ffd255bb678 [ 3382.959985][ T1391] usb 2-1: device not accepting address 76, error -71 [ 3382.986280][T19102] smartjoyplus 0003:6666:8801.00A5: unknown main item tag 0x0 [ 3383.002131][ T323] usbhid 4-1:0.0: can't add hid device: -71 [ 3383.008148][ T323] usbhid: probe of 4-1:0.0 failed with error -71 [ 3383.016561][T19102] smartjoyplus 0003:6666:8801.00A5: ignoring exceeding usage max [ 3383.037050][T19102] smartjoyplus 0003:6666:8801.00A5: usage index exceeded [ 3383.045728][T19102] smartjoyplus 0003:6666:8801.00A5: item 0 0 2 0 parsing failed [ 3383.054376][T19102] smartjoyplus 0003:6666:8801.00A5: parse failed [ 3383.170011][ T323] usb 4-1: USB disconnect, device number 64 [ 3383.177948][T19102] smartjoyplus: probe of 0003:6666:8801.00A5 failed with error -22 [ 3383.240452][T19102] usb 5-1: USB disconnect, device number 102 [ 3385.292843][ T1391] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 3385.544291][T28846] overlayfs: failed to resolve './file1': -2 [ 3385.553820][T23152] device bridge_slave_1 left promiscuous mode [ 3385.559861][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 3385.569517][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 3385.579210][T23152] device veth1_macvtap left promiscuous mode [ 3385.585530][T23152] device veth0_vlan left promiscuous mode [ 3385.669153][ T1391] usb 2-1: Using ep0 maxpacket: 32 [ 3385.674657][T21833] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 3385.803218][ T1391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3385.866844][ T1391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3385.932215][T21833] usb 5-1: Using ep0 maxpacket: 32 [ 3386.003518][ T1391] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 3386.053240][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3386.096589][ T1391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3386.115206][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3386.291398][T21833] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3386.407340][T21833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3386.425901][ T1391] usb 2-1: config 0 descriptor?? [ 3386.458021][T21833] usb 5-1: config 0 descriptor?? [ 3386.504150][T21833] hub 5-1:0.0: USB hub found [ 3386.537661][T28877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 3386.546884][T28878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6669'. [ 3386.632861][ T24] audit: type=1326 audit(2000001470.286:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.657416][ T24] audit: type=1326 audit(2000001470.286:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.682545][T26679] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 3386.690600][ T24] audit: type=1326 audit(2000001470.306:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.718766][ T24] audit: type=1326 audit(2000001470.306:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.743293][T28877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6669'. [ 3386.743512][T21833] hub 5-1:0.0: 1 port detected [ 3386.756993][ T24] audit: type=1326 audit(2000001470.306:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.782480][ T24] audit: type=1326 audit(2000001470.336:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.854163][ T24] audit: type=1326 audit(2000001470.336:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.886335][ T24] audit: type=1326 audit(2000001470.336:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.898523][T28882] syz.0.6670[28882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3386.920158][T28882] syz.0.6670[28882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3386.931035][ T24] audit: type=1326 audit(2000001470.336:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3386.967005][ T24] audit: type=1326 audit(2000001470.336:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12b1fcff9 code=0x7ffc0000 [ 3387.002146][T26679] usb 3-1: device descriptor read/64, error -71 [ 3387.192175][ T1391] usbhid 2-1:0.0: can't add hid device: -71 [ 3387.198194][ T1391] usbhid: probe of 2-1:0.0 failed with error -71 [ 3387.207076][ T1391] usb 2-1: USB disconnect, device number 78 [ 3387.302125][T20207] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3387.392079][T26679] usb 3-1: device descriptor read/64, error -71 [ 3387.532512][ T1391] usb 5-1: USB disconnect, device number 103 [ 3387.542104][T20207] usb 4-1: Using ep0 maxpacket: 16 [ 3387.552127][T21833] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 3387.662233][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3387.673176][T26679] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3387.687328][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3387.827680][T20207] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 3387.837086][T20207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3387.940201][T20207] usb 4-1: config 0 descriptor?? [ 3388.122210][T26679] usb 3-1: device descriptor read/64, error -71 [ 3388.762129][T20207] usbhid 4-1:0.0: can't add hid device: -71 [ 3388.774223][T28894] FAULT_INJECTION: forcing a failure. [ 3388.774223][T28894] name fail_futex, interval 1, probability 0, space 0, times 1 [ 3388.787281][T20207] usbhid: probe of 4-1:0.0 failed with error -71 [ 3388.805367][T20207] usb 4-1: USB disconnect, device number 65 [ 3388.811407][T28894] CPU: 1 PID: 28894 Comm: syz.1.6673 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3388.821224][T28894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3388.831121][T28894] Call Trace: [ 3388.834260][T28894] dump_stack_lvl+0x1e2/0x24b [ 3388.838763][T28894] ? panic+0x812/0x812 [ 3388.842677][T28894] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3388.847979][T28894] dump_stack+0x15/0x17 [ 3388.851968][T28894] should_fail+0x3c6/0x510 [ 3388.856223][T28894] get_futex_key+0x183/0xe70 [ 3388.860657][T28894] ? futex_wait_restart+0x250/0x250 [ 3388.865678][T28894] ? __kasan_kmalloc+0x9/0x10 [ 3388.870228][T28894] futex_lock_pi+0x234/0x1000 [ 3388.874708][T28894] ? stack_trace_snprint+0xf0/0xf0 [ 3388.879664][T28894] ? futex_requeue+0x2190/0x2190 [ 3388.884432][T28894] ? slab_free_freelist_hook+0xc0/0x190 [ 3388.889813][T28894] ? kmem_cache_free+0xa9/0x1e0 [ 3388.894496][T28894] ? putname+0xe7/0x140 [ 3388.898569][T28894] ? do_sys_openat2+0x1fc/0x710 [ 3388.903263][T28894] ? do_syscall_64+0x34/0x70 [ 3388.907713][T28894] ? memset+0x35/0x40 [ 3388.911518][T28894] do_futex+0x2a2/0x17b0 [ 3388.915602][T28894] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 3388.922016][T28894] ? proc_fail_nth_write+0x20b/0x290 [ 3388.927145][T28894] ? proc_fail_nth_read+0x210/0x210 [ 3388.932184][T28894] ? security_file_permission+0x86/0xb0 [ 3388.937554][T28894] ? rw_verify_area+0x1c3/0x360 [ 3388.942235][T28894] ? preempt_count_add+0x92/0x1a0 [ 3388.947103][T28894] ? futex_exit_release+0x1e0/0x1e0 [ 3388.952141][T28894] ? kmem_cache_free+0xa9/0x1e0 [ 3388.956823][T28894] ? kernel_write+0x3d0/0x3d0 [ 3388.961333][T28894] ? __kasan_check_write+0x14/0x20 [ 3388.966286][T28894] ? mutex_lock+0xa5/0x110 [ 3388.970529][T28894] ? mutex_trylock+0xa0/0xa0 [ 3388.974973][T28894] __se_sys_futex+0x355/0x470 [ 3388.979487][T28894] ? __x64_sys_futex+0x100/0x100 [ 3388.984244][T28894] ? __ia32_sys_read+0x90/0x90 [ 3388.988857][T28894] __x64_sys_futex+0xe5/0x100 [ 3388.993369][T28894] do_syscall_64+0x34/0x70 [ 3388.997619][T28894] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3389.003347][T28894] RIP: 0033:0x7f3e83aa3ff9 [ 3389.007684][T28894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3389.027311][T28894] RSP: 002b:00007f3e8271d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3389.035556][T28894] RAX: ffffffffffffffda RBX: 00007f3e83c5bf80 RCX: 00007f3e83aa3ff9 [ 3389.043370][T28894] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000002000cffc [ 3389.051193][T28894] RBP: 00007f3e8271d090 R08: 0000000000000000 R09: 0000000000000000 [ 3389.058989][T28894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3389.066797][T28894] R13: 0000000000000000 R14: 00007f3e83c5bf80 R15: 00007fffd5b23168 [ 3389.077578][T26679] usb 3-1: device descriptor read/64, error -71 [ 3389.313287][T26679] usb usb3-port1: attempt power cycle [ 3389.562251][T20207] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3389.752488][T26679] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3389.923317][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3389.942459][T26679] usb 3-1: device descriptor read/8, error -71 [ 3389.963337][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3390.099978][ T428] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 3390.212373][T20207] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3390.221817][T20207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3390.239606][T20207] usb 4-1: config 0 descriptor?? [ 3390.332280][T26679] usb 3-1: device descriptor read/8, error -71 [ 3390.382099][ T428] usb 1-1: device descriptor read/64, error -71 [ 3390.652227][T26679] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3390.822202][T26679] usb 3-1: device descriptor read/8, error -71 [ 3390.902091][ T428] usb 1-1: device descriptor read/64, error -71 [ 3391.092587][T26679] usb 3-1: device descriptor read/8, error -71 [ 3391.182084][ T428] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 3391.213617][T26679] usb usb3-port1: unable to enumerate USB device [ 3391.472323][ T428] usb 1-1: device descriptor read/64, error -71 [ 3392.262155][T20207] usbhid 4-1:0.0: can't add hid device: -71 [ 3392.268279][T20207] usbhid: probe of 4-1:0.0 failed with error -71 [ 3392.277164][T20207] usb 4-1: USB disconnect, device number 66 [ 3392.312028][ T428] usb 1-1: device descriptor read/64, error -71 [ 3392.442114][ T428] usb usb1-port1: attempt power cycle [ 3392.712037][T20207] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3392.872023][ T428] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 3392.952143][T13737] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 3393.072152][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3393.072173][ T428] usb 1-1: device descriptor read/8, error -71 [ 3393.089179][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3393.098785][T20207] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3393.107732][T20207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3393.116891][T20207] usb 4-1: config 0 descriptor?? [ 3393.212122][T13737] usb 5-1: Using ep0 maxpacket: 32 [ 3393.332267][T13737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3393.343210][ T428] usb 1-1: device descriptor read/8, error -71 [ 3393.349262][T13737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3393.359051][T13737] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 3393.368001][T13737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3393.377327][T13737] usb 5-1: config 0 descriptor?? [ 3394.260262][ T428] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 3394.432131][ T428] usb 1-1: device descriptor read/8, error -71 [ 3394.440232][T28935] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.447209][T28935] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.454942][T28935] device bridge_slave_0 entered promiscuous mode [ 3394.462535][T28935] bridge0: port 2(bridge_slave_1) entered blocking state [ 3394.469727][T28935] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.477630][T28935] device bridge_slave_1 entered promiscuous mode [ 3394.562095][T13737] usbhid 5-1:0.0: can't add hid device: -71 [ 3394.568148][T13737] usbhid: probe of 5-1:0.0 failed with error -71 [ 3394.580518][T13737] usb 5-1: USB disconnect, device number 104 [ 3394.607709][T28935] bridge0: port 2(bridge_slave_1) entered blocking state [ 3394.614603][T28935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3394.622064][T28935] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.628930][T28935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3394.671739][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3394.679834][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.688091][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.702148][ T428] usb 1-1: device descriptor read/8, error -71 [ 3394.710471][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3394.719016][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.725938][T23152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3394.737748][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3394.746643][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 3394.753540][T23152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3394.779210][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3394.790891][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3394.822444][ T428] usb usb1-port1: unable to enumerate USB device [ 3394.830827][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3394.848628][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3394.857529][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3394.865233][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3394.874702][T28935] device veth0_vlan entered promiscuous mode [ 3394.896587][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3394.907731][T28935] device veth1_macvtap entered promiscuous mode [ 3394.923542][T16540] device bridge_slave_1 left promiscuous mode [ 3394.929643][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.938008][T16540] device bridge_slave_0 left promiscuous mode [ 3394.944286][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.953586][T16540] device veth1_macvtap left promiscuous mode [ 3394.959693][T16540] device veth0_vlan left promiscuous mode [ 3395.160970][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3395.187584][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3395.397359][T20207] usbhid 4-1:0.0: can't add hid device: -71 [ 3395.407105][T20207] usbhid: probe of 4-1:0.0 failed with error -71 [ 3395.438301][T20207] usb 4-1: USB disconnect, device number 67 [ 3397.012065][T19102] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 3399.662003][T19102] usb 5-1: device not accepting address 105, error -71 [ 3399.792995][T20207] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3399.853162][T28969] bridge0: port 1(bridge_slave_0) entered blocking state [ 3399.860222][T28969] bridge0: port 1(bridge_slave_0) entered disabled state [ 3399.877477][T28969] device bridge_slave_0 entered promiscuous mode [ 3400.132253][T20207] usb 4-1: Using ep0 maxpacket: 32 [ 3400.149656][T28969] bridge0: port 2(bridge_slave_1) entered blocking state [ 3400.180609][T28969] bridge0: port 2(bridge_slave_1) entered disabled state [ 3400.232644][T28969] device bridge_slave_1 entered promiscuous mode [ 3400.252826][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3400.313866][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3400.357992][T20207] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3400.399431][T20207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3400.576391][T20207] usb 4-1: config 0 descriptor?? [ 3400.616376][T20207] hub 4-1:0.0: USB hub found [ 3400.822293][T20207] hub 4-1:0.0: 1 port detected [ 3400.831993][T16540] device bridge_slave_1 left promiscuous mode [ 3400.838041][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 3400.848466][T16540] device bridge_slave_0 left promiscuous mode [ 3400.855953][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 3400.866273][T16540] device veth1_macvtap left promiscuous mode [ 3400.872244][T16540] device veth0_vlan left promiscuous mode [ 3402.024480][T28974] bridge0: port 1(bridge_slave_0) entered blocking state [ 3402.031499][T28974] bridge0: port 1(bridge_slave_0) entered disabled state [ 3402.039556][T28974] device bridge_slave_0 entered promiscuous mode [ 3402.047186][T28974] bridge0: port 2(bridge_slave_1) entered blocking state [ 3402.054242][T20207] hub 4-1:0.0: activate --> -90 [ 3402.059034][T28974] bridge0: port 2(bridge_slave_1) entered disabled state [ 3402.067083][T28974] device bridge_slave_1 entered promiscuous mode [ 3402.296044][T28994] incfs: Error accessing: ./file0. [ 3402.302478][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3402.309750][T28994] incfs: mount failed -20 [ 3402.310517][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3402.323526][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3402.332833][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3402.341185][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 3402.348131][T23152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3402.366498][T28994] incfs: Error accessing: ./file0. [ 3402.371553][T28994] incfs: mount failed -20 [ 3402.378467][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3402.390035][T28994] incfs: Error accessing: ./file0. [ 3402.396136][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3402.404693][T28994] incfs: mount failed -20 [ 3402.413079][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3402.430732][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 3402.437688][T23152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3402.537756][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3402.546891][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3402.554191][T21833] usb 4-1: USB disconnect, device number 68 [ 3402.562056][T20207] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 3402.573436][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3402.866601][ T24] kauditd_printk_skb: 328 callbacks suppressed [ 3402.866753][ T24] audit: type=1326 audit(2000001486.396:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3402.964248][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3403.382058][ T24] audit: type=1326 audit(2000001486.396:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.432790][ T24] audit: type=1326 audit(2000001486.406:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8e3dd990 code=0x7ffc0000 [ 3403.487089][ T24] audit: type=1326 audit(2000001486.416:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8e3dd990 code=0x7ffc0000 [ 3403.532033][ T24] audit: type=1326 audit(2000001486.416:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.555772][ T24] audit: type=1326 audit(2000001486.416:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.557152][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3403.580544][ T24] audit: type=1326 audit(2000001486.446:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.604746][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3403.643724][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3403.647773][ T24] audit: type=1326 audit(2000001486.446:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.685523][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3403.702069][ T24] audit: type=1326 audit(2000001486.446:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.728418][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3403.742889][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3403.752028][ T24] audit: type=1326 audit(2000001486.456:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28977 comm="syz.2.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3403.793573][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3403.802327][T11906] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3403.812736][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3403.832307][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3403.852265][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3403.863259][T20564] bridge0: port 1(bridge_slave_0) entered blocking state [ 3403.870131][T20564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3403.892334][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3403.918674][T28969] device veth0_vlan entered promiscuous mode [ 3403.937906][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3403.948384][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3403.967020][T20564] bridge0: port 2(bridge_slave_1) entered blocking state [ 3403.973966][T20564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3404.013312][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3404.021591][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3404.045296][T28969] device veth1_macvtap entered promiscuous mode [ 3404.054637][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3404.063762][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3404.072033][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3404.080615][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3404.089344][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3404.120380][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3404.129425][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3404.163726][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3404.173548][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3404.183732][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3404.192413][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3404.202286][T11906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3404.218984][T28974] device veth0_vlan entered promiscuous mode [ 3404.222019][T11906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3404.243148][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3404.258228][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3404.262078][T11906] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3404.292060][T11906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.298230][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3404.317806][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3404.329063][T11906] usb 3-1: config 0 descriptor?? [ 3404.344845][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3404.364805][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3404.380832][T28974] device veth1_macvtap entered promiscuous mode [ 3404.395429][T16540] device bridge_slave_1 left promiscuous mode [ 3404.401719][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 3404.421238][T16540] device bridge_slave_0 left promiscuous mode [ 3404.435650][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 3404.454622][T16540] device veth1_macvtap left promiscuous mode [ 3404.460513][T16540] device veth0_vlan left promiscuous mode [ 3404.757326][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3404.785399][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3404.802901][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3405.312192][T20207] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3405.557956][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3405.566626][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3405.582675][T20207] usb 4-1: Using ep0 maxpacket: 16 [ 3405.852218][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3405.863044][T20207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3405.873218][T20207] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 3405.882197][T20207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3405.921736][T20207] usb 4-1: config 0 descriptor?? [ 3405.962224][T23903] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 3406.353008][T23903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3406.364971][T23903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3406.453015][T23903] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3406.463112][T23903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3406.471266][T23903] usb 5-1: SerialNumber: syz [ 3406.704337][T20207] hid-multitouch 0003:1FD2:6007.00A6: unknown main item tag 0x0 [ 3406.718888][T20207] hid-multitouch 0003:1FD2:6007.00A6: unknown main item tag 0x0 [ 3406.727473][T11906] usbhid 3-1:0.0: can't add hid device: -71 [ 3406.734362][T11906] usbhid: probe of 3-1:0.0 failed with error -71 [ 3406.743450][T11906] usb 3-1: USB disconnect, device number 88 [ 3406.749474][T20207] hid-multitouch 0003:1FD2:6007.00A6: unknown main item tag 0x0 [ 3406.761467][T20207] hid-multitouch 0003:1FD2:6007.00A6: unknown main item tag 0x0 [ 3406.769728][T20207] hid-multitouch 0003:1FD2:6007.00A6: unknown main item tag 0x0 [ 3406.780560][T20207] hid-multitouch 0003:1FD2:6007.00A6: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 3406.939690][T20207] usb 4-1: USB disconnect, device number 69 [ 3406.947154][T23903] usb 5-1: 0:2 : does not exist [ 3406.982267][ T428] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 3407.307834][T23903] usb 5-1: USB disconnect, device number 107 [ 3407.336202][T28530] udevd[28530]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3407.782180][ T428] usb 2-1: Using ep0 maxpacket: 32 [ 3410.243886][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3410.254658][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3410.264692][ T428] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3410.273846][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3410.373103][ T428] usb 2-1: config 0 descriptor?? [ 3410.394203][ T428] usb 2-1: can't set config #0, error -71 [ 3410.410846][ T428] usb 2-1: USB disconnect, device number 79 [ 3413.012130][T21833] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3413.633086][T21833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3413.724231][T21833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3413.842544][T21833] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3414.062601][T21833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3414.125940][T21833] usb 