last executing test programs: 26.860494662s ago: executing program 4 (id=6022): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x800, 0x4) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) 25.981949759s ago: executing program 4 (id=6025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 25.055494701s ago: executing program 4 (id=6030): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000880)={[{@lfs_mode}, {@usrjquota={'usrjquota', 0x3d, 'nouser_xattr'}}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5514, &(0x7f00000079c0)="$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") syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001000000000000000000ffffffff000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000001000000000a27c4bf22b85a4449f6284e1fe1efc424da718218656eb5bf80fab083afd1b106f11930e3781e6a94e369bc61a6738"], 0xfc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unshare(0x60600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23.718685579s ago: executing program 4 (id=6033): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 23.039031889s ago: executing program 4 (id=6036): ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x9, 0x8, 0x200c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x4) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r6, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:0:0:0.', @ANYRESHEX], 0x13) 18.204371705s ago: executing program 3 (id=6056): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r6) waitid(0x1, r2, 0x0, 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) 17.625512756s ago: executing program 4 (id=6038): pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x4, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5b5, &(0x7f0000002a80)="$eJzs3c9vVNUeAPDvnZkWSt977SMvT3FhGg2BRGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIUFj2GiMjrkzd4ZhOtNOS4dbez+f5Lbn3HNvz7nQb8+Ze8+ZCaCwJtIvpYg9EXE5iRhrK6tEVjjROO7ur++eTrckarWXf0kiyfalRyVt541mJ/85FvHtV0nsLq+sd2Hp6vnZanX+SpafWrxweWph6eqBcxdmz86fnb8488zM0SOHjxydPvhA11dqS5+4/sZbYx+cfPWzT/5Ipj//4WQSx+LnM42y5nVspomYiN9qtfc696f/rkc3u7KclFu/J/cknTvYsipZjAxHxCMxFuW2/82xeP/FXBsHDFQtiagBBZWIfyio5jig+dq+v9fBpQGPSoCH4c7x9OtQl/ivNO4NxngMRcTejvO63NLbkLSOb74+eT3dYkD34YDulq/tyFKd8Z/UY3M8dtZzu+6W7rvPm44ATmXf0/0vbbD+iY68+IeHZ/laRDzabfy/dvy/1hb/r2+wfvEPAAAAAAAAm+fW8Yh4utvzv1L2bG5nPFF//pc0nv99d2+F4LFNqH/t53+l2x2HJJtQLZDN/3uh6/zf1hzf8XKW+3djNmBy5lx1/mBE/Cci9sfQjjQ/vUodBz7cfaNXWfv8v3RL62/OBczacbuy4/5z5mYXZx/kmoGGO9ciHqv0nv+T9v9Je/+fSf8eXO6zjt17b57qVbZ2/AODUvs0Yl/X/v/eMDtZ/f05purjganmqGClx9/56Ite9Yt/yE/a/+9aPf7Hk/b361lY388fjohDS5Var/KNjv+Hk1fKzZ+fent2cfHKdMRwcmLl/pn1tRm2q2Y8NOMljf/9T65+/681/m+Lw5GIWO6zzv//NfpjrzL9P+Qnjf+5dfX/60/M3Bz/slf9/fX/h+t9+v5sj/t/sLp+AzTvdgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP1EpIv4VSWmylS6VJicjRiPif7GrVL20sPjUmUtvXpxLy+qf/19qftLvWCOfND//f7wtP9ORPxQR/42Ij8sj9fzk6UvVubwvHgAAAAAAAAAAAAAAAAAAALaI0R7r/1M/lfNuHTBwley7eIfiqeTdACA34h+KS/xDcYl/KC7xD8W1wfj3uAC2Af0/FNVQf4ftHHQ7gDzo/wEAAAAAYFu59fyzN5KIWH5upL6lhrOy1oPBkbxaBwxSKe8GALkxhxeKy9QfKK4+J/8C21jSSv1e61bee/Z/MpgGAQAAAAAAAAAAAAAr7Ntz6/s11/9H1KwThO3H+n8oLv06FJf1/1Bc1v8Da63it/4fAAAAAAAAAAAAAPK3sHT1/Gy1On9FQmKrJYYiYgs0I4fEcP7hmfMfJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOXvAAAA//9JxiYA") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xce, [@remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 17.189625015s ago: executing program 3 (id=6060): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='objagg_obj_parent_unassign\x00'}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) 16.095356621s ago: executing program 3 (id=6065): syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xf38b03}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000cab000)=0xc) chdir(&(0x7f00000000c0)='./file0/../file0\x00') lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 14.4037448s ago: executing program 3 (id=6069): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12.688044482s ago: executing program 3 (id=6073): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2604000, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x1, 0x2d3, &(0x7f0000000640)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c25000000008adfb97037992a2600000000bfa1da000000000007010000f8ffffff315345ee24a865b46e60c533f41092b8b702000008000000b7"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fc, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) mkdir(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f0000002c80), &(0x7f0000002cc0)={'fscrypt:', @desc1}, &(0x7f0000002d00)={0x0, "85686f3449eed62f1d7cdfb7175bd3516c620e509e673b5ab8c314614d6e9c4a3c7ef23b259a82e847d32c6d6e54a97504c317ce3ebe622754b7ecb714d0d07a"}, 0x48, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000002d80), &(0x7f0000002dc0)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r4, 0x600000000000000) 11.675062761s ago: executing program 3 (id=6077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe39) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.352972646s ago: executing program 0 (id=6081): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 9.352558346s ago: executing program 1 (id=6082): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) close_range(r0, r1, 0x0) 9.352110396s ago: executing program 2 (id=6083): open(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x84) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@index_on}]}) 8.043482591s ago: executing program 0 (id=6084): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2604000, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x1, 0x2d3, &(0x7f0000000640)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c25000000008adfb97037992a2600000000bfa1da000000000007010000f8ffffff315345ee24a865b46e60c533f41092b8b702000008000000b7"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fc, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$fscrypt_v1(&(0x7f0000002c80), &(0x7f0000002cc0)={'fscrypt:', @desc1}, &(0x7f0000002d00)={0x0, "85686f3449eed62f1d7cdfb7175bd3516c620e509e673b5ab8c314614d6e9c4a3c7ef23b259a82e847d32c6d6e54a97504c317ce3ebe622754b7ecb714d0d07a"}, 0x48, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000002d80), &(0x7f0000002dc0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r5, 0x600000000000000) r8 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, r7, r8, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 8.043079211s ago: executing program 1 (id=6085): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0xf) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000080), 0x80, 0x636, &(0x7f0000002c80)="$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") 6.636126026s ago: executing program 0 (id=6086): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x44, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc3610ad63abcd5700e79"}, &(0x7f0000000000)=0x68) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 6.635500116s ago: executing program 1 (id=6087): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2}}}]}}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000a9000070900be0083000000000b09007a150b5d8c3dda2c1d1148b8a1b6c2fe3112e012bba578619bde8dff581665e08bd4be91a8aadf0da93c6076b12a5b5d6a389318d54b6bba5d0e1637704a3fc286a7efff8aedbe9c22c4325a09d2e9ef1cf5df98e9205c2dfa377b9815109fc9fb207251abeb162b93787bdc0e6b765672af7ba4c7abbc40b4ed8b5dacbe5b12b9dabd4b07219f98bc7e3a2b54058d4301e88867a1e7d82b0b6e022b03563ee816de80d065cd743d15166c64b0ef803854af0e420a05bbc6c7ba8b4977171a89"], 0x0}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(r8, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x1, &(0x7f0000000000)='B') pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x7) close_range(r6, 0xffffffffffffffff, 0x0) 6.634886266s ago: executing program 2 (id=6088): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0xf) 5.125802189s ago: executing program 0 (id=6089): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='objagg_obj_parent_unassign\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d09f91b0b380987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f37096c060890e0878f0e1ac6e7049b094a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004c0400000000000000ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885e94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffd6f}}, 0x1006) 5.125460379s ago: executing program 2 (id=6090): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 3.51991039s ago: executing program 0 (id=6091): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)}, {&(0x7f0000000780)}, {&(0x7f0000000f80)="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", 0xe5c}], 0x3) 3.51763245s ago: executing program 1 (id=6092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 3.51712518s ago: executing program 2 (id=6093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_setup(0x1, &(0x7f0000000b80)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000400064010101ac1414aa0b00907803000000490000000000000000000000876ebd6aebb243623800000000ac1414aa830f00ffffffffffffffffe000000200"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={0x0}}, 0x4000094) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000005e0ea3c218110000", @ANYRES8=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.811750161s ago: executing program 0 (id=6094): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect$uac1(0x0, 0x98, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x200800, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) readv(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000035c0)}}, {{0x0, 0x0, &(0x7f0000000900)}}], 0x2, 0x0) 1.810518841s ago: executing program 1 (id=6095): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2604000, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x1, 0x2d3, &(0x7f0000000640)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = getpid() ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fc, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) mkdir(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f0000002c80), &(0x7f0000002cc0)={'fscrypt:', @desc1}, &(0x7f0000002d00)={0x0, "85686f3449eed62f1d7cdfb7175bd3516c620e509e673b5ab8c314614d6e9c4a3c7ef23b259a82e847d32c6d6e54a97504c317ce3ebe622754b7ecb714d0d07a"}, 0x48, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000002d80), &(0x7f0000002dc0)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r4, 0x600000000000000) 1.809698241s ago: executing program 2 (id=6096): gettid() r0 = socket$inet6(0xa, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) time(0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0) 670.351µs ago: executing program 1 (id=6097): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x44, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc3610ad63abcd5700e79"}, &(0x7f0000000000)=0x68) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 0s ago: executing program 2 (id=6098): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x40106726, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa}]}}, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e2e2c000000000001090224000100000000090400000103000000092100000001220700090581031800000000"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Mfr=0, Product=0, SerialNumber=0 [ 1232.453973][ T3739] usb 1-1: config 0 descriptor?? [ 1232.528144][ T3739] usb 1-1: can't set config #0, error -71 [ 1232.551651][ T3739] usb 1-1: USB disconnect, device number 60 [ 1232.861513][T21496] xt_TCPMSS: Only works on TCP SYN packets [ 1233.347815][ T3739] Bluetooth: hci0: command 0x1003 tx timeout [ 1233.376777][ T324] Bluetooth: hci0: sending frame failed (-49) [ 1233.492398][T21504] tun0: tun_chr_ioctl cmd 2147767507 [ 1233.568616][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5285'. [ 1233.659607][T21512] cgroup: Unknown subsys name 'net_cls' [ 1234.047768][T21476] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1234.287775][T21476] usb 1-1: Using ep0 maxpacket: 32 [ 1234.938194][T21476] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1234.946916][T21476] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1234.955425][T21476] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1234.964403][T21476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1234.975224][T21476] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1234.984848][T21476] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1234.985239][T21476] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1235.006812][T21476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.014267][T21476] usb 1-1: config 0 descriptor?? [ 1235.278739][T21476] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1235.295464][T21476] usb 1-1: USB disconnect, device number 61 [ 1235.302665][T21476] usblp0: removed [ 1235.345300][T21532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1235.354494][T21532] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1235.428118][T13358] Bluetooth: hci0: command 0x1001 tx timeout [ 1235.434389][ T324] Bluetooth: hci0: sending frame failed (-49) [ 1235.791572][T21538] xt_TCPMSS: Only works on TCP SYN packets [ 1237.357914][T21563] xt_TCPMSS: Only works on TCP SYN packets [ 1237.512368][ T2081] Bluetooth: hci0: command 0x1009 tx timeout [ 1238.359914][T21576] x_tables: unsorted underflow at hook 3 [ 1238.427820][ T2081] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1238.807840][ T2081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.818714][ T2081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1238.831766][ T2081] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1238.840881][ T2081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.853054][ T2081] usb 3-1: config 0 descriptor?? [ 1239.036879][T21579] 9pnet: Insufficient options for proto=fd [ 1239.064740][T21585] device pim6reg1 entered promiscuous mode [ 1239.452224][T21589] x_tables: unsorted underflow at hook 3 [ 1239.585792][T21591] x_tables: unsorted underflow at hook 3 [ 1239.851882][ T2081] plantronics 0003:047F:FFFF.0068: No inputs registered, leaving [ 1239.872106][ T2081] plantronics 0003:047F:FFFF.0068: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1239.885433][ T2081] usb 3-1: USB disconnect, device number 61 [ 1239.966768][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 1239.966782][ T24] audit: type=1400 audit(1725945555.920:773): avc: denied { mount } for pid=21596 comm="syz.0.5314" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1240.059627][ T24] audit: type=1400 audit(1725945556.020:774): avc: denied { unmount } for pid=17514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1240.172296][T21605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.184627][T21605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.192362][T21605] device bridge_slave_0 entered promiscuous mode [ 1240.204951][T21605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.212098][T21605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.220959][T21605] device