last executing test programs: 8.835529286s ago: executing program 2 (id=287): mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 8.659756998s ago: executing program 2 (id=290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007af28810d30b55051e000000000109025201010000000009044000000e01"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x3}, 0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f00000008c0)={{r4}, "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x50c00, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1d, 0x1, 0x4, 0x5, 0x1000, r0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x7, 0xc, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @generic={0x7, 0x2, 0x5, 0x81, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @alu={0x0, 0x0, 0x1, 0x7, 0xf, 0x0, 0x10}, @ldst={0x1, 0x0, 0x0, 0x9, 0x5, 0x8}], &(0x7f0000000280)='syzkaller\x00', 0x10000, 0xfc, &(0x7f00000018c0)=""/252, 0x41100, 0x5f, '\x00', r9, @fallback=0x29, r10, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x3, 0xc5a}, 0x10, 0x0, r11, 0x0, &(0x7f0000000740)=[r0, r12, r0, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) 6.738093093s ago: executing program 0 (id=297): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000040)) 6.551273875s ago: executing program 0 (id=298): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r3, &(0x7f0000000000)) 6.286045639s ago: executing program 3 (id=301): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) socket(0x10, 0x803, 0x0) r4 = dup(0xffffffffffffffff) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa6, 0x3a, '', 0x3a, '-#', 0x3a, './file0', 0x3a, [0x4f, 0x46]}, 0x2b) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20018095, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ppoll(&(0x7f0000000e40)=[{0xffffffffffffffff, 0x4210}], 0x1, &(0x7f0000000e80), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1b2bd6e54e47e7a6864c2a24b618950f0bba4b0ef0d57e44253a23aa71b34ce249b5d32ffc181a0f8fc07839d5d5c47dde9d296018dd0882e3a06fb0"]) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 5.354318781s ago: executing program 0 (id=303): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 5.326576991s ago: executing program 1 (id=304): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 5.316928632s ago: executing program 3 (id=305): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002bc0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4868a3", 0x0, 0x33, 0x0, @rand_addr=' \x01\x00', @local}}}}, 0x0) 5.138185594s ago: executing program 2 (id=306): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000680)={[{@utf8no}, {@nonumtail}, {@shortname_win95}, {@fat=@debug}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@check_normal}, {@uni_xlateno}]}, 0x25, 0x36b, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x200, 0x100) 4.701024479s ago: executing program 3 (id=307): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) write$UHID_INPUT(r2, &(0x7f00000022c0)={0x8, {"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", 0x1000}}, 0x1006) 4.65886671s ago: executing program 4 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f00000016c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 4.354339164s ago: executing program 1 (id=309): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x5}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 3.85019533s ago: executing program 4 (id=310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='hrtimer_init\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 3.696287712s ago: executing program 2 (id=311): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 3.646296533s ago: executing program 3 (id=312): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.493582175s ago: executing program 4 (id=313): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r3, &(0x7f0000000000)) 3.421228636s ago: executing program 2 (id=314): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x66) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.286175168s ago: executing program 1 (id=315): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) socket(0x10, 0x803, 0x0) r4 = dup(0xffffffffffffffff) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa6, 0x3a, '', 0x3a, '-#', 0x3a, './file0', 0x3a, [0x4f, 0x46]}, 0x2b) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20018095, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ppoll(&(0x7f0000000e40)=[{0xffffffffffffffff, 0x4210}], 0x1, &(0x7f0000000e80), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1b2bd6e54e47e7a6864c2a24b618950f0bba4b0ef0d57e44253a23aa71b34ce249b5d32ffc181a0f8fc07839d5d5c47dde9d296018dd0882e3a06fb0"]) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 3.270292298s ago: executing program 1 (id=316): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2$9p(&(0x7f00000001c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setfsgid(0xffffffffffffffff) 3.265874608s ago: executing program 3 (id=317): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001900000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2.410295429s ago: executing program 3 (id=318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x40, [{{0x9, 0x4, 0x0, 0x40, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x100000000, 0x18000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0x31, 0x54, {0x54, 0x22, "85e427b9395c236df8ded0754998d73978ff79004f0e20f24a74830fbe74bf28bced50231d34c85e3cf259bef515ba9098c14c14a35246aa6d3127e8d34a69bbd62480b4b7a024291d0b1edc3647433cb709"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.231130542s ago: executing program 4 (id=319): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$session_to_parent(0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.892367576s ago: executing program 4 (id=320): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000100)={[{@nodiscard}, {@test_dummy_encryption}, {@inlinecrypt}, {@delalloc}, {@data_err_abort}, {@errors_remount}, {@grpid}, {@quota}]}, 0xa, 0xbc2, &(0x7f0000002a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fallocate(r3, 0x20, 0x66, 0x4000000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800418, &(0x7f0000000080)={[{@i_version}, {}]}, 0xfe, 0x278, &(0x7f00000006c0)="$eJzs3U9oHFUcB/Df7B/zb9GoF1H8AyKigRBvghe9KAREgoigQkTEkyRCNHjLevLiQc8qOfUSSm9Neyy9hF4KvaZtDumlh4YeGnpoD1t2Zxc2u5uk2c3uNjufD2xm3rw383Zhvm+HsPMmgMyajoiPIyIfETMRUYyIpLnBW+lrul5cn9hajKhUvryf1Nql5VRjv6mIKEfEhxGFRt3q5re7D7c/e/ev34rvnNv8ZmIAHy3fumFvd+fz/f+/+PPi/Aerufq2Un3Z/DlO0asvdNhYSCJe6kNnz4qkMOx3wNNY+P3CzWpIXo6It2v5L0auHtm/V567Woz3/zts33/u3XhtkO8VOH2VSrH6HViuAJmTq10DJ7XL4XQ9l5udTa/hb+Uncz8vr/w689NyfunHYY9UwGkpRex8enns0lQ9/7P1/N/Np/kHzq7kmPpq/r9a2LhdXd9v+08ZMJJeTxfV/M98v/ZeyD9kjvxDdsk/jIRSlzvJP5x1XWZX/mG0nORnl/IP2SX/MMKKjZVyx2r5h+xqzv/0UQ0HcaceMFC+/yG7mvMPAGRLZWzYdyADwzLs8QcAAAAAAAAAAAAAAAAAAGi3PrG12HgNqs9r/0bsfZJOXN7ef772POKI8drfyQfJgfnNkxPOd97Jd2/2eIAene//3deVsYPl8ebC83f63v+Rrr/Rn+P+cbB46AyWa0sR5WrjuUKh/fxL6udf9148pr74Q48dnFDrM4E/+nqw/bd6vDHc/ue3I65Ux5+5TuNPLl6pLVvHn/SsKDVPsdylXx71eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5kkAAAD//7S3ads=") r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r4) 1.746111508s ago: executing program 1 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xc, &(0x7f0000000100)={0x0, 0x7c}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.57482799s ago: executing program 0 (id=322): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000680)={[{@utf8no}, {@nonumtail}, {@shortname_win95}, {@fat=@debug}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@check_normal}, {@uni_xlateno}]}, 0x25, 0x36b, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x200, 0x100) 305.931007ms ago: executing program 0 (id=323): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 86.33045ms ago: executing program 0 (id=324): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 86.04651ms ago: executing program 4 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0891040000000000b000128009000100766c616e00000000a000028004000480400003800c0000002d0a0000030000003c00010009000000080000000c00010035570000030000000c00010009000000080000000c0001000300000006000000580004800c000100f9ffffff65e200000c00010048000000f80e00000c00010000000000000000000c0001003bf00000150000000c00010002000000080000000c000100030000000300000054000100480000008100000014000300766c616e30"], 0xe4}}, 0x0) 59.43227ms ago: executing program 2 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000180}, 0x40) 0s ago: executing program 1 (id=327): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) socket(0x10, 0x803, 0x0) r4 = dup(0xffffffffffffffff) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa6, 0x3a, '', 0x3a, '-#', 0x3a, './file0', 0x3a, [0x4f, 0x46]}, 0x2b) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20018095, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ppoll(&(0x7f0000000e40)=[{0xffffffffffffffff, 0x4210}], 0x1, &(0x7f0000000e80), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1b2bd6e54e47e7a6864c2a24b618950f0bba4b0ef0d57e44253a23aa71b34ce249b5d32ffc181a0f8fc07839d5d5c47dde9d296018dd0882e3a06fb0"]) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 58.329459][ T4157] cgroup: Unknown subsys name 'net' [ 58.468738][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.075392][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.670148][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 61.700685][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.785329][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 61.815515][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 61.907902][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.916223][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.932604][ T4175] device bridge_slave_0 entered promiscuous mode [ 61.963255][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.972565][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.981473][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.989530][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.996992][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.005435][ T4175] device bridge_slave_1 entered promiscuous mode [ 62.030540][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.038419][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.046947][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.054874][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 62.075851][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.119502][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.148669][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.156335][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.165444][ T4176] device bridge_slave_0 entered promiscuous mode [ 62.176878][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.212642][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.219984][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.228366][ T4176] device bridge_slave_1 entered promiscuous mode [ 62.237162][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.254806][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.261952][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.270228][ T4181] device bridge_slave_0 entered promiscuous mode [ 62.299102][ T4175] team0: Port device team_slave_0 added [ 62.306271][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.313999][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.324771][ T4181] device bridge_slave_1 entered promiscuous mode [ 62.354224][ T4175] team0: Port device team_slave_1 added [ 62.363877][ T4168] team0: Port device team_slave_0 added [ 62.385447][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.405849][ T4168] team0: Port device team_slave_1 added [ 62.431614][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.462565][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.489896][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.497335][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.525990][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.547413][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.557772][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.566819][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.576211][ T4171] device bridge_slave_0 entered promiscuous mode [ 62.594065][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.603620][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.637852][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.652715][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.660229][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.700345][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.732022][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.739868][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.749169][ T4171] device bridge_slave_1 entered promiscuous mode [ 62.759479][ T4176] team0: Port device team_slave_0 