4-1: config 0 descriptor?? [ 3414.314555][T21833] usb 4-1: can't set config #0, error -71 [ 3414.321477][T21833] usb 4-1: USB disconnect, device number 70 [ 3416.282068][ T323] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3416.422238][T11906] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 3417.564008][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3417.593493][T11906] usb 2-1: Using ep0 maxpacket: 32 [ 3417.745362][T29119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6728'. [ 3417.785308][T29119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29119 comm=syz.0.6728 [ 3419.172698][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3419.184395][ T323] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3419.193716][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3419.394633][T11906] usb 2-1: device descriptor read/all, error -71 [ 3420.193577][ T323] usb 4-1: config 0 descriptor?? [ 3421.173268][ T323] usb 4-1: can't set config #0, error -71 [ 3421.193195][ T323] usb 4-1: USB disconnect, device number 71 [ 3421.407867][T21833] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 3421.642222][ T428] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 3423.550220][T21833] usb 1-1: device descriptor read/all, error -71 [ 3424.952898][T23903] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3425.682607][T23903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3425.721032][T23903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3425.799320][T23903] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3425.919604][T23903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3426.141315][T23903] usb 3-1: config 0 descriptor?? [ 3426.498416][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6751'. [ 3426.508896][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 3426.508930][ T24] audit: type=1326 audit(2000001510.156:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29184 comm="syz.4.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df598ff9 code=0x7ffc0000 [ 3426.562095][ T24] audit: type=1326 audit(2000001510.196:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29184 comm="syz.4.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df598ff9 code=0x7ffc0000 [ 3426.589107][ T24] audit: type=1326 audit(2000001510.206:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29184 comm="syz.4.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f74df598ff9 code=0x7ffc0000 [ 3426.865603][ T24] audit: type=1326 audit(2000001510.206:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29184 comm="syz.4.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74df598ff9 code=0x7ffc0000 [ 3428.572242][T23903] usbhid 3-1:0.0: can't add hid device: -71 [ 3428.578678][T23903] usbhid: probe of 3-1:0.0 failed with error -71 [ 3428.753397][T23903] usb 3-1: USB disconnect, device number 89 [ 3429.672975][T29213] binder_alloc: 29209: binder_alloc_buf size 4864 failed, no address space [ 3429.681629][T29213] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 3431.189465][ T428] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 3431.492063][ T428] usb 2-1: Using ep0 maxpacket: 32 [ 3431.752120][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3431.772010][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3431.794375][ T428] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 3431.998109][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3432.060686][ T428] usb 2-1: config 0 descriptor?? [ 3432.864229][ T428] saitek 0003:06A3:0CCB.00A7: unknown main item tag 0x0 [ 3432.890946][ T428] saitek 0003:06A3:0CCB.00A7: unknown main item tag 0x0 [ 3432.919359][ T428] saitek 0003:06A3:0CCB.00A7: item fetching failed at offset 4/5 [ 3432.939950][ T428] saitek 0003:06A3:0CCB.00A7: parse failed [ 3432.957853][ T428] saitek: probe of 0003:06A3:0CCB.00A7 failed with error -22 [ 3433.606973][ T428] usb 2-1: USB disconnect, device number 82 [ 3433.772016][T11906] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3434.022041][ T323] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3434.142044][T11906] usb 4-1: Using ep0 maxpacket: 16 [ 3434.662195][T11906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3434.682376][T11906] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3434.701749][T11906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3434.728256][T11906] usb 4-1: config 0 descriptor?? [ 3434.902191][ T323] usb 3-1: Using ep0 maxpacket: 32 [ 3436.152098][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.168733][T23618] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 3436.189877][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3436.235591][ T323] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3436.245134][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3436.344180][T29272] udc-core: couldn't find an available UDC or it's busy [ 3436.373221][ T323] usb 3-1: config 0 descriptor?? [ 3436.395223][T29272] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3436.413298][ T323] hub 3-1:0.0: USB hub found [ 3436.482000][T23618] usb 1-1: Using ep0 maxpacket: 32 [ 3436.487808][T11906] hid-generic 0003:0158:0100.00A8: unknown main item tag 0x1 [ 3436.534296][T11906] hid-generic 0003:0158:0100.00A8: unexpected long global item [ 3436.562189][T11906] hid-generic: probe of 0003:0158:0100.00A8 failed with error -22 [ 3436.602195][T23618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.632303][ T323] hub 3-1:0.0: 1 port detected [ 3436.637337][T23618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3436.657547][T23618] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3436.676739][T23618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3436.698828][T23618] usb 1-1: config 0 descriptor?? [ 3436.743499][T23618] hub 1-1:0.0: USB hub found [ 3436.952114][T23618] hub 1-1:0.0: 1 port detected [ 3437.282147][ T323] hub 3-1:0.0: activate --> -90 [ 3437.604819][T19102] usb 3-1: USB disconnect, device number 90 [ 3437.622253][ T323] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 3437.703885][ T323] usb 1-1: USB disconnect, device number 91 [ 3437.722249][T23618] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 3438.765962][T11906] usb 4-1: USB disconnect, device number 72 [ 3438.953724][T29289] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6780'. [ 3439.802028][T11906] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3440.212007][T11906] usb 4-1: Using ep0 maxpacket: 32 [ 3440.332155][T11906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3440.343275][ T1391] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 3440.351171][T11906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3440.381719][T11906] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3440.401088][T11906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3440.426200][T11906] usb 4-1: config 0 descriptor?? [ 3440.463506][T11906] hub 4-1:0.0: USB hub found [ 3440.693555][T11906] hub 4-1:0.0: 1 port detected [ 3440.724964][ T1391] usb 5-1: Using ep0 maxpacket: 16 [ 3441.942387][ T1391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3441.962219][ T1391] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3441.971349][ T1391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3442.733666][T11906] hub 4-1:0.0: activate --> -90 [ 3442.752681][ T1391] usb 5-1: config 0 descriptor?? [ 3443.052115][T23903] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 3443.123406][ T1391] usbhid 5-1:0.0: can't add hid device: -71 [ 3443.130381][ T1391] usbhid: probe of 5-1:0.0 failed with error -71 [ 3443.192380][T13737] usb 4-1: USB disconnect, device number 73 [ 3443.241202][T23903] usb 4-1: Failed to suspend device, error -19 [ 3443.781747][ T1391] usb 5-1: USB disconnect, device number 109 [ 3445.130640][ T24] audit: type=1326 audit(2000001528.746:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3445.296746][ T1391] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3445.606407][ T24] audit: type=1326 audit(2000001528.746:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3445.631022][ T24] audit: type=1326 audit(2000001528.746:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3445.855239][ T24] audit: type=1326 audit(2000001528.746:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3446.421413][ T1391] usb 5-1: Using ep0 maxpacket: 32 [ 3446.467739][ T24] audit: type=1326 audit(2000001528.746:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3446.530548][ T24] audit: type=1326 audit(2000001528.746:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3446.555837][ T24] audit: type=1326 audit(2000001528.746:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3446.591850][ T24] audit: type=1326 audit(2000001528.746:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3446.649983][ T24] audit: type=1326 audit(2000001528.746:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3448.633029][ T1391] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3448.643352][ T1391] usb 5-1: can't read configurations, error -71 [ 3448.942263][ T24] audit: type=1326 audit(2000001528.746:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29327 comm="syz.1.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3449.000808][T29371] incfs: Error accessing: ./file0. [ 3449.019213][T29371] incfs: mount failed -20 [ 3449.029985][T29371] incfs: Error accessing: ./file0. [ 3449.062999][T29371] incfs: mount failed -20 [ 3449.081066][T29371] incfs: Error accessing: ./file0. [ 3449.107817][T29371] incfs: mount failed -20 [ 3449.732393][ T1391] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3449.967491][T29381] overlayfs: failed to resolve './file0': -2 [ 3449.996603][T29381] device bond_slave_1 entered promiscuous mode [ 3450.062018][ T1391] usb 5-1: Using ep0 maxpacket: 32 [ 3450.067565][T29381] input: syz0 as /devices/virtual/input/input102 [ 3450.182394][ T1391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3450.196912][ T1391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3450.210499][ T1391] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3450.219942][ T1391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3450.237111][ T1391] usb 5-1: config 0 descriptor?? [ 3450.295004][ T1391] hub 5-1:0.0: USB hub found [ 3450.502362][ T1391] hub 5-1:0.0: 1 port detected [ 3450.511996][T11906] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 3450.671442][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6808'. [ 3450.683027][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 3450.683063][ T24] audit: type=1326 audit(2000001534.336:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29393 comm="syz.0.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3450.742434][ T24] audit: type=1326 audit(2000001534.366:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29393 comm="syz.0.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3450.765903][ T24] audit: type=1326 audit(2000001534.366:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29393 comm="syz.0.