bridge_slave_1 entered promiscuous mode [ 1240.275871][T21605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.282825][T21605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.289941][T21605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.296693][T21605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.314755][T21612] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1240.324467][T12324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.332412][T12324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.341088][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.348626][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.364699][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1240.372979][ T2081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.379993][ T2081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.387987][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1240.396081][ T2081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.403066][ T2081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.425665][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1240.433934][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1240.443173][T21616] 9pnet: Insufficient options for proto=fd [ 1240.457165][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1240.471453][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1240.480746][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1240.488229][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1240.503576][T21605] device veth0_vlan entered promiscuous mode [ 1240.518100][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1240.529381][T21605] device veth1_macvtap entered promiscuous mode [ 1240.542405][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1240.555640][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1240.625121][T21623] device pim6reg1 entered promiscuous mode [ 1241.584356][T21643] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1241.625797][T21645] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1241.960934][T21650] 9pnet: Insufficient options for proto=fd [ 1241.986511][T21653] device pim6reg1 entered promiscuous mode [ 1242.062375][T13358] kernel read not supported for file /newroot/154 (pid: 13358 comm: kworker/0:2) [ 1242.135508][T21667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5337'. [ 1242.144696][T21667] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5337'. [ 1242.262235][T21672] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1242.588142][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1242.597081][T21678] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1242.681332][T21445] device bridge_slave_1 left promiscuous mode [ 1242.688986][T21445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.719977][T21445] device bridge_slave_0 left promiscuous mode [ 1242.726690][T21445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.751078][T21682] cgroup: Unknown subsys name 'net_cls' [ 1242.765729][T21445] device veth1_macvtap left promiscuous mode [ 1242.789745][T21445] device veth0_vlan left promiscuous mode [ 1243.930696][ T24] audit: type=1326 audit(1725945559.890:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21704 comm="syz.0.5349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5da8fbef9 code=0x0 [ 1246.817864][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1246.856124][T21762] x_tables: unsorted underflow at hook 3 [ 1247.479393][T21779] x_tables: unsorted underflow at hook 3 [ 1248.303507][ T24] audit: type=1326 audit(1725945564.260:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1375eaaef9 code=0x7ffc0000 [ 1248.329845][ T24] audit: type=1326 audit(1725945564.280:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1375eaaef9 code=0x7ffc0000 [ 1248.378682][ T24] audit: type=1326 audit(1725945564.280:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1375eaaef9 code=0x7ffc0000 [ 1248.402520][ T24] audit: type=1326 audit(1725945564.280:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1375eaaef9 code=0x7ffc0000 [ 1248.426036][ T24] audit: type=1326 audit(1725945564.280:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1375eaaef9 code=0x7ffc0000 [ 1248.449910][ T24] audit: type=1326 audit(1725945564.290:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1375ea9890 code=0x7ffc0000 [ 1248.473173][ T24] audit: type=1326 audit(1725945564.290:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1375eaaafb code=0x7ffc0000 [ 1248.802823][ T24] audit: type=1326 audit(1725945564.290:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1375eaaafb code=0x7ffc0000 [ 1248.827570][ T24] audit: type=1326 audit(1725945564.290:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1375eaaafb code=0x7ffc0000 [ 1248.855636][ T24] audit: type=1326 audit(1725945564.290:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21784 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1375eaaafb code=0x7ffc0000 [ 1248.947779][ T25] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1249.007761][ T2027] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1249.082807][T21799] device bridge1 entered promiscuous mode [ 1249.215305][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1249.518453][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.567810][T21810] x_tables: unsorted underflow at hook 3 [ 1249.708333][ T25] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1249.717985][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.725881][ T25] usb 5-1: Product: syz [ 1249.730293][ T25] usb 5-1: Manufacturer: syz [ 1249.734756][ T25] usb 5-1: SerialNumber: syz [ 1249.741787][ T25] usb 5-1: config 0 descriptor?? [ 1249.778260][ T25] usb 5-1: bad CDC descriptors [ 1249.783091][ T25] usb 5-1: unsupported MDLM descriptors [ 1249.817832][ T2027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.828682][ T2027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.838295][ T2027] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1249.847142][ T2027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.855826][ T2027] usb 2-1: config 0 descriptor?? [ 1249.980715][ T25] usb 5-1: USB disconnect, device number 62 [ 1250.888302][ T2027] logitech-hidpp-device 0003:046D:C086.0069: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 1250.935813][ T2027] usb 2-1: USB disconnect, device number 56 [ 1251.443575][T21848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1251.788474][T21853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=21853 comm=syz.0.5393 [ 1251.791156][T21855] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5394'. [ 1251.803531][T21853] device bridge0 entered promiscuous mode [ 1251.819562][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1251.857807][ T2081] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1252.097774][ T2081] usb 2-1: Using ep0 maxpacket: 16 [ 1252.218066][ T2081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.229308][ T2081] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1252.257927][ T456] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1252.265928][ T2081] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1252.275195][ T2081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.292197][ T2081] usb 2-1: config 0 descriptor?? [ 1252.617823][ T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.628619][ T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.638227][ T456] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1252.647029][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.655512][ T456] usb 4-1: config 0 descriptor?? [ 1252.769190][ T2081] microsoft 0003:045E:07DA.006A: No inputs registered, leaving [ 1252.777385][ T2081] microsoft 0003:045E:07DA.006A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1252.788814][ T2081] microsoft 0003:045E:07DA.006A: no inputs found [ 1252.795043][ T2081] microsoft 0003:045E:07DA.006A: could not initialize ff, continuing anyway [ 1253.031333][T21872] udc-core: couldn't find an available UDC or it's busy [ 1253.038322][T21872] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1253.068456][ T2081] usb 2-1: USB disconnect, device number 57 [ 1253.132839][ T456] logitech-hidpp-device 0003:046D:C086.006B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 1253.334168][T21878] input: syz1 as /devices/virtual/input/input110 [ 1253.342719][ T24] kauditd_printk_skb: 88 callbacks suppressed [ 1253.342745][ T24] audit: type=1326 audit(1725945569.300:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.507402][ T24] audit: type=1326 audit(1725945569.340:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.512289][ T380] usb 4-1: USB disconnect, device number 62 [ 1253.531162][ T24] audit: type=1326 audit(1725945569.460:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.559765][ T24] audit: type=1326 audit(1725945569.460:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.583055][ T24] audit: type=1326 audit(1725945569.460:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.606392][ T24] audit: type=1326 audit(1725945569.460:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.630125][ T24] audit: type=1326 audit(1725945569.460:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.653685][ T24] audit: type=1326 audit(1725945569.460:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.677167][ T24] audit: type=1326 audit(1725945569.460:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.708370][ T24] audit: type=1326 audit(1725945569.460:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51ca32ef9 code=0x7ffc0000 [ 1253.827803][ T2081] Bluetooth: hci0: command 0x1003 tx timeout [ 1253.840416][ T324] Bluetooth: hci0: sending frame failed (-49) [ 1254.330005][T21894] input: syz0 as /devices/virtual/input/input111 [ 1255.133685][T21905] x_tables: unsorted underflow at hook 3 [ 1255.907750][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 1255.913716][ T324] Bluetooth: hci0: sending frame failed (-49) [ 1257.987793][ T1964] Bluetooth: hci0: command 0x1009 tx timeout [ 1258.092654][T21953] x_tables: unsorted underflow at hook 3 [ 1258.445130][T21955] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1258.737769][ T1964] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1258.977737][ T1964] usb 4-1: Using ep0 maxpacket: 16 [ 1259.117832][ T1964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.128617][ T1964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1259.141313][ T1964] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1259.150072][ T1964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.158940][ T1964] usb 4-1: config 0 descriptor?? [ 1259.544346][T21977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5430'. [ 1259.557125][ T1421] Bluetooth: hci1: Frame reassembly failed (-84) [ 1259.629131][ T1964] microsoft 0003:045E:07DA.006C: No inputs registered, leaving [ 1259.637362][ T1964] microsoft 0003:045E:07DA.006C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1259.648814][ T1964] microsoft 0003:045E:07DA.006C: no inputs found [ 1259.654991][ T1964] microsoft 0003:045E:07DA.006C: could not initialize ff, continuing anyway [ 1259.931324][T21955] udc-core: couldn't find an available UDC or it's busy [ 1259.938483][T21955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1260.203478][ T456] usb 4-1: USB disconnect, device number 63 [ 1260.492641][T21989] 9pnet: Insufficient options for proto=fd [ 1260.927817][ T20] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1261.197744][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 1261.337822][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.565949][ T20] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1261.605303][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.613482][ T20] usb 1-1: Product: syz [ 1261.617481][ T20] usb 1-1: Manufacturer: syz [ 1261.622170][ T20] usb 1-1: SerialNumber: syz [ 1261.627109][ T25] Bluetooth: hci1: command 0x1003 tx timeout [ 1261.633449][T20890] Bluetooth: hci1: sending frame failed (-49) [ 1261.642496][ T20] usb 1-1: config 0 descriptor?? [ 1261.678208][ T20] usb 1-1: bad CDC descriptors [ 1261.683040][ T20] usb 1-1: unsupported MDLM descriptors [ 1261.838076][T22012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.844952][T22012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.852269][T22012] device bridge_slave_0 entered promiscuous mode [ 1261.859071][T22012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.865916][T22012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.873200][T22012] device bridge_slave_1 entered promiscuous mode [ 1261.882309][ T20] usb 1-1: USB disconnect, device number 62 [ 1261.919372][T22012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.926218][T22012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.933364][T22012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.940122][T22012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.961177][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.968668][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.975898][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.983512][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.993486][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1262.001659][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.008520][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.018881][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1262.026882][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.033734][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.048449][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1262.056296][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.070945][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1262.085184][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1262.094136][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1262.101493][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1262.110169][T22012] device veth0_vlan entered promiscuous mode [ 1262.121766][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1262.131444][T22012] device veth1_macvtap entered promiscuous mode [ 1262.143380][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1262.160098][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1262.429739][T22027] 9pnet: Insufficient options for proto=fd [ 1262.445972][T22029] xt_TCPMSS: Only works on TCP SYN packets [ 1262.472882][T22023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1262.705051][T22033] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1262.987757][ T2081] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1263.000260][ T1421] device bridge_slave_1 left promiscuous mode [ 1263.012608][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.045271][ T1421] device bridge_slave_0 left promiscuous mode [ 1263.070920][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.084437][ T1421] device veth1_macvtap left promiscuous mode [ 