added [ 62.770766][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.778626][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.811590][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.845246][ T4176] team0: Port device team_slave_1 added [ 62.858878][ T4181] team0: Port device team_slave_0 added [ 62.877869][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.912268][ T4181] team0: Port device team_slave_1 added [ 62.919546][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.929832][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.962529][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.986958][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.014590][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.022541][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.053350][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.116757][ T4175] device hsr_slave_0 entered promiscuous mode [ 63.124644][ T4175] device hsr_slave_1 entered promiscuous mode [ 63.137473][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.146342][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.154673][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.165559][ T4168] Cannot create hsr debugfs directory [ 63.174812][ T4171] team0: Port device team_slave_0 added [ 63.182078][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.190138][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.219515][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.236253][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.244140][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.283483][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.299634][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 63.307862][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 63.307950][ T2302] Bluetooth: hci1: command 0x0409 tx timeout [ 63.332996][ T4171] team0: Port device team_slave_1 added [ 63.371450][ T4159] Bluetooth: hci4: command 0x0409 tx timeout [ 63.381808][ T2302] Bluetooth: hci2: command 0x0409 tx timeout [ 63.414673][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.423281][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.458548][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.479003][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.487507][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.523772][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.555126][ T4176] device hsr_slave_0 entered promiscuous mode [ 63.564164][ T4176] device hsr_slave_1 entered promiscuous mode [ 63.572191][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.580750][ T4176] Cannot create hsr debugfs directory [ 63.620077][ T4181] device hsr_slave_0 entered promiscuous mode [ 63.627511][ T4181] device hsr_slave_1 entered promiscuous mode [ 63.635790][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.643834][ T4181] Cannot create hsr debugfs directory [ 63.757254][ T4171] device hsr_slave_0 entered promiscuous mode [ 63.766218][ T4171] device hsr_slave_1 entered promiscuous mode [ 63.775197][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.784143][ T4171] Cannot create hsr debugfs directory [ 64.030993][ T4175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.046301][ T4175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.060773][ T4175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.073210][ T4175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.128849][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.140088][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.150881][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.179308][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.234292][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.247290][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.260677][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.276962][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.356184][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.400050][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.424892][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.435377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.448238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.475320][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.485678][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.517509][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.538515][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.549389][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.560212][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.568724][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.586109][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.596317][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.606904][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.617453][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.625964][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.651696][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.664329][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.698866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.717979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.726676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.763586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.775088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.794256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.804955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.819964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.838643][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.849413][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.861833][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.877378][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.908048][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.916766][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.936200][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.950038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.965333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.977213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.988844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.000290][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.009459][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.020865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.035036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.046076][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.056116][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.066299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.080244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.090000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.127533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.139060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.153706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.169671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.182202][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.193961][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.204826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.220065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.236572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.252040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.271834][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.284250][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.300497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.312799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.324089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.334921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.347511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.359087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.382564][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 65.389521][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 65.391884][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 65.409046][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.420570][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.449535][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.451680][ T4159] Bluetooth: hci2: command 0x041b tx timeout [ 65.476571][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.477881][ T4159] Bluetooth: hci4: command 0x041b tx timeout [ 65.508944][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.529244][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.542270][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.554743][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.567538][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.613401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.639276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.693213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.726845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.750012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.778623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.794114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.833338][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.856628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.869947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.889292][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.927111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.946452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.977790][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.003987][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.029810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.052182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.064506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.082584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.102731][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.150609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.169928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.180813][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.191272][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.203260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.215581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.226316][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.236092][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.247855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.278776][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.303548][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.316639][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.332176][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.343538][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.359294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.372705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.408540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.421011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.432964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.443295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.454305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.464485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.480004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.496964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.507339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.538274][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.548377][ T4175] device veth0_vlan entered promiscuous mode [ 66.575780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.588704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.600849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.613531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.628213][ T4168] device veth0_vlan entered promiscuous mode [ 66.659238][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.668766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.686673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.700200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.715446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.726571][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.738041][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.753452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.766154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.780230][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.792394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.803962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.818344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.833676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.844034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.858678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.871928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.882546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.896151][ T4175] device veth1_vlan entered promiscuous mode [ 66.920658][ T4168] device veth1_vlan entered promiscuous mode [ 66.987885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.008920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.083371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.105566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.120851][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.142482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.160467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.173460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.184305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.198544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.209860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.233338][ T4175] device veth0_macvtap entered promiscuous mode [ 67.246019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.257051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.267523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.290634][ T4168] device veth0_macvtap entered promiscuous mode [ 67.301590][ T4175] device veth1_macvtap entered promiscuous mode [ 67.323049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.336579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.355121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.366292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.383364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.393599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.405230][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.422294][ T4168] device veth1_macvtap entered promiscuous mode [ 67.430855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.443678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.455415][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 67.456883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.463084][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 67.482576][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 67.488251][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.513350][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.522046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.533632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.542050][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 67.544347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.559752][ T4211] Bluetooth: hci2: command 0x040f tx timeout [ 67.565035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.591046][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.616381][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.634703][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.648644][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.662509][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.690059][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.704297][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.717197][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.745830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.755460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.790336][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.811523][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.825681][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.837978][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.848912][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.859748][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.871159][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.887816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.898402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.910129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.922746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.948113][ T4176] device veth0_vlan entered promiscuous mode [ 67.978100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.991082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.003925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.018312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.072450][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.081123][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.095006][ T4176] device veth1_vlan entered promiscuous mode [ 68.129597][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.145720][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.155961][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.164944][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.174978][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.186854][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.207985][ T4181] device veth0_vlan entered promiscuous mode [ 68.297273][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.306820][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.318241][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.327491][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.339575][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.357373][ T4176] device veth0_macvtap entered promiscuous mode [ 68.367579][ T4181] device veth1_vlan entered promiscuous mode [ 68.392634][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.395525][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.409433][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.423323][ T4176] device veth1_macvtap entered promiscuous mode [ 68.443592][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.458841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.469706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.479584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.488866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.500564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.509402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.543423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.552404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.578419][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.593544][ T4181] device veth0_macvtap entered promiscuous mode [ 68.600630][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.609820][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.609960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.628633][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.629067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.645079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.654976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.667884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.677161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.686513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.712685][ T4181] device veth1_macvtap entered promiscuous mode [ 68.729100][ T4171] device veth0_vlan entered promiscuous mode [ 68.747003][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.758800][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.769174][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.780083][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.794726][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.829650][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.843440][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.854598][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.869694][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.881490][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.894783][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.908515][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.923591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.940238][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.958504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.970959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.981161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.995104][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.009078][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.022167][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.033943][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.045580][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.076782][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.093949][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.107387][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.119494][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.139782][ T4171] device veth1_vlan entered promiscuous mode [ 69.153274][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.171095][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.190930][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.211405][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.223514][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.234586][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.246733][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.270086][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.285854][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.368886][ T4251] syz.1.2[4251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.370316][ T4251] syz.1.2[4251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.749713][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 70.411039][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.420468][ T4211] Bluetooth: hci3: command 0x0419 tx timeout [ 70.443469][ T4211] Bluetooth: hci2: command 0x0419 tx timeout [ 70.457516][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.468021][ T4254] loop0: detected capacity change from 0 to 2048 [ 70.502769][ T4159] Bluetooth: hci1: command 0x0419 tx timeout [ 70.509502][ T4159] Bluetooth: hci4: command 0x0419 tx timeout [ 70.559306][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578604][ T4258] loop1: detected capacity change from 0 to 256 [ 70.583225][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.605024][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.605034][ T4258] exfat: Bad value for 'fmask' [ 70.605061][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.655760][ T4254] loop0: p1 < > p3 [ 70.687879][ T4254] loop0: p3 size 134217728 extends beyond EOD, truncated [ 70.922793][ T4171] device veth0_macvtap entered promiscuous mode [ 70.936968][ T4171] device veth1_macvtap entered promiscuous mode [ 70.964553][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.979818][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.989562][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.344079][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370457][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531499][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.544916][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.558648][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.572987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.590866][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.611165][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.638521][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.650047][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.711708][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.751259][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.774081][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.802098][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.826274][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.875834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.909049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.962866][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.996805][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.029261][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.071842][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.091849][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.121360][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.141322][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.161313][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.192964][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.207850][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.218820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.239611][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.242368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.290204][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.292607][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.315668][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.325876][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.335837][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.338856][ T4267] loop1: detected capacity change from 