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3450.852070][T11906] usb 2-1: Using ep0 maxpacket: 32 [ 3451.085459][T11906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3451.097916][T11906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3451.107895][T11906] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3451.116860][T11906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3451.143444][T11906] usb 2-1: config 0 descriptor?? [ 3451.253101][T11906] hub 2-1:0.0: USB hub found [ 3451.312703][T20207] hub 5-1:0.0: activate --> -90 [ 3451.472575][T11906] hub 2-1:0.0: 1 port detected [ 3452.004039][ T1391] usb 5-1: USB disconnect, device number 111 [ 3452.012257][T20207] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 3454.058618][T29417] incfs: Error accessing: ./file0. [ 3454.064965][T20207] usb 2-1: USB disconnect, device number 84 [ 3454.076548][T29417] incfs: mount failed -20 [ 3454.081503][T29417] incfs: Error accessing: ./file0. [ 3454.087048][T11906] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 3454.188882][T29417] incfs: mount failed -20 [ 3454.221280][T29417] incfs: Error accessing: ./file0. [ 3454.232664][T29417] incfs: mount failed -20 [ 3454.712030][T20207] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 3454.972095][T20207] usb 2-1: Using ep0 maxpacket: 32 [ 3455.240369][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6819'. [ 3455.251573][ T24] audit: type=1326 audit(2000001538.896:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29437 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3140bff9 code=0x7ffc0000 [ 3455.252252][T20207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3455.292218][T20207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3455.308667][T20207] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3455.323114][T20207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3455.384765][T20207] usb 2-1: config 0 descriptor?? [ 3455.391909][ T24] audit: type=1326 audit(2000001538.926:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29437 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3140bff9 code=0x7ffc0000 [ 3455.581648][ T24] audit: type=1326 audit(2000001538.926:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29437 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7a3140bff9 code=0x7ffc0000 [ 3455.706697][T20207] hub 2-1:0.0: USB hub found [ 3455.787781][ T24] audit: type=1326 audit(2000001538.926:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29437 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3140bff9 code=0x7ffc0000 [ 3456.001212][ T24] audit: type=1326 audit(2000001538.926:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29437 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3140bff9 code=0x7ffc0000 [ 3456.025217][T20207] hub 2-1:0.0: 1 port detected [ 3456.372198][T13737] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3456.612055][T19102] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 3456.619610][T13737] usb 3-1: Using ep0 maxpacket: 16 [ 3456.692409][T20207] hub 2-1:0.0: activate --> -90 [ 3456.752400][T13737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3456.763647][T13737] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3456.772650][T13737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3456.782790][T13737] usb 3-1: config 0 descriptor?? [ 3456.872018][T19102] usb 1-1: Using ep0 maxpacket: 32 [ 3457.012160][T19102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3457.023219][T19102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3457.033806][T19102] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3457.043022][T19102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3457.070232][T19102] usb 1-1: config 0 descriptor?? [ 3457.114063][T19102] hub 1-1:0.0: USB hub found [ 3457.132882][T23618] usb 2-1: USB disconnect, device number 85 [ 3457.152064][T20207] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 3458.114733][T19102] hub 1-1:0.0: 1 port detected [ 3458.216445][T29458] udc-core: couldn't find an available UDC or it's busy [ 3458.223517][T29458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3458.257779][T13737] hid-generic 0003:0158:0100.00A9: unknown main item tag 0x1 [ 3458.265469][T13737] hid-generic 0003:0158:0100.00A9: unexpected long global item [ 3458.273704][T13737] hid-generic: probe of 0003:0158:0100.00A9 failed with error -22 [ 3459.218631][T19102] usb 3-1: USB disconnect, device number 91 [ 3459.422845][T13737] usb 1-1: USB disconnect, device number 92 [ 3459.442103][T10619] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 3459.512039][T23618] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 3459.530155][T20207] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 3460.228064][T23618] usb 5-1: Using ep0 maxpacket: 32 [ 3460.702060][T20207] usb 4-1: device descriptor read/64, error -71 [ 3460.832146][T23618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3460.843313][T23618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3460.853008][T23618] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3460.862299][T23618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3460.878005][T23618] usb 5-1: config 0 descriptor?? [ 3460.933231][T23618] hub 5-1:0.0: USB hub found [ 3460.975667][ T24] audit: type=1326 audit(2000001544.626:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.002093][ T24] audit: type=1326 audit(2000001544.626:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=212 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.025551][ T24] audit: type=1326 audit(2000001544.626:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.049973][ T24] audit: type=1326 audit(2000001544.626:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.073466][ T24] audit: type=1326 audit(2000001544.626:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.082076][T10619] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 3461.122011][T20207] usb 4-1: device descriptor read/64, error -71 [ 3461.128260][ T24] audit: type=1326 audit(2000001544.626:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.132157][T23618] hub 5-1:0.0: 1 port detected [ 3461.167202][ T24] audit: type=1326 audit(2000001544.626:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d62ab4990 code=0x7ffc0000 [ 3461.212015][ T24] audit: type=1326 audit(2000001544.626:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.260054][ T24] audit: type=1326 audit(2000001544.626:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.283492][ T24] audit: type=1326 audit(2000001544.626:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.1.6832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62ab5ff9 code=0x7ffc0000 [ 3461.505354][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3461.516534][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3461.526251][T10619] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3461.542022][T10619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3462.313672][T10619] usb 1-1: config 0 descriptor?? [ 3462.443507][T13737] hub 5-1:0.0: activate --> -90 [ 3462.702231][T13737] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 3462.709456][T19102] usb 5-1: USB disconnect, device number 112 [ 3464.672099][T10619] usbhid 1-1:0.0: can't add hid device: -71 [ 3464.678228][T10619] usbhid: probe of 1-1:0.0 failed with error -71 [ 3464.705674][T10619] usb 1-1: USB disconnect, device number 93 [ 3466.012496][T21833] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 3466.312104][T21833] usb 2-1: Using ep0 maxpacket: 16 [ 3466.442812][T21833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3466.504739][T21833] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3466.672091][T21833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3466.732968][T21833] usb 2-1: config 0 descriptor?? [ 3469.149196][T29538] FAULT_INJECTION: forcing a failure. [ 3469.149196][T29538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3469.162315][T29538] CPU: 0 PID: 29538 Comm: syz.4.6845 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3469.172139][T29538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3469.182030][T29538] Call Trace: [ 3469.185176][T29538] dump_stack_lvl+0x1e2/0x24b [ 3469.189689][T29538] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3469.194982][T29538] ? irqentry_exit+0x4f/0x60 [ 3469.199405][T29538] ? sysvec_reschedule_ipi+0x83/0x160 [ 3469.204615][T29538] dump_stack+0x15/0x17 [ 3469.208604][T29538] should_fail+0x3c6/0x510 [ 3469.212868][T29538] should_fail_usercopy+0x1a/0x20 [ 3469.217719][T29538] _copy_to_user+0x20/0x90 [ 3469.221978][T29538] binder_ioctl_write_read+0x9263/0xa690 [ 3469.227462][T29538] ? release_firmware_map_entry+0x18d/0x18d [ 3469.233181][T29538] ? __switch_to+0x5f6/0x1240 [ 3469.237699][T29538] ? bpf_trace_run3+0x126/0x2c0 [ 3469.242380][T29538] ? compat_start_thread+0x80/0x80 [ 3469.247327][T29538] ? bpf_trace_run2+0x280/0x280 [ 3469.252025][T29538] ? __this_cpu_preempt_check+0x13/0x20 [ 3469.257491][T29538] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 3469.263999][T29538] ? binder_has_work+0x270/0x270 [ 3469.268760][T29538] ? _raw_spin_unlock_irq+0x4e/0x70 [ 3469.273795][T29538] ? finish_task_switch+0x130/0x5a0 [ 3469.278821][T29538] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 3469.283866][T29538] ? __switch_to_asm+0x34/0x60 [ 3469.288463][T29538] ? __schedule+0xbee/0x1330 [ 3469.292897][T29538] ? release_firmware_map_entry+0x18d/0x18d [ 3469.298635][T29538] ? __kasan_check_read+0x11/0x20 [ 3469.303474][T29538] ? preempt_schedule_irq+0xe7/0x140 [ 3469.308604][T29538] ? preempt_schedule_notrace+0x140/0x140 [ 3469.314165][T29538] ? irqentry_exit+0x4f/0x60 [ 3469.318582][T29538] ? sysvec_reschedule_ipi+0x83/0x160 [ 3469.323880][T29538] ? binder_ioctl+0x239/0x1dd0 [ 3469.328478][T29538] binder_ioctl+0x312/0x1dd0 [ 3469.332899][T29538] ? proc_fail_nth_write+0x20b/0x290 [ 3469.338023][T29538] ? ioctl_has_perm+0x1f8/0x560 [ 3469.342708][T29538] ? do_vfs_ioctl+0x798/0x1a30 [ 3469.347314][T29538] ? ioctl_has_perm+0x3f0/0x560 [ 3469.352009][T29538] ? binder_poll+0x2e0/0x2e0 [ 3469.356509][T29538] ? __x32_compat_sys_ioctl+0x90/0x90 [ 3469.361725][T29538] ? has_cap_mac_admin+0x3c0/0x3c0 [ 3469.366684][T29538] ? bpf_trace_run3+0x126/0x2c0 [ 3469.371369][T29538] ? bpf_trace_run2+0x280/0x280 [ 3469.376058][T29538] ? __this_cpu_preempt_check+0x13/0x20 [ 3469.381433][T29538] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 3469.388013][T29538] ? selinux_file_ioctl+0x3cc/0x540 [ 3469.393106][T29538] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 3469.398137][T29538] ? selinux_file_alloc_security+0x120/0x120 [ 3469.403932][T29538] ? __fget_files+0x31e/0x380 [ 3469.408456][T29538] ? security_file_ioctl+0x84/0xb0 [ 3469.413388][T29538] ? binder_poll+0x2e0/0x2e0 [ 3469.417816][T29538] __se_sys_ioctl+0x114/0x190 [ 3469.422331][T29538] __x64_sys_ioctl+0x7b/0x90 [ 3469.426753][T29538] do_syscall_64+0x34/0x70 [ 3469.431023][T29538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3469.436730][T29538] RIP: 0033:0x7f74df598ff9 [ 3469.440978][T29538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3469.460425][T29538] RSP: 002b:00007f74de1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3469.468758][T29538] RAX: ffffffffffffffda RBX: 00007f74df751130 RCX: 00007f74df598ff9 [ 3469.476738][T29538] RDX: 0000000020000480 RSI: 00000000c0306201 RDI: 0000000000000007 [ 3469.484820][T29538] RBP: 00007f74de1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 3469.492619][T29538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3469.500441][T29538] R13: 0000000000000000 R14: 00007f74df751130 R15: 00007fff579ee338 [ 3469.508706][T29538] binder: 29533:29538 ioctl c0306201 20000480 returned -14 [ 3469.876519][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 3469.876556][ T24] audit: type=1326 audit(2000001553.526:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3469.910654][T29547] udc-core: couldn't find an available UDC or it's busy [ 3469.949331][T29547] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3469.962234][ T24] audit: type=1326 audit(2000001553.526:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=212 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.019085][T21833] hid-generic 0003:0158:0100.00AA: unknown main item tag 0x1 [ 3470.026852][ T24] audit: type=1326 audit(2000001553.526:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.060929][T21833] hid-generic 0003:0158:0100.00AA: unexpected long global item [ 3470.069673][T21833] hid-generic: probe of 0003:0158:0100.00AA failed with error -22 [ 3470.094867][ T24] audit: type=1326 audit(2000001553.526:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.118938][ T24] audit: type=1326 audit(2000001553.526:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.155599][ T24] audit: type=1326 audit(2000001553.526:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.221919][ T24] audit: type=1326 audit(2000001553.526:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b687b5990 code=0x7ffc0000 [ 3470.295018][ T24] audit: type=1326 audit(2000001553.526:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.352140][T21833] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 3470.368908][ T24] audit: type=1326 audit(2000001553.526:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.440937][ T24] audit: type=1326 audit(2000001553.526:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29544 comm="syz.0.