1263.090466][ T1421] device veth0_vlan left promiscuous mode [ 1263.254019][T22045] devpts: called with bogus options [ 1263.257781][ T2081] usb 1-1: Using ep0 maxpacket: 16 [ 1263.377894][ T2081] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.418383][ T2081] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1263.431588][ T2081] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1263.440644][ T2081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.449399][ T2081] usb 1-1: config 0 descriptor?? [ 1263.738680][ T2027] Bluetooth: hci1: command 0x1001 tx timeout [ 1263.754321][ T798] Bluetooth: hci1: sending frame failed (-49) [ 1263.883720][T22055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.891144][T22055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.898595][T22055] device bridge_slave_0 entered promiscuous mode [ 1263.907227][T22055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.914470][T22055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.921896][T22055] device bridge_slave_1 entered promiscuous mode [ 1263.980773][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1263.989050][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1263.999757][ T2081] microsoft 0003:045E:07DA.006D: No inputs registered, leaving [ 1263.999945][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1264.008755][ T2081] microsoft 0003:045E:07DA.006D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1264.015993][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1264.026492][ T2081] microsoft 0003:045E:07DA.006D: no inputs found [ 1264.035228][T21476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.040966][ T2081] microsoft 0003:045E:07DA.006D: could not initialize ff, continuing anyway [ 1264.047566][T21476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.064126][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1264.072138][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1264.080577][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1264.088858][ T1964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.095693][ T1964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.104474][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1264.117081][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1264.131018][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1264.144361][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1264.185492][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1264.194585][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1264.207492][T22055] device veth0_vlan entered promiscuous mode [ 1264.221021][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1264.235261][T22055] device veth1_macvtap entered promiscuous mode [ 1264.246242][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1264.259175][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1264.282148][T22064] udc-core: couldn't find an available UDC or it's busy [ 1264.289138][T22064] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1264.614755][T21476] usb 1-1: USB disconnect, device number 63 [ 1264.630702][ T1421] device bridge_slave_1 left promiscuous mode [ 1264.636725][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.645173][ T1421] device bridge_slave_0 left promiscuous mode [ 1264.651281][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.659666][ T1421] device veth1_macvtap left promiscuous mode [ 1264.665535][ T1421] device veth0_vlan left promiscuous mode [ 1265.254922][T22084] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1265.284818][T22084] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1265.623637][ T189] Bluetooth: hci0: Frame reassembly failed (-84) [ 1265.838260][ T1964] Bluetooth: hci1: command 0x1009 tx timeout [ 1266.481368][T22103] devpts: called with bogus options [ 1266.854362][T22115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5472'. [ 1266.864462][T22115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5472'. [ 1267.082880][T22121] 9pnet: Insufficient options for proto=fd [ 1267.145200][ T1964] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1267.677791][T21476] Bluetooth: hci0: command 0x1003 tx timeout [ 1267.684153][T20890] Bluetooth: hci0: sending frame failed (-49) [ 1267.691524][ T1964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.702631][ T1964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1267.716599][ T1964] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1267.726235][ T1964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.765295][ T1964] usb 1-1: config 0 descriptor?? [ 1268.296235][ T1964] plantronics 0003:047F:FFFF.006E: No inputs registered, leaving [ 1268.402995][ T1964] plantronics 0003:047F:FFFF.006E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1268.569128][ T2081] usb 1-1: USB disconnect, device number 64 [ 1269.748920][T21476] Bluetooth: hci0: command 0x1001 tx timeout [ 1269.754782][ T324] Bluetooth: hci0: sending frame failed (-49) [ 1269.856784][T22149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.864004][T22149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.871414][T22149] device bridge_slave_0 entered promiscuous mode [ 1269.878989][T22149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.885926][T22149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.893456][T22149] device bridge_slave_1 entered promiscuous mode [ 1269.946112][T22149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.953009][T22149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.960112][T22149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.966861][T22149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.015108][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.022861][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.030801][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1270.039658][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1270.047330][T22156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1270.054382][T22156] IPv6: NLM_F_CREATE should be set when creating new route [ 1270.066310][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1270.074734][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.081654][ T1964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.090936][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1270.099291][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.106143][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.131932][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1270.148932][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1270.165514][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1270.181445][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1270.191006][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1270.198859][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1270.211671][T22149] device veth0_vlan entered promiscuous mode [ 1270.281377][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1270.291442][T22149] device veth1_macvtap entered promiscuous mode [ 1270.299683][T22158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1270.308886][T22158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1270.348094][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1270.356770][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1270.742910][T21445] device bridge_slave_1 left promiscuous mode [ 1270.752992][T21445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.792790][T21445] device bridge_slave_0 left promiscuous mode [ 1270.837010][T21445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.897919][T21445] device veth1_macvtap left promiscuous mode [ 1270.915854][T21445] device veth0_vlan left promiscuous mode [ 1271.217967][T21476] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1271.627882][T21476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.638610][T21476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.648180][T21476] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1271.656984][T21476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.665591][T21476] usb 3-1: config 0 descriptor?? [ 1271.828008][ T1964] Bluetooth: hci0: command 0x1009 tx timeout [ 1272.273449][T22181] udc-core: couldn't find an available UDC or it's busy [ 1272.280602][T22181] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1272.309720][T21476] lg-g15 0003:046D:C222.006F: unknown main item tag 0x5 [ 1272.317232][T21476] lg-g15 0003:046D:C222.006F: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1272.720872][T22184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5490'. [ 1273.867743][ T2027] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1273.946493][T13358] usb 3-1: USB disconnect, device number 62 [ 1274.208483][T22212] syz.2.5499[22212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1274.208550][T22212] syz.2.5499[22212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1274.231406][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 1274.231420][ T24] audit: type=1326 audit(1725945590.190:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22210 comm="syz.2.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa28ef9 code=0x7ffc0000 [ 1274.271965][ T2027] usb 1-1: config 0 has no interfaces? [ 1274.277269][ T2027] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.288178][ T2027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.296819][ T24] audit: type=1326 audit(1725945590.200:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22210 comm="syz.2.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1c5fa28ef9 code=0x7ffc0000 [ 1274.320225][ T2027] usb 1-1: config 0 descriptor?? [ 1274.527742][ T380] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1274.616077][T13358] usb 1-1: USB disconnect, device number 65 [ 1274.767740][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 1274.887805][ T380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.977919][ T380] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1274.986934][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1274.995059][ T380] usb 2-1: SerialNumber: syz [ 1275.000067][ T380] usb 2-1: config 0 descriptor?? [ 1275.143275][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1275.152336][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1275.173144][T22219] device bridge0 entered promiscuous mode [ 1275.338191][ T380] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1275.391344][ T380] uvcvideo: No valid video chain found. [ 1275.553226][T22225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.560292][T22225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.573811][T22225] device bridge_slave_0 entered promiscuous mode [ 1275.585444][T22225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.592762][T22225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.600299][T22225] device bridge_slave_1 entered promiscuous mode [ 1275.691246][ T24] audit: type=1326 audit(1725945591.650:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22223 comm="syz.0.5504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5da8fbef9 code=0x0 [ 1275.950522][T22225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.957410][T22225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.964548][T22225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.971420][T22225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.972729][ T380] usb 2-1: USB disconnect, device number 58 [ 1276.000069][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1276.007423][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.015120][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.024575][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1276.032645][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.039511][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.056826][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1276.065594][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.072470][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.098718][T22235] cgroup: Unknown subsys name 'net_cls' [ 1276.135019][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1276.407827][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1276.487495][T22225] device veth0_vlan entered promiscuous mode [ 1276.493954][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1276.502243][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1276.510530][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1276.518299][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1276.526333][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1276.533716][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1276.576465][T22225] device veth1_macvtap entered promiscuous mode [ 1276.653021][ T24] audit: type=1107 audit(1725945592.610:888): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='O' [ 1276.845487][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1276.869072][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1276.927865][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1276.935820][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1276.944077][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1276.952373][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1276.960510][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1276.974690][T22243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1277.669989][ T1421] device bridge_slave_1 left promiscuous mode [ 1277.676485][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.685279][ T1421] device bridge_slave_0 left promiscuous mode [ 1277.692087][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.703689][ T1421] device veth1_macvtap left promiscuous mode [ 1277.727641][ T1421] device veth0_vlan left promiscuous mode [ 1278.046986][T21445] Bluetooth: hci0: Frame reassembly failed (-84) [ 1278.628808][ T24] audit: type=1326 audit(1725945594.400:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.4.5517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x0 [ 1278.667218][T22274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.695359][T22274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.899647][T22274] device bridge_slave_0 entered promiscuous mode [ 1278.916380][T22274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.923387][T22274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.931466][T22274] device bridge_slave_1 entered promiscuous mode [ 1279.000997][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1279.008944][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1279.025920][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1279.034413][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1279.042936][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.049822][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.059097][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1279.067577][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1279.076089][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.082989][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.245634][T22274] device