0 to 40427 [ 72.366695][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.394833][ T4267] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 72.414604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.427137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.459787][ T4268] loop0: detected capacity change from 0 to 40427 [ 72.460382][ T4267] F2FS-fs (loop1): invalid crc value [ 72.510044][ T4267] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.519153][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.561773][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.567196][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.607728][ T4268] F2FS-fs (loop0): invalid crc value [ 72.630492][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.682249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.693200][ T4268] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.712168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.734215][ T4273] loop4: detected capacity change from 0 to 2048 [ 72.780562][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.808177][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.816537][ T4267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.871746][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.933896][ T4273] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 72.982154][ T4268] F2FS-fs (loop0): Start checkpoint disabled! [ 73.120119][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.150089][ T4283] attempt to access beyond end of device [ 73.150089][ T4283] loop1: rw=10241, want=45160, limit=40427 [ 73.184952][ T4279] Zero length message leads to an empty skb [ 73.226360][ T4268] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 75.400980][ T4298] loop2: detected capacity change from 0 to 128 [ 75.498460][ T4302] loop3: detected capacity change from 0 to 512 [ 75.522441][ T4298] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 75.550571][ T4302] EXT4-fs (loop3): Unrecognized mount option "smackfsfloor=seclabel" or missing value [ 75.631672][ T4298] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.725403][ T155] attempt to access beyond end of device [ 75.725403][ T155] loop0: rw=2049, want=45104, limit=40427 [ 77.221962][ T4300] loop4: detected capacity change from 0 to 40427 [ 77.265543][ T4300] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 77.277954][ T4300] F2FS-fs (loop4): invalid crc value [ 77.299867][ T4300] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.336934][ T4313] loop3: detected capacity change from 0 to 512 [ 77.391415][ T4213] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.439124][ T4316] loop2: detected capacity change from 0 to 128 [ 77.466616][ T4300] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.504611][ T4313] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 77.639554][ T4300] attempt to access beyond end of device [ 77.639554][ T4300] loop4: rw=10241, want=45160, limit=40427 [ 77.770498][ T4313] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 77.840554][ T4313] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.951832][ T26] audit: type=1800 audit(1746433313.217:2): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 78.022404][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.060956][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.091585][ T4213] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.125916][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.181838][ T4213] usb 2-1: config 0 descriptor?? [ 78.675743][ T4332] loop3: detected capacity change from 0 to 128 [ 78.771547][ T26] audit: type=1326 audit(1746433314.007:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 78.826677][ T4213] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 78.884188][ T4336] kernel profiling enabled (shift: 17) [ 78.891677][ T26] audit: type=1326 audit(1746433314.037:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 78.891725][ T26] audit: type=1326 audit(1746433314.037:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 78.891762][ T26] audit: type=1326 audit(1746433314.037:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 78.891797][ T26] audit: type=1326 audit(1746433314.037:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 78.931720][ T4213] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 79.042624][ T26] audit: type=1326 audit(1746433314.037:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 79.110283][ T26] audit: type=1326 audit(1746433314.037:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 79.155133][ T26] audit: type=1326 audit(1746433314.037:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 79.213119][ T4213] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 79.271821][ T26] audit: type=1326 audit(1746433314.037:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4333 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 79.305516][ T4213] usb 2-1: USB disconnect, device number 2 [ 79.313327][ T4342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.477277][ T4343] loop4: detected capacity change from 0 to 2048 [ 79.584078][ T4343] loop4: p1 < > p3 [ 79.603324][ T4343] loop4: p3 size 134217728 extends beyond EOD, truncated [ 79.952748][ T4343] kvm: emulating exchange as write [ 80.081000][ T4355] loop1: detected capacity change from 0 to 128 [ 80.206792][ T4355] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 80.397587][ T4355] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.026959][ T4366] loop4: detected capacity change from 0 to 512 [ 82.113441][ T4366] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 82.277568][ T4365] sched: RT throttling activated [ 82.280612][ T1325] cfg80211: failed to load regulatory.db [ 82.356877][ T4366] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 82.396512][ T4366] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.540112][ T4374] loop1: detected capacity change from 0 to 128 [ 83.304120][ T4385] loop2: detected capacity change from 0 to 128 [ 83.974467][ T4390] loop1: detected capacity change from 0 to 128 [ 84.236060][ T4395] loop3: detected capacity change from 0 to 256 [ 84.256405][ T4369] loop0: detected capacity change from 0 to 40427 [ 84.272955][ T4369] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 84.284234][ T4395] exfat: Bad value for 'fmask' [ 84.306853][ T4369] F2FS-fs (loop0): invalid crc value [ 84.382062][ T4212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.428341][ T4369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.732585][ T4369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.960649][ T4369] attempt to access beyond end of device [ 84.960649][ T4369] loop0: rw=10241, want=45160, limit=40427 [ 85.044699][ T4386] loop4: detected capacity change from 0 to 40427 [ 85.081677][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.118031][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.130493][ T4386] F2FS-fs (loop4): invalid crc value [ 85.157279][ T4212] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.171006][ T4386] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.211645][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.263404][ T4212] usb 3-1: config 0 descriptor?? [ 85.307379][ T4386] F2FS-fs (loop4): Start checkpoint disabled! [ 85.370020][ T4407] loop3: detected capacity change from 0 to 128 [ 85.391743][ T4386] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 85.453968][ T4409] loop1: detected capacity change from 0 to 512 [ 85.522918][ T4409] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 85.574678][ T4407] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 85.654571][ T4415] loop0: detected capacity change from 0 to 2048 [ 85.657263][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 85.664523][ T4407] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.679016][ T4409] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.794943][ T4415] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 85.822867][ T4212] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 85.845685][ T4212] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input6 [ 85.938905][ T4212] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 87.244360][ T4427] loop1: detected capacity change from 0 to 128 [ 87.436029][ T4427] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 87.467034][ T4427] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.545202][ T1215] attempt to access beyond end of device [ 87.545202][ T1215] loop4: rw=2049, want=45104, limit=40427 [ 87.571347][ T4259] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 88.496534][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 88.496557][ T26] audit: type=1326 audit(1746433323.767:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 88.681862][ T4438] syz.3.44[4438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.682001][ T4438] syz.3.44[4438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.302651][ T26] audit: type=1326 audit(1746433324.577:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 89.476376][ T26] audit: type=1326 audit(1746433324.747:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 89.594583][ T4444] loop1: detected capacity change from 0 to 128 [ 89.964811][ T4451] loop2: detected capacity change from 0 to 128 [ 90.088090][ T1325] usb 3-1: USB disconnect, device number 2 [ 90.280322][ T26] audit: type=1326 audit(1746433325.547:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 90.280378][ T26] audit: type=1326 audit(1746433325.547:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 90.281760][ T4217] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.300777][ T26] audit: type=1326 audit(1746433325.567:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 90.301037][ T26] audit: type=1326 audit(1746433325.567:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 90.306469][ T26] audit: type=1326 audit(1746433325.567:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 90.306821][ T26] audit: type=1326 audit(1746433325.577:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 90.641474][ T4217] usb 4-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 90.641531][ T4217] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.730780][ T26] audit: type=1326 audit(1746433325.997:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 90.801741][ T4217] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.831352][ T4217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.887989][ T4217] usb 4-1: Product: syz [ 90.903026][ T4217] usb 4-1: Manufacturer: syz [ 90.922084][ T4217] usb 4-1: SerialNumber: syz [ 90.958746][ T4468] loop2: detected capacity change from 0 to 512 [ 91.043872][ T4468] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 91.137769][ T4213] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.158986][ T4468] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 91.239241][ T4468] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.281774][ T4217] usb 4-1: 0:2 : does not exist [ 91.352219][ T4217] usb 4-1: USB disconnect, device number 2 [ 91.399831][ T4475] loop1: detected capacity change from 0 to 512 [ 91.423507][ T4477] loop0: detected capacity change from 0 to 128 [ 91.431592][ T4213] usb 5-1: Using ep0 maxpacket: 16 [ 91.469848][ T4475] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 91.497612][ T4475] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 91.511544][ T4477] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 91.537459][ T4477] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.581772][ T4213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.598540][ T4213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.709594][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.369774][ T4484] loop1: detected capacity change from 0 to 512 [ 92.529001][ T4213] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.540356][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.572971][ T4484] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 92.671503][ T4212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.692723][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 92.722781][ T4213] usb 5-1: Product: syz [ 92.727348][ T4213] usb 5-1: Manufacturer: syz [ 92.732177][ T4213] usb 5-1: SerialNumber: syz [ 92.741011][ T4484] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.875078][ T4495] syz.2.63[4495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.875799][ T4495] syz.2.63[4495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.275136][ T4213] usb 5-1: 0:2 : does not exist [ 93.905057][ T4494] loop0: detected capacity change from 0 to 256 [ 93.976887][ T4213] usb 5-1: USB disconnect, device number 2 [ 93.996096][ T4494] ======================================================= [ 93.996096][ T4494] WARNING: The mand mount option has been deprecated and [ 93.996096][ T4494] and is ignored by this