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3470.622000][T21833] usb 5-1: Using ep0 maxpacket: 8 [ 3470.762186][T21833] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 3470.780376][T21833] usb 5-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 3470.800660][T21833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3470.820852][T21833] usb 5-1: config 1 has no interface number 0 [ 3470.826915][T21833] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3470.968449][T23618] usb 2-1: USB disconnect, device number 86 [ 3471.122149][T21833] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3471.134882][T21833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.143065][T21833] usb 5-1: Product: syz [ 3471.160201][T21833] usb 5-1: Manufacturer: syz [ 3471.173399][T21833] usb 5-1: SerialNumber: syz [ 3471.299024][T21833] cdc_wdm 5-1:1.128: skipping garbage [ 3471.308893][T21833] cdc_wdm 5-1:1.128: skipping garbage [ 3471.491068][T21833] cdc_wdm 5-1:1.128: skipping garbage [ 3471.595667][T21833] cdc_wdm: probe of 5-1:1.128 failed with error -22 [ 3471.677868][T21833] usb 5-1: USB disconnect, device number 113 [ 3474.783582][T29579] FAULT_INJECTION: forcing a failure. [ 3474.783582][T29579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3474.847892][T29579] CPU: 0 PID: 29579 Comm: syz.3.6857 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3474.857819][T29579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3474.867708][T29579] Call Trace: [ 3474.870857][T29579] dump_stack_lvl+0x1e2/0x24b [ 3474.875371][T29579] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3474.880664][T29579] dump_stack+0x15/0x17 [ 3474.884651][T29579] should_fail+0x3c6/0x510 [ 3474.888910][T29579] should_fail_usercopy+0x1a/0x20 [ 3474.893766][T29579] _copy_to_user+0x20/0x90 [ 3474.898024][T29579] simple_read_from_buffer+0xc7/0x150 [ 3474.903225][T29579] proc_fail_nth_read+0x1a3/0x210 [ 3474.908099][T29579] ? proc_fault_inject_write+0x390/0x390 [ 3474.913556][T29579] ? security_file_permission+0x86/0xb0 [ 3474.918940][T29579] ? rw_verify_area+0x1c3/0x360 [ 3474.923622][T29579] ? proc_fault_inject_write+0x390/0x390 [ 3474.929088][T29579] vfs_read+0x200/0xba0 [ 3474.933092][T29579] ? kernel_read+0x70/0x70 [ 3474.937342][T29579] ? __kasan_check_write+0x14/0x20 [ 3474.942294][T29579] ? mutex_lock+0xa5/0x110 [ 3474.946537][T29579] ? mutex_trylock+0xa0/0xa0 [ 3474.950977][T29579] ? __fdget_pos+0x2e7/0x3a0 [ 3474.955388][T29579] ? ksys_read+0x77/0x2c0 [ 3474.959560][T29579] ksys_read+0x199/0x2c0 [ 3474.963820][T29579] ? vfs_write+0xe70/0xe70 [ 3474.968074][T29579] ? debug_smp_processor_id+0x17/0x20 [ 3474.973296][T29579] __x64_sys_read+0x7b/0x90 [ 3474.977618][T29579] do_syscall_64+0x34/0x70 [ 3474.981880][T29579] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3474.987684][T29579] RIP: 0033:0x7f7a3140aa3c [ 3474.991951][T29579] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 3475.011630][T29579] RSP: 002b:00007f7a30085030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3475.019876][T29579] RAX: ffffffffffffffda RBX: 00007f7a315c3f80 RCX: 00007f7a3140aa3c [ 3475.027886][T29579] RDX: 000000000000000f RSI: 00007f7a300850a0 RDI: 0000000000000007 [ 3475.035678][T29579] RBP: 00007f7a30085090 R08: 0000000000000000 R09: 0000000000000000 [ 3475.043599][T29579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3475.051411][T29579] R13: 0000000000000000 R14: 00007f7a315c3f80 R15: 00007ffd255bb678 [ 3476.088044][T29589] incfs: Error accessing: ./file0. [ 3476.098398][T29589] incfs: mount failed -20 [ 3478.948920][T29639] FAULT_INJECTION: forcing a failure. [ 3478.948920][T29639] name failslab, interval 1, probability 0, space 0, times 0 [ 3478.988423][T29639] CPU: 0 PID: 29639 Comm: syz.3.6872 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3478.998264][T29639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3479.008148][T29639] Call Trace: [ 3479.011293][T29639] dump_stack_lvl+0x1e2/0x24b [ 3479.015801][T29639] ? panic+0x812/0x812 [ 3479.019718][T29639] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3479.025190][T29639] dump_stack+0x15/0x17 [ 3479.029170][T29639] should_fail+0x3c6/0x510 [ 3479.033432][T29639] ? netlink_sendmsg+0x7a4/0xd00 [ 3479.038207][T29639] __should_failslab+0xa4/0xe0 [ 3479.042804][T29639] should_failslab+0x9/0x20 [ 3479.047145][T29639] __kmalloc_track_caller+0x5f/0x320 [ 3479.052262][T29639] ? kmem_cache_alloc+0x168/0x2e0 [ 3479.057125][T29639] ? __alloc_skb+0x80/0x510 [ 3479.061468][T29639] ? netlink_sendmsg+0x7a4/0xd00 [ 3479.066324][T29639] __alloc_skb+0xbc/0x510 [ 3479.070494][T29639] netlink_sendmsg+0x7a4/0xd00 [ 3479.075189][T29639] ? netlink_getsockopt+0x5c0/0x5c0 [ 3479.080221][T29639] ? security_socket_sendmsg+0x82/0xb0 [ 3479.085507][T29639] ? netlink_getsockopt+0x5c0/0x5c0 [ 3479.090547][T29639] ____sys_sendmsg+0x59e/0x8f0 [ 3479.095157][T29639] ? __sys_sendmsg_sock+0x40/0x40 [ 3479.100014][T29639] ? import_iovec+0xe5/0x120 [ 3479.104432][T29639] ___sys_sendmsg+0x252/0x2e0 [ 3479.108945][T29639] ? __sys_sendmsg+0x280/0x280 [ 3479.113546][T29639] ? rw_verify_area+0x1c3/0x360 [ 3479.118256][T29639] ? __fdget+0x1bc/0x240 [ 3479.122312][T29639] __se_sys_sendmsg+0x1b1/0x280 [ 3479.126993][T29639] ? __x64_sys_sendmsg+0x90/0x90 [ 3479.131762][T29639] ? ksys_write+0x260/0x2c0 [ 3479.136122][T29639] ? debug_smp_processor_id+0x17/0x20 [ 3479.141314][T29639] __x64_sys_sendmsg+0x7b/0x90 [ 3479.145913][T29639] do_syscall_64+0x34/0x70 [ 3479.150177][T29639] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3479.155887][T29639] RIP: 0033:0x7f7a3140bff9 [ 3479.160149][T29639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3479.179619][T29639] RSP: 002b:00007f7a30085038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3479.187847][T29639] RAX: ffffffffffffffda RBX: 00007f7a315c3f80 RCX: 00007f7a3140bff9 [ 3479.195655][T29639] RDX: 0000000000000040 RSI: 0000000020000100 RDI: 0000000000000008 [ 3479.203460][T29639] RBP: 00007f7a30085090 R08: 0000000000000000 R09: 0000000000000000 [ 3479.211355][T29639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3479.219170][T29639] R13: 0000000000000000 R14: 00007f7a315c3f80 R15: 00007ffd255bb678 [ 3480.916297][T21833] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 3481.212349][T21833] usb 4-1: Using ep0 maxpacket: 32 [ 3481.363888][T21833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3481.562079][T21833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3481.571799][T21833] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 3481.621626][T21833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3481.663527][T21833] usb 4-1: config 0 descriptor?? [ 3482.002052][T11906] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 3482.144247][T21833] saitek 0003:06A3:0CCB.00AB: unknown main item tag 0x0 [ 3482.151078][T21833] saitek 0003:06A3:0CCB.00AB: unknown main item tag 0x0 [ 3482.158151][T21833] saitek 0003:06A3:0CCB.00AB: item fetching failed at offset 4/5 [ 3482.166184][T21833] saitek 0003:06A3:0CCB.00AB: parse failed [ 3482.171992][T21833] saitek: probe of 0003:06A3:0CCB.00AB failed with error -22 [ 3482.272054][T11906] usb 1-1: Using ep0 maxpacket: 16 [ 3482.272093][T23618] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3482.345912][T10619] usb 4-1: USB disconnect, device number 76 [ 3482.405067][T29667] device pim6reg1 entered promiscuous mode [ 3482.432169][T11906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3482.443076][T11906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3482.452723][T11906] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 3482.461661][T11906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3482.465876][T29668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6880'. [ 3482.479610][T11906] usb 1-1: config 0 descriptor?? [ 3482.512053][T23618] usb 3-1: Using ep0 maxpacket: 32 [ 3482.632146][T23618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3482.643259][T23618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3482.654760][T23618] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 3482.663900][T23618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3482.693061][T23618] usb 3-1: config 0 descriptor?? [ 3482.852215][T21833] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 3482.999374][T11906] hid-multitouch 0003:1FD2:6007.00AC: unknown main item tag 0x0 [ 3483.057587][T11906] hid-multitouch 0003:1FD2:6007.00AC: unknown main item tag 0x0 [ 3483.095641][T11906] hid-multitouch 0003:1FD2:6007.00AC: unknown main item tag 0x0 [ 3483.132979][T11906] hid-multitouch 0003:1FD2:6007.00AC: unknown main item tag 0x0 [ 3483.169874][T11906] hid-multitouch 0003:1FD2:6007.00AC: unknown main item tag 0x0 [ 3483.242679][T21833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3483.282383][T21833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3483.328136][T21833] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3483.368516][T11906] hid-multitouch 0003:1FD2:6007.00AC: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 3483.411652][T21833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3483.441315][T11906] usb 1-1: USB disconnect, device number 94 [ 3483.452723][T21833] usb 2-1: config 0 descriptor?? [ 3483.773854][T23618] saitek 0003:06A3:0CCB.00AD: unknown main item tag 0x0 [ 3483.797359][T23618] saitek 0003:06A3:0CCB.00AD: unknown main item tag 0x0 [ 3483.816932][T23618] saitek 0003:06A3:0CCB.00AD: item fetching failed at offset 4/5 [ 3483.825888][T23618] saitek 0003:06A3:0CCB.00AD: parse failed [ 3483.831899][T23618] saitek: probe of 0003:06A3:0CCB.00AD failed with error -22 [ 3483.852436][T23618] usb 3-1: USB disconnect, device number 92 [ 3484.623534][T21833] hid-led 0003:27B8:01ED.00AE: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 3484.659253][T21833] hid-led 0003:27B8:01ED.00AE: ThingM blink(1) initialized [ 3484.898808][T10619] usb 2-1: USB disconnect, device number 87 [ 3487.914124][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 3487.914156][ T24] audit: type=1400 audit(2000001571.566:7180): avc: denied { bind } for pid=29721 comm="syz.1.6895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3488.042045][T10619] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3488.050916][ T24] audit: type=1400 audit(2000001571.696:7181): avc: denied { read } for pid=29725 comm="syz.2.6896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3488.248254][T29735] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3488.912058][T10619] usb 1-1: Using ep0 maxpacket: 16 [ 3489.016568][T29747] input: syz0 as /devices/virtual/input/input103 [ 3489.817667][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3489.829218][T10619] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3489.838136][T10619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3489.956461][T10619] usb 1-1: config 0 descriptor?? [ 3490.022153][T10619] usb 1-1: can't set config #0, error -71 [ 3490.032859][T10619] usb 1-1: USB disconnect, device number 95 [ 3490.053822][T29757] device syzkaller0 entered promiscuous mode [ 3490.064288][ T24] audit: type=1400 audit(2000001573.716:7182): avc: denied { relabelfrom } for pid=29756 comm="syz.3.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3490.102184][ T24] audit: type=1400 audit(2000001573.736:7183): avc: denied { relabelto } for pid=29756 comm="syz.3.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3490.762041][T10619] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 3491.173025][T10619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3491.202041][T10619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3491.232187][T10619] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3491.241087][T10619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3491.318450][T10619] usb 4-1: config 0 descriptor?? [ 3491.572312][T29768] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11 sclass=netlink_xfrm_socket pid=29768 comm=syz.3.6907 [ 3492.404806][T29788] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3493.018493][T10619] usb 4-1: string descriptor 0 read error: -22 [ 3493.042363][T10619] uclogic 0003:256C:006D.00AF: failed retrieving string descriptor #200: -71 [ 3493.051227][T10619] uclogic 0003:256C:006D.00AF: failed retrieving pen parameters: -71 [ 3493.059218][T10619] uclogic 0003:256C:006D.00AF: failed probing pen v2 parameters: -71 [ 3493.067182][T10619] uclogic 0003:256C:006D.00AF: failed probing parameters: -71 [ 3493.074692][T10619] uclogic: probe of 0003:256C:006D.00AF failed with error -71 [ 3493.094212][T10619] usb 4-1: USB disconnect, device number 77 [ 3494.281487][T29798] netpci0: tun_chr_ioctl cmd 2147767506 [ 3494.392048][T19102] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 3494.652161][T19102] usb 2-1: Using ep0 maxpacket: 16 [ 3494.772243][T19102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3494.792052][T19102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3494.831680][T19102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3494.864728][T19102] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3494.892005][T19102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3494.910358][T23903] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 3494.915057][T19102] usb 2-1: config 0 descriptor?? [ 3495.292118][T23903] usb 5-1: Using ep0 maxpacket: 