veth0_vlan entered promiscuous mode [ 1279.264659][T22274] device veth1_macvtap entered promiscuous mode [ 1279.300494][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1279.310297][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1279.321027][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1279.332172][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1279.341566][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1279.349828][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1279.503567][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1279.517974][ T24] audit: type=1400 audit(1725945595.380:890): avc: denied { create } for pid=22292 comm="syz.1.5521" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1279.553792][ T24] audit: type=1400 audit(1725945595.390:891): avc: denied { link } for pid=22292 comm="syz.1.5521" name="file1" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1279.576000][ T24] audit: type=1400 audit(1725945595.400:892): avc: denied { read } for pid=22292 comm="syz.1.5521" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1279.603473][ T24] audit: type=1400 audit(1725945595.400:893): avc: denied { open } for pid=22292 comm="syz.1.5521" path="/80/bus/file0" dev="overlay" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1279.665248][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1279.673055][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1279.681885][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1279.691115][T22303] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1279.789203][T22311] xt_TCPMSS: Only works on TCP SYN packets [ 1280.147849][T12324] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1280.575579][ T24] audit: type=1326 audit(1725945596.420:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.4.5526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x0 [ 1280.687728][T12324] usb 4-1: Using ep0 maxpacket: 16 [ 1280.817813][T12324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.833752][T12324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1280.854556][T12973] Bluetooth: hci0: Frame reassembly failed (-84) [ 1280.872512][T12324] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1280.891590][T12324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.965972][T12324] usb 4-1: config 0 descriptor?? [ 1281.168390][ T1421] device bridge_slave_1 left promiscuous mode [ 1281.177891][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.198085][ T1421] device bridge_slave_0 left promiscuous mode [ 1281.215187][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.240542][ T1421] device veth1_macvtap left promiscuous mode [ 1281.258189][ T1421] device veth0_vlan left promiscuous mode [ 1281.449005][T12324] microsoft 0003:045E:07DA.0070: No inputs registered, leaving [ 1281.463118][T12324] microsoft 0003:045E:07DA.0070: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1281.508439][T12324] microsoft 0003:045E:07DA.0070: no inputs found [ 1281.530486][T12324] microsoft 0003:045E:07DA.0070: could not initialize ff, continuing anyway [ 1281.551759][T22339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1281.564142][T22339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1281.713861][T22306] udc-core: couldn't find an available UDC or it's busy [ 1281.748764][T22306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1281.938504][ T380] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1282.018625][ T1964] usb 4-1: USB disconnect, device number 64 [ 1282.027915][T21476] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1282.318591][ T380] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1282.335977][ T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.418295][T21476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.431082][ T380] usb 1-1: config 0 descriptor?? [ 1282.447907][T21476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.457650][T21476] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1282.466951][T21476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.479370][T21476] usb 3-1: config 0 descriptor?? [ 1283.385686][T22361] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1283.741053][T22365] udc-core: couldn't find an available UDC or it's busy [ 1283.747969][ T380] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1283.772843][ T380] asix: probe of 1-1:0.0 failed with error -71 [ 1283.779342][T22365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1283.796402][ T380] usb 1-1: USB disconnect, device number 66 [ 1283.875608][T21476] lg-g15 0003:046D:C222.0071: unknown main item tag 0x5 [ 1283.883425][T21476] lg-g15 0003:046D:C222.0071: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1284.077797][ T1964] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1284.468409][ T1964] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1284.478033][ T1964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.497943][ T24] audit: type=1326 audit(1725945600.390:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22376 comm="syz.0.5543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5da8fbef9 code=0x0 [ 1284.530770][ T1964] usb 5-1: config 0 descriptor?? [ 1284.663449][T22381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1284.672629][T22381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1284.763424][T22386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1284.770571][T22386] IPv6: NLM_F_CREATE should be set when creating new route [ 1285.221132][T13358] usb 3-1: USB disconnect, device number 63 [ 1285.282325][ T1964] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1285.292605][ T1964] asix: probe of 5-1:0.0 failed with error -71 [ 1285.310168][ T1964] usb 5-1: USB disconnect, device number 63 [ 1285.631609][T22400] fuse: Bad value for 'fd' [ 1285.850882][ T24] audit: type=1326 audit(1725945601.810:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22405 comm="syz.3.5552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c5c3cef9 code=0x0 [ 1286.091479][T22417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1286.100563][T22417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1286.136306][T22419] device ip6gretap0 entered promiscuous mode [ 1286.142761][T22419] device vlan2 entered promiscuous mode [ 1286.149377][T22419] device ip6gretap0 left promiscuous mode [ 1286.584654][T22430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5560'. [ 1286.906526][T22435] device ip6gre0 entered promiscuous mode [ 1286.912961][T22435] device vlan2 entered promiscuous mode [ 1286.975946][T22435] device ip6gre0 left promiscuous mode [ 1287.195746][T22447] device syz_tun entered promiscuous mode [ 1287.203853][T22447] device vlan2 entered promiscuous mode [ 1287.210794][T22447] device syz_tun left promiscuous mode [ 1287.499476][T22453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.506546][T22453] IPv6: NLM_F_CREATE should be set when creating new route [ 1287.547424][T22456] fuse: Bad value for 'fd' [ 1287.704783][ T24] audit: type=1326 audit(1725945603.660:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.1.5569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1375eaaef9 code=0x0 [ 1287.814518][T22464] device syz_tun entered promiscuous mode [ 1287.820703][T22464] device vlan2 entered promiscuous mode [ 1287.832916][T22464] device syz_tun left promiscuous mode [ 1288.721598][T22485] xt_TCPMSS: Only works on TCP SYN packets [ 1289.075807][T22493] device ip6gretap0 entered promiscuous mode [ 1289.086446][T22493] device vlan2 entered promiscuous mode [ 1289.096341][T22493] device ip6gretap0 left promiscuous mode [ 1289.476858][T22506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1290.281472][T22518] fuse: Bad value for 'fd' [ 1291.794802][ T24] audit: type=1326 audit(1725945607.510:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22533 comm="syz.4.5596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x0 [ 1291.888336][ T24] audit: type=1326 audit(1725945607.840:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22542 comm="syz.2.5598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa28ef9 code=0x0 [ 1292.417759][T22560] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5600'. [ 1292.612043][T22563] fuse: Bad value for 'fd' [ 1292.706718][ T24] audit: type=1326 audit(1725945608.660:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.3.5599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c5c3cef9 code=0x0 [ 1292.737735][T13358] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1292.901354][T22566] overlayfs: failed to resolve './file1': -2 [ 1293.359977][T13358] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1293.369512][T13358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.390214][T13358] usb 2-1: config 0 descriptor?? [ 1293.437747][ T456] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1294.127010][ T456] usb 4-1: Using ep0 maxpacket: 32 [ 1294.146870][T13358] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1294.156854][T13358] asix: probe of 2-1:0.0 failed with error -71 [ 1294.163731][T13358] usb 2-1: USB disconnect, device number 59 [ 1294.297867][ T456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.332224][ T24] audit: type=1326 audit(1725945610.290:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.356040][ T24] audit: type=1326 audit(1725945610.290:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.384971][ T24] audit: type=1326 audit(1725945610.290:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.413241][T22591] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1294.447761][ T24] audit: type=1326 audit(1725945610.290:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.471432][ T24] audit: type=1326 audit(1725945610.290:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.495992][ T24] audit: type=1326 audit(1725945610.290:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.519521][ T24] audit: type=1326 audit(1725945610.300:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22594 comm="syz.4.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1294.557931][ T456] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1294.567482][ T456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.575599][ T456] usb 4-1: Product: syz [ 1294.579643][ T456] usb 4-1: Manufacturer: syz [ 1294.584022][ T456] usb 4-1: SerialNumber: syz [ 1294.602066][ T456] usb 4-1: config 0 descriptor?? [ 1294.693447][ T456] usb 4-1: bad CDC descriptors [ 1294.699426][ T456] usb 4-1: unsupported MDLM descriptors [ 1294.903009][T22602] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1294.914443][ T380] usb 4-1: USB disconnect, device number 65 [ 1296.127272][T22641] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5627'. [ 1296.372828][T22650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5630'. [ 1297.252323][T22667] 9pnet: Insufficient options for proto=fd [ 1297.302559][T22671] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5638'. [ 1297.683294][T22681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5641'. [ 1297.907812][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 1297.907827][ T24] audit: type=1326 audit(1725945613.860:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22683 comm="syz.3.5642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c5c3cef9 code=0x0 [ 1297.937002][T21476] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1298.208343][T22692] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1298.217334][T22692] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 1298.399443][T22696] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue [ 1298.477871][T21476] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1298.486854][T21476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.495352][T21476] usb 2-1: config 0 descriptor?? [ 1299.031297][T22715] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1299.431413][T22721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1299.440488][T22721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1299.510534][ T24] audit: type=1326 audit(1725945615.470:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.2.5650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa28ef9 code=0x0 [ 1299.708010][T21476] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1299.725372][T21476] asix: probe of 2-1:0.0 failed with error -71 [ 1299.732554][T21476] usb 2-1: USB disconnect, device number 60 [ 1299.746280][T22728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5654'. [ 1299.805298][T22735] device erspan0 entered promiscuous mode [ 1299.811037][T22735] device vlan2 entered promiscuous mode [ 1299.818433][T22735] device erspan0 left promiscuous mode [ 1300.386632][T22749] fuse: Bad value for 'fd' [ 1300.689795][T22754] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1300.902404][T22760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1300.935337][T22760] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1301.626619][T22763] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1302.124172][T22779] device erspan0 entered promiscuous mode [ 1302.130477][T22779] device vlan2 entered promiscuous mode [ 1302.138915][T22779] device erspan0 left promiscuous mode [ 1302.474456][T22783] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1302.569631][ T24] audit: type=1326 audit(1725945618.530:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.2.5672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa28ef9 code=0x0 [ 1302.608691][T22777] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1302.707619][T22777] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1302.831658][T22777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 1302.839517][T22777] System zones: 1-12 [ 1302.849842][T22777] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz.4.5671: corrupted in-inode xattr [ 1302.862051][T22777] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5671: couldn't read orphan inode 15 (err -117) [ 1302.889374][T22777] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue [ 1303.030659][ T24] audit: type=1400 audit(1725945618.990:913): avc: denied { create } for pid=22784 comm="syz.3.5673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1303.063923][T22800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1303.073957][T22800] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1303.124161][ T24] audit: type=1326 audit(1725945619.080:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22776 comm="syz.4.5671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x0 [ 1303.400047][T22807] 9pnet: Insufficient options for proto=fd [ 1303.461948][T22810] overlayfs: failed to resolve './file0': -2 [ 1303.506857][ T24] audit: type=1326 audit(1725945619.460:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22812 comm="syz.4.5682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x0 [ 1303.605216][ T20] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1303.725600][T22820] fuse: Bad value for 'fd' [ 1303.847759][T13358] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1303.968068][ T20] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1303.983919][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.018396][ T20] usb 2-1: config 0 descriptor?? [ 1304.097714][T13358] usb 4-1: Using ep0 maxpacket: 32 [ 1304.217749][T13358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.407824][T13358] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1304.417534][T13358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.447887][T13358] usb 4-1: Product: syz [ 1304.452032][T13358] usb 4-1: Manufacturer: syz [ 1304.456590][T13358] usb 4-1: SerialNumber: syz [ 1304.463077][T13358] usb 4-1: config 0 descriptor?? [ 1304.508219][T13358] usb 4-1: bad CDC descriptors [ 1304.515297][T13358] usb 4-1: unsupported MDLM descriptors [ 1304.518098][T22834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1304.530057][T22834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1304.710030][T13358] usb 4-1: USB disconnect, device number 66 [ 1304.737971][ T20] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1304.748798][ T20] asix: probe of 2-1:0.0 failed with error -71 [ 1304.756099][ T20] usb 2-1: USB disconnect, device number 61 [ 1305.653936][T22856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1305.730470][T22861] Illegal XDP return value 4294967274, expect packet loss! [ 1305.779958][T22863] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1306.215647][T22873] fuse: Unknown parameter 'user_id00000000000000000000' [ 1307.687602][T22915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5716'. [ 1307.767834][ T380] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1308.117745][T12324] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1308.127832][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.145224][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.164838][ T380] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1308.174051][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.190181][ T380] usb 5-1: config 0 descriptor?? [ 1308.248173][T22929] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1308.357750][T12324] usb 1-1: Using ep0 maxpacket: 8 [ 1308.487829][T12324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.537781][T13358] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1308.577852][T12324] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1308.586867][T12324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1308.594869][T12324] usb 1-1: SerialNumber: syz [ 1308.600144][T12324] usb 1-1: config 0 descriptor?? [ 1308.709148][ T380] lg-g15 0003:046D:C222.0072: unknown main item tag 0x5 [ 1308.716703][ T380] lg-g15 0003:046D:C222.0072: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 1308.807811][T13358] usb 4-1: Using ep0 maxpacket: 16 [ 1308.857796][T12324] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1308.867412][T12324] uvcvideo: No valid video chain found. [ 1308.881082][T22936] 9pnet: Insufficient options for proto=fd [ 1308.927795][T13358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.938845][T13358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1308.951716][T13358] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1308.960949][T13358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.969682][T13358] usb 4-1: config 0 descriptor?? [ 1309.077911][T21476] usb 1-1: USB disconnect, device number 67 [ 1309.439064][T13358] microsoft 0003:045E:07DA.0073: No inputs registered, leaving [ 1309.446892][T13358] microsoft 0003:045E:07DA.0073: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1309.458162][T13358] microsoft 0003:045E:07DA.0073: no inputs found [ 1309.464234][T13358] microsoft 0003:045E:07DA.0073: could not initialize ff, continuing anyway [ 1309.690193][T22951] udc-core: couldn't find an available UDC or it's busy [ 1309.697244][T22951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1309.857345][ T24] audit: type=1107 audit(1725945625.810:916): pid=22948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='O' [ 1309.910377][ T380] usb 4-1: USB disconnect, device number 67 [ 1310.163887][T22960] overlayfs: failed to resolve './file1': -2 [ 1310.502301][ T380] usb 5-1: USB disconnect, device number 64 [ 1310.626684][T22974] tun0: tun_chr_ioctl cmd 2147767507 [ 1310.686521][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1310.771619][ T24] audit: type=1326 audit(1725945626.730:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.4.5734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x0 [ 1311.541432][T12973] Bluetooth: hci0: Frame reassembly failed (-84) [ 1312.492142][T21476] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1312.997838][T21476] usb 4-1: Using ep0 maxpacket: 32 [ 1313.322424][T21476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.538092][T21476] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1313.547487][T21476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.558007][T21476] usb 4-1: Product: syz [ 1313.562032][T21476] usb 4-1: Manufacturer: syz [ 1313.566483][T21476] usb 4-1: SerialNumber: syz [ 1313.577355][T21476] usb 4-1: config 0 descriptor?? [ 1313.654829][T13358] Bluetooth: hci0: command 0x1003 tx timeout [ 1313.663805][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1313.668700][T21476] usb 4-1: bad CDC descriptors [ 1313.678038][T21476] usb 4-1: unsupported MDLM descriptors [ 1313.869941][T13358] usb 4-1: USB disconnect, device number 68 [ 1313.897763][ T2081] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1313.904839][T23025] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1314.167782][ T2081] usb 3-1: device descriptor read/64, error -71 [ 1314.187794][T12324] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1314.485968][T12324] usb 2-1: Using ep0 maxpacket: 16 [ 1314.807815][ T2081] usb 3-1: device descriptor read/64, error -71 [ 1314.838634][T23034] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1314.877840][T12324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.878593][T23034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1314.893037][T12324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1314.910884][T12324] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1314.919902][T12324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.924167][T23034] EXT4-fs (loop4): 1 truncate cleaned up [ 1314.933278][T23034] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004, [ 1314.935578][T12324] usb 2-1: config 0 descriptor?? [ 1315.077776][ T2081] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1315.237776][ T380] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1315.357740][ T2081] usb 3-1: device descriptor read/64, error -71 [ 1315.438792][T12324] microsoft 0003:045E:07DA.0074: No inputs registered, leaving [ 1315.446746][T12324] microsoft 0003:045E:07DA.0074: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1315.458172][T12324] microsoft 0003:045E:07DA.0074: no inputs found [ 1315.464259][T12324] microsoft 0003:045E:07DA.0074: could not initialize ff, continuing anyway [ 1315.477738][ T380] usb 5-1: Using ep0 maxpacket: 16 [ 1315.597779][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.608550][ T380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1315.621112][ T380] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1315.629900][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.647846][ T380] usb 5-1: config 0 descriptor?? [ 1315.705106][T23041] udc-core: couldn't find an available UDC or it's busy [ 1315.711920][T23041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1315.757740][T12324] Bluetooth: hci0: command 0x1001 tx timeout [ 1315.763680][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1315.797733][ T2081] usb 3-1: device descriptor read/64, error -71 [ 1315.917812][ T2081] usb usb3-port1: attempt power cycle [ 1315.971677][T12324] usb 2-1: USB disconnect, device number 62 [ 1316.172880][ T380] microsoft 0003:045E:07DA.0075: No inputs registered, leaving [ 1316.187420][ T380] microsoft 0003:045E:07DA.0075: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1316.198795][ T380] microsoft 0003:045E:07DA.0075: no inputs found [ 1316.204933][ T380] microsoft 0003:045E:07DA.0075: could not initialize ff, continuing anyway [ 1316.295005][T23045] xt_TCPMSS: Only works on TCP SYN packets [ 1316.543867][T23051] udc-core: couldn't find an available UDC or it's busy [ 1316.554537][T23051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1316.562069][ T2081] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1316.898327][T21476] usb 5-1: USB disconnect, device number 65 [ 1317.127711][ T2081] usb 3-1: device not accepting address 66, error -71 [ 1317.456260][ T24] audit: type=1107 audit(1725945633.410:918): pid=23062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='O' [ 1317.587987][ T24] audit: type=1326 audit(1725945633.550:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23067 comm="syz.1.5759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1375eaaef9 code=0x0 [ 1317.845891][T23080] xt_TCPMSS: Only works on TCP SYN packets [ 1318.114800][T12324] Bluetooth: hci0: command 0x1009 tx timeout [ 1318.139599][T23082] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1318.657736][T12324] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1318.762022][T23099] xt_TCPMSS: Only works on TCP SYN packets [ 1319.010834][T23101] overlayfs: failed to resolve './file0': -2 [ 1319.485972][T23105] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1319.556028][T12324] usb 4-1: device descriptor read/64, error -71 [ 1319.817780][T21476] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1320.057739][T21476] usb 2-1: Using ep0 maxpacket: 16 [ 1320.177825][T21476] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.188579][T21476] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1320.197733][T12324] usb 4-1: device descriptor read/64, error -71 [ 1320.201381][T21476] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1320.216096][T21476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.224806][T21476] usb 2-1: config 0 descriptor?? [ 1320.346472][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5777'. [ 1320.496615][T12324] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1320.718382][T21476] microsoft 0003:045E:07DA.0076: No inputs registered, leaving [ 1320.731681][T21476] microsoft 0003:045E:07DA.0076: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1320.743774][T21476] microsoft 0003:045E:07DA.0076: no inputs found [ 1320.750129][T21476] microsoft 0003:045E:07DA.0076: could not initialize ff, continuing anyway [ 1320.927748][T12324] usb 4-1: device descriptor read/64, error -71 [ 1320.968208][T23131] udc-core: couldn't find an available UDC or it's busy [ 1320.975051][T23131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1321.198533][T21476] usb 2-1: USB disconnect, device number 63 [ 1321.531272][T12324] usb 4-1: device descriptor read/64, error -71 [ 1321.658389][T12324] usb usb4-port1: attempt power cycle [ 1321.701421][T23143] device erspan0 entered promiscuous mode [ 1321.722740][T23143] device vlan2 entered promiscuous mode [ 1321.735057][T23143] device erspan0 left promiscuous mode [ 1321.825995][T23144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.833045][T23144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.840669][T23144] device bridge_slave_0 entered promiscuous mode [ 1321.847485][T23144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.854466][T23144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.861809][T23144] device bridge_slave_1 entered promiscuous mode [ 1321.934163][T23150] xt_TCPMSS: Only works on TCP SYN packets [ 1322.204127][T23144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.211124][T23144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.218213][T23144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.224961][T23144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.270938][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1322.279609][T13358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.636172][T13358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.680142][T23144] device veth0_vlan entered promiscuous mode [ 1322.714993][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1322.724396][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1322.732988][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1322.861597][T23161] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1322.886562][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1322.895030][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1322.903246][T18858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.910100][T18858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.917274][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1322.925416][T18858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.932268][T18858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.939521][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1322.947513][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1322.977217][T23144] device veth1_macvtap entered promiscuous mode [ 1322.984024][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1322.992527][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1323.000726][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1323.036139][T23168] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1323.048838][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1323.059814][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1323.078183][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1323.095515][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1323.169131][T23175] fuse: Bad value for 'fd' [ 1323.297965][ T20] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1323.543658][T21445] device veth1_macvtap left promiscuous mode [ 1323.689454][T23185] loop4: p1 p3 < > p4 < p5 > [ 1323.697909][T23185] loop4: partition table partially beyond EOD, truncated [ 1323.710297][T23185] loop4: p1 size 33024 extends beyond EOD, truncated [ 1323.717545][T23185] loop4: p3 start 4284289 is beyond EOD, truncated [ 1323.725051][T23185] loop4: p5 size 33024 extends beyond EOD, truncated [ 1323.731821][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.770388][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.781760][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1323.791939][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.805294][ T20] usb 3-1: config 0 descriptor?? [ 1323.848599][T13358] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1324.257760][T13358] usb 1-1: device descriptor read/64, error -71 [ 1324.289039][ T20] lg-g15 0003:046D:C222.0077: unknown main item tag 0x5 [ 1324.302538][ T20] lg-g15 