last executing test programs: 42.215432757s ago: executing program 0 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f1ffffffffffffff00000000000000000000000000ad4849fd54c8477bec4d275e72b135ebd13bd5dd7e86e44168699eaf528556930308c536cc1d4c5752c8fd5d582842f0c8f794a4098e5fb609571f2cce1151f624f45f11d619314a533bef2ab401c2a829744a1e170eb86e12796ec8b50d4470795ea4fef32564f9d744bf56afcbb384dbc3e53e9cf5912a22c6f74fd6af7ceef773cfbca9c4d8b6e986b61f08302d783c4e7501f678a03f56158cc19ce6267c842c4607b8a469620403d1c64d1969e397cc"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ptrace(0x10, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYBLOB="05", @ANYRES16, @ANYRES8, @ANYRES16, @ANYRES16=r6], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 31.026742479s ago: executing program 4 (id=596): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x200, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008002}, 0x4008885) (async) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x200, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008002}, 0x4008885) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x0, 0x2, {0x0, @struct={0x0, 0x1}}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000600)=0x8, 0x4) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000600)=0x8, 0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x0) (async) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000005c0)={0x1, r4}) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000005c0)={0x1, r4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) (async) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030000000418000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e3ffffff00000000fff700"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 30.623514685s ago: executing program 0 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0x0, 0x0}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r5, 0x0, 0x881) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 26.479970349s ago: executing program 4 (id=599): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000006d0000001000000000dfffffffffffffff0000005d99a9bf51dcc6d302a3bf059744d93fb33feb0b6b69084e8dc63d3b17046a088add15fcc75e0559eb2b144e68c22ff202d0cb2375182886b9b7038f16d87f47e03e7cd6f3148f8fc7cc93484653ed25bff2e11fd26a01bb83eb90b40f82d6f44e2452e888bca5170ad3327bb109fbeac910"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x18}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x21b9, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, 0x217}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) 25.313139891s ago: executing program 3 (id=603): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup3(r8, r9, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@setlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="28df60bd000300", 0xfffffe95}, {&(0x7f0000000140)="139776ff030270", 0x7}], 0x2) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 22.18985977s ago: executing program 3 (id=605): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000006d0000001000000000dfffffffffffffff0000005d99a9bf51dcc6d302a3bf059744d93fb33feb0b6b69084e8dc63d3b17046a088add15fcc75e0559eb2b144e68c22ff202d0cb2375182886b9b7038f16d87f47e03e7cd6f3148f8fc7cc93484653ed25bff2e11fd26a01bb83eb90b40f82d6f44e2452e888bca5170ad3327bb109fbeac910d8169ac7c9b5e236b06062849c196ef70eabc5462d3bda451224b3ff6a37180db931ea7d04358920"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a634dabba5b1c79c6dc07f6951f6e6f8dc70c8a732f73ca84200631498453a359ea953dfa6cc79e6605395c8251e9fae3e93574159b6dd579e3b5f43fabf478e191014d3e8609b71fbf2372f054527d06e84fdc92d8f00a8a068636f4cde18ee63164bb91716280b34daa67658e136c99a1ca6cb74630c2ba8d712", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000001800004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x21b9, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, 0x217}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 22.054317162s ago: executing program 2 (id=606): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x21b9, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, 0x217}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) 21.852028309s ago: executing program 4 (id=607): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='subflow_check_data_avail\x00', r1, 0x0, 0xfffe}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001400), 0x208e24b) sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x22, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r6 = eventfd(0xfffffffc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getneightbl={0x14, 0x42, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240440c4}, 0x0) read$FUSE(r8, &(0x7f0000005840)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1700000000000000040000000000000000000000c48b5fa26f37e42cf368101e115c971c6e48351c291dcb4509f4147697731ceb1c434d7ba6467c99a4683a74d248db3b8452abe8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 20.620022986s ago: executing program 4 (id=608): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x65, 0x1}, @enum64={0xb, 0x7, 0x0, 0x13, 0x1, 0x8, [{0x8, 0xcc, 0x3}, {0x8, 0x8238}, {0x9, 0x0, 0x2}, {0xc, 0x1, 0xb72}, {0x5, 0x0, 0x8}, {0x1, 0x1, 0x3ff}, {0xc, 0x8, 0x4}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000500)=""/124, 0xa0, 0x7c, 0x1, 0x10, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.394896341s ago: executing program 0 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8a, &(0x7f0000000ac0)=ANY=[], 0xfc, 0x2bb, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b740040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="16", 0x1}], 0x1) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async, rerun: 32) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) (async, rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x4, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 18.294358836s ago: executing program 3 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xd5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0x1000000}}}}}, 0x0) 18.135413989s ago: executing program 2 (id=612): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x8c400, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0xc9, 0x12) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001900d5af25bd7000fbdbdf251c000012ff01c80b0008000008000400", @ANYRES32=0x0, @ANYBLOB="a882a5bb9276"], 0x24}}, 0xc011) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x0, 0x3f, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfffffffd}, 0x1c) syz_emit_ethernet(0x365, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00001d000000000000e5ffffffffffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) open(&(0x7f0000000000)='./file0\x00', 0x42000, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) 18.027832657s ago: executing program 0 (id=613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4e4f3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000056c0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000440)="20d3632ee8e91f89d70180cb3a5375aafff624538afe133c803bc50b658c31e3969dc7bcb44f2fc1d677da2dfd7e7001b24522329094ac5939da0294174b461c1fc424e95d79c2f82e2d19b270517d8a4df4c7a64d1213aae7f924684e7fd6dc186499ec728b6103", 0x68}, {&(0x7f0000000580)="d91dd53835d3803035e259cf702b7f8175cd4ade697985b47520d97cf8a050929bb0f736283713c365f3ab3e650703afa5cf117ffd56fd77a3094cc8208de2e2367d8fe4807aec67a31d0acc2ccde88aff8c88ef43dae4135dca9cc1c5b55ecd17a456bd7c97b8e7c738f7b3b087e33e961e82c9c18aab833f051e2625bc5a194b14bd92aa9bf389ab02de7c1cbcfa941200616b05b7f8f31cf16f256380d5e249cb57b6b88d533ba2c78cdeb2f2b5b1ec6ff9d297d8c66501287170370fe420bc28e652b592eb7c1d7e5433edd33944376b94ce14c34f0a2102690525848730985e8f6d06448e", 0xe7}, {&(0x7f0000000740)="9dfcaacb692a72cb8f191aea7df7a16eaebc5da78b665d25e52654257b7e2c34ae94b85217934938ce38f085329f7b4804e9c6abf61f263af8c3f80b269e4e71f00eaedb03dc31232163820011028d9cfbd128d9a61d16fbe90e93ee014815cfd073214b03c805f5c1e49d64886122ce2f5d7092a05ad93f0805af87a63f8fc44de091068ab2e01db57c166b1681b02493c07e504764e68d8a744ba61f9e054918e94553991b380d722c3213e4953a985053288f777d89be72ef6aee7f90", 0xbe}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}], 0x20, 0x60008080}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="dbcf3ec3f1ed4083389f58260bdaacd55c245c9a82a369c247c8b1923680d00c083648be90b07bc5e2c5b8210e4752b8e28b4ccaa7b6e099a5bd530b89269ce3030e04fe909589a801b86728b9c5bbc5ce21d5ce0fa3d8a72df18ce671eeeba93c8d67de813df3af3d2fd7f506e8e502a7bc1f320497c67cd0a9d2c1cf9778258f8ea64961a8ec557d4cdc18584222a226fe094a728322ec45929f744bfabd2ba1b86f2ab66f292966dbf91986d005e0", 0xb0}, {&(0x7f0000000500)="8d8a099452b3f10bc63846eca6cae564ad9336d487817bcfed635585da4b222afd3802fd75550d39", 0x28}, {&(0x7f0000001940)="95eaae5b0e8d7e3ac10be98bf637706116b63263ae7c5ee1eae8ebcff95effbdcc003230eab24ddc76badc567aabcd0b27bf8789508760ed13b50daa437cb6199619bbbd4db3063461aa5b4c", 0x4c}], 0x4, 0x0, 0x0, 0x4004040}}, {{&(0x7f0000001a00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000001a80)="0405d4fa835893fec1e706afdd5337279d83dbf084c61eb22805978e937bf527288d48a2346f9b1cad4239a11cef853355cdd788dd7c2edc56070c7af62b5b80cc0d8da575362a9ff84c197b9f53e95f1d0d189bca46cc4b72c67453e9e335881071f769b5f62610f8a56ba3508bb7b798d13394de80a78024a5111b728ac43a6b7c7bba4be33337904d01e5880a51f2b4fa3e2d59fb4548ecdbe850c696fc194dec973f937dde598bd7ea2aab14407ee55c9f64bfbfc6d34c5a40444033dc45b45419505ebaf6cfc93704917c770c1434", 0xd1}, {&(0x7f0000001b80)="8d1add63fe8b8017a8d4ea130f3be67d7bad5f4b960d9359666524fdb17697", 0x1f}], 0x3, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x40000}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)="80c77694cb0c4f429e5dd0b5f5cec8791c5aaef1a895b68d5ffdb2f304c20b7379bafe6ab0f36a36fbdd158df1cd31f10190cf768cb9b488d5a26ceab3f21dbaea2cb8a50b0763bd49d9e176ac80d8765d82e9fc89f48672f1ddf60ed42e2c63838ed01dfb6561507644596fb232a0b419ffee25c0eea99baf8bd34d4ac164e208dfd8448e3a483b5f36b45afbbca7f16ead35d8291bb02e3c2054a7f97b3c16bf914b16c893ee76f503b9cbbe20292f6f31d9882079c0ee92307884", 0xbc}, {&(0x7f0000001d00)="b2e6315f053adb3ef2a12484dab5399b0ad47ec6558b0a183753bb9e7772a6f47952463e2b12d29cd95ea1ab4c", 0x2d}], 0x2, &(0x7f0000001d80)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}, {{&(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001e80)="da0f81005b7e980efef6faa025324982fded058a9507d170721f2f68e5fe65db836eb15ccc5f574f4abe033faa77c2caf99ffc93a1aa8429282d52517d3d7ba788cb7281418599b0115545edae3bd359658723b04e9dc7fc90d8b7d411d103a0cd34fd1b4f2558be035adeaaa0da977b153da5892dd2f39d791dfc3d5bb8ef68fafe9ac29dab481891f0493cf7ef3f62702e5ac59e0c33a92545070cbd", 0x9d}], 0x1, &(0x7f0000005180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x2c, 0x1, 0x1, [r4, r1, r1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0xc8, 0x8000}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000005580)="9baaed7a6336ba681656846a59cbef0e39cd5ca2dafadaa7a129a85e4910cc218e61a7f538c5995944cfaaff00b5c5d0f3faa0ba405d87e7343598d48769d74a1b15d1aa147ac062e6fb33cec856cc7506653170d2ba45f4dd5e6c66df9d951a27f8b24f2df42be0b17cad0f52efa510eaa567e32ff73dd80db83feab49bedc70d7b64d87374c9ae3252470ed5e31871a23bd4164497156e149636eca8d48b32f86069f3f59caf75", 0xa8}, {&(0x7f0000008180)="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", 0x1000}, {&(0x7f0000002040)="db340cc84508820bc0063021ddeded6517", 0x11}], 0x3, &(0x7f0000005680)=[@rights={{0x10}}], 0x10, 0x20044000}}], 0x6, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES64], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r12, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1393) io_submit(r12, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0}]) getpid() 17.673828659s ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0x0, 0x0}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r5, 0x0, 0x881) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 15.517951696s ago: executing program 3 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000600000000000000edf80000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000688ca62870d06ce2121c5f4c32cb8f7400000000000000000000000000000000fe7fffff9a0904a0aafc8e59ad760000000000000080eb0e4bb8be632e4d5e90fe2176f26f43cc728d824f27e15e285575fda2e3b195797734f9a2ac575fc471a0dc1fd85820d9f281cae29d49f684e0186fd72611251da1c286fc8b5fd89f40190adb04dc334e7e5ae48b42a1ecb431f5f3a8bc7757bcb2903c620910f6c500cd64b0d9423ae7e94a06fc4ed13aed4f6b53c206c9e595270d0f27ba70d4dd05d9345d9452bff14a7479c455c505e70b0af2405122db9608e96e8a9fa187faceff3203f3572a06bc5cb2ae121db3fcf8bd39415ee1f6c427f4b2c26155ff0518389230925889254e47e19c65c78162f01c3827c85c0a216a9bc5c3a7758d9584"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup2(r1, r0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000180)=""/13, 0xd) sched_setaffinity(r2, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) unshare(0x4000400) unshare(0x64000600) socket$inet6(0xa, 0x2, 0x0) 15.515649827s ago: executing program 4 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1d01000000000020961b0a0000000000000109022400010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x0, 0xd0, {0xd0, 0x7, "d0fc56ea5b3b1ccdd7ccf16488d7dd8a0a05f28a749bb229a2747562c4b02dabe1502d5f4c8e120bc99c288f7a3e0274b6e66b759822d72898b04649807b28137f799a6e94d89fada14e9e2468dab9cd24179e6ba7004c1db832f2505ae77afd88607d60e6fd2247f27ce969a04fd4a801f5808727e8c78ef1eb2fb337334aef8f9f5dee3896f9c81688dcdad56dc29f8fb9437c92a8b2b45fddf65476c0183c65bd6f6b1402c1687c13d82c449fff1e204e3e538f98349bca8c9dc4f7f9698459d85c0ca61f4a031eea295df81c"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000340)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "8dffd761d2857ada6ca6c4cad7d68be3"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x8, 0x1, "6d7ee01d", "6590f150"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x3, 0x2, 0x1, 0xbd, 0xffff, 0x6}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0xd, 0x39, "33839a66a1ec9206173ffb44ece7222684c296b27a26dd009f3337e58221dead46fb51641052585323118fcf933201837732df04df0f08d9cc"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5d96"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f481"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) 12.508065131s ago: executing program 2 (id=618): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000009af700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1000, 0x10100, 0x3}, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff00800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() sync() setuid(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000300000000000000ffad56ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b31, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11.895145983s ago: executing program 3 (id=619): memfd_create(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0xc001, &(0x7f00000001c0)=ANY=[], 0x1, 0x5526, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4008f50a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x7, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x2, &(0x7f0000000200)=""/2, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='rxrpc_tx_packet\x00', r2}, 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x10003, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000057c0)=ANY=[@ANYRES16=r5, @ANYRES32=r8, @ANYRES8=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) symlink(0x0, &(0x7f00000059c0)='./file0\x00') syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000005800)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) 11.747199016s ago: executing program 2 (id=620): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000f7000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000e94c1fbdb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x14a80, 0x12, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f00000001c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.535908053s ago: executing program 1 (id=621): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) timer_create(0x0, 0x0, 0x0) (async, rerun: 32) creat(&(0x7f0000000480)='./file1\x00', 0x10) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x73) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, 0x0, &(0x7f0000000240)}, 0x20) (async) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 11.395187285s ago: executing program 1 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 11.10770362s ago: executing program 1 (id=623): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0xa90, &(0x7f0000000080), &(0x7f0000000180)="3e29a8013a40f10edbca11daab8f9a37b8134e48f97d4104fc4211b5b6e1077e83f9f0a0a0f01f998fd0e2fbd09f72db06e9347f1a9c61c86a89b619674fe0891e1a44d3a4f25f2d925f99c3d5090bfd076466b569bc755b108b6aa588eadc2821e0ef49742e3f2bacf9d09c3a59c9cd0b699b38de1d179d5ab40b6afe6a35dd7a12d151031e9b81c57ceb642b34c5f671f19802db98488f56e01a0140564ffebd25e51627ddd421ef0e49d82d3d4abe29e69d783949d5822159b29589a4c6334cce4f89f5257787f14e099bebe4c7b3be2c1e0b8897cd18f0d9c79e2ad9ca32223153aa90a40b3aefeb79326cdd0a646fbd6fcab272c4cf2e35274a3d1f64ea406a2d16a31aadd4fef9f8a36d26c3bb0c6af4ca36d4adde663d52bbc11d24d8e87956eb142182eb0989d389a221a1f6cff3c14fd0b158c469bd1a48970f549d0b0fddb4ab1a7166beab40241e276325854762a72a4835c9331705b1d85551d1646347b12f8c7fc910c563d1b0a88ab5411c903ec4f0dd0f4edaf8deba2ebbd16f0aeed57a38a8fccf95d34452692bd31995c09acb385d06344deac15a75215c8e45069b544dfa8ae3535afd81993948491ddf0cbbb52e1befbd8cc37529ab0895bc06af640a5d9f08b38689ac055e99e93739c623925d653a0f96fda70ab2107f18a325bcc83fbc0b2329a9c8d4e29573c419047f6605e705589590fb26543d24893a0ba8359452344c4bbfdf6a32d01183dd3838ba679d9cf1077caa1e823694e50d2f3043883ba9380566736895617fb8e223d92f7d855b3c948ca51954b24de0cde70828cbfa16cee699ea932221186635442dfd2c589da21840a41187a14f2d499de71b57109444f2b140738c0ae4b2ac402f70917c0c217b1ab3b7270eaf31bd312ee3896ce031d6c97e2c0ac1bba3890972dc00138685ae3b9432f34aed5d69648d2a66ef65ce10c0cb667329c0f4fb6f58caa90b154df8e2e7", 0x0, 0x2bd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_writev(0x0, &(0x7f0000003380), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0fedef23510359cc2518f8b501bb16998f30e766942f9d1836d9a21a25b2b4f388147b072017e8b6493513122d58755b7883f96f5372beccd5d25a13cfafbd6f0904b5430bfac077f3cc09642971d6730850e018d6a8cad06495a937f61d11ca51a1ec4b916b221459f34e9adeb5c1dc706748c8aaca752c8908aae2502b52faccec4a1cdfbe7f9aaa2aa939e0a8255593b93a6b452f28c355edb1a7a5ac88b3e519931e90ffab0e99d0f8", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) 9.488849641s ago: executing program 4 (id=624): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='xen_mc_extend_args\x00', r3}, 0x18) r4 = socket(0x1, 0x3, 0x1001) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003f00000002b2a0000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x392a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb47311030eb7d878, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="82"]) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r6, &(0x7f0000000000), 0x10) (fail_nth: 8) 9.210205485s ago: executing program 1 (id=625): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000006c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@errors_continue}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={@id={0x2, 0x0, @d}}) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000082c0)={0x2020}, 0x2020) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) 8.671120732s ago: executing program 1 (id=626): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560211820fffff5bab4e210200000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000100002000400080004000000224e0000", 0x58}], 0x1) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 8.593472589s ago: executing program 2 (id=627): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x9, 0x0}, 0x8) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file1\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xd8a, 0xa3, &(0x7f0000000500)=""/163, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x10, 0x8, 0x8}, 0x10, r7, r1, 0x4, &(0x7f0000000800)=[r8, r0, r0, r5], &(0x7f0000000840)=[{0x1, 0x2, 0xa, 0xb}, {0x2, 0x4, 0xe, 0x3}, {0x2, 0x3, 0x3, 0x9}, {0x2, 0x2, 0xa, 0x8}], 0x10, 0x8, @void, @value}, 0x94) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r9}, 0x10) 6.325013551s ago: executing program 0 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0x0, 0x0}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r6, 0x0, 0x881) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 186.794415ms ago: executing program 2 (id=630): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x21b9, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, 0x217}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) 135.611929ms ago: executing program 1 (id=631): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000006d0000001000000000dfffffffffffffff0000005d99a9bf51dcc6d302a3bf059744d93fb33feb0b6b69084e8dc63d3b17046a088add15fcc75e0559eb2b144e68c22ff202d0cb2375182886b9b7038f16d87f47e03e7cd6f3148f8fc7cc93484653ed25bff2e11fd26a01bb83eb90b40f82d6f44e2452e888bca5170ad3327bb109fbeac910"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x18}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x21b9, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, 0x217}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=629): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0xa90, &(0x7f0000000080), &(0x7f0000000180)="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", 0x0, 0x27e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_writev(0x0, &(0x7f0000003380)=[{&(0x7f00000022c0)=""/4, 0x4}, {&(0x7f0000002300)=""/84, 0x54}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/161, 0xa1}, {&(0x7f0000003480)=""/124, 0x7c}, {&(0x7f0000003500)=""/19, 0x13}, {&(0x7f0000003540)=""/60, 0x3c}, {&(0x7f0000003580)=""/188, 0xbc}, {&(0x7f0000003640)=""/5, 0x5}], 0x6, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0fedef23510359cc2518f8b501bb16998f30e766942f9d1836d9a21a25b2b4f388147b072017e8b6493513122d58755b7883f96f5372beccd5d25a13cfafbd6f0904b5430bfac077f3cc09642971d6730850e018d6a8cad06495a937f61d11ca51a1ec4b916b221459f34e9adeb5c1dc706748c8aaca752c8908aae2502b52faccec4a1cdfbe7f9aaa2aa939e0a8255593b93a6b452f28c355edb1a7a5ac88b3e519931e90ffab0e99d0f8", @ANYBLOB="0000000000000000000000000000f9082ace944c0000000000000000"], 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') kernel console output (not intermixed with test programs): 869:876): avc: denied { mounton } for pid=2398 comm="syz.0.432" path="/20/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 322.540195][ T1884] attempt to access beyond end of device [ 322.540195][ T1884] loop0: rw=2049, want=45104, limit=40427 [ 322.682577][ T1120] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 322.698249][ T2401] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.709755][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.728389][ T2401] device bridge_slave_0 entered promiscuous mode [ 322.749044][ T2401] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.767256][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.782470][ T2401] device bridge_slave_1 entered promiscuous mode [ 323.098134][ T1120] usb 2-1: device descriptor read/64, error -71 [ 323.501726][ T1120] usb 2-1: device descriptor read/64, error -71 [ 324.207808][ T1120] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 324.403265][ T2433] loop0: detected capacity change from 0 to 1024 [ 324.473377][ T2433] EXT4-fs (loop0): Test dummy encryption mode enabled [ 324.480171][ T2433] EXT4-fs (loop0): Ignoring removed orlov option [ 324.491807][ T1120] usb 2-1: device descriptor read/64, error -71 [ 324.507975][ T2433] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 324.541057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.541712][ T60] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 324.549363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.564404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.573624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.582303][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.589432][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.597645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.606331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.615333][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.622263][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.630374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.752458][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.760971][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.769244][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.777630][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.797527][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.806624][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.862133][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.870285][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.879019][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.887227][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.902828][ T2400] device veth0_vlan entered promiscuous mode [ 324.919743][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.927843][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.940168][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.949537][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.958272][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.965179][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.987249][ T2400] device veth1_macvtap entered promiscuous mode [ 324.993570][ T1120] usb 2-1: device descriptor read/64, error -71 [ 325.000026][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.008543][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.017216][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.026823][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.036283][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.045030][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.052349][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.054346][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.064725][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.070694][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.081063][ T60] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 325.097137][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.111857][ T1120] usb usb2-port1: attempt power cycle [ 325.119246][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.121449][ T60] usb 3-1: config 0 descriptor?? [ 325.130165][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.152860][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.161577][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.195713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.205182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.240507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.249744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.272963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.282171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.307374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.327164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.357908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.367802][ T2401] device veth0_vlan entered promiscuous mode [ 325.413033][ T2401] device veth1_macvtap entered promiscuous mode [ 325.573780][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.587558][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.617882][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.628362][ T2447] loop0: detected capacity change from 0 to 256 [ 325.635485][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.673193][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.707790][ T2447] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 325.797852][ T633] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 325.810818][ T221] device bridge_slave_1 left promiscuous mode [ 325.817544][ T221] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.853954][ T221] device bridge_slave_0 left promiscuous mode [ 325.925161][ T221] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.935351][ T221] device veth1_macvtap left promiscuous mode [ 325.941322][ T221] device veth0_vlan left promiscuous mode [ 326.156182][ T2452] loop0: detected capacity change from 0 to 512 [ 326.211796][ T633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.231733][ T633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.255944][ T633] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 326.260183][ T2452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.269415][ T2445] loop3: detected capacity change from 0 to 40427 [ 326.276856][ T2452] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 326.282042][ T633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.311840][ T1120] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 326.319835][ T30] audit: type=1400 audit(1728921836.699:877): avc: denied { rename } for pid=2451 comm="syz.0.441" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.349864][ T633] usb 5-1: config 0 descriptor?? [ 326.361956][ T2445] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 326.381917][ T2445] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 326.410021][ T2445] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 326.490769][ T2445] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 326.498195][ T2445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.535569][ T2462] attempt to access beyond end of device [ 326.535569][ T2462] loop3: rw=2049, want=45104, limit=40427 [ 326.681889][ T2440] UDC core: couldn't find an available UDC or it's busy: -16 [ 326.690251][ T2440] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 326.712010][ T1120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.736459][ T1120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.746960][ T1120] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 326.756621][ T1120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.800110][ T1120] usb 2-1: config 0 descriptor?? [ 327.682303][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 327.688818][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 327.739376][ T60] usb 3-1: USB disconnect, device number 12 [ 328.396619][ T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 328.443163][ T1120] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 329.997210][ T1120] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 330.045102][ T1120] usb 2-1: USB disconnect, device number 20 [ 330.061692][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 330.181824][ T60] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 330.361797][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 330.376169][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.388492][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 330.404404][ T60] usb 3-1: Product: syz [ 330.410890][ T2500] device bridge_slave_1 left promiscuous mode [ 330.418690][ T60] usb 3-1: Manufacturer: syz [ 330.428355][ T60] usb 3-1: SerialNumber: syz [ 330.434866][ T2500] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.448810][ T60] usb 3-1: config 0 descriptor?? [ 330.473728][ T2500] device bridge_slave_0 left promiscuous mode [ 330.489344][ T2500] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.499010][ T60] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 330.511451][ T60] usb 3-1: Detected FT232RL [ 330.651687][ T1120] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 330.702951][ T2483] UDC core: couldn't find an available UDC or it's busy: -16 [ 330.711757][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 330.724693][ T2483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.751758][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 330.771787][ T60] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 330.784853][ T60] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 330.817230][ T60] usb 3-1: USB disconnect, device number 13 [ 330.838867][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 330.868215][ T60] ftdi_sio 3-1:0.0: device disconnected [ 330.901688][ T1120] usb 2-1: Using ep0 maxpacket: 16 [ 331.021834][ T1120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.044257][ T1120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.054160][ T633] usbhid 5-1:0.0: can't add hid device: -71 [ 331.060154][ T633] usbhid: probe of 5-1:0.0 failed with error -71 [ 331.087126][ T633] usb 5-1: USB disconnect, device number 18 [ 331.211943][ T1120] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 331.225167][ T1120] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 331.360352][ T1120] usb 2-1: Product: syz [ 331.376461][ T1120] usb 2-1: Manufacturer: syz [ 331.385796][ T30] audit: type=1400 audit(1728921841.769:878): avc: denied { read } for pid=2502 comm="syz.4.452" dev="nsfs" ino=4026532317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 331.406833][ T30] audit: type=1400 audit(1728921841.769:879): avc: denied { open } for pid=2502 comm="syz.4.452" path="net:[4026532317]" dev="nsfs" ino=4026532317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 331.431545][ T30] audit: type=1400 audit(1728921841.769:880): avc: denied { bind } for pid=2502 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.432114][ T1120] usb 2-1: config 0 descriptor?? [ 331.456118][ T30] audit: type=1400 audit(1728921841.769:881): avc: denied { setopt } for pid=2502 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.511903][ T2506] loop3: detected capacity change from 0 to 512 [ 331.715425][ T2506] EXT4-fs (loop3): Test dummy encryption mode enabled [ 331.731853][ T2506] EXT4-fs (loop3): Unrecognized mount option "dont_measure" or missing value [ 332.201917][ T30] audit: type=1400 audit(1728921842.579:882): avc: denied { bind } for pid=2515 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.276474][ T2518] ªªªªªª: renamed from syzkaller0 [ 332.406980][ T2497] loop1: detected capacity change from 0 to 128 [ 332.511745][ T2519] loop2: detected capacity change from 0 to 128 [ 332.652406][ T2497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.703605][ T2497] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038 (0x7fffffff) [ 332.765581][ T2526] loop4: detected capacity change from 0 to 2048 [ 332.821684][ T444] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 332.861086][ T2526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.891812][ T2526] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 333.201796][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.221733][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.241661][ T444] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 333.250637][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.287302][ T444] usb 1-1: config 0 descriptor?? [ 334.656285][ T2535] loop2: detected capacity change from 0 to 128 [ 336.090761][ T2539] loop3: detected capacity change from 0 to 1024 [ 336.100366][ T30] audit: type=1400 audit(1728921846.089:883): avc: denied { bind } for pid=2525 comm="syz.4.458" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.320376][ T30] audit: type=1400 audit(1728921846.089:884): avc: denied { node_bind } for pid=2525 comm="syz.4.458" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 336.441824][ T444] usbhid 1-1:0.0: can't add hid device: -71 [ 336.447795][ T444] usbhid: probe of 1-1:0.0 failed with error -71 [ 336.456324][ T444] usb 1-1: USB disconnect, device number 16 [ 337.083894][ T1120] usbhid 2-1:0.0: can't add hid device: -71 [ 337.090484][ T1120] usbhid: probe of 2-1:0.0 failed with error -71 [ 337.179965][ T1120] usb 2-1: USB disconnect, device number 21 [ 337.292348][ T30] audit: type=1400 audit(1728921847.669:885): avc: denied { read } for pid=2546 comm="syz.1.460" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 337.308468][ T2539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.350597][ T2539] FAULT_INJECTION: forcing a failure. [ 337.350597][ T2539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.376233][ T2539] CPU: 1 PID: 2539 Comm: syz.3.461 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 337.385946][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.396424][ T2539] Call Trace: [ 337.399554][ T2539] [ 337.402319][ T2539] dump_stack_lvl+0x151/0x1c0 [ 337.406829][ T2539] ? io_uring_drop_tctx_refs+0x190/0x190 [ 337.412309][ T2539] dump_stack+0x15/0x20 [ 337.416296][ T2539] should_fail+0x3c6/0x510 [ 337.420554][ T2539] should_fail_usercopy+0x1a/0x20 [ 337.425410][ T2539] _copy_to_user+0x20/0x90 [ 337.429670][ T2539] simple_read_from_buffer+0xc7/0x150 [ 337.434875][ T2539] proc_fail_nth_read+0x1a3/0x210 [ 337.439735][ T2539] ? proc_fault_inject_write+0x390/0x390 [ 337.445199][ T2539] ? fsnotify_perm+0x269/0x5b0 [ 337.449817][ T2539] ? security_file_permission+0x86/0xb0 [ 337.455176][ T2539] ? proc_fault_inject_write+0x390/0x390 [ 337.460651][ T2539] vfs_read+0x27d/0xd40 [ 337.464650][ T2539] ? kernel_read+0x1f0/0x1f0 [ 337.469071][ T2539] ? __kasan_check_write+0x14/0x20 [ 337.474015][ T2539] ? mutex_lock+0xb6/0x1e0 [ 337.478273][ T2539] ? wait_for_completion_killable_timeout+0x10/0x10 [ 337.484700][ T2539] ? __fdget_pos+0x2e7/0x3a0 [ 337.489133][ T2539] ? ksys_read+0x77/0x2c0 [ 337.493308][ T2539] ksys_read+0x199/0x2c0 [ 337.497373][ T2539] ? vfs_write+0x1110/0x1110 [ 337.501801][ T2539] ? __kasan_check_write+0x14/0x20 [ 337.506744][ T2539] ? switch_fpu_return+0x15f/0x2e0 [ 337.511690][ T2539] __x64_sys_read+0x7b/0x90 [ 337.516028][ T2539] x64_sys_call+0x28/0x9a0 [ 337.520276][ T2539] do_syscall_64+0x3b/0xb0 [ 337.524533][ T2539] ? clear_bhb_loop+0x35/0x90 [ 337.529059][ T2539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.534776][ T2539] RIP: 0033:0x7f9c6a4a2a3c [ 337.539025][ T2539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 337.558472][ T2539] RSP: 002b:00007f9c6911d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.566730][ T2539] RAX: ffffffffffffffda RBX: 00007f9c6a65bf80 RCX: 00007f9c6a4a2a3c [ 337.574533][ T2539] RDX: 000000000000000f RSI: 00007f9c6911d0a0 RDI: 0000000000000005 [ 337.582339][ T2539] RBP: 00007f9c6911d090 R08: 0000000000000000 R09: 0000000000000000 [ 337.590153][ T2539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.597963][ T2539] R13: 0000000000000000 R14: 00007f9c6a65bf80 R15: 00007fffc7c22cf8 [ 337.605809][ T2539] [ 337.623936][ T30] audit: type=1400 audit(1728921847.669:886): avc: denied { open } for pid=2546 comm="syz.1.460" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 337.705596][ T30] audit: type=1326 audit(1728921848.049:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.748826][ T30] audit: type=1326 audit(1728921848.069:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.772863][ T30] audit: type=1326 audit(1728921848.099:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.801560][ T30] audit: type=1326 audit(1728921848.099:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.835367][ T30] audit: type=1326 audit(1728921848.099:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.893575][ T30] audit: type=1326 audit(1728921848.109:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.924561][ T30] audit: type=1326 audit(1728921848.109:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 337.957915][ T30] audit: type=1326 audit(1728921848.109:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 338.002556][ T2560] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 338.641674][ T807] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 338.746556][ T2566] loop0: detected capacity change from 0 to 40427 [ 338.794714][ T2566] F2FS-fs (loop0): Found nat_bits in checkpoint [ 338.891388][ T2566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 339.011761][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.022811][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.289489][ T807] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 339.300912][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.320710][ T807] usb 3-1: config 0 descriptor?? [ 341.090882][ T2586] loop4: detected capacity change from 0 to 256 [ 341.254301][ T2588] loop3: detected capacity change from 0 to 128 [ 341.275687][ T2588] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,inode_readahead_blks=0x0000000000000004,errors=continue,,errors=continue. Quota mode: none. [ 341.311810][ T2588] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 341.327645][ T2586] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 341.786572][ T2597] loop0: detected capacity change from 0 to 128 [ 341.856621][ T2597] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.867322][ T2597] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038 (0x7fffffff) [ 343.141848][ T633] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 343.161802][ T807] hid-led: probe of 0003:27B8:01ED.0007 failed with error -71 [ 343.180835][ T807] usb 3-1: USB disconnect, device number 14 [ 343.551794][ T807] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 343.561784][ T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.583049][ T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.602944][ T633] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.621734][ T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.640066][ T633] usb 2-1: config 0 descriptor?? [ 343.697820][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 343.697853][ T30] audit: type=1400 audit(1728921854.079:960): avc: denied { create } for pid=2603 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.723341][ T30] audit: type=1400 audit(1728921854.079:961): avc: denied { bind } for pid=2603 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.743391][ T30] audit: type=1400 audit(1728921854.079:962): avc: denied { listen } for pid=2603 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.911747][ T327] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 343.941800][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.952983][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.962727][ T807] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.968624][ T2617] 9pnet: Insufficient options for proto=fd [ 343.971666][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.973424][ T807] usb 3-1: config 0 descriptor?? [ 344.381807][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.401911][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.429863][ T327] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 344.584381][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.615833][ T327] usb 4-1: config 0 descriptor?? [ 346.284395][ T2630] loop4: detected capacity change from 0 to 256 [ 346.394243][ T2630] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 