16 [ 3496.048395][T23903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3496.059899][T23903] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3496.069758][T23903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3496.079298][T23903] usb 5-1: config 0 descriptor?? [ 3496.100376][T19102] microsoft 0003:045E:07DA.00B0: No inputs registered, leaving [ 3496.793174][T19102] microsoft 0003:045E:07DA.00B0: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 3496.805106][T19102] microsoft 0003:045E:07DA.00B0: no inputs found [ 3496.816451][T19102] microsoft 0003:045E:07DA.00B0: could not initialize ff, continuing anyway [ 3497.413220][T29818] udc-core: couldn't find an available UDC or it's busy [ 3497.428959][T19102] usb 2-1: USB disconnect, device number 88 [ 3497.472470][T29818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3497.638855][T23903] hid-generic 0003:0158:0100.00B1: unknown main item tag 0x1 [ 3497.646561][T23903] hid-generic 0003:0158:0100.00B1: unexpected long global item [ 3497.654628][T23903] hid-generic: probe of 0003:0158:0100.00B1 failed with error -22 [ 3498.913071][T29836] FAULT_INJECTION: forcing a failure. [ 3498.913071][T29836] name failslab, interval 1, probability 0, space 0, times 0 [ 3499.002280][T29836] CPU: 1 PID: 29836 Comm: syz.2.6921 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3499.012213][T29836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3499.022115][T29836] Call Trace: [ 3499.025258][T29836] dump_stack_lvl+0x1e2/0x24b [ 3499.029767][T29836] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3499.035076][T29836] dump_stack+0x15/0x17 [ 3499.039564][T29836] should_fail+0x3c6/0x510 [ 3499.043829][T29836] ? selinux_add_opt+0xb9/0x370 [ 3499.048512][T29836] __should_failslab+0xa4/0xe0 [ 3499.053121][T29836] should_failslab+0x9/0x20 [ 3499.057451][T29836] kmem_cache_alloc_trace+0x3a/0x2e0 [ 3499.062567][T29836] ? kmemdup_nul+0x45/0xa0 [ 3499.066831][T29836] selinux_add_opt+0xb9/0x370 [ 3499.071344][T29836] selinux_sb_eat_lsm_opts+0x8b0/0xad0 [ 3499.076655][T29836] security_sb_eat_lsm_opts+0x6b/0xa0 [ 3499.081856][T29836] generic_parse_monolithic+0xc1/0x3f0 [ 3499.087222][T29836] ? __kasan_kmalloc+0x9/0x10 [ 3499.091740][T29836] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 3499.097133][T29836] ? cgroup_init_fs_context+0x57/0x320 [ 3499.102414][T29836] ? vfs_parse_fs_string+0x220/0x220 [ 3499.107540][T29836] ? __kasan_check_write+0x14/0x20 [ 3499.112567][T29836] ? cgroup_init_fs_context+0x289/0x320 [ 3499.117962][T29836] ? alloc_fs_context+0x587/0x680 [ 3499.122822][T29836] parse_monolithic_mount_data+0x6c/0x80 [ 3499.128283][T29836] do_new_mount+0x28b/0xb30 [ 3499.132619][T29836] ? do_move_mount_old+0x160/0x160 [ 3499.137564][T29836] ? security_capable+0x87/0xb0 [ 3499.142247][T29836] ? ns_capable+0x89/0xe0 [ 3499.146420][T29836] path_mount+0x56f/0xcb0 [ 3499.150591][T29836] __se_sys_mount+0x2c4/0x3b0 [ 3499.155118][T29836] ? __x64_sys_mount+0xd0/0xd0 [ 3499.159789][T29836] __x64_sys_mount+0xbf/0xd0 [ 3499.164215][T29836] do_syscall_64+0x34/0x70 [ 3499.168474][T29836] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3499.174286][T29836] RIP: 0033:0x7f6f8e3deff9 [ 3499.178545][T29836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3499.197981][T29836] RSP: 002b:00007f6f8d016038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3499.206229][T29836] RAX: ffffffffffffffda RBX: 00007f6f8e597130 RCX: 00007f6f8e3deff9 [ 3499.214044][T29836] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 3499.221852][T29836] RBP: 00007f6f8d016090 R08: 0000000020000340 R09: 0000000000000000 [ 3499.229662][T29836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3499.237489][T29836] R13: 0000000000000000 R14: 00007f6f8e597130 R15: 00007ffdba995308 [ 3499.481740][T29844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6924'. [ 3499.513011][T29844] device bridge_slave_1 left promiscuous mode [ 3499.528033][T29844] bridge0: port 2(bridge_slave_1) entered disabled state [ 3499.586325][T29844] device bridge_slave_0 left promiscuous mode [ 3499.615424][T29844] bridge0: port 1(bridge_slave_0) entered disabled state [ 3500.204506][T26679] usb 5-1: USB disconnect, device number 114 [ 3504.715293][T29890] overlayfs: statfs failed on './file0' [ 3505.808405][T29904] syz.0.6940[29904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3505.809387][T29904] syz.0.6940[29904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3505.849219][T29904] fuse: Unknown parameter '0x0000000000000007' [ 3506.667445][ T24] audit: type=1400 audit(2000001590.316:7184): avc: denied { bind } for pid=29911 comm="syz.0.6943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3506.700943][ T24] audit: type=1400 audit(2000001590.316:7185): avc: denied { setopt } for pid=29911 comm="syz.0.6943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3506.815810][ T1391] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 3506.861131][T29916] tipc: Started in network mode [ 3506.866343][T29916] tipc: Own node identity 4af5434fb9d6, cluster identity 4711 [ 3506.874712][T29916] tipc: Enabled bearer , priority 0 [ 3508.070483][T26679] tipc: 32-bit node address hash set to 4f4323f3 [ 3508.092290][ T1391] usb 5-1: Using ep0 maxpacket: 16 [ 3508.210877][T29908] tipc: Disabling bearer [ 3508.412189][ T1391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3508.434581][ T1391] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3508.602105][ T1391] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 3508.611623][ T1391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3508.622520][ T1391] usb 5-1: config 0 descriptor?? [ 3508.943471][ T1391] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 3510.188125][T19240] usb 5-1: USB disconnect, device number 115 [ 3511.254884][ T1391] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 3512.157433][ T1391] usb 1-1: Using ep0 maxpacket: 16 [ 3512.372238][T10619] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 3512.632006][T10619] usb 4-1: Using ep0 maxpacket: 32 [ 3512.734152][ T1391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3512.745326][ T1391] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3512.753710][T10619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3512.754874][ T1391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3512.776375][T10619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3512.806786][T10619] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3512.831992][T10619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3512.868580][T10619] usb 4-1: config 0 descriptor?? [ 3512.923385][T10619] hub 4-1:0.0: USB hub found [ 3512.952465][ T1391] usb 1-1: config 0 descriptor?? [ 3513.142238][T10619] hub 4-1:0.0: 1 port detected [ 3513.403192][T19102] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3514.414901][T29971] FAULT_INJECTION: forcing a failure. [ 3514.414901][T29971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3514.428022][T29971] CPU: 1 PID: 29971 Comm: syz.1.6958 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 3514.437843][T29971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3514.442114][T19102] usb 5-1: Using ep0 maxpacket: 32 [ 3514.447731][T29971] Call Trace: [ 3514.447773][T29971] dump_stack_lvl+0x1e2/0x24b [ 3514.447826][T29971] ? panic+0x812/0x812 [ 3514.464336][T29971] ? bfq_pos_tree_add_move+0x43b/0x43b [ 3514.469633][T29971] dump_stack+0x15/0x17 [ 3514.473616][T29971] should_fail+0x3c6/0x510 [ 3514.477879][T29971] should_fail_usercopy+0x1a/0x20 [ 3514.482739][T29971] strncpy_from_user+0x24/0x2d0 [ 3514.487432][T29971] ? getname_flags+0xba/0x520 [ 3514.491937][T29971] getname_flags+0xf2/0x520 [ 3514.496313][T29971] user_path_at_empty+0x2d/0x50 [ 3514.500963][T29971] do_sys_truncate+0xa3/0x190 [ 3514.505476][T29971] ? locks_verify_truncate+0x170/0x170 [ 3514.510771][T29971] ? debug_smp_processor_id+0x17/0x20 [ 3514.515981][T29971] __x64_sys_truncate+0x5b/0x70 [ 3514.520663][T29971] do_syscall_64+0x34/0x70 [ 3514.524924][T29971] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3514.530639][T29971] RIP: 0033:0x7f0d62ab5ff9 [ 3514.534904][T29971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3514.554340][T29971] RSP: 002b:00007f0d6172f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 3514.562591][T29971] RAX: ffffffffffffffda RBX: 00007f0d62c6df80 RCX: 00007f0d62ab5ff9 [ 3514.563063][T29973] udc-core: couldn't find an available UDC or it's busy [ 3514.570658][T29971] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000040 [ 3514.570683][T29971] RBP: 00007f0d6172f090 R08: 0000000000000000 R09: 0000000000000000 [ 3514.570705][T29971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3514.570729][T29971] R13: 0000000000000000 R14: 00007f0d62c6df80 R15: 00007ffead5fe6f8 [ 3514.609991][T19102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3514.623376][T19102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3514.633399][T19102] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3514.642678][T19102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3514.652331][T19102] usb 5-1: config 0 descriptor?? [ 3514.692237][T29973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3514.701634][T11902] usb 4-1: USB disconnect, device number 78 [ 3514.703628][T10619] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 3514.715317][T19102] hub 5-1:0.0: USB hub found [ 3514.821325][ T1391] hid-generic 0003:0158:0100.00B2: unknown main item tag 0x1 [ 3514.852036][ T1391] hid-generic 0003:0158:0100.00B2: unexpected long global item [ 3514.860020][ T1391] hid-generic: probe of 0003:0158:0100.00B2 failed with error -22 [ 3514.932095][T19102] hub 5-1:0.0: 1 port detected [ 3515.032132][T10619] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 3515.382001][T10619] usb 2-1: Using ep0 maxpacket: 16 [ 3515.452245][T19102] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 3515.459755][T19102] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 3515.512348][T10619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3515.527799][T10619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3515.555153][T10619] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 3515.572099][T19102] usbhid 5-1:0.0: can't add hid device: -71 [ 3515.622700][T19102] usbhid: probe of 5-1:0.0 failed with error -71 [ 3515.631255][T10619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3515.672359][T10619] usb 2-1: config 0 descriptor?? [ 3516.456444][T19102] usb 5-1: USB disconnect, device number 116 [ 3516.585220][T10619] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3516.645637][T29987] sit: Src spoofed 0.0.0.0/2002:0:400:: -> 0.0.0.0/2042::fb:ffff:ff00:0 [ 3516.752692][T29989] tipc: Enabling of bearer rejected, failed to enable media [ 3516.793852][ T1391] usb 1-1: USB disconnect, device number 96 [ 3520.050079][T19240] usb 2-1: USB disconnect, device number 89 [ 3520.473045][T30031] tipc: Enabling of bearer rejected, failed to enable media [ 3522.252222][T11899] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 3522.357712][T30026] device pim6reg1 entered promiscuous mode [ 3522.741999][T11899] usb 4-1: Using ep0 maxpacket: 16 [ 3523.532890][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3524.088856][T11899] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3524.100941][T11899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3524.152863][T11899] usb 4-1: config 0 descriptor?? [ 3524.722061][T26679] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 3524.992024][T26679] usb 1-1: Using ep0 maxpacket: 32 [ 3525.001214][T30072] tipc: Enabling of bearer rejected, failed to enable media [ 3525.011499][T30073] udc-core: couldn't find an available UDC or it's busy [ 3525.032011][T19102] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3525.046855][T30073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3525.115316][T26679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3525.139059][T11899] hid-generic 0003:0158:0100.00B3: unknown main item tag 0x1 [ 3525.151495][T26679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3525.167331][T11899] hid-generic 0003:0158:0100.00B3: unexpected long global item [ 3525.177015][T26679] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3525.282144][T19102] usb 3-1: Using ep0 maxpacket: 32 [ 3525.340693][T11899] hid-generic: probe of 0003:0158:0100.00B3 failed with error -22 [ 3525.348437][T26679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3525.372337][T26679] usb 1-1: config 0 descriptor?? [ 3525.447927][T26679] hub 1-1:0.0: USB hub found [ 