0003:046D:C222.0077: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1324.530149][ T20] usb 3-1: USB disconnect, device number 68 [ 1324.647726][T13358] usb 1-1: device descriptor read/64, error -71 [ 1324.969923][ T24] audit: type=1107 audit(1725945640.910:920): pid=23202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='O' [ 1325.154465][T13358] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1325.236414][T23211] fuse: Bad value for 'fd' [ 1326.407801][T13358] usb 1-1: device descriptor read/64, error -71 [ 1327.628389][ T24] audit: type=1326 audit(1725945642.740:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23223 comm="syz.1.5805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1375eaaef9 code=0x0 [ 1327.929195][T23248] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5811'. [ 1327.941833][T23250] fuse: Bad value for 'fd' [ 1329.335052][T23259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1329.437118][T23259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1329.457803][T23259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1331.112878][T23267] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1331.526970][T13358] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1334.269644][T13358] usb 1-1: device not accepting address 70, error -71 [ 1334.292745][T23306] syz.4.5830[23306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1334.292813][T23306] syz.4.5830[23306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1334.307391][ T24] audit: type=1326 audit(1725945650.260:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.5830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1334.342599][ T24] audit: type=1326 audit(1725945650.270:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.5830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1334.537742][T21476] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1334.661993][T13358] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1334.917781][T21476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.928662][T21476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.938239][T21476] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1334.947073][T21476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.955610][T21476] usb 4-1: config 0 descriptor?? [ 1334.960414][ T25] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1335.087799][T13358] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.097888][T13358] usb 1-1: config 0 has no interfaces? [ 1335.103080][T13358] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1335.112000][T13358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.120553][T13358] usb 1-1: config 0 descriptor?? [ 1335.351745][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.361960][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1335.371061][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1335.380233][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.389089][ T25] usb 3-1: config 0 descriptor?? [ 1335.607933][T21476] usbhid 4-1:0.0: can't add hid device: -71 [ 1335.614306][T21476] usbhid: probe of 4-1:0.0 failed with error -71 [ 1335.650235][T21476] usb 4-1: USB disconnect, device number 72 [ 1335.707800][ T25] usb 3-1: string descriptor 0 read error: -71 [ 1335.717220][ T25] usb 3-1: USB disconnect, device number 69 [ 1335.778238][T23328] fuse: Bad value for 'fd' [ 1335.875616][T23333] tun0: tun_chr_ioctl cmd 2147767507 [ 1335.934191][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5838'. [ 1336.911102][T23348] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1337.216078][ T25] usb 1-1: USB disconnect, device number 71 [ 1337.236703][T23352] overlayfs: failed to resolve './file1': -2 [ 1337.247599][T23354] device erspan0 entered promiscuous mode [ 1337.266737][T23354] device vlan2 entered promiscuous mode [ 1337.281751][T23354] device erspan0 left promiscuous mode [ 1337.410187][T23367] device erspan0 entered promiscuous mode [ 1337.421458][T23367] device vlan2 entered promiscuous mode [ 1337.431940][T23367] device erspan0 left promiscuous mode [ 1337.493210][T23364] fuse: Bad value for 'fd' [ 1337.633602][T23370] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5850'. [ 1337.756878][T23381] cgroup: Unknown subsys name 'net_cls' [ 1337.767894][T21476] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1337.787922][T23383] overlayfs: failed to resolve './file0': -2 [ 1337.839750][T23385] fuse: Bad value for 'fd' [ 1337.999850][T23375] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1338.007747][T23375] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1338.128600][T23375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1338.217863][T21476] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.238300][T21476] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1338.317551][T21476] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.333967][T23375] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1338.340988][T23375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1338.342322][T21476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.378575][T21476] usb 2-1: config 0 descriptor?? [ 1338.437464][T23395] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1338.698340][T21476] usb 2-1: string descriptor 0 read error: -71 [ 1338.777305][T21476] usb 2-1: USB disconnect, device number 64 [ 1338.876310][ T1421] Bluetooth: hci0: Frame reassembly failed (-84) [ 1338.944504][ T1421] Bluetooth: hci0: Frame reassembly failed (-84) [ 1339.265491][T23415] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1339.950134][T23429] cgroup: Unknown subsys name 'net_cls' [ 1339.957216][T23433] overlayfs: failed to resolve './file0': -2 [ 1340.080110][T23439] device erspan0 entered promiscuous mode [ 1340.085891][T23439] device vlan2 entered promiscuous mode [ 1340.094327][T23439] device erspan0 left promiscuous mode [ 1340.686745][T23449] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1340.855845][T23450] overlayfs: failed to resolve './file0': -2 [ 1341.009514][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 1341.054998][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1341.089622][T23453] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 1341.101985][T23453] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 1341.478390][ T20] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1341.847800][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.858596][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.868198][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1341.877058][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.892707][ T20] usb 5-1: config 0 descriptor?? [ 1341.896155][T23472] overlayfs: failed to resolve './file0': -2 [ 1342.091800][T23482] cgroup: Unknown subsys name 'net_cls' [ 1342.177717][ T380] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1342.379062][ T20] lg-g15 0003:046D:C222.0078: unknown main item tag 0x5 [ 1342.390013][ T20] lg-g15 0003:046D:C222.0078: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 1342.401619][T23486] device gretap0 entered promiscuous mode [ 1342.407291][T23486] device vlan2 entered promiscuous mode [ 1342.414142][T23486] device gretap0 left promiscuous mode [ 1342.567796][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.578681][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.585557][T13358] usb 5-1: USB disconnect, device number 66 [ 1342.588295][ T380] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1342.631921][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.643108][T23491] fuse: Bad value for 'fd' [ 1342.645411][ T380] usb 4-1: config 0 descriptor?? [ 1343.108002][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 1343.114533][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1343.347832][ T380] usbhid 4-1:0.0: can't add hid device: -71 [ 1343.354787][ T380] usbhid: probe of 4-1:0.0 failed with error -71 [ 1343.378203][ T380] usb 4-1: USB disconnect, device number 73 [ 1344.294648][T23517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5893'. [ 1344.303689][T23517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5893'. [ 1344.316461][T23518] tun0: tun_chr_ioctl cmd 2147767507 [ 1344.375252][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5892'. [ 1344.838729][T23530] cgroup: Unknown subsys name 'net_cls' [ 1344.977710][ T3739] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1345.198586][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 1345.368087][ T3739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.379593][ T3739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.412756][ T3739] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1345.454590][ T3739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.486574][ T3739] usb 1-1: config 0 descriptor?? [ 1345.757735][ T25] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1345.847741][T13358] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1345.969010][ T3739] lg-g15 0003:046D:C222.0079: unknown main item tag 0x5 [ 1346.007692][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1346.012830][ T3739] lg-g15 0003:046D:C222.0079: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 1346.127845][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.171586][ T3739] usb 1-1: USB disconnect, device number 72 [ 1346.207781][T13358] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1346.217836][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1346.218102][T13358] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1346.226987][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1346.240595][T13358] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1346.247937][ T25] usb 5-1: SerialNumber: syz [ 1346.256973][T13358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.261934][ T25] usb 5-1: config 0 descriptor?? [ 1346.274204][T13358] usb 2-1: config 0 descriptor?? [ 1346.308562][ T25] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1346.315412][ T25] uvcvideo: Failed to create links for entity 255 [ 1346.321608][ T25] uvcvideo: Failed to register entities (-22). [ 1346.331848][T13358] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1347.654751][T23557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1347.663728][T23557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1348.219820][ T3739] usb 5-1: USB disconnect, device number 67 [ 1348.388312][T23567] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1348.395988][T23567] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1348.406613][T23567] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1348.439482][T23567] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1348.446401][T23567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1348.596301][T21476] usb 2-1: USB disconnect, device number 65 [ 1348.788853][T23579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.795847][T23579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.803323][T23579] device bridge_slave_0 entered promiscuous mode [ 1348.810275][T23579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.817135][T23579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.824454][T23579] device bridge_slave_1 entered promiscuous mode [ 1348.882055][T23589] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1349.008145][T23579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.015127][T23579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.022238][T23579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.028992][T23579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.058689][T13358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.068262][T13358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.088972][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1349.110631][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1349.162301][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1349.179570][T12324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.186462][T12324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.226431][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1349.250018][T12324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.256893][T12324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.319385][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1349.327168][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1349.361586][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1349.380904][T23579] device veth0_vlan entered promiscuous mode [ 1349.388105][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1349.410589][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1349.432547][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1349.467436][T23579] device veth1_macvtap entered promiscuous mode [ 1349.475176][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1349.493760][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1349.511448][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1349.597705][ T2027] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1349.747603][T23597] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=23597 comm=syz.2.5909 [ 1350.198514][ T1421] device bridge_slave_1 left promiscuous mode [ 1350.204618][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.212108][ T1421] device bridge_slave_0 left promiscuous mode [ 1350.218517][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.230968][ T1421] device veth1_macvtap left promiscuous mode [ 1350.236869][ T1421] device veth0_vlan left promiscuous mode [ 1350.297785][ T2027] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1350.310606][ T2027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.334785][ T2027] usb 2-1: config 0 descriptor?? [ 1350.591567][T23611] cgroup: Unknown subsys name 'net_cls' [ 1351.068172][ T2027] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1351.099366][ T2027] asix: probe of 2-1:0.0 failed with error -71 [ 1351.120051][ T2027] usb 2-1: USB disconnect, device number 66 [ 1351.298351][T23617] SELinux: duplicate or incompatible mount options [ 1351.725792][ T25] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1351.733254][ T380] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1352.007877][ T380] usb 3-1: Using ep0 maxpacket: 8 [ 1352.177814][ T25] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1352.187971][ T380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.197892][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1352.210759][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1352.219663][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.228138][ T25] usb 5-1: config 0 descriptor?? [ 1352.268310][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1352.287890][ T380] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1352.296803][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1352.304820][ T380] usb 3-1: SerialNumber: syz [ 1352.309853][ T380] usb 3-1: config 0 descriptor?? [ 1352.358366][ T380] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1352.365221][ T380] uvcvideo: Failed to create links for entity 255 [ 1352.371430][ T380] uvcvideo: Failed to register entities (-22). [ 1352.561635][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1353.079865][T23644] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=23644 comm=syz.0.5928 [ 1354.265245][ T2081] usb 5-1: USB disconnect, device number 68 [ 1354.386235][ T20] usb 3-1: USB disconnect, device number 70 [ 1354.632330][T23662] cgroup: Unknown subsys name 'net_cls' [ 1354.677801][ T2081] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1354.851176][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 1354.857075][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1355.107959][ T2081] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 1355.287763][ T2081] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 1355.296688][ T2081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.304920][ T2081] usb 5-1: Product: syz [ 1355.309341][ T2081] usb 5-1: Manufacturer: syz [ 1355.313842][ T2081] usb 5-1: SerialNumber: syz [ 1355.323963][ T2081] usb 5-1: config 0 descriptor?? [ 1355.394229][T23672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1355.498668][T23674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.505719][T23674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.513984][T23674] device bridge_slave_0 entered promiscuous mode [ 1355.527922][T23674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.534871][T23674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.542759][T23674] device bridge_slave_1 entered promiscuous mode [ 1355.626223][T23674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.633180][T23674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.640304][T23674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.647054][T23674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.682823][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1355.691501][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.699692][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.707725][T12324] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1355.722531][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1355.731068][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.737976][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.760079][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1355.768651][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.775532][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.782761][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1355.792188][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1355.819284][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1355.835211][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1355.843143][T23655] syz.4.5931[23655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1355.843210][T23655] syz.4.5931[23655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1355.856353][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1355.881747][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1355.898972][T23674] device veth0_vlan entered promiscuous mode [ 1355.905072][T23681] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5938'. [ 1355.933562][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1355.943337][T23674] device veth1_macvtap entered promiscuous mode [ 1355.949592][T12324] usb 3-1: Using ep0 maxpacket: 16 [ 1355.960209][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1355.973915][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1356.106691][T23688] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=23688 comm=syz.0.5939 [ 1356.156065][ T337] device bridge_slave_1 left promiscuous mode [ 1356.162622][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.172909][ T337] device bridge_slave_0 left promiscuous mode [ 1356.181247][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.195214][ T337] device veth1_macvtap left promiscuous mode [ 1356.201547][ T337] device veth0_vlan left promiscuous mode [ 1356.260710][ T2081] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1356.270528][T12324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.281260][ T2081] asix: probe of 5-1:0.0 failed with error -71 [ 1356.287690][T12324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1356.300663][ T2081] usb 5-1: USB disconnect, device number 69 [ 1356.307013][T12324] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1356.316446][T12324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.338117][T12324] usb 3-1: config 0 descriptor?? [ 1356.951669][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 1356.957743][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1356.959663][T12324] microsoft 0003:045E:07DA.007A: No inputs registered, leaving [ 1356.971898][T12324] microsoft 0003:045E:07DA.007A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1356.988399][T12324] microsoft 0003:045E:07DA.007A: no inputs found [ 1356.989276][T23699] device erspan0 entered promiscuous mode [ 1357.002794][T12324] microsoft 0003:045E:07DA.007A: could not initialize ff, continuing anyway [ 1357.003779][T23699] device vlan2 entered promiscuous mode [ 1357.017723][T23699] device erspan0 left promiscuous mode [ 1357.243740][T23703] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1357.299891][T23695] udc-core: couldn't find an available UDC or it's busy [ 1357.307146][T23695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1357.455805][ T2027] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1357.574684][ T20] usb 3-1: USB disconnect, device number 71 [ 1357.797768][T12324] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1357.847783][ T2027] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.857873][ T2027] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1357.870706][ T2027] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1357.879482][ T2027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.888107][ T2027] usb 1-1: config 0 descriptor?? [ 1357.928476][ T2027] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1358.057715][T12324] usb 5-1: Using ep0 maxpacket: 8 [ 1358.163518][T23720] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1358.197787][T12324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.240196][T23723] tun0: tun_chr_ioctl cmd 2147767507 [ 1358.297804][T12324] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1358.298800][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1358.307129][T12324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1358.323679][T12324] usb 5-1: SerialNumber: syz [ 1358.328858][T12324] usb 5-1: config 0 descriptor?? [ 1358.368326][T12324] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1358.375263][T12324] uvcvideo: Failed to create links for entity 255 [ 1358.381476][T12324] uvcvideo: Failed to register entities (-22). [ 1359.027798][T21476] Bluetooth: hci0: command 0x1009 tx timeout [ 1359.217561][T23735] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=23735 comm=syz.3.5951 [ 1359.979771][T12324] usb 1-1: USB disconnect, device number 73 [ 1360.475677][ T20] usb 5-1: USB disconnect, device number 70 [ 1360.662374][T12324] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1360.963364][T23763] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1360.975800][T23764] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1361.067778][T12324] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 1361.267999][T12324] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 1361.276925][T12324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.284860][T12324] usb 1-1: Product: syz [ 1361.288905][T12324] usb 1-1: Manufacturer: syz [ 1361.293262][T12324] usb 1-1: SerialNumber: syz [ 1361.298567][T12324] usb 1-1: config 0 descriptor?? [ 1361.347838][ T2027] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1361.597692][ T2027] usb 4-1: Using ep0 maxpacket: 16 [ 1361.717768][ T2027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.728589][ T2027] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1361.741411][ T2027] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1361.750824][ T2027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.767986][ T2027] usb 4-1: config 0 descriptor?? [ 1361.808160][T23747] syz.0.5955[23747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.808228][T23747] syz.0.5955[23747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.867763][T12324] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1361.888871][T12324] asix: probe of 1-1:0.0 failed with error -71 [ 1361.895843][T12324] usb 1-1: USB disconnect, device number 74 [ 1362.217725][ T2081] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1362.248834][ T2027] microsoft 0003:045E:07DA.007B: No inputs registered, leaving [ 1362.256754][ T2027] microsoft 0003:045E:07DA.007B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1362.268164][ T2027] microsoft 0003:045E:07DA.007B: no inputs found [ 1362.274302][ T2027] microsoft 0003:045E:07DA.007B: could not initialize ff, continuing anyway [ 1362.379026][T23778] SELinux: duplicate or incompatible mount options [ 1362.504631][T23783] udc-core: couldn't find an available UDC or it's busy [ 1362.511729][T23783] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1362.767778][ T2081] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 1362.775838][ T20] usb 4-1: USB disconnect, device number 74 [ 1362.837714][ T2027] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1362.927792][ T2081] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 1362.936656][ T2081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.944835][ T2081] usb 3-1: Product: syz [ 1362.949322][ T2081] usb 3-1: Manufacturer: syz [ 1362.953736][ T2081] usb 3-1: SerialNumber: syz [ 1362.962561][ T2081] usb 3-1: config 0 descriptor?? [ 1362.969453][T23786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.976477][T23786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.984069][T23786] device bridge_slave_0 entered promiscuous mode [ 1362.991108][T23786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.998737][T23786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.006143][T23786] device bridge_slave_1 entered promiscuous mode [ 1363.045580][T23786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.052479][T23786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.059559][T23786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.066323][T23786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.088775][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.096012][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.103487][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1363.110969][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1363.120800][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1363.128958][T21476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.135834][T21476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.150924][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1363.159323][T21476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.166164][T21476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.173763][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1363.181844][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1363.197773][ T2027] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.198011][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1363.209351][ T2027] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1363.222578][T23786] device veth0_vlan entered promiscuous mode [ 1363.228863][ T2027] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1363.240007][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1363.243799][ T2027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.252605][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1363.265601][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1363.280462][T23786] device veth1_macvtap entered promiscuous mode [ 1363.289499][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1363.308329][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1363.317418][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1363.323877][ T2027] usb 5-1: config 0 descriptor?? [ 1363.369874][ T2027] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1363.810387][T23775] syz.2.5964[23775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1363.810738][T23775] syz.2.5964[23775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1364.155556][ T2081] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1364.217555][ T2081] asix: probe of 3-1:0.0 failed with error -71 [ 1364.227732][ T2081] usb 3-1: USB disconnect, device number 72 [ 1364.251987][T23811] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1364.908362][ T337] device bridge_slave_1 left promiscuous mode [ 1364.914472][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.922586][ T337] device bridge_slave_0 left promiscuous mode [ 1364.929057][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.940914][ T337] device veth1_macvtap left promiscuous mode [ 1364.946771][ T337] device veth0_vlan left promiscuous mode [ 1364.982395][T23831] overlayfs: failed to resolve './file1': -2 [ 1365.536839][T23838] x_tables: unsorted underflow at hook 3 [ 1365.679441][ T2081] usb 5-1: USB disconnect, device number 71 [ 1366.892644][T23858] cgroup: Unknown subsys name 'net_cls' [ 1367.262634][T23862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5986'. [ 1367.289455][T23862] device vlan2 entered promiscuous mode [ 1367.294886][T23862] device erspan0 entered promiscuous mode [ 1367.301689][T23862] device erspan0 left promiscuous mode [ 1367.391839][T23871] tun0: tun_chr_ioctl cmd 2147767507 [ 1367.450108][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1368.407980][ T20] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1368.687795][T18858] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1368.787780][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.797977][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1368.810912][ T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.819850][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.841152][ T20] usb 1-1: config 0 descriptor?? [ 1368.885126][ T20] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1369.167909][T18858] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1369.176961][T18858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.696909][T18858] usb 5-1: config 0 descriptor?? [ 1371.162379][T21476] usb 1-1: USB disconnect, device number 75 [ 1371.407377][T23948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1371.416842][T23948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1371.517918][T18858] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1371.528837][T18858] asix: probe of 5-1:0.0 failed with error -71 [ 1371.540624][T18858] usb 5-1: USB disconnect, device