kernel. Remove the mand [ 93.996096][ T4494] option from the mount to silence this warning. [ 93.996096][ T4494] ======================================================= [ 94.039069][ T4494] exfat: Deprecated parameter 'namecase' [ 94.063776][ T4498] loop2: detected capacity change from 0 to 128 [ 94.078726][ T4494] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 94.144994][ T4500] loop1: detected capacity change from 0 to 128 [ 94.193907][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.230710][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.281371][ T4212] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.317255][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.359815][ T4212] usb 4-1: config 0 descriptor?? [ 94.475410][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.692658][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 95.692674][ T26] audit: type=1326 audit(1746433330.967:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 95.731768][ T4504] loop4: detected capacity change from 0 to 40427 [ 95.743174][ T4212] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 95.776156][ T4212] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input7 [ 95.810651][ T26] audit: type=1326 audit(1746433331.007:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 95.836779][ T4504] F2FS-fs (loop4): Unrecognized mount option "/dev/ptmx" or missing value [ 95.892987][ T26] audit: type=1326 audit(1746433331.007:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 95.968924][ T4212] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 96.093076][ T2302] usb 4-1: USB disconnect, device number 3 [ 96.093827][ T4515] loop0: detected capacity change from 0 to 1024 [ 96.101264][ T26] audit: type=1326 audit(1746433331.007:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.171146][ T4512] loop2: detected capacity change from 0 to 2048 [ 96.257510][ T26] audit: type=1326 audit(1746433331.007:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.299256][ T4515] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.320293][ T4512] EXT4-fs (loop2): Ignoring removed bh option [ 96.379755][ T26] audit: type=1326 audit(1746433331.007:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.396825][ T4512] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 96.402609][ T26] audit: type=1326 audit(1746433331.007:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.435714][ T26] audit: type=1326 audit(1746433331.007:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.470682][ T4522] loop4: detected capacity change from 0 to 128 [ 96.475550][ T4512] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 96.540583][ T26] audit: type=1326 audit(1746433331.007:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.578361][ T4512] EXT4-fs (loop2): Ignoring removed orlov option [ 96.610645][ T4512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.700367][ T4512] EXT4-fs (loop2): can't mount with both data=journal and dax [ 96.746133][ T26] audit: type=1326 audit(1746433331.007:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f02da969 code=0x7ffc0000 [ 96.869016][ T4529] loop4: detected capacity change from 0 to 128 [ 96.874165][ T4532] loop0: detected capacity change from 0 to 512 [ 96.889523][ T4512] loop2: detected capacity change from 0 to 256 [ 96.901665][ T4512] exfat: Deprecated parameter 'namecase' [ 96.927471][ T4512] exFAT-fs (loop2): failed to load upcase table (idx : 0x000102d7, chksum : 0x4de289af, utbl_chksum : 0xe619d30d) [ 96.957648][ T4532] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 97.006614][ T4529] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 97.102157][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 97.163178][ T4529] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.190726][ T4532] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.088867][ T4544] loop3: detected capacity change from 0 to 128 [ 98.142947][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 98.151952][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.386169][ T4550] loop2: detected capacity change from 0 to 128 [ 98.400230][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.697949][ T4561] loop1: detected capacity change from 0 to 256 [ 98.902712][ T4564] loop4: detected capacity change from 0 to 512 [ 99.176142][ T4564] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 99.339865][ T4213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.395548][ T4561] FAT-fs (loop1): Directory bread(block 64) failed [ 99.449982][ T4561] FAT-fs (loop1): Directory bread(block 65) failed [ 99.477269][ T4570] loop3: detected capacity change from 0 to 256 [ 99.491776][ T4561] FAT-fs (loop1): Directory bread(block 66) failed [ 99.498726][ T4561] FAT-fs (loop1): Directory bread(block 67) failed [ 99.528824][ T4564] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue. Quota mode: writeback. [ 99.567532][ T4561] FAT-fs (loop1): Directory bread(block 68) failed [ 99.581409][ T4564] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.603374][ T4561] FAT-fs (loop1): Directory bread(block 69) failed [ 99.622871][ T4570] exfat: Unknown parameter '01777777777777777777777ÿÿ184467440737095516150x0000000000000000ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 99.646610][ T4561] FAT-fs (loop1): Directory bread(block 70) failed [ 99.654289][ T4561] FAT-fs (loop1): Directory bread(block 71) failed [ 99.666867][ T4561] FAT-fs (loop1): Directory bread(block 72) failed [ 99.674474][ T4561] FAT-fs (loop1): Directory bread(block 73) failed [ 99.781677][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.781712][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.781748][ T4213] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.781774][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.799854][ T4213] usb 1-1: config 0 descriptor?? [ 99.986497][ T4578] loop4: detected capacity change from 0 to 128 [ 100.013461][ T4580] loop1: detected capacity change from 0 to 128 [ 100.073218][ T4578] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 100.073332][ T4578] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.520040][ T4213] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 100.927069][ T4213] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input9 [ 101.567709][ T4213] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 101.628638][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 101.628653][ T26] audit: type=1326 audit(1746433336.897:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 101.666793][ T4213] usb 1-1: USB disconnect, device number 2 [ 101.707305][ T26] audit: type=1326 audit(1746433336.937:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 101.778896][ T26] audit: type=1326 audit(1746433336.947:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 101.881483][ T26] audit: type=1326 audit(1746433336.947:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 102.011985][ T26] audit: type=1326 audit(1746433336.947:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 102.142856][ T26] audit: type=1326 audit(1746433336.947:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 102.206276][ T4614] loop3: detected capacity change from 0 to 128 [ 102.231822][ T26] audit: type=1326 audit(1746433336.947:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 102.326666][ T26] audit: type=1326 audit(1746433336.947:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 102.511346][ T26] audit: type=1326 audit(1746433336.947:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 103.339052][ T26] audit: type=1326 audit(1746433336.947:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1180969 code=0x7ffc0000 [ 103.456160][ T4624] loop2: detected capacity change from 0 to 128 [ 103.636475][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 103.672006][ T4624] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.828361][ T4634] netlink: 56 bytes leftover after parsing attributes in process `syz.3.106'. [ 104.480308][ T4638] syz.3.107[4638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.480426][ T4638] syz.3.107[4638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.751595][ T4612] loop0: detected capacity change from 0 to 40427 [ 104.850812][ T4612] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 104.898361][ T4642] loop2: detected capacity change from 0 to 128 [ 104.905130][ T4612] F2FS-fs (loop0): invalid crc value [ 104.964046][ T4612] F2FS-fs (loop0): invalid journal entries nats 0 sits 64 [ 104.977505][ T4612] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-22) [ 105.592618][ T4217] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.884098][ T4653] loop0: detected capacity change from 0 to 256 [ 105.971536][ T4217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.003087][ T4217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.015841][ T4653] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.038203][ T4653] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 106.043976][ T2302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.059678][ T4217] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 106.090282][ T4217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.105878][ T4653] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 106.137131][ T4217] usb 4-1: config 0 descriptor?? [ 106.406815][ T4661] loop1: detected capacity change from 0 to 128 [ 106.644112][ T2302] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.673032][ T4217] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 106.879760][ T2302] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 106.984994][ T2302] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.727435][ T2302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.881328][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 107.881345][ T26] audit: type=1800 audit(1746433343.147:76): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.115" name="file2" dev="loop1" ino=1048610 res=0 errno=0 [ 108.311634][ T4217] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input10 [ 108.323776][ T2302] usb 3-1: invalid MIDI out EP 0 [ 108.698218][ T2302] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 108.780436][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.800594][ T2302] usb 3-1: USB disconnect, device number 3 [ 108.949741][ T4217] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 109.018563][ T4676] loop1: detected capacity change from 0 to 128 [ 109.050287][ T4217] usb 4-1: USB disconnect, device number 4 [ 109.182732][ T26] audit: type=1326 audit(1746433344.457:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.185506][ T26] audit: type=1326 audit(1746433344.457:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.185746][ T26] audit: type=1326 audit(1746433344.457:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.185932][ T26] audit: type=1326 audit(1746433344.457:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.187005][ T26] audit: type=1326 audit(1746433344.457:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.187185][ T26] audit: type=1326 audit(1746433344.457:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.187760][ T26] audit: type=1326 audit(1746433344.457:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.200972][ T26] audit: type=1326 audit(1746433344.467:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.201424][ T26] audit: type=1326 audit(1746433344.477:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcd5eb43969 code=0x7ffc0000 [ 109.274175][ T4686] loop4: detected capacity change from 0 to 128 [ 109.320697][ T4676] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 109.320829][ T4676] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.562473][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.573741][ T4702] loop1: detected capacity change from 0 to 128 [ 110.689798][ T4707] mmap: syz.0.131 (4707) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.236204][ T4713] loop4: detected capacity change from 0 to 128 [ 111.652062][ T4713] FAT-fs (loop4): Directory bread(block 162) failed [ 111.694415][ T4713] FAT-fs (loop4): Directory bread(block 163) failed [ 111.705001][ T4713] FAT-fs (loop4): Directory bread(block 164) failed [ 111.711752][ T4713] FAT-fs (loop4): Directory bread(block 165) failed [ 111.719092][ T4713] FAT-fs (loop4): Directory bread(block 166) failed [ 111.726020][ T4713] FAT-fs (loop4): Directory bread(block 167) failed [ 111.733770][ T4713] FAT-fs (loop4): Directory bread(block 168) failed [ 111.741559][ T4713] FAT-fs (loop4): Directory bread(block 169) failed [ 111.751328][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.761146][ T4713] FAT-fs (loop4): Directory bread(block 162) failed [ 111.803733][ T4713] FAT-fs (loop4): Directory bread(block 163) failed [ 111.813554][ T4713] attempt to access beyond end of device [ 111.813554][ T4713] loop4: rw=3, want=232, limit=128 [ 111.845556][ T4713] attempt to access beyond end of device [ 111.845556][ T4713] loop4: rw=2051, want=234, limit=128 [ 112.018869][ T4720] loop4: detected capacity change from 0 to 128 [ 112.069529][ T4720] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 112.091652][ T4720] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.121553][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.132740][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.146470][ T13] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.155989][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.166354][ T13] usb 1-1: config 0 descriptor?? [ 112.344677][ T4725] loop1: detected capacity change from 0 to 128 [ 112.361575][ T4212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.535983][ T4734] loop4: detected capacity change from 0 to 256 [ 113.563421][ T13] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 113.575170][ T4735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 113.588839][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input11 [ 113.637724][ T4734] FAT-fs (loop4): Directory bread(block 64) failed [ 113.644782][ T4734] FAT-fs (loop4): Directory bread(block 65) failed [ 113.651711][ T4734] FAT-fs (loop4): Directory bread(block 66) failed [ 113.659076][ T4734] FAT-fs (loop4): Directory bread(block 67) failed [ 113.664043][ T4212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.665886][ T4734] FAT-fs (loop4): Directory bread(block 68) failed [ 113.682951][ T4734] FAT-fs (loop4): Directory bread(block 69) failed [ 113.690266][ T4734] FAT-fs (loop4): Directory bread(block 70) failed [ 113.696885][ T4212] usb 4-1: config 0 has no interfaces? [ 113.697468][ T4734] FAT-fs (loop4): Directory bread(block 71) failed [ 113.709899][ T4734] FAT-fs (loop4): Directory bread(block 72) failed [ 113.716952][ T4734] FAT-fs (loop4): Directory bread(block 73) failed [ 113.727629][ T4212] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.797350][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.872643][ T4212] usb 4-1: config 0 descriptor?? [ 113.909539][ T13] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 113.940636][ T4742] loop1: detected capacity change from 0 to 512 [ 113.970650][ T4744] loop2: detected capacity change from 0 to 128 [ 114.465668][ T4213] usb 4-1: USB disconnect, device number 5 [ 115.094315][ T4742] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,nobarrier,,errors=continue. Quota mode: writeback. [ 115.215509][ T4742] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.377821][ T4742] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 115.427919][ T4756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.148'. [ 115.445465][ T4742] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 12 with max blocks 1 with error 28 [ 115.470420][ T4742] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.470420][ T4742] [ 115.483904][ T4742] EXT4-fs (loop1): Total free blocks count 0 [ 115.491141][ T4742] EXT4-fs (loop1): Free/Dirty block details [ 115.498277][ T4742] EXT4-fs (loop1): free_blocks=39626 [ 115.504809][ T4742] EXT4-fs (loop1): dirty_blocks=10 [ 115.510424][ T4742] EXT4-fs (loop1): Block reservation details [ 115.517989][ T4742] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 115.592372][ T4761] loop0: detected capacity change from 0 to 16 [ 115.603432][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.881593][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 116.002508][ T23] usb 5-1: config 93 has an invalid interface number: 31 but max is 0 [ 116.050030][ T23] usb 5-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 116.081922][ T4758] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 3 with max blocks 10 with error 28 [ 116.222197][ T4761] erofs: Unknown parameter '' [ 116.227881][ T4758] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.227881][ T4758] [ 116.253497][ T23] usb 5-1: config 93 has no interface number 0 [ 116.269835][ T4766] loop3: detected capacity change from 0 to 128 [ 116.311275][ T4757] overlayfs: overlapping lowerdir path [ 116.386871][ T4770] loop2: detected capacity change from 0 to 128 [ 116.397708][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 116.421076][ T4766] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.538496][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 116.548735][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.557299][ T23] usb 5-1: Product: syz [ 116.562332][ T23] usb 5-1: Manufacturer: syz [ 116.567194][ T23] usb 5-1: SerialNumber: syz [ 116.593082][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 116.593097][ T26] audit: type=1326 audit(1746433351.867:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 116.658264][ T23] usb 5-1: Found UVC 0.00 device syz (046d:08c3) [ 116.717748][ T23] usb 5-1: No valid video chain found. [ 116.752785][ T26] audit: type=1326 audit(1746433351.957:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 116.762815][ T1108] usb 1-1: USB disconnect, device number 3 [ 116.775554][ T26] audit: type=1326 audit(1746433351.957:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 116.804965][ T26] audit: type=1326 audit(1746433351.957:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 116.828774][ T26] audit: type=1326 audit(1746433351.967:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 116.863092][ T26] audit: type=1326 audit(1746433351.967:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 117.026886][ T26] audit: type=1326 audit(1746433351.967:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 117.235645][ T26] audit: type=1326 audit(1746433351.967:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 117.326665][ T26] audit: type=1326 audit(1746433351.967:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 117.460365][ T26] audit: type=1326 audit(1746433351.967:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 117.493388][ T23] usb 5-1: USB disconnect, device number 3 [ 117.574499][ T4783] loop4: detected capacity change from 0 to 256 [ 117.898060][ T4794] loop2: detected capacity change from 0 to 16 [ 118.091909][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.126793][ T4794] erofs: (device loop2): mounted with root inode @ nid 36. [ 118.534231][ T4800] loop4: detected capacity change from 0 to 128 [ 118.903134][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.991684][ T4211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.075249][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.291738][ T4211] usb 3-1: Using ep0 maxpacket: 32 [ 119.518192][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.529639][ T4211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.627217][ T4211] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 119.658350][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.733322][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.751084][ T23] usb 4-1: config 0 descriptor?? [ 119.764606][ T4211] usb 3-1: config 0 descriptor?? [ 119.896666][ T4814] process 'syz.4.162' launched '/dev/fd/8' with NULL argv: empty string added [ 120.015815][ T4816] loop4: detected capacity change from 0 to 128 [ 120.286531][ T23] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 120.323440][ T4211] hid-generic 0003:057E:2009.0008: unknown main item tag 0x0 [ 120.372827][ T4211] hid-generic 0003:057E:2009.0008: unknown main item tag 0x0 [ 120.433062][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input12 [ 120.458473][ T4211] hid-generic 0003:057E:2009.0008: unknown main item tag 0x6 [ 120.508937][ T4211] hid-generic 0003:057E:2009.0008: item fetching failed at offset 3/5 [ 120.513747][ T4822] bridge0: port 3(syz_tun) entered blocking state [ 120.523568][ T4211] hid-generic: probe of 0003:057E:2009.0008 failed with error -22 [ 120.578917][ T4822] bridge0: port 3(syz_tun) entered disabled state [ 120.625403][ T4211] usb 3-1: USB disconnect, device number 4 [ 120.648027][ T4822] device syz_tun entered promiscuous mode [ 120.691273][ T4822] bridge0: port 3(syz_tun) entered blocking state [ 120.698355][ T4822] bridge0: port 3(syz_tun) entered forwarding state [ 120.712951][ T23] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 120.735078][ T23] usb 4-1: USB disconnect, device number 6 [ 120.759087][ T4802] loop1: detected capacity change from 0 to 40427 [ 120.816677][ T4826] loop0: detected capacity change from 0 to 128 [ 120.853172][ T4802] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.925685][ T4826] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 120.959661][ T4826] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.028260][ T4802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.850473][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 122.065769][ T4845] attempt to access beyond end of device [ 122.065769][ T4845] loop1: rw=2049, want=45104, limit=40427 [ 122.218313][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 122.218328][ T26] audit: type=1326 audit(1746433357.487:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 122.288452][ T26] audit: type=1326 audit(1746433357.517:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 122.342273][ T26] audit: type=1326 audit(1746433357.527:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 122.409531][ T4852] loop2: detected capacity change from 0 to 128 [ 122.441488][ T26] audit: type=1326 audit(1746433357.527:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 122.512773][ T26] audit: type=1326 audit(1746433357.527:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 122.628074][ T26] audit: type=1326 audit(1746433357.527:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 122.708790][ T26] audit: type=1326 audit(1746433357.527:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 123.214272][ T26] audit: type=1326 audit(1746433357.527:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 123.354968][ T4854] syz.2.174 (4854) used greatest stack depth: 20768 bytes left [ 123.506341][ T26] audit: type=1326 audit(1746433357.537:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 123.555239][ T26] audit: type=1326 audit(1746433357.537:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 123.890599][ T4867] capability: warning: `syz.2.179' uses deprecated v2 capabilities in a way that may be insecure [ 123.920711][ T4865] loop3: detected capacity change from 0 to 128 [ 125.069736][ T4878] loop3: detected capacity change from 0 to 128 [ 125.218223][ T4878] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 125.284856][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.292840][ T4878] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.308137][ T4168] attempt to access beyond end of device [ 126.308137][ T4168] loop1: rw=2049, want=45112, limit=40427 [ 126.635897][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.657844][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.681252][ T21] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.768503][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.807119][ T21] usb 3-1: config 0 descriptor?? [ 126.885507][ T4888] loop4: detected capacity change from 0 to 128 [ 127.296326][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 127.315031][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 127.477797][ T21] usb 3-1: USB disconnect, device number 5 [ 128.081275][ T4910] loop0: detected capacity change from 0 to 128 [ 128.157693][ T4916] loop2: detected capacity change from 0 to 128 [ 128.264963][ T4919] device vti0 entered promiscuous mode [ 128.322977][ T4916] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 128.421859][ T4916] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.151316][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 129.151332][ T26] audit: type=1326 audit(1746433364.417:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.228115][ T26] audit: type=1326 audit(1746433364.457:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.264243][ T4938] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.315835][ T26] audit: type=1326 audit(1746433364.457:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.444574][ T26] audit: type=1326 audit(1746433364.457:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.527836][ T4942] loop2: detected capacity change from 0 to 128 [ 129.542915][ T26] audit: type=1326 audit(1746433364.457:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.554383][ T4944] loop3: detected capacity change from 0 to 512 [ 129.571847][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.584631][ T26] audit: type=1326 audit(1746433364.457:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.612176][ T26] audit: type=1326 audit(1746433364.457:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.650525][ T26] audit: type=1326 audit(1746433364.457:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.683028][ T26] audit: type=1326 