3525.475712][T30079] syz.4.6987[30079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3525.476635][T30079] syz.4.6987[30079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3525.772240][T26679] hub 1-1:0.0: 1 port detected [ 3525.931764][T19102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3525.942761][T19102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3525.952421][T19102] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3525.961304][T19102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3525.970631][T19102] usb 3-1: config 0 descriptor?? [ 3526.013703][T19102] hub 3-1:0.0: USB hub found [ 3526.097659][T30076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3526.111368][T30076] bridge0: port 1(bridge_slave_0) entered disabled state [ 3526.135923][T30076] device bridge_slave_0 entered promiscuous mode [ 3526.167640][T30076] bridge0: port 2(bridge_slave_1) entered blocking state [ 3526.181987][T30076] bridge0: port 2(bridge_slave_1) entered disabled state [ 3526.190131][T30076] device bridge_slave_1 entered promiscuous mode [ 3526.232162][T19102] hub 3-1:0.0: 1 port detected [ 3526.430263][T11899] usb 4-1: USB disconnect, device number 79 [ 3526.453790][T26679] hub 1-1:0.0: activate --> -90 [ 3526.519475][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3526.532655][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3526.555564][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3526.572970][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3526.585058][T16540] bridge0: port 1(bridge_slave_0) entered blocking state [ 3526.592020][T16540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3526.608782][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3526.639444][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3526.658669][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3526.660688][T30087] kvm: MWAIT instruction emulated as NOP! [ 3526.679060][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 3526.686006][T16540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3526.703830][T23152] device bridge_slave_1 left promiscuous mode [ 3526.709908][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 3526.745510][T23152] device bridge_slave_0 left promiscuous mode [ 3526.751683][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 3526.784348][T23152] device veth1_macvtap left promiscuous mode [ 3526.795525][T23152] device veth0_vlan left promiscuous mode [ 3526.905579][T19240] usb 1-1: USB disconnect, device number 97 [ 3527.004403][T13737] usb 3-1: USB disconnect, device number 93 [ 3527.805920][T19102] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 3529.017582][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3529.030567][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3529.057858][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3529.067498][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3529.091207][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3529.137214][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3529.189135][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3529.222210][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3529.269112][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3529.292358][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3529.334626][T30076] device veth0_vlan entered promiscuous mode [ 3529.378058][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3529.393204][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3529.448895][T30076] device veth1_macvtap entered promiscuous mode [ 3529.632187][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3529.662915][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3529.712921][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3529.721474][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3531.322431][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3531.360065][ T24] audit: type=1326 audit(2000001615.006:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30106 comm="syz.0.6994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x0 [ 3531.552727][T30128] incfs: Error accessing: ./file0. [ 3531.557802][T30128] incfs: mount failed -20 [ 3531.847755][T30135] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 3532.930611][ T24] audit: type=1400 audit(2000001616.576:7187): avc: denied { map } for pid=30136 comm="syz.4.7001" path="socket:[164165]" dev="sockfs" ino=164165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 3533.342070][T20207] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 3533.522389][ T323] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 3533.602172][T20207] usb 1-1: Using ep0 maxpacket: 32 [ 3533.732171][T20207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3533.752006][T20207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3533.761661][T20207] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3533.772007][ T323] usb 2-1: Using ep0 maxpacket: 8 [ 3533.787603][T20207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3533.803567][T20207] usb 1-1: config 0 descriptor?? [ 3533.853335][T20207] hub 1-1:0.0: USB hub found [ 3533.893824][ T323] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 3533.906482][ T323] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 3533.926983][ T323] usb 2-1: config 135 has no interface number 0 [ 3533.942100][ T323] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3534.062372][T20207] hub 1-1:0.0: 1 port detected [ 3534.122220][ T323] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 3534.136910][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3534.152058][ T323] usb 2-1: Product: syz [ 3534.162350][ T323] usb 2-1: Manufacturer: syz [ 3534.172373][ T323] usb 2-1: SerialNumber: syz [ 3534.264319][ T323] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 3534.270621][ T323] uvcvideo: No valid video chain found. [ 3534.596635][T20207] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 3534.603269][T20207] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 3534.943538][T20207] usbhid 1-1:0.0: can't add hid device: -71 [ 3534.981824][T20207] usbhid: probe of 1-1:0.0 failed with error -71 [ 3535.442993][T20207] usb 1-1: USB disconnect, device number 98 [ 3535.562055][T13737] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 3535.595477][ T24] audit: type=1326 audit(2000001619.246:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30169 comm="syz.0.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3535.675628][ T24] audit: type=1326 audit(2000001619.286:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30169 comm="syz.0.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3535.750024][ T24] audit: type=1326 audit(2000001619.286:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30169 comm="syz.0.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b687b6ff9 code=0x7ffc0000 [ 3535.822066][T13737] usb 4-1: Using ep0 maxpacket: 16 [ 3535.898491][ T323] usb 2-1: USB disconnect, device number 90 [ 3536.697151][T13737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3536.708107][T13737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3536.746495][T13737] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 3536.830189][T13737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3536.843635][T13737] usb 4-1: config 0 descriptor?? [ 3536.862242][T13737] usb 4-1: can't set config #0, error -71 [ 3536.869680][T13737] usb 4-1: USB disconnect, device number 80 [ 3537.812051][T10619] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3538.062209][T10619] usb 1-1: Using ep0 maxpacket: 32 [ 3538.192231][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3538.211833][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3538.237997][T10619] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3538.254178][T10619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3538.299158][T10619] usb 1-1: config 0 descriptor?? [ 3538.350780][T10619] hub 1-1:0.0: USB hub found [ 3538.562480][T10619] hub 1-1:0.0: 1 port detected [ 3539.702093][T10619] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 3539.708407][T10619] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 3540.452103][T10619] usbhid 1-1:0.0: can't add hid device: -71 [ 3540.460387][T10619] usbhid: probe of 1-1:0.0 failed with error -71 [ 3540.512437][T10619] usb 1-1: USB disconnect, device number 99 [ 3543.413016][T11899] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 3543.670710][ T24] audit: type=1326 audit(2000001627.316:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30236 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3543.712036][T10619] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 3543.713218][T11899] usb 2-1: Using ep0 maxpacket: 32 [ 3543.734645][ T24] audit: type=1326 audit(2000001627.316:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30236 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3543.759545][ T24] audit: type=1326 audit(2000001627.356:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30236 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3543.789784][ T24] audit: type=1326 audit(2000001627.356:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30236 comm="syz.2.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x7ffc0000 [ 3543.815279][T30234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7022'. [ 3543.872235][T11899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3543.891531][T11899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3543.912286][T11899] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 3543.921309][T11899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3543.933034][T11899] usb 2-1: config 0 descriptor?? [ 3544.072033][T26679] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 3544.082445][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3544.093567][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3544.103915][T10619] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3544.113207][T10619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3544.129859][T10619] usb 1-1: config 0 descriptor?? [ 3544.526209][T11899] saitek 0003:06A3:0CCB.00B4: unknown main item tag 0x0 [ 3544.533259][T11899] saitek 0003:06A3:0CCB.00B4: unknown main item tag 0x0 [ 3544.540197][T11899] saitek 0003:06A3:0CCB.00B4: item fetching failed at offset 4/5 [ 3544.548910][T11899] saitek 0003:06A3:0CCB.00B4: parse failed [ 3544.554780][T26679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3544.565706][T11899] saitek: probe of 0003:06A3:0CCB.00B4 failed with error -22 [ 3544.573068][T26679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3544.585425][T26679] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 3544.733181][T26679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3545.011655][T26679] usb 4-1: config 0 descriptor?? [ 3545.382864][ T1391] usb 2-1: USB disconnect, device number 91 [ 3546.562103][T10619] usbhid 1-1:0.0: can't add hid device: -71 [ 3546.568444][T10619] usbhid: probe of 1-1:0.0 failed with error -71 [ 3546.604128][T10619] usb 1-1: USB disconnect, device number 100 [ 3549.446553][T30270] tipc: Started in network mode [ 3549.451389][T30270] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 3549.460792][T30270] tipc: Enabling of bearer rejected, failed to enable media [ 3549.470301][T30270] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7032'. [ 3550.535033][T26679] usbhid 4-1:0.0: can't add hid device: -71 [ 3550.547990][T26679] usbhid: probe of 4-1:0.0 failed with error -71 [ 3550.570903][T26679] usb 4-1: USB disconnect, device number 81 [ 3551.890372][ T24] audit: type=1326 audit(2000001635.256:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30287 comm="syz.1.7036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3552.172458][ T24] audit: type=1326 audit(2000001635.256:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30287 comm="syz.1.7036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3553.163990][ T24] audit: type=1326 audit(2000001635.256:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30287 comm="syz.1.7036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3553.904920][ T24] audit: type=1326 audit(2000001635.256:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30287 comm="syz.1.7036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3553.970748][ T24] audit: type=1326 audit(2000001635.256:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30287 comm="syz.1.7036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3554.087807][T30301] bridge0: port 1(bridge_slave_0) entered blocking state [ 3554.094969][T30301] bridge0: port 1(bridge_slave_0) entered disabled state [ 