number 72 [ 1371.717795][ T2027] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1372.087773][ T2027] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1372.099167][ T2027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.108095][ T2027] usb 4-1: config 0 descriptor?? [ 1372.247711][T21476] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1372.757835][T21476] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 1372.766623][T21476] usb 2-1: config 0 has no interface number 0 [ 1372.774124][T21476] usb 2-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1372.785974][T21476] usb 2-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1372.796856][T21476] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1372.806731][T21476] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1372.901010][ T2027] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1372.911288][ T2027] asix: probe of 4-1:0.0 failed with error -71 [ 1372.919151][ T2027] usb 4-1: USB disconnect, device number 75 [ 1373.007787][T21476] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1373.016766][T21476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.024618][T21476] usb 2-1: Product: syz [ 1373.028719][T21476] usb 2-1: Manufacturer: syz [ 1373.033152][T21476] usb 2-1: SerialNumber: syz [ 1373.403571][T21476] usb 2-1: config 0 descriptor?? [ 1373.447813][T23962] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1373.468394][T21476] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 1373.672701][ T2027] usb 2-1: USB disconnect, device number 67 [ 1373.697722][ T3739] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1374.057787][ T3739] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1374.068253][ T3739] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1374.081398][ T3739] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1374.090553][ T3739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.100802][ T3739] usb 1-1: config 0 descriptor?? [ 1374.138258][ T3739] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1374.939340][T24006] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 1374.966157][T24006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1375.022499][T24006] F2FS-fs (loop4): invalid crc value [ 1375.143389][T24006] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1375.208256][T24006] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 1375.215337][T24006] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1375.222260][T24006] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1375.853445][ T24] audit: type=1326 audit(1725945691.690:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1375.942342][ T24] audit: type=1326 audit(1725945691.690:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.026979][ T24] audit: type=1326 audit(1725945691.690:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.050737][T22225] attempt to access beyond end of device [ 1376.050737][T22225] loop4: rw=524288, want=45072, limit=40427 [ 1376.063060][T22225] attempt to access beyond end of device [ 1376.063060][T22225] loop4: rw=0, want=45072, limit=40427 [ 1376.074628][ T24] audit: type=1326 audit(1725945691.690:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.098957][ T24] audit: type=1326 audit(1725945691.690:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.117284][ T337] attempt to access beyond end of device [ 1376.117284][ T337] loop4: rw=2049, want=45120, limit=40427 [ 1376.133179][ T24] audit: type=1326 audit(1725945691.700:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.133199][ T24] audit: type=1326 audit(1725945691.710:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.133224][ T24] audit: type=1326 audit(1725945691.710:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.203378][ T24] audit: type=1326 audit(1725945691.720:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb38af78797 code=0x7ffc0000 [ 1376.226888][ T24] audit: type=1326 audit(1725945691.720:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.4.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38af79ef9 code=0x7ffc0000 [ 1376.558327][ T3739] usb 1-1: USB disconnect, device number 76 [ 1377.108374][T24035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.115319][T24035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.122870][T24035] device bridge_slave_0 entered promiscuous mode [ 1377.129979][T24035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.137007][T24035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.144415][T24035] device bridge_slave_1 entered promiscuous mode [ 1377.217304][T24035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.224202][T24035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.231334][T24035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.238219][T24035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.488071][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1378.007525][T18858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.028724][T18858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.389801][T24067] xt_CT: No such helper "pptp" [ 1378.398091][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1378.405805][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1378.435169][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1378.445171][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1379.383651][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.390538][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.417242][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1379.429242][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1379.437275][ T2081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.444162][ T2081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.551514][T24035] device veth0_vlan entered promiscuous mode [ 1380.139956][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1380.148070][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1380.155982][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1380.164410][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1380.199446][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1380.231487][T24087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1380.507385][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1380.515896][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1380.523778][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1380.545371][T24035] device veth1_macvtap entered promiscuous mode [ 1380.563924][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1380.571442][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1380.579129][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1380.587112][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1380.595922][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1380.608136][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1380.829189][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1380.973090][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1380.981546][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1381.113456][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1382.120899][T24111] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=24111 comm=syz.0.6055 [ 1382.873701][T24134] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6061'. [ 1383.288450][ T1421] device bridge_slave_1 left promiscuous mode [ 1383.295555][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.311272][ T1421] device bridge_slave_0 left promiscuous mode [ 1383.324494][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.341028][ T1421] device veth1_macvtap left promiscuous mode [ 1383.353102][ T1421] device veth0_vlan left promiscuous mode [ 1383.945792][T24150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1384.813132][T24158] overlayfs: failed to resolve './file1': -2 [ 1385.567978][T24167] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=24167 comm=syz.0.6068 [ 1385.599438][T24168] overlayfs: failed to resolve './file0': -2 [ 1386.527771][T18858] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1386.767703][T18858] usb 2-1: Using ep0 maxpacket: 8 [ 1386.887863][T18858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.977805][T18858] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1386.986732][T18858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1386.994756][T18858] usb 2-1: SerialNumber: syz [ 1386.999845][T18858] usb 2-1: config 0 descriptor?? [ 1387.088367][T24178] IPv6: Can't replace route, no match found [ 1387.265006][T18858] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1387.271831][T18858] uvcvideo: No valid video chain found. [ 1387.498714][T12324] usb 2-1: USB disconnect, device number 68 [ 1388.106199][T24192] overlayfs: missing 'lowerdir' [ 1388.637825][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1388.637918][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1388.637983][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1388.638045][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1388.638108][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1388.638181][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 1389.211939][T24204] fuse: Unknown parameter '00000000000000000000003' [ 1389.399116][T24209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1390.530316][T24220] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27668 sclass=netlink_xfrm_socket pid=24220 comm=syz.1.6082 [ 1390.576451][T24219] overlayfs: failed to resolve './file1': -2 [ 1390.707931][ T3739] Bluetooth: hci0: command 0x1003 tx timeout [ 1390.714137][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1392.787812][T18858] Bluetooth: hci0: command 0x1001 tx timeout [ 1392.793666][ T798] Bluetooth: hci0: sending frame failed (-49) [ 1393.142631][T24239] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1393.345294][T24243] overlayfs: missing 'lowerdir' [ 1393.677707][T18858] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1393.927737][T18858] usb 2-1: Using ep0 maxpacket: 16 [ 1394.057855][T18858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.068684][T18858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1394.081368][T18858] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1394.090173][T18858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.099005][T18858] usb 2-1: config 0 descriptor?? [ 1394.569072][T18858] microsoft 0003:045E:07DA.007C: No inputs registered, leaving [ 1394.577191][T18858] microsoft 0003:045E:07DA.007C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1394.588500][T18858] microsoft 0003:045E:07DA.007C: no inputs found [ 1394.594618][T18858] microsoft 0003:045E:07DA.007C: could not initialize ff, continuing anyway [ 1394.650068][T24249] overlayfs: missing 'lowerdir' [ 1394.848759][T24252] udc-core: couldn't find an available UDC or it's busy [ 1394.855679][T24252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1394.867703][ T2027] Bluetooth: hci0: command 0x1009 tx timeout [ 1395.116703][ T2027] usb 2-1: USB disconnect, device number 69 [ 1396.311099][T24259] device pim6reg1 entered promiscuous mode [ 1396.441231][T24263] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=6038 state=1 status=67 (errno 9: Bad file descriptor) [ 1399.967308][T24291] overlayfs: missing 'workdir' [ 1400.220959][T24294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.228084][T24294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.235281][T24294] device bridge_slave_0 entered promiscuous mode [ 1400.250308][T24294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.257186][T24294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.264649][T24294] device bridge_slave_1 entered promiscuous mode [ 1400.270890][ T2027] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1400.316227][T24294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.323113][T24294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.330214][T24294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.336963][T24294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.362161][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1400.369639][T21476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.376770][T21476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.386564][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1400.395012][ T2081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.401883][ T2081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.418626][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1400.426648][T21476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.433503][T21476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.441076][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1400.448924][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1400.468863][ T2081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1400.481006][T24294] device veth0_vlan entered promiscuous mode [ 1400.488177][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1400.495994][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1400.503519][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1400.514324][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1400.525580][T24294] device veth1_macvtap entered promiscuous mode [ 1400.535637][T18858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1400.547984][T21476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1400.868355][ T1421] device bridge_slave_1 left promiscuous mode [ 1400.874394][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.881736][ T1421] device bridge_slave_0 left promiscuous mode [ 1400.887778][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.895497][ T1421] device veth1_macvtap left promiscuous mode [ 1400.901510][ T1421] device veth0_vlan left promiscuous mode [ 1402.388896][ T1421] device bridge_slave_1 left promiscuous mode [ 1402.394842][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.402262][ T1421] device bridge_slave_0 left promiscuous mode [ 1402.408247][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.416078][ T1421] device bridge_slave_1 left promiscuous mode [ 1402.422134][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.429483][ T1421] device bridge_slave_0 left promiscuous mode [ 1402.435415][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.443159][ T1421] device bridge_slave_1 left promiscuous mode [ 1402.449158][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.456269][ T1421] device bridge_slave_0 left promiscuous mode [ 1402.462326][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.470624][ T1421] device veth1_macvtap left promiscuous mode [ 1402.476427][ T1421] device veth0_vlan left promiscuous mode [ 1402.482209][ T1421] device veth1_macvtap left promiscuous mode [ 1402.488337][ T1421] device veth0_vlan left promiscuous mode [ 1402.493957][ T1421] device veth1_macvtap left promiscuous mode [ 1402.499833][ T1421] device veth0_vlan left promiscuous mode