346.650795][ T2635] loop0: detected capacity change from 0 to 1024 [ 347.282108][ T30] audit: type=1400 audit(1728921857.669:963): avc: denied { mounton } for pid=2629 comm="syz.4.480" path="/7/file2/file2" dev="loop4" ino=1048714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 348.065886][ T30] audit: type=1400 audit(1728921858.449:964): avc: denied { mounton } for pid=2629 comm="syz.4.480" path="/7/file2/file0" dev="loop4" ino=1048715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.104319][ T2635] EXT4-fs (loop0): Test dummy encryption mode enabled [ 348.111384][ T2635] EXT4-fs (loop0): Ignoring removed orlov option [ 348.134227][ T2635] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 348.261821][ T807] usbhid 3-1:0.0: can't add hid device: -71 [ 348.267798][ T807] usbhid: probe of 3-1:0.0 failed with error -71 [ 348.281581][ T807] usb 3-1: USB disconnect, device number 15 [ 349.014114][ T2643] FAULT_INJECTION: forcing a failure. [ 349.014114][ T2643] name failslab, interval 1, probability 0, space 0, times 0 [ 349.027344][ T2643] CPU: 1 PID: 2643 Comm: syz.0.481 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 349.037305][ T2643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.047198][ T2643] Call Trace: [ 349.050333][ T2643] [ 349.053100][ T2643] dump_stack_lvl+0x151/0x1c0 [ 349.057615][ T2643] ? io_uring_drop_tctx_refs+0x190/0x190 [ 349.063083][ T2643] ? finish_task_switch+0x167/0x7b0 [ 349.068158][ T2643] dump_stack+0x15/0x20 [ 349.072205][ T2643] should_fail+0x3c6/0x510 [ 349.076641][ T2643] __should_failslab+0xa4/0xe0 [ 349.081242][ T2643] should_failslab+0x9/0x20 [ 349.085657][ T2643] slab_pre_alloc_hook+0x37/0xd0 [ 349.090438][ T2643] __kmalloc+0x6d/0x270 [ 349.094428][ T2643] ? find_tree_dqentry+0x57/0xb50 [ 349.099289][ T2643] ? finish_task_switch+0x167/0x7b0 [ 349.104324][ T2643] find_tree_dqentry+0x57/0xb50 [ 349.109007][ T2643] ? irqentry_exit_cond_resched+0x2a/0x30 [ 349.114559][ T2643] ? irqentry_exit+0x30/0x40 [ 349.118992][ T2643] qtree_read_dquot+0x140/0x670 [ 349.123699][ T2643] v2_read_dquot+0xbc/0x100 [ 349.128014][ T2643] dquot_acquire+0x183/0x680 [ 349.132448][ T2643] ext4_acquire_dquot+0x2e4/0x4a0 [ 349.137321][ T2643] dqget+0x745/0xeb0 [ 349.141051][ T2643] __dquot_initialize+0x2d9/0xde0 [ 349.146191][ T2643] ? dquot_initialize+0x20/0x20 [ 349.151137][ T2643] ? sysvec_reschedule_ipi+0x7d/0x150 [ 349.156605][ T2643] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 349.162856][ T2643] ? ext4_mkdir+0xd3/0xce0 [ 349.167122][ T2643] ? ext4_mkdir+0x18f/0xce0 [ 349.171444][ T2643] dquot_initialize+0x1a/0x20 [ 349.175954][ T2643] ext4_mkdir+0x197/0xce0 [ 349.180131][ T2643] ? ext4_symlink+0xed0/0xed0 [ 349.184670][ T2643] ? selinux_inode_mkdir+0x22/0x30 [ 349.189754][ T2643] ? security_inode_mkdir+0xbc/0x100 [ 349.195112][ T2643] vfs_mkdir+0x3f6/0x610 [ 349.199204][ T2643] open_or_create_special_dir+0xed/0x1d0 [ 349.204653][ T2643] incfs_mount_fs+0x49b/0xa30 [ 349.209165][ T2643] ? incfs_unlink+0x90/0x90 [ 349.213507][ T2643] ? vfs_parse_fs_string+0x18c/0x220 [ 349.218635][ T2643] ? cap_capable+0x1d2/0x270 [ 349.223056][ T2643] legacy_get_tree+0xf1/0x190 [ 349.227557][ T2643] ? incfs_unlink+0x90/0x90 [ 349.231910][ T2643] vfs_get_tree+0x88/0x290 [ 349.236250][ T2643] do_new_mount+0x2ba/0xb30 [ 349.240672][ T2643] ? do_move_mount_old+0x160/0x160 [ 349.245613][ T2643] ? security_capable+0x87/0xb0 [ 349.250396][ T2643] ? ns_capable+0x89/0xe0 [ 349.254775][ T2643] path_mount+0x671/0x1070 [ 349.259124][ T2643] __se_sys_mount+0x2c4/0x3b0 [ 349.263617][ T2643] ? __x64_sys_mount+0xd0/0xd0 [ 349.268227][ T2643] ? __kasan_check_write+0x14/0x20 [ 349.273179][ T2643] __x64_sys_mount+0xbf/0xd0 [ 349.277736][ T2643] x64_sys_call+0x49d/0x9a0 [ 349.282067][ T2643] do_syscall_64+0x3b/0xb0 [ 349.286616][ T2643] ? clear_bhb_loop+0x35/0x90 [ 349.291222][ T2643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.297089][ T2643] RIP: 0033:0x7f6d83847ff9 [ 349.301341][ T2643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.320862][ T2643] RSP: 002b:00007f6d8247f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.329118][ T2643] RAX: ffffffffffffffda RBX: 00007f6d83a00130 RCX: 00007f6d83847ff9 [ 349.337034][ T2643] RDX: 0000000020000180 RSI: 0000000020000040 RDI: 0000000020000080 [ 349.344854][ T2643] RBP: 00007f6d8247f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.352751][ T2643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.360563][ T2643] R13: 0000000000000000 R14: 00007f6d83a00130 R15: 00007ffdd9187a88 [ 349.368386][ T2643] [ 349.372099][ T2643] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 349.381700][ T2643] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.481: Failed to acquire dquot type 0 [ 349.402183][ T327] usbhid 4-1:0.0: can't add hid device: -71 [ 349.435369][ T2643] incfs: Can't find or create .index dir in ./file0 [ 349.443016][ T2643] incfs: mount failed -12 [ 349.472122][ T633] usbhid 2-1:0.0: can't add hid device: -32 [ 349.512149][ T327] usbhid: probe of 4-1:0.0 failed with error -71 [ 349.522532][ T633] usbhid: probe of 2-1:0.0 failed with error -32 [ 349.591062][ T327] usb 4-1: USB disconnect, device number 20 [ 349.627853][ T2638] loop3: detected capacity change from 0 to 256 [ 349.646782][ T2647] loop2: detected capacity change from 0 to 256 [ 349.671791][ T30] audit: type=1400 audit(1728921860.049:965): avc: denied { setopt } for pid=2646 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.734296][ T2638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 349.750683][ T2638] x_tables: duplicate underflow at hook 4 [ 349.802361][ T2647] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 349.930191][ T2650] loop0: detected capacity change from 0 to 2048 [ 350.034739][ T2650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 350.045861][ T2650] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 350.086851][ T60] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 350.087533][ T2650] fs-verity: sha512 using implementation "sha512-avx2" [ 350.094403][ T30] audit: type=1400 audit(1728921860.469:966): avc: denied { ioctl } for pid=2649 comm="syz.0.485" path="/38/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.129610][ T30] audit: type=1326 audit(1728921860.509:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2655 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48ff79ff9 code=0x7ffc0000 [ 350.148527][ T2650] overlayfs: failed to resolve './file1': -2 [ 350.182769][ T30] audit: type=1400 audit(1728921860.509:968): avc: denied { read } for pid=2649 comm="syz.0.485" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 350.262848][ T2650] syz.0.485 (2650) used greatest stack depth: 19920 bytes left [ 350.349133][ T2664] loop2: detected capacity change from 0 to 512 [ 350.541163][ T2664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 350.562181][ T2664] EXT4-fs (loop2): 1 truncate cleaned up [ 350.568717][ T327] usb 2-1: USB disconnect, device number 22 [ 350.586187][ T2664] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,sb=0x0000000000000003,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 350.702632][ T60] usb 5-1: config 1 has an invalid interface number: 254 but max is 0 [ 350.719909][ T60] usb 5-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 351.351706][ T60] usb 5-1: config 1 has no interface number 0 [ 351.368196][ T60] usb 5-1: config 1 interface 254 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 351.676178][ T60] usb 5-1: config 1 interface 254 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 351.707799][ T60] usb 5-1: config 1 interface 254 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1023 [ 352.078261][ T60] usb 5-1: config 1 interface 254 has no altsetting 0 [ 352.338485][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.346059][ T2675] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.354370][ T2675] device bridge_slave_0 entered promiscuous mode [ 352.362528][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.369428][ T2675] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.377634][ T2675] device bridge_slave_1 entered promiscuous mode [ 352.541814][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.548763][ T2675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.556187][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.563117][ T2675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.571919][ T60] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0061, bcdDevice=7e.d7 [ 352.580854][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.673730][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.682239][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.690533][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.701496][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.718442][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.728464][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.735393][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.744999][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.753839][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.760730][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.785372][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.822461][ T60] usb 5-1: Product: ã [ 352.983028][ T60] usb 5-1: SerialNumber: ê•Ÿè›ï¤„ì¹¹ìµè™–ç„夭齻⵨䯌媚ᢶ啸텴ஜå­æ™Ÿì»´ê½¡ä›ä—ݻ촴 [ 352.996195][ T2689] loop0: detected capacity change from 0 to 128 [ 354.067928][ T60] usb 5-1: can't set config #1, error -71 [ 354.075375][ T60] usb 5-1: USB disconnect, device number 19 [ 354.440360][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.494350][ T452] tipc: Left network mode [ 354.537214][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.546805][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.616276][ T2675] device veth0_vlan entered promiscuous mode [ 354.625283][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.634279][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.652211][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.660386][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.711585][ T2700] loop4: detected capacity change from 0 to 256 [ 354.748304][ T2703] loop2: detected capacity change from 0 to 128 [ 354.763795][ T2675] device veth1_macvtap entered promiscuous mode [ 354.784664][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.793874][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.796477][ T2700] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 354.802377][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.822299][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.830990][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.997954][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.031524][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.041900][ T60] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 355.871763][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.887054][ T452] device bridge_slave_1 left promiscuous mode [ 355.893494][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.901978][ T452] device bridge_slave_0 left promiscuous mode [ 355.903100][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.908123][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.927445][ T452] device veth1_macvtap left promiscuous mode [ 355.933640][ T452] device veth0_vlan left promiscuous mode [ 355.968503][ T60] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 356.000247][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.049789][ T60] usb 4-1: config 0 descriptor?? [ 356.131736][ T444] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 356.492199][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.504394][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.514792][ T444] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 356.523954][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.539866][ T444] usb 1-1: config 0 descriptor?? [ 357.421771][ T444] usbhid 1-1:0.0: can't add hid device: -71 [ 357.427674][ T444] usbhid: probe of 1-1:0.0 failed with error -71 [ 357.441443][ T444] usb 1-1: USB disconnect, device number 17 [ 357.631377][ T30] audit: type=1326 audit(1728921868.009:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.655917][ T30] audit: type=1326 audit(1728921868.029:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.681849][ T30] audit: type=1326 audit(1728921868.029:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.705368][ T30] audit: type=1326 audit(1728921868.029:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.729580][ T30] audit: type=1326 audit(1728921868.029:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.753564][ T30] audit: type=1326 audit(1728921868.029:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.778400][ T30] audit: type=1326 audit(1728921868.029:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.802001][ T30] audit: type=1326 audit(1728921868.029:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.825620][ T30] audit: type=1326 audit(1728921868.039:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 357.849648][ T30] audit: type=1326 audit(1728921868.039:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac08df7ff9 code=0x7ffc0000 [ 364.571877][ T60] hid-led: probe of 0003:27B8:01ED.0008 failed with error -110 [ 364.587548][ T2757] loop0: detected capacity change from 0 to 256 [ 364.672976][ T2757] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 364.966309][ T327] usb 4-1: USB disconnect, device number 21 [ 364.972249][ T60] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 365.032703][ T2768] loop1: detected capacity change from 0 to 2048 [ 365.164625][ T2768] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,barrier=0x0000000000000003,,errors=continue. Quota mode: none. [ 365.315035][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.322568][ T2763] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.330526][ T2763] device bridge_slave_0 entered promiscuous mode [ 365.410588][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.417586][ T2763] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.426317][ T2763] device bridge_slave_1 entered promiscuous mode [ 365.610891][ T2782] loop0: detected capacity change