3554.103537][T30301] device bridge_slave_0 entered promiscuous mode [ 3554.111890][T30301] bridge0: port 2(bridge_slave_1) entered blocking state [ 3554.119341][T30301] bridge0: port 2(bridge_slave_1) entered disabled state [ 3554.127511][T30301] device bridge_slave_1 entered promiscuous mode [ 3554.463912][ T7] tipc: Left network mode [ 3554.741102][T30301] bridge0: port 2(bridge_slave_1) entered blocking state [ 3554.748436][T30301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3554.755718][T30301] bridge0: port 1(bridge_slave_0) entered blocking state [ 3554.762821][T30301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3555.675067][T20564] bridge0: port 1(bridge_slave_0) entered disabled state [ 3555.692182][T20564] bridge0: port 2(bridge_slave_1) entered disabled state [ 3555.811748][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3555.823084][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3555.862934][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3555.875695][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3555.887211][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 3555.894258][T23152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3555.923776][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3555.944667][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3555.955008][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 3555.961926][T23152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3555.992313][T10619] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3556.001679][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3556.015832][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3556.055071][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3556.072760][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3556.120156][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3556.129241][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3556.415531][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3556.442128][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3556.619448][T30301] device veth0_vlan entered promiscuous mode [ 3556.792922][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3556.835167][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3556.972212][T10619] usb 1-1: Using ep0 maxpacket: 32 [ 3557.054248][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3557.067892][T23152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3557.085965][T30301] device veth1_macvtap entered promiscuous mode [ 3557.102330][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3557.142105][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3557.159665][T10619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3557.170636][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3557.199523][T10619] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3557.209614][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3557.260807][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3557.269120][T10619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3557.282628][T20564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3557.817235][T10619] usb 1-1: config 0 descriptor?? [ 3558.435298][T10619] hub 1-1:0.0: USB hub found [ 3558.672175][T10619] hub 1-1:0.0: 1 port detected [ 3558.904481][ T7] device veth1_macvtap left promiscuous mode [ 3558.910408][ T7] device veth0_vlan left promiscuous mode [ 3560.192674][T10619] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 3560.796191][T10619] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 3560.942165][T10619] usbhid 1-1:0.0: can't add hid device: -71 [ 3560.948221][T10619] usbhid: probe of 1-1:0.0 failed with error -71 [ 3561.016418][T10619] usb 1-1: USB disconnect, device number 101 [ 3561.194960][T30371] tipc: Started in network mode [ 3561.200544][T30371] tipc: Own node identity 06e84e48329a, cluster identity 4711 [ 3561.209080][T30371] tipc: Enabled bearer , priority 0 [ 3561.392417][T11902] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 3561.801247][T30360] tipc: Disabling bearer [ 3562.097780][T11902] usb 2-1: Using ep0 maxpacket: 16 [ 3562.382416][ T24] audit: type=1326 audit(2000001645.826:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30344 comm="syz.3.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3562.762251][T11902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3562.794427][T11902] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3562.814403][ T24] audit: type=1326 audit(2000001645.836:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30344 comm="syz.3.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3562.844889][T11902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3562.892584][T11902] usb 2-1: config 0 descriptor?? [ 3562.910447][ T24] audit: type=1326 audit(2000001646.006:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30344 comm="syz.3.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3562.937169][ T24] audit: type=1326 audit(2000001646.006:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30344 comm="syz.3.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3562.961528][ T24] audit: type=1326 audit(2000001646.016:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30344 comm="syz.3.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3562.991737][ T24] audit: type=1326 audit(2000001646.436:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30380 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3563.057314][ T24] audit: type=1326 audit(2000001646.436:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30380 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3563.081531][ T24] audit: type=1326 audit(2000001646.436:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30380 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3563.106660][ T24] audit: type=1326 audit(2000001646.436:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30380 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3563.131669][ T24] audit: type=1326 audit(2000001646.436:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30380 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71daeff9 code=0x7ffc0000 [ 3564.048146][T26679] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3564.432215][T26679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3564.443848][T26679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3564.644276][T26679] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3564.653283][T26679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3564.662674][T26679] usb 3-1: config 0 descriptor?? [ 3564.673816][T30369] udc-core: couldn't find an available UDC or it's busy [ 3564.680689][T30369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3565.683019][T11902] hid-generic 0003:0158:0100.00B5: unknown main item tag 0x1 [ 3565.715061][T11902] hid-generic 0003:0158:0100.00B5: unexpected long global item [ 3565.740667][T11902] hid-generic: probe of 0003:0158:0100.00B5 failed with error -22 [ 3566.882218][T11902] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 3567.132003][T11902] usb 5-1: Using ep0 maxpacket: 32 [ 3567.252187][T11902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3567.280868][T11902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3567.312506][T11902] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3567.340173][T11902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3567.378346][T11902] usb 5-1: config 0 descriptor?? [ 3567.435822][T11902] hub 5-1:0.0: USB hub found [ 3567.642163][T11902] hub 5-1:0.0: 1 port detected [ 3567.733402][T10619] usb 2-1: USB disconnect, device number 92 [ 3567.971501][ T24] audit: type=1326 audit(2000001651.536:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.1.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3568.063840][T26679] usbhid 3-1:0.0: can't add hid device: -71 [ 3568.133907][T11902] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 3568.166201][T11902] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 3568.194128][T26679] usbhid: probe of 3-1:0.0 failed with error -71 [ 3568.470703][ T24] audit: type=1326 audit(2000001651.536:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.1.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3568.635629][T26679] usb 3-1: USB disconnect, device number 94 [ 3568.748567][ T24] audit: type=1326 audit(2000001651.536:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.1.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd4f0dff9 code=0x7ffc0000 [ 3571.333349][T11902] usbhid 5-1:0.0: can't add hid device: -71 [ 3571.339602][T11902] usbhid: probe of 5-1:0.0 failed with error -71 [ 3571.374212][T11902] usb 5-1: USB disconnect, device number 117 [ 3571.394028][T30447] syz.2.7076[30447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3571.394154][T30447] syz.2.7076[30447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3571.425611][ T24] audit: type=1326 audit(2000001655.076:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30446 comm="syz.2.7076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f8e3deff9 code=0x0 [ 3571.542119][ T24] audit: type=1400 audit(2000001655.156:7214): avc: denied { write } for pid=30451 comm="syz.0.7078" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3571.571031][T30453] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 3571.744072][ T24] audit: type=1400 audit(2000001655.396:7215): avc: denied { setopt } for pid=30441 comm="syz.3.7074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 SYZFAIL: ShmemBuilder: too large output offset size=1702260579 consumed=1852121202 (errno 11: Resource temporarily unavailable) [ 3571.825357][ T24] audit: type=1400 audit(2000001655.466:7216): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[13400]" dev="pipefs" ino=13400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3572.586447][T30458] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3572.712813][ T24] audit: type=1400 audit(2000001655.606:7217): avc: denied { connect } for pid=30451 comm="syz.0.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3572.990646][ T24] audit: type=1400 audit(2000001656.236:7218): avc: denied { create } for pid=30440 comm="syz.1.7073" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 3572.991344][ T24] audit: type=1400 audit(2000001656.236:7219): avc: denied { associate } for pid=30440 comm="syz.1.7073" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 3573.103755][ T7] tipc: Left network mode [ 3573.302716][ T24] audit: type=1400 audit(2000001656.236:7220): avc: denied { read write open } for pid=30440 comm="syz.1.7073" path="/13/bus" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 3573.303413][ T24] audit: type=1400 audit(2000001656.236:7221): avc: denied { map } for pid=30440 comm="syz.1.7073" path="/13/bus" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 3573.392905][ T24] audit: type=1400 audit(2000001656.236:7222): avc: denied { execute } for pid=30440 comm="syz.1.7073" path="/13/bus" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 3574.013147][ T7] device bridge_slave_1 left promiscuous mode [ 3574.106935][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 3574.115186][ T7] device bridge_slave_0 left promiscuous mode [ 3574.121298][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 3574.130624][ T7] device veth1_macvtap left promiscuous mode [ 3574.136588][ T7] device veth0_vlan left promiscuous mode [ 3574.845522][ T7] tipc: Left network mode [ 3575.804622][ T7] device bridge_slave_1 left promiscuous mode [ 3575.810658][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 3575.818908][ T7] device bridge_slave_0 left promiscuous mode [ 3575.825337][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 3575.834615][ T7] device bridge_slave_1 left promiscuous mode [ 3575.840623][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 3575.848857][ T7] device bridge_slave_0 left promiscuous mode [ 3575.855216][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 3575.864389][ T7] device bridge_slave_1 left promiscuous mode [ 3575.870436][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 3575.879227][ T7] device bridge_slave_0 left promiscuous mode [ 3575.885913][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 3575.896079][ T7] device veth1_macvtap left promiscuous mode [ 3575.902018][ T7] device veth0_vlan left promiscuous mode [ 3575.907940][ T7] device veth1_macvtap left promiscuous mode [ 3575.913925][ T7] device veth0_vlan left promiscuous mode [ 3575.920078][ T7] device veth1_macvtap left promiscuous mode [ 3575.926076][ T7] device veth0_vlan left promiscuous mode