audit(1746433364.457:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.716160][ T26] audit: type=1326 audit(1746433364.457:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 129.788371][ T4944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.888358][ T4944] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.205: bad orphan inode 131083 [ 130.161807][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.256010][ T4944] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 130.477967][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.549805][ T1108] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.611915][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.646998][ T4950] loop1: detected capacity change from 0 to 1024 [ 130.678347][ T1108] usb 5-1: config 0 descriptor?? [ 130.784178][ T4950] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 130.828524][ T4953] loop2: detected capacity change from 0 to 256 [ 130.997342][ T4953] FAT-fs (loop2): Directory bread(block 64) failed [ 131.025174][ T4953] FAT-fs (loop2): Directory bread(block 65) failed [ 131.048137][ T4953] FAT-fs (loop2): Directory bread(block 66) failed [ 131.130057][ T4953] FAT-fs (loop2): Directory bread(block 67) failed [ 131.148677][ T4953] FAT-fs (loop2): Directory bread(block 68) failed [ 131.157947][ T4953] FAT-fs (loop2): Directory bread(block 69) failed [ 131.173065][ T4953] FAT-fs (loop2): Directory bread(block 70) failed [ 131.179663][ T4953] FAT-fs (loop2): Directory bread(block 71) failed [ 131.200117][ T4960] loop3: detected capacity change from 0 to 128 [ 131.206706][ T4953] FAT-fs (loop2): Directory bread(block 72) failed [ 131.216840][ T4953] FAT-fs (loop2): Directory bread(block 73) failed [ 131.327898][ T4961] netlink: 104 bytes leftover after parsing attributes in process `syz.1.206'. [ 131.404527][ T1108] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 131.499930][ T1108] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input13 [ 131.799143][ T1108] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 131.891687][ T1108] usb 5-1: USB disconnect, device number 4 [ 132.194042][ T4971] loop3: detected capacity change from 0 to 128 [ 132.264691][ T4971] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 132.421571][ T4971] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.630415][ T4979] loop2: detected capacity change from 0 to 512 [ 132.745949][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753057][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.128064][ T4979] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 133.179046][ T4987] loop4: detected capacity change from 0 to 128 [ 133.216392][ T4979] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.171779][ T4996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 134.193898][ T4996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 134.373183][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 134.373198][ T26] audit: type=1326 audit(1746433369.647:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.408721][ T26] audit: type=1326 audit(1746433369.647:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.435764][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.476322][ T5005] loop1: detected capacity change from 0 to 128 [ 134.541465][ T26] audit: type=1326 audit(1746433369.647:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.694585][ T26] audit: type=1326 audit(1746433369.647:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.719259][ T26] audit: type=1326 audit(1746433369.647:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.743781][ T26] audit: type=1326 audit(1746433369.647:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.767331][ T26] audit: type=1326 audit(1746433369.647:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.792093][ T26] audit: type=1326 audit(1746433369.647:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.821391][ T26] audit: type=1326 audit(1746433369.647:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.851477][ T4213] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.871412][ T26] audit: type=1326 audit(1746433369.647:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 134.921646][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.947438][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.959089][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 134.991303][ T1108] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 135.007267][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.043430][ T1108] usb 4-1: config 0 descriptor?? [ 135.271592][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.294175][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.346604][ T4213] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.365067][ T5038] loop2: detected capacity change from 0 to 128 [ 135.376393][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.388592][ T4213] usb 5-1: config 0 descriptor?? [ 135.469248][ T5038] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 135.515503][ T1108] thrustmaster 0003:044F:B65A.000A: bogus close delimiter [ 135.521480][ T5038] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.531240][ T1108] thrustmaster 0003:044F:B65A.000A: item 0 0 2 10 parsing failed [ 135.551776][ T1108] thrustmaster 0003:044F:B65A.000A: parse failed [ 135.558171][ T1108] thrustmaster: probe of 0003:044F:B65A.000A failed with error -22 [ 135.717184][ T21] usb 4-1: USB disconnect, device number 7 [ 136.457529][ T5044] loop1: detected capacity change from 0 to 512 [ 136.565217][ T4213] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 136.578571][ T4213] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input14 [ 136.602058][ T5044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.647711][ T5044] EXT4-fs (loop1): 1 truncate cleaned up [ 136.657206][ T5044] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 136.682046][ T5044] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.231: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 136.727909][ T5044] EXT4-fs (loop1): Remounting filesystem read-only [ 136.792311][ T5044] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 136.826815][ T5044] EXT4-fs (loop1): Remounting filesystem read-only [ 136.841842][ T5044] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.231: Deleting old file: nlink 4, error=-117 [ 136.890255][ T4213] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 136.949247][ T5059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 136.958597][ T5059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.227708][ T4213] usb 5-1: USB disconnect, device number 5 [ 138.552588][ T5070] loop2: detected capacity change from 0 to 128 [ 139.973831][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 139.973850][ T26] audit: type=1326 audit(1746433375.247:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 140.124699][ T26] audit: type=1326 audit(1746433375.287:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 140.156367][ T5093] loop3: detected capacity change from 0 to 128 [ 140.175169][ T26] audit: type=1326 audit(1746433375.287:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 140.263076][ T26] audit: type=1326 audit(1746433375.287:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 140.291552][ T5093] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 140.356179][ T5093] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.368718][ T26] audit: type=1326 audit(1746433375.297:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 140.439987][ T5101] loop2: detected capacity change from 0 to 128 [ 140.592766][ T5101] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.619622][ T5106] loop1: detected capacity change from 0 to 128 [ 140.781464][ T5101] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 140.905966][ T5101] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.020391][ T5121] loop4: detected capacity change from 0 to 512 [ 142.221349][ T5121] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.238239][ T5121] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.288383][ T5121] EXT4-fs warning (device loop4): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 142.292665][ T5127] loop1: detected capacity change from 0 to 256 [ 142.336670][ T4213] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.342106][ T5127] exfat: Deprecated parameter 'utf8' [ 142.434741][ T5127] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 142.698453][ T5132] loop1: detected capacity change from 0 to 2048 [ 142.721476][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.742918][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.759416][ T5136] loop2: detected capacity change from 0 to 128 [ 142.781331][ T4213] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.790945][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.818729][ T4213] usb 4-1: config 0 descriptor?? [ 142.858181][ T5132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.884551][ T5132] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.915998][ T26] audit: type=1800 audit(1746433378.187:178): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.258" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 142.916764][ T5132] fs-verity (loop1, inode 13): Unknown hash algorithm number: 32 [ 143.050761][ T5143] loop4: detected capacity change from 0 to 128 [ 143.234238][ T5149] loop1: detected capacity change from 0 to 128 [ 144.360750][ T5143] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 144.391085][ T5156] loop2: detected capacity change from 0 to 256 [ 144.451421][ T4213] usbhid 4-1:0.0: can't add hid device: -71 [ 144.458445][ T4213] usbhid: probe of 4-1:0.0 failed with error -71 [ 144.467344][ T5143] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.478940][ T4213] usb 4-1: USB disconnect, device number 8 [ 144.501794][ T26] audit: type=1800 audit(1746433379.777:179): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="file2" dev="loop2" ino=1048633 res=0 errno=0 [ 144.563351][ T5158] loop1: detected capacity change from 0 to 1024 [ 144.714540][ T5158] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 144.766399][ T5158] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.266: couldn't read orphan inode 11 (err -117) [ 144.798418][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 145.239224][ T5167] loop2: detected capacity change from 0 to 256 [ 145.557460][ T5167] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.685539][ T5177] loop4: detected capacity change from 0 to 512 [ 145.800976][ T5177] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 145.920440][ T26] audit: type=1326 audit(1746433381.187:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 145.952095][ T5177] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.991303][ T26] audit: type=1326 audit(1746433381.187:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.068315][ T5191] loop1: detected capacity change from 0 to 128 [ 146.073368][ T26] audit: type=1326 audit(1746433381.217:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.118437][ T26] audit: type=1326 audit(1746433381.217:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.339993][ T26] audit: type=1326 audit(1746433381.217:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.415773][ T5194] loop2: detected capacity change from 0 to 128 [ 146.535516][ T5196] loop4: detected capacity change from 0 to 128 [ 146.610408][ T26] audit: type=1326 audit(1746433381.217:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.671069][ T26] audit: type=1326 audit(1746433381.217:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.700536][ T26] audit: type=1326 audit(1746433381.217:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.841321][ T26] audit: type=1326 audit(1746433381.227:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 146.864262][ T26] audit: type=1326 audit(1746433381.227:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2661969 code=0x7ffc0000 [ 147.547621][ T5200] loop1: detected capacity change from 0 to 1024 [ 147.630914][ T5200] EXT4-fs (loop1): Ignoring removed nobh option [ 147.663012][ T5200] EXT4-fs (loop1): Ignoring removed bh option [ 147.669819][ T5205] loop2: detected capacity change from 0 to 128 [ 147.678025][ T5200] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.730121][ T5200] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 147.818048][ T5205] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 147.841339][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.852586][ T5205] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.688931][ T5221] unsupported nlmsg_type 40 [ 148.987239][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.031382][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.076375][ T21] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.096339][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.109286][ T5234] loop1: detected capacity change from 0 to 128 [ 149.123142][ T21] usb 5-1: config 0 descriptor?? [ 149.371432][ T4212] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.579692][ T5241] loop3: detected capacity change from 0 to 128 [ 149.618613][ T5241] EXT4-fs (loop3): Ignoring removed nobh option [ 149.625118][ T5241] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 149.651979][ T4212] usb 3-1: Using ep0 maxpacket: 16 [ 150.672173][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 150.917303][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 150.978173][ T21] usb 5-1: USB disconnect, device number 6 [ 151.034178][ T5250] loop1: detected capacity change from 0 to 512 [ 151.099757][ T5250] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 151.168256][ T4212] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 151.177442][ T4212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.187626][ T4212] usb 3-1: config 0 has no interface number 0 [ 151.193821][ T4212] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.1e [ 151.202938][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.236927][ T4212] usb 3-1: config 0 descriptor?? [ 151.363115][ T4212] usb 3-1: Found UVC 0.00 device (0bd3:0555) [ 151.370047][ T4212] usb 3-1: No valid video chain found. [ 151.453687][ T5250] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 151.633301][ T5250] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.239283][ T5270] loop4: detected capacity change from 0 to 128 [ 152.278999][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 152.279015][ T26] audit: type=1326 audit(1746433387.547:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 152.313684][ T21] usb 3-1: USB disconnect, device number 6 [ 152.516292][ T26] audit: type=1326 audit(1746433387.627:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 152.765929][ T26] audit: type=1326 audit(1746433387.627:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 152.769411][ T5278] loop2: detected capacity change from 0 to 128 [ 152.921815][ T26] audit: type=1326 audit(1746433387.627:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 153.084840][ T26] audit: type=1326 audit(1746433387.627:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 153.202438][ T26] audit: type=1326 audit(1746433387.627:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 153.241042][ T26] audit: type=1326 audit(1746433387.627:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 153.749256][ T26] audit: type=1326 audit(1746433387.627:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 153.937988][ T26] audit: type=1326 audit(1746433387.627:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 154.070713][ T26] audit: type=1326 audit(1746433387.627:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9b2d5c969 code=0x7ffc0000 [ 154.187247][ T5294] loop3: detected capacity change from 0 to 8192 [ 154.217094][ T5299] loop4: detected capacity change from 0 to 128 [ 154.348160][ T5299] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 154.431978][ T5299] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.531301][ T4212] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.501572][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.521252][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.551273][ T4212] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.573782][ T5320] loop4: detected capacity change from 0 to 128 [ 155.583135][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.603777][ T4212] usb 3-1: config 0 descriptor?? [ 155.615260][ T2302] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.911327][ T2302] usb 4-1: Using ep0 maxpacket: 16 [ 155.969285][ T5323] loop4: detected capacity change from 0 to 4096 [ 156.147499][ T5323] EXT4-fs (loop4): Test dummy encryption mode enabled [ 156.169814][ T5323] EXT4-fs (loop4): inline encryption not supported [ 156.220991][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota,. Quota mode: writeback. [ 156.712204][ T2302] usb 4-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 157.289093][ T5333] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 157.306243][ T2302] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 157.317664][ T2302] usb 4-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 157.331374][ T2302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.338040][ T2302] usb 4-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 157.347140][ T2302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.378333][ T2302] usb 4-1: config 0 descriptor?? [ 157.625246][ T5342] [ 157.627633][ T5342] ====================================================== [ 157.634845][ T5342] WARNING: possible circular locking dependency detected [ 157.642237][ T5342] 5.15.181-syzkaller #0 Not tainted [ 157.647459][ T5342] ------------------------------------------------------ [ 157.654710][ T5342] syz.0.324/5342 is trying to acquire lock: [ 157.660625][ T5342] ffff888024d8b1b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 157.669711][ T5342] [ 157.669711][ T5342] but task is already holding lock: [ 157.677283][ T5342] ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xff/0xc20 [ 157.687521][ T5342] [ 157.687521][ T5342] which lock already depends on the new lock. [ 157.687521][ T5342] [ 157.698039][ T5342] [ 157.698039][ T5342] the existing dependency chain (in reverse order) is: [ 157.707162][ T5342] [ 157.707162][ T5342] -> #2 (hrtimer_bases.lock){-.-.}-{2:2}: [ 157.715263][ T5342] _raw_spin_lock_irqsave+0xa4/0xf0 [ 157.721009][ T5342] hrtimer_start_range_ns+0xff/0xc20 [ 157.727075][ T5342] kvfree_call_rcu+0x60d/0x7c0 [ 157.732372][ T5342] rtnl_register_internal+0x44e/0x540 [ 157.738283][ T5342] rtnl_register+0x2e/0x70 [ 157.743235][ T5342] ip_rt_init+0x2e0/0x3a0 [ 157.748086][ T5342] ip_init+0xa/0x20 [ 157.752432][ T5342] inet_init+0x28b/0x3a0 [ 157.757191][ T5342] do_one_initcall+0x1ee/0x680 [ 157.762571][ T5342] do_initcall_level+0x137/0x1f0 [ 157.768241][ T5342] do_initcalls+0x4b/0x90 [ 157.773101][ T5342] kernel_init_freeable+0x3ce/0x560 [ 157.778831][ T5342] kernel_init+0x19/0x1b0 [ 157.783684][ T5342] ret_from_fork+0x1f/0x30 [ 157.789016][ T5342] [ 157.789016][ T5342] -> #1 (krc.lock){..-.}-{2:2}: [ 157.796516][ T5342] _raw_spin_lock+0x2a/0x40 [ 157.801673][ T5342] kvfree_call_rcu+0x186/0x7c0 [ 157.807609][ T5342] trie_delete_elem+0x58c/0x710 [ 157.813102][ T5342] 0xffffffffa002ce66 [ 157.817604][ T5342] bpf_trace_run2+0x15b/0x2d0 [ 157.822919][ T5342] __bpf_trace_kfree+0x6e/0x90 [ 157.828403][ T5342] kfree+0x25f/0x2a0 [ 157.832828][ T5342] ___sys_recvmsg+0x1be/0x4f0 [ 157.838049][ T5342] do_recvmmsg+0x344/0x7a0 [ 157.843096][ T5342] __x64_sys_recvmmsg+0x18d/0x240 [ 157.848644][ T5342] do_syscall_64+0x4c/0xa0 [ 157.853578][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.859996][ T5342] [ 157.859996][ T5342] -> #0 (&trie->lock){..-.}-{2:2}: [ 157.867356][ T5342] __lock_acquire+0x2c33/0x7c60 [ 157.872833][ T5342] lock_acquire+0x197/0x3f0 [ 157.877858][ T5342] _raw_spin_lock_irqsave+0xa4/0xf0 [ 157.883849][ T5342] trie_delete_elem+0x90/0x710 [ 157.889147][ T5342] bpf_prog_b2282c01742f2d76+0x40/0x58c [ 157.895695][ T5342] bpf_trace_run2+0x15b/0x2d0 [ 157.901449][ T5342] enqueue_hrtimer+0x314/0x370 [ 157.906781][ T5342] hrtimer_start_range_ns+0xa7e/0xc20 [ 157.913126][ T5342] futex_wait_queue_me+0x18c/0x440 [ 157.919043][ T5342] futex_wait+0x202/0x5c0 [ 157.923897][ T5342] do_futex+0xd1c/0x1240 [ 157.928663][ T5342] __se_sys_futex+0x3a3/0x430 [ 157.933891][ T5342] do_syscall_64+0x4c/0xa0 [ 157.939131][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.945756][ T5342] [ 157.945756][ T5342] other info that might help us debug this: [ 157.945756][ T5342] [ 157.955990][ T5342] Chain exists of: [ 157.955990][ T5342] &trie->lock --> krc.lock --> hrtimer_bases.lock [ 157.955990][ T5342] [ 157.969112][ T5342] Possible unsafe locking scenario: [ 157.969112][ T5342] [ 157.976855][ T5342] CPU0 CPU1 [ 157.982219][ T5342] ---- ---- [ 157.987667][ T5342] lock(hrtimer_bases.lock); [ 157.992432][ T5342] lock(krc.lock); [ 157.998760][ T5342] lock(hrtimer_bases.lock); [ 158.005953][ T5342] lock(&trie->lock); [ 158.010021][ T5342] [ 158.010021][ T5342] *** DEADLOCK *** [ 158.010021][ T5342] [ 158.018156][ T5342] 2 locks held by syz.0.324/5342: [ 158.023271][ T5342] #0: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xff/0xc20 [ 158.033717][ T5342] #1: ffffffff8c11be60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 158.043032][ T5342] [ 158.043032][ T5342] stack backtrace: [ 158.048951][ T5342] CPU: 0 PID: 5342 Comm: syz.0.324 Not tainted 5.15.181-syzkaller #0 [ 158.057035][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.067186][ T5342] Call Trace: [ 158.070468][ T5342] [ 158.073409][ T5342] dump_stack_lvl+0x168/0x230 [ 158.078091][ T5342] ? load_image+0x3b0/0x3b0 [ 158.082593][ T5342] ? show_regs_print_info+0x20/0x20 [ 158.087971][ T5342] ? print_circular_bug+0x12b/0x1a0 [ 158.093180][ T5342] check_noncircular+0x274/0x310 [ 158.098119][ T5342] ? add_chain_block+0x940/0x940 [ 158.103060][ T5342] ? lockdep_lock+0xdc/0x1e0 [ 158.107655][ T5342] ? mark_lock+0x94/0x320 [ 158.111986][ T5342] ? mark_lock+0x94/0x320 [ 158.116320][ T5342] __lock_acquire+0x2c33/0x7c60 [ 158.121193][ T5342] ? __lock_acquire+0x12d9/0x7c60 [ 158.126317][ T5342] ? verify_lock_unused+0x140/0x140 [ 158.131523][ T5342] ? mark_lock+0x94/0x320 [ 158.135861][ T5342] lock_acquire+0x197/0x3f0 [ 158.140370][ T5342] ? trie_delete_elem+0x90/0x710 [ 158.145311][ T5342] ? verify_lock_unused+0x140/0x140 [ 158.150836][ T5342] ? read_lock_is_recursive+0x10/0x10 [ 158.156231][ T5342] _raw_spin_lock_irqsave+0xa4/0xf0 [ 158.161467][ T5342] ? trie_delete_elem+0x90/0x710 [ 158.166409][ T5342] ? _raw_spin_lock+0x40/0x40 [ 158.171091][ T5342] trie_delete_elem+0x90/0x710 [ 158.175856][ T5342] bpf_prog_b2282c01742f2d76+0x40/0x58c [ 158.181396][ T5342] bpf_trace_run2+0x15b/0x2d0 [ 158.186102][ T5342] ? lockdep_hardirqs_off+0x70/0x100 [ 158.191405][ T5342] ? bpf_trace_run1+0x2d0/0x2d0 [ 158.196271][ T5342] ? debug_object_activate+0x2d2/0x480 [ 158.201733][ T5342] ? _raw_spin_lock+0x40/0x40 [ 158.206523][ T5342] enqueue_hrtimer+0x314/0x370 [ 158.211302][ T5342] hrtimer_start_range_ns+0xa7e/0xc20 [ 158.226405][ T5342] futex_wait_queue_me+0x18c/0x440 [ 158.231528][ T5342] futex_wait+0x202/0x5c0 [ 158.235893][ T5342] ? do_futex+0x1240/0x1240 [ 158.240406][ T5342] ? __remove_hrtimer+0x3a0/0x3a0 [ 158.245525][ T5342] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 158.251683][ T5342] do_futex+0xd1c/0x1240 [ 158.256020][ T5342] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 158.262264][ T5342] ? lockdep_hardirqs_on+0x94/0x140 [ 158.267465][ T5342] ? ktime_get+0x7b/0x270 [ 158.271794][ T5342] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 158.278125][ T5342] ? ktime_get_real_ts64+0x420/0x420 [ 158.283515][ T5342] ? futex_exit_release+0x1c0/0x1c0 [ 158.288743][ T5342] ? get_timespec64+0x10e/0x1a0 [ 158.293618][ T5342] ? timespec64_add_safe+0x1d0/0x1d0 [ 158.299206][ T5342] ? ktime_get+0x247/0x270 [ 158.303650][ T5342] __se_sys_futex+0x3a3/0x430 [ 158.308449][ T5342] ? __x64_sys_futex+0xf0/0xf0 [ 158.313342][ T5342] ? vtime_user_exit+0x2dc/0x400 [ 158.318313][ T5342] ? __x64_sys_futex+0x1d/0xf0 [ 158.323083][ T5342] do_syscall_64+0x4c/0xa0 [ 158.327680][ T5342] ? clear_bhb_loop+0x15/0x70 [ 158.332367][ T5342] ? clear_bhb_loop+0x15/0x70 [ 158.337053][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.342974][ T5342] RIP: 0033:0x7fd9b2d5c969 [ 158.347477][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.367307][ T5342] RSP: 002b:00007ffd58e868f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.376021][ T5342] RAX: ffffffffffffffda RBX: 000000000002679a RCX: 00007fd9b2d5c969 [ 158.384135][ T5342] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd9b2f83fac [ 158.392113][ T5342] RBP: 0000000000000032 R08: 0022e873462a34d6 R09: 0000000658e86bef [ 158.400191][ T5342] R10: 00007ffd58e869f0 R11: 0000000000000246 R12: 00007fd9b2f83fac [ 158.408165][ T5342] R13: 00007ffd58e869f0 R14: 00000000000267cc R15: 00007ffd58e86a10 [ 158.416321][ T5342] [ 158.428329][ T4212] usbhid 3-1:0.0: can't add hid device: -71 [ 158.455653][ T4212] usbhid: probe of 3-1:0.0 failed with error -71 [ 158.481377][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 158.501480][ T5351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.325'. [ 158.511117][ T5351] device vlan0 entered promiscuous mode [ 158.519621][ T2302] logitech-hidpp-device 0003:046D:C081.000C: item fetching failed at offset 1/3 [ 158.521799][ T4212] usb 3-1: USB disconnect, device number 7 [ 158.535728][ T2302] logitech-hidpp-device 0003:046D:C081.000C: hidpp_probe:parse failed [ 158.547244][ T2302] logitech-hidpp-device: probe of 0003:046D:C081.000C failed with error -22 [ 158.720458][ T2302] usb 4-1: USB disconnect, device number 9