from 0 to 128 [ 365.620878][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.837538][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.236771][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.244645][ T2765] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.244640][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 366.244705][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.254273][ T2765] device bridge_slave_0 entered promiscuous mode [ 366.286602][ T60] usb 5-1: config 0 descriptor?? [ 366.304028][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.311023][ T2765] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.319630][ T2765] device bridge_slave_1 entered promiscuous mode [ 367.364918][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.373767][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.403757][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.413011][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.421292][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.428242][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.555511][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.566100][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.574884][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.581801][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.610658][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 367.640299][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.649624][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.658955][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.667484][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.706191][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.714655][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.754565][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.763807][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.818965][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.825903][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.836756][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.845938][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.854672][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.861578][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.988279][ T2794] loop0: detected capacity change from 0 to 128 [ 368.314608][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.653908][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.676840][ T2763] device veth0_vlan entered promiscuous mode [ 368.690819][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.700466][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.709044][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.719392][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.729658][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.742752][ T8] device bridge_slave_1 left promiscuous mode [ 368.748810][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.757892][ T8] device bridge_slave_0 left promiscuous mode [ 368.844685][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.879481][ T8] device veth1_macvtap left promiscuous mode [ 368.885563][ T8] device veth0_vlan left promiscuous mode [ 369.181688][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.189793][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.197428][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.215443][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.245194][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.255126][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.319786][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 369.319865][ T30] audit: type=1400 audit(1728921879.699:993): avc: denied { connect } for pid=2796 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.351242][ T2763] device veth1_macvtap entered promiscuous mode [ 369.370496][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.381367][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.390942][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.413072][ T2765] device veth0_vlan entered promiscuous mode [ 369.423316][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.432707][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.442127][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.450732][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.479991][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.488416][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.497487][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.506491][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.535488][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.553446][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.565814][ T2765] device veth1_macvtap entered promiscuous mode [ 369.582993][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.591425][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.601584][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.623258][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.632757][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.820441][ T30] audit: type=1400 audit(1728921881.199:994): avc: denied { shutdown } for pid=2799 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.204113][ T2815] loop0: detected capacity change from 0 to 256 [ 371.298565][ T2815] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 371.942993][ T8] device bridge_slave_1 left promiscuous mode [ 371.949089][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.969000][ T8] device bridge_slave_0 left promiscuous mode [ 371.981910][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.000407][ T8] device veth1_macvtap left promiscuous mode [ 372.015853][ T8] device veth0_vlan left promiscuous mode [ 372.100768][ T2817] loop1: detected capacity change from 0 to 512 [ 373.101755][ T60] usbhid 5-1:0.0: can't add hid device: -32 [ 373.107651][ T60] usbhid: probe of 5-1:0.0 failed with error -32 [ 374.850013][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.856970][ T2837] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.865197][ T2837] device bridge_slave_0 entered promiscuous mode [ 374.873327][ T2837] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.880284][ T2837] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.889055][ T2837] device bridge_slave_1 entered promiscuous mode [ 375.054354][ T2837] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.061351][ T2837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.068723][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.075639][ T2837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.091799][ T346] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 375.136767][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.145569][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.155265][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.172084][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.180850][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.187795][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.196853][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.206232][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.213164][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.237636][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.253797][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.323273][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.331664][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 375.344014][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.354597][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.363769][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.373919][ T2837] device veth0_vlan entered promiscuous mode [ 375.377696][ T60] usb 5-1: USB disconnect, device number 20 [ 375.401676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.419961][ T2837] device veth1_macvtap entered promiscuous mode [ 375.451792][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.454900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.480414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.492958][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.531681][ T346] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 375.595013][ T346] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 375.631723][ T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.674648][ T346] usb 2-1: config 0 descriptor?? [ 375.883063][ T452] device bridge_slave_1 left promiscuous mode [ 375.889131][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.908571][ T452] device bridge_slave_0 left promiscuous mode [ 375.914782][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.937592][ T452] device veth1_macvtap left promiscuous mode [ 375.949292][ T452] device veth0_vlan left promiscuous mode [ 375.971693][ T60] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 376.168267][ T346] ntrig 0003:1B96:000A.0009: unknown main item tag 0xd [ 376.181785][ T346] ntrig 0003:1B96:000A.0009: item fetching failed at offset 1/5 [ 376.205047][ T346] ntrig 0003:1B96:000A.0009: parse failed [ 376.221773][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 376.231538][ T346] ntrig: probe of 0003:1B96:000A.0009 failed with error -22 [ 376.341795][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.375518][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.406300][ T60] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 376.441704][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.472981][ T60] usb 5-1: config 0 descriptor?? [ 376.940145][ T2858] loop2: detected capacity change from 0 to 40427 [ 376.954647][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 376.968267][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 376.983372][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 376.998294][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 377.014198][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 377.029642][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 377.037889][ T2858] F2FS-fs (loop2): Unrecognized mount option "fsync¬mode=strict" or missing value [ 377.060529][ T60] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 377.082157][ T60] playstation 0003:054C:0CE6.000A: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 377.541788][ T60] playstation 0003:054C:0CE6.000A: Invalid reportID received, expected 9 got 0 [ 377.557145][ T60] playstation 0003:054C:0CE6.000A: Failed to retrieve DualSense pairing info: -22 [ 377.586701][ T60] playstation 0003:054C:0CE6.000A: Failed to get MAC address from DualSense [ 377.614230][ T60] playstation 0003:054C:0CE6.000A: Failed to create dualsense. [ 377.639449][ T60] playstation: probe of 0003:054C:0CE6.000A failed with error -22 [ 377.798967][ T60] usb 5-1: USB disconnect, device number 21 [ 377.833028][ T1538] usb 2-1: USB disconnect, device number 23 [ 377.943562][ T2866] loop0: detected capacity change from 0 to 256 [ 378.018199][ T2866] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 378.143802][ T2874] loop0: detected capacity change from 0 to 128 [ 378.197312][ T2874] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,inode_readahead_blks=0x0000000000000004,errors=continue,,errors=continue. Quota mode: none. [ 378.215270][ T2874] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff) [ 381.411752][ T1126] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 381.661681][ T633] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 381.781842][ T1126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.793306][ T1126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.803519][ T1126] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 381.813037][ T1126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.829480][ T1126] usb 1-1: config 0 descriptor?? [ 382.151798][ T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.075774][ T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.106504][ T633] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 385.461763][ T1126] usbhid 1-1:0.0: can't add hid device: -71 [ 385.467635][ T1126] usbhid: probe of 1-1:0.0 failed with error -71 [ 385.502533][ T1126] usb 1-1: USB disconnect, device number 18 [ 385.708072][ T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.762217][ T633] usb 2-1: config 0 descriptor?? [ 385.808798][ T633] usb 2-1: can't set config #0, error -71 [ 385.828460][ T2912] FAULT_INJECTION: forcing a failure. [ 385.828460][ T2912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.851821][ T633] usb 2-1: USB disconnect, device number 24 [ 385.906073][ T2912] CPU: 1 PID: 2912 Comm: syz.1.544 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 385.915791][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.925686][ T2912] Call Trace: [ 385.928801][ T2912] [ 385.931585][ T2912] dump_stack_lvl+0x151/0x1c0 [ 385.936107][ T2912] ? io_uring_drop_tctx_refs+0x190/0x190 [ 385.941572][ T2912] ? __kmalloc+0x13a/0x270 [ 385.945813][ T2912] ? kvmalloc_node+0x1f0/0x4d0 [ 385.950419][ T2912] dump_stack+0x15/0x20 [ 385.954411][ T2912] should_fail+0x3c6/0x510 [ 385.958673][ T2912] should_fail_usercopy+0x1a/0x20 [ 385.963526][ T2912] _copy_from_user+0x20/0xd0 [ 385.967954][ T2912] vmemdup_user+0x63/0xe0 [ 385.972115][ T2912] kvm_vcpu_ioctl_set_cpuid2+0x80/0x130 [ 385.977506][ T2912] kvm_arch_vcpu_ioctl+0x1016/0x1c20 [ 385.982704][ T2912] ? is_bpf_text_address+0x172/0x190 [ 385.987917][ T2912] ? kvm_arch_vcpu_put+0x620/0x620 [ 385.992863][ T2912] ? __kernel_text_address+0x9b/0x110 [ 385.998068][ T2912] ? unwind_get_return_address+0x4d/0x90 [ 386.003537][ T2912] ? arch_stack_walk+0xf3/0x140 [ 386.008234][ T2912] ? stack_trace_save+0x113/0x1c0 [ 386.013087][ T2912] ? stack_trace_snprint+0xf0/0xf0 [ 386.018036][ T2912] ? __stack_depot_save+0x34/0x470 [ 386.022997][ T2912] ? kmem_cache_free+0x116/0x2e0 [ 386.027755][ T2912] ? kmem_cache_free+0x116/0x2e0 [ 386.032530][ T2912] ? kasan_set_track+0x5d/0x70 [ 386.037217][ T2912] ? kasan_set_track+0x4b/0x70 [ 386.041820][ T2912] ? kasan_set_free_info+0x23/0x40 [ 386.046766][ T2912] ? ____kasan_slab_free+0x126/0x160 [ 386.051888][ T2912] ? __kasan_slab_free+0x11/0x20 [ 386.056662][ T2912] ? slab_free_freelist_hook+0xbd/0x190 [ 386.062042][ T2912] ? kmem_cache_free+0x116/0x2e0 [ 386.066818][ T2912] ? putname+0xfa/0x150 [ 386.070808][ T2912] ? do_sys_openat2+0x1fc/0x820 [ 386.075493][ T2912] ? __x64_sys_openat+0x243/0x290 [ 386.080356][ T2912] ? x64_sys_call+0x6bf/0x9a0 [ 386.084879][ T2912] ? _kstrtoull+0x3a0/0x4a0 [ 386.089212][ T2912] ? do_vfs_ioctl+0xbc1/0x2a80 [ 386.093826][ T2912] ? kstrtol_from_user+0x310/0x310 [ 386.098757][ T2912] ? __x64_compat_sys_ioctl+0x90/0x90 [ 386.103979][ T2912] ? __kasan_check_write+0x14/0x20 [ 386.108912][ T2912] ? proc_fail_nth_write+0x20b/0x290 [ 386.114034][ T2912] ? selinux_file_permission+0x2c4/0x570 [ 386.119509][ T2912] ? ioctl_has_perm+0x1f8/0x560 [ 386.124197][ T2912] ? memcpy+0x56/0x70 [ 386.128011][ T2912] ? __kasan_check_write+0x14/0x20 [ 386.132961][ T2912] ? mutex_lock_killable+0xb6/0x1e0 [ 386.137998][ T2912] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 386.144335][ T2912] kvm_vcpu_ioctl+0x6d6/0xcf0 [ 386.148850][ T2912] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 386.154314][ T2912] ? selinux_file_ioctl+0x3cc/0x540 [ 386.159344][ T2912] ? __mutex_lock_slowpath+0x10/0x10 [ 386.164466][ T2912] ? selinux_file_alloc_security+0x120/0x120 [ 386.170287][ T2912] ? __fget_files+0x31e/0x380 [ 386.174907][ T2912] ? security_file_ioctl+0x84/0xb0 [ 386.179942][ T2912] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 386.185488][ T2912] __se_sys_ioctl+0x114/0x190 [ 386.190009][ T2912] __x64_sys_ioctl+0x7b/0x90 [ 386.194448][ T2912] x64_sys_call+0x98/0x9a0 [ 386.198681][ T2912] do_syscall_64+0x3b/0xb0 [ 386.202937][ T2912] ? clear_bhb_loop+0x35/0x90 [ 386.207450][ T2912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 386.213181][ T2912] RIP: 0033:0x7ff39f2e9ff9 [ 386.217437][ T2912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.236873][ T2912] RSP: 002b:00007ff39df63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.245155][ T2912] RAX: ffffffffffffffda RBX: 00007ff39f4a1f80 RCX: 00007ff39f2e9ff9 [ 386.252937][ T2912] RDX: 00000000200003c0 RSI: 000000004008ae90 RDI: 0000000000000005 [ 386.260829][ T2912] RBP: 00007ff39df63090 R08: 0000000000000000 R09: 0000000000000000 [ 386.268639][ T2912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.276456][ T2912] R13: 0000000000000000 R14: 00007ff39f4a1f80 R15: 00007ffdd69bd638 [ 386.284288][ T2912] [ 386.402881][ T2907] loop0: detected capacity change from 0 to 40427 [ 386.442272][ T2907] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 386.470516][ T2907] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 386.512648][ T2907] F2FS-fs (loop0): invalid crc value [ 386.534877][ T2907] F2FS-fs (loop0): Found nat_bits in checkpoint [ 386.698959][ T2907] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 386.708743][ T2907] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 387.056701][ T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 387.083049][ T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 387.109353][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.116336][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.124985][ T2919] device bridge_slave_0 entered promiscuous mode [ 387.133075][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.139968][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.148498][ T2919] device bridge_slave_1 entered promiscuous mode [ 387.530379][ T2936] loop1: detected capacity change from 0 to 256 [ 387.553932][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.560865][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.568152][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.575092][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.614125][ T452] device bridge_slave_1 left promiscuous mode [ 387.620494][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.637894][ T452] device bridge_slave_0 left promiscuous mode [ 387.664439][ T2936] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 387.673842][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.719460][ T452] device veth1_macvtap left promiscuous mode [ 387.745024][ T452] device veth0_vlan left promiscuous mode [ 387.754129][ T30] audit: type=1326 audit(1728921898.139:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.1.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff39f2e9ff9 code=0x0 [ 388.126615][ T2933] loop4: detected capacity change from 0 to 2048 [ 388.136244][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.144131][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.549257][ T2933] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,. Quota mode: writeback. [ 388.946417][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.958100][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.974642][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.984962][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.993904][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.000790][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.008613][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 389.018136][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.026893][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.033806][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.068221][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.077256][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.105731][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.124642][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.194880][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.218268][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.238741][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.247756][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.257888][ T2919] device veth0_vlan entered promiscuous mode [ 389.265160][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.273641][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.288932][ T2837] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 389.295903][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.318985][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.330793][ T2919] device veth1_macvtap entered promiscuous mode [ 389.337151][ T2837] EXT4-fs (loop4): Remounting filesystem read-only [ 389.348919][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.357790][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.366951][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.385019][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.393813][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.446000][ T2837] EXT4-fs error (device loop4): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 389.459261][ T60] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 389.498977][ T2837] EXT4-fs error (device loop4): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 390.313109][ T424] device bridge_slave_1 left promiscuous mode [ 390.319316][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.329039][ T424] device bridge_slave_0 left promiscuous mode [ 390.335461][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.345933][ T424] device veth1_macvtap left promiscuous mode [ 390.351986][ T424] device veth0_vlan left promiscuous mode [ 391.441759][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.453777][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.457941][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.460664][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.478994][ T2965] device bridge_slave_0 entered promiscuous mode [ 391.483961][ T60] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 391.487416][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.500919][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.506174][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.509210][ T2965] device bridge_slave_1 entered promiscuous mode [ 391.659840][ T60] usb 2-1: config 0 descriptor?? [ 391.783056][ T30] audit: type=1326 audit(1728921902.169:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2976 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c0caff9 code=0x7ffc0000 [ 391.807248][ T30] audit: type=1326 audit(1728921902.169:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2976 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f654c0caff9 code=0x7ffc0000 [ 391.839376][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.846301][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.853511][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.860498][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.932403][ T30] audit: type=1400 audit(1728921902.309:998): avc: denied { create } for pid=2976 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 392.001272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.014221][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.022285][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.043333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.052409][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.059303][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.067691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.077704][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.084629][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.112218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.125036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.170487][ T2965] device veth0_vlan entered promiscuous mode [ 392.199153][ T2965] device veth1_macvtap entered promiscuous mode [ 392.215669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.225087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.234603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.243394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.251235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.271449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.280989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.381507][ T2981] loop4: detected capacity change from 0 to 256 [ 393.875024][ T2987] loop2: detected capacity change from 0 to 512 [ 393.927985][ T2981] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 393.944671][ T2987] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 394.107404][ T2987] EXT4-fs (loop2): 1 orphan inode deleted [ 394.120335][ T2987] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=0x000000000000ee01,errors=remount-ro,resgid=0x000000000000ee01,resgid=0x000000000000ee002. Quota mode: writeback. [ 394.146626][ T8] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6) [ 394.155741][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6210: comm kworker/u4:0: Failed to release dquot type 1 [ 394.171454][ T8] EXT4-fs (loop2): Remounting filesystem read-only [ 394.322117][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 394.322255][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 394.324618][ T60] usb 2-1: USB disconnect, device number 25 [ 394.546372][ T2999] loop1: detected capacity change from 0 to 128 [ 396.124203][ T2999] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,inode_readahead_blks=0x0000000000000004,errors=continue,,errors=continue. Quota mode: none. [ 396.163421][ T2999] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 396.271733][ T327] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 396.521754][ T327] usb 5-1: Using ep0 maxpacket: 32 [ 397.062207][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.092513][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.134538][ T327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 397.179857][ T327] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 397.204533][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.232816][ T327] usb 5-1: config 0 descriptor?? [ 397.501670][ T633] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 397.772765][ T327] usbhid 5-1:0.0: can't add hid device: -71 [ 397.778905][ T327] usbhid: probe of 5-1:0.0 failed with error -71 [ 397.800373][ T327] usb 5-1: USB disconnect, device number 22 [ 397.871792][ T633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.896604][ T633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.926701][ T633] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 397.949982][ T633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.978754][ T633] usb 3-1: config 0 descriptor?? [ 398.371335][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.378322][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.386808][ T3027] device bridge_slave_0 entered promiscuous mode [ 398.394885][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.402665][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.410804][ T3027] device bridge_slave_1 entered promiscuous mode [ 398.591155][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.598101][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.605343][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.612268][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.677785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.688546][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.697021][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.720207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.730090][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.737121][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.746043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.755020][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.761959][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.793820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.810764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.844519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.864529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.875177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.883866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.895080][ T424] device veth1_macvtap left promiscuous mode [ 398.901066][ T424] device veth0_vlan left promiscuous mode [ 399.065221][ T3027] device veth0_vlan entered promiscuous mode [ 399.088666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.102620][ T3027] device veth1_macvtap entered promiscuous mode [ 399.125120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.142267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.551702][ T807] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 401.551916][ T1538] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 401.911796][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.923985][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.934663][ T807] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 401.943994][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.961287][ T807] usb 1-1: config 0 descriptor?? [ 401.962000][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.019228][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.075231][ T1538] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 402.124838][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.169611][ T1538] usb 4-1: config 0 descriptor?? [ 403.442307][ T633] usbhid 3-1:0.0: can't add hid device: -32 [ 403.448249][ T633] usbhid: probe of 3-1:0.0 failed with error -32 [ 403.633000][ T1538] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 403.689397][ T1538] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized [ 403.871078][ T633] usb 4-1: USB disconnect, device number 22 [ 404.380824][ T633] usb 3-1: USB disconnect, device number 16 [ 404.551757][ T807] usbhid 1-1:0.0: can't add hid device: -71 [ 404.557816][ T807] usbhid: probe of 1-1:0.0 failed with error -71 [ 404.584704][ T807] usb 1-1: USB disconnect, device number 19 [ 406.500885][ T3067] loop0: detected capacity change from 0 to 128 [ 406.566987][ T3067] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,inode_readahead_blks=0x0000000000000004,errors=continue,,errors=continue. Quota mode: none. [ 406.584196][ T3067] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038 (0x7fffffff) [ 407.666736][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.673794][ T3077] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.683456][ T3077] device bridge_slave_0 entered promiscuous mode [ 407.691245][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.698641][ T3077] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.707058][ T3077] device bridge_slave_1 entered promiscuous mode [ 407.860693][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.867645][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.874881][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.881803][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.936210][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.944190][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.953960][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.962362][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.979601][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.988383][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.995311][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.004419][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.013539][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.020424][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.045348][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.060176][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.089861][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.110696][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.120612][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.129182][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.140037][ T3077] device veth0_vlan entered promiscuous mode [ 408.161087][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.174083][ T3077] device veth1_macvtap entered promiscuous mode [ 408.191137][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.210101][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.493578][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.500486][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.509103][ T3087] device bridge_slave_0 entered promiscuous mode [ 409.518278][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.525822][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.534338][ T3087] device bridge_slave_1 entered promiscuous mode [ 409.750247][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.759718][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.777529][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.786501][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.795752][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.802678][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.810968][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.820740][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.829509][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.836512][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.852702][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.873119][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.882832][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.891173][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.900733][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.929772][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.939801][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.959482][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.969591][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.978264][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.989784][ T3087] device veth0_vlan entered promiscuous mode [ 410.010425][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.025013][ T3087] device veth1_macvtap entered promiscuous mode [ 410.041389][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.051940][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.071082][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.080180][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.104450][ T3092] loop2: detected capacity change from 0 to 256 [ 411.268836][ T3092] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 411.292761][ T3098] loop0: detected capacity change from 0 to 2048 [ 411.362973][ T3098] loop0: p3 < > p4 < > [ 411.367005][ T3098] loop0: partition table partially beyond EOD, truncated [ 411.375340][ T3098] loop0: p3 start 4284289 is beyond EOD, truncated [ 411.731976][ T444] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 412.091859][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.103146][ T444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.113260][ T444] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 412.122461][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.139611][ T444] usb 1-1: config 0 descriptor?? [ 412.629916][ T444] wacom 0003:056A:00B5.000C: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 412.647484][ T444] wacom 0003:056A:00B5.000C: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.0-1/input0 [ 412.669035][ T444] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B5.000C/input/input4 [ 412.706371][ T30] audit: type=1400 audit(1728921923.089:999): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=716 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.728615][ T30] audit: type=1400 audit(1728921923.089:1000): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=716 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.782010][ T30] audit: type=1400 audit(1728921923.159:1001): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=716 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.837317][ T444] usb 1-1: USB disconnect, device number 20 [ 413.514780][ T30] audit: type=1400 audit(1728921923.899:1002): avc: denied { read } for pid=3111 comm="syz.0.585" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 413.546614][ T30] audit: type=1400 audit(1728921923.919:1003): avc: denied { open } for pid=3111 comm="syz.0.585" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 413.811733][ T444] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 413.839554][ T30] audit: type=1326 audit(1728921924.219:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3115 comm="syz.4.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8f32baff9 code=0x0 [ 413.941726][ T1538] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 413.950462][ T30] audit: type=1400 audit(1728921924.329:1005): avc: denied { mounton } for pid=3115 comm="syz.4.587" path="/1/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 414.122013][ T444] usb 1-1: device descriptor read/64, error -71 [ 414.182835][ T452] device bridge_slave_1 left promiscuous mode [ 414.188857][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.196948][ T452] device bridge_slave_0 left promiscuous mode [ 414.203277][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.212515][ T452] device veth1_macvtap left promiscuous mode [ 414.218396][ T452] device veth0_vlan left promiscuous mode [ 414.304664][ T1538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.315863][ T1538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.326193][ T1538] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 414.335589][ T1538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.347556][ T1538] usb 3-1: config 0 descriptor?? [ 414.521802][ T444] usb 1-1: device descriptor read/64, error -71 [ 414.791701][ T444] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 415.061720][ T444] usb 1-1: device descriptor read/64, error -71 [ 415.413046][ T452] device bridge_slave_1 left promiscuous mode [ 415.419111][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.427954][ T452] device bridge_slave_0 left promiscuous mode [ 415.434180][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.444937][ T452] device veth1_macvtap left promiscuous mode [ 415.450846][ T452] device veth0_vlan left promiscuous mode [ 415.456697][ T444] usb 1-1: device descriptor read/64, error -71 [ 415.592844][ T444] usb usb1-port1: attempt power cycle [ 416.002769][ T444] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 416.066605][ T633] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 416.191874][ T444] usb 1-1: device descriptor read/8, error -71 [ 416.461787][ T444] usb 1-1: device descriptor read/8, error -71 [ 416.734524][ T444] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 416.791821][ T633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.802948][ T633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.812656][ T633] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 416.821721][ T633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.831377][ T633] usb 5-1: config 0 descriptor?? [ 416.921873][ T444] usb 1-1: device descriptor read/8, error -71 [ 417.221778][ T444] usb 1-1: device descriptor read/8, error -71 [ 417.341821][ T444] usb usb1-port1: unable to enumerate USB device [ 417.765313][ T30] audit: type=1400 audit(1728921928.069:1006): avc: denied { mounton } for pid=3133 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 417.810668][ T1538] usbhid 3-1:0.0: can't add hid device: -71 [ 417.816605][ T1538] usbhid: probe of 3-1:0.0 failed with error -71 [ 417.837961][ T3133] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.845025][ T3133] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.849239][ T1538] usb 3-1: USB disconnect, device number 17 [ 417.858127][ T3133] device bridge_slave_0 entered promiscuous mode [ 417.866137][ T3133] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.873277][ T3133] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.881427][ T3133] device bridge_slave_1 entered promiscuous mode [ 418.045672][ T3133] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.052636][ T3133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.059817][ T3133] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.066750][ T3133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.126883][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.134944][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.145637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 418.153544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.172073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.180507][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.187435][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.196606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.205948][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.212878][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.237294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.253365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.282451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.303094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.314895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.322799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.333860][ T3133] device veth0_vlan entered promiscuous mode [ 418.356332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.368619][ T3133] device veth1_macvtap entered promiscuous mode [ 418.386697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.403360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.513745][ T3142] loop3: detected capacity change from 0 to 512 [ 419.852128][ T3142] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.590: iget: bad extended attribute block 128 [ 419.875172][ T3142] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.590: couldn't read orphan inode 16 (err -117) [ 420.923046][ T8] device bridge_slave_1 left promiscuous mode [ 420.929111][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.937933][ T8] device bridge_slave_0 left promiscuous mode [ 420.944170][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.954361][ T8] device veth1_macvtap left promiscuous mode [ 420.960277][ T8] device veth0_vlan left promiscuous mode [ 421.076800][ T3142] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.098108][ T3142] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 421.407956][ T3142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.590: bg 0: block 352: padding at end of block bitmap is not set [ 421.906826][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.913803][ T3155] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.925970][ T3155] device bridge_slave_0 entered promiscuous mode [ 421.936491][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.943888][ T3155] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.952169][ T3155] device bridge_slave_1 entered promiscuous mode [ 422.116383][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.123442][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.130626][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.137913][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.242824][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.251496][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.269587][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.288455][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.297367][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.304302][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.313396][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.323060][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.329964][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.356232][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.371402][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.398788][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.422154][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.431203][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.441257][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.453059][ T3155] device veth0_vlan entered promiscuous mode [ 422.473847][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.486193][ T3155] device veth1_macvtap entered promiscuous mode [ 422.504309][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.522216][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.070763][ T30] audit: type=1326 audit(1728921933.449:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.095201][ T30] audit: type=1326 audit(1728921933.449:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.132372][ T30] audit: type=1326 audit(1728921933.469:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.156932][ T30] audit: type=1326 audit(1728921933.469:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.183305][ T30] audit: type=1326 audit(1728921933.469:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.208649][ T30] audit: type=1326 audit(1728921933.469:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.232787][ T30] audit: type=1326 audit(1728921933.469:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.256642][ T30] audit: type=1326 audit(1728921933.469:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.280227][ T30] audit: type=1326 audit(1728921933.499:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.305197][ T30] audit: type=1326 audit(1728921933.499:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb854ff9 code=0x7ffc0000 [ 423.371783][ T633] usbhid 5-1:0.0: can't add hid device: -32 [ 423.377809][ T633] usbhid: probe of 5-1:0.0 failed with error -32 [ 423.778863][ T3170] loop3: detected capacity change from 0 to 1024 [ 423.853737][ T3170] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 423.853737][ T3170] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 423.853737][ T3170] [ 423.885299][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.892262][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.900213][ T3171] device bridge_slave_0 entered promiscuous mode [ 423.924988][ T3170] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,nouser_xattr,noauto_da_alloc,,errors=continue. Quota mode: none. [ 423.992314][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.999310][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.011584][ T3171] device bridge_slave_1 entered promiscuous mode [ 424.269839][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.280999][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.297606][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.300250][ T1538] usb 5-1: USB disconnect, device number 23 [ 424.306339][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.323844][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.330838][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.346505][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.355111][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.363857][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.370750][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.395819][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.417415][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.435154][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.465660][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.487845][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.496933][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.506446][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.516457][ T3171] device veth0_vlan entered promiscuous mode [ 424.525038][ T452] device bridge_slave_1 left promiscuous mode [ 424.531072][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.540118][ T452] device bridge_slave_0 left promiscuous mode [ 424.551968][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.561571][ T452] device veth1_macvtap left promiscuous mode [ 424.568754][ T452] device veth0_vlan left promiscuous mode [ 424.891545][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.904087][ T3171] device veth1_macvtap entered promiscuous mode [ 424.920713][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.929939][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.950097][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.959051][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.227010][ T3184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 425.254970][ T3184] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 425.963139][ T452] device bridge_slave_1 left promiscuous mode [ 425.971432][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.988128][ T452] device bridge_slave_0 left promiscuous mode [ 426.001899][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.678387][ T1121] Bluetooth: hci0: Frame reassembly failed (-84) [ 427.925646][ T3197] loop1: detected capacity change from 0 to 512 [ 429.761703][ T444] Bluetooth: hci0: command 0x1003 tx timeout [ 429.806774][ T452] device veth1_macvtap left promiscuous mode [ 429.812998][ T452] device veth0_vlan left promiscuous mode [ 429.814408][ T3200] loop2: detected capacity change from 0 to 128 [ 429.846756][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 429.846792][ T30] audit: type=1400 audit(1728921940.229:1034): avc: denied { mounton } for pid=3199 comm="syz.2.598" path="/6/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 429.954951][ T3205] loop3: detected capacity change from 0 to 512 [ 429.971682][ T1538] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 429.979420][ T3205] EXT4-fs (loop3): Ignoring removed oldalloc option [ 430.010853][ T3205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.600: inode #11614: comm syz.3.600: iget: illegal inode # [ 430.034330][ T3207] loop2: detected capacity change from 0 to 2048 [ 430.041096][ T3205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.600: error while reading EA inode 11614 err=-117 [ 430.054186][ T3205] EXT4-fs (loop3): 1 truncate cleaned up [ 430.059695][ T3205] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,stripe=0x0000000000000e49,jqfmt=vfsv0,oldalloc,,errors=continue. Quota mode: none. [ 430.114515][ T3205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.600: inode #11614: comm syz.3.600: iget: illegal inode # [ 430.128004][ T3205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.600: error while reading EA inode 11614 err=-117 [ 430.168163][ T3207] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.601: casefold flag without casefold feature [ 430.182363][ T3207] EXT4-fs (loop2): get root inode failed [ 430.187930][ T3207] EXT4-fs (loop2): mount failed [ 430.351785][ T1538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.373017][ T1538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.391696][ T1538] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 430.410831][ T1538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.450401][ T1538] usb 5-1: config 0 descriptor?? [ 431.841734][ T1126] Bluetooth: hci0: command 0x1001 tx timeout [ 431.847830][ T3196] Bluetooth: hci0: sending frame failed (-49) [ 433.759463][ T1120] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 433.810590][ T3235] loop4: detected capacity change from 0 to 1024 [ 433.816908][ T1538] usbhid 5-1:0.0: can't add hid device: -71 [ 433.823005][ T1538] usbhid: probe of 5-1:0.0 failed with error -71 [ 433.840674][ T1538] usb 5-1: USB disconnect, device number 24 [ 433.922540][ T444] Bluetooth: hci0: command 0x1009 tx timeout [ 433.928952][ T3235] EXT4-fs (loop4): Ignoring removed orlov option [ 433.950943][ T3235] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000004,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 434.141789][ T1120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.162739][ T1120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.193030][ T1120] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 434.221653][ T1120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.244815][ T1120] usb 4-1: config 0 descriptor?? [ 435.317901][ T3247] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.325750][ T3247] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.334160][ T3247] device bridge_slave_0 entered promiscuous mode [ 435.341672][ T60] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 435.352081][ T3247] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.358988][ T3247] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.367404][ T3247] device bridge_slave_1 entered promiscuous mode [ 435.540976][ T3247] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.548343][ T3247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.555625][ T3247] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.562540][ T3247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.628373][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.638158][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.646490][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.670851][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.679692][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.686627][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.695738][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.704692][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.711581][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.711821][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.743231][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.759329][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.764104][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.783928][ T452] device bridge_slave_1 left promiscuous mode [ 435.790240][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.799609][ T452] device bridge_slave_0 left promiscuous mode [ 435.807037][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.812377][ T60] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 435.824811][ T452] device veth1_macvtap left promiscuous mode [ 435.830805][ T452] device veth0_vlan left promiscuous mode [ 435.854012][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.889983][ T60] usb 5-1: config 0 descriptor?? [ 436.054073][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.073524][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.083693][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.091325][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.101503][ T3247] device veth0_vlan entered promiscuous mode [ 436.126041][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.138172][ T3247] device veth1_macvtap entered promiscuous mode [ 436.155885][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.176568][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.186508][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.300834][ T3254] loop0: detected capacity change from 0 to 256 [ 436.592114][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.599186][ T3256] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.608039][ T3256] device bridge_slave_0 entered promiscuous mode [ 436.616252][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.623776][ T3256] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.632247][ T3256] device bridge_slave_1 entered promiscuous mode [ 436.671752][ T1126] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 436.800873][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.807816][ T3256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.815109][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.822131][ T3256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.879110][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.888245][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.898259][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.912059][ T1126] usb 1-1: Using ep0 maxpacket: 16 [ 436.922396][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.931014][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.937964][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.946428][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.956206][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.963133][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.988118][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.003356][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.023217][ T60] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 437.034560][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.044372][ T1126] usb 1-1: config 0 has no interfaces? [ 437.063708][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.074277][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.081735][ T1120] usbhid 4-1:0.0: can't add hid device: -71 [ 437.082575][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.088583][ T1120] usbhid: probe of 4-1:0.0 failed with error -71 [ 437.098664][ T3256] device veth0_vlan entered promiscuous mode [ 437.114427][ T60] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 437.127562][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.144235][ T3256] device veth1_macvtap entered promiscuous mode [ 437.162099][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.164538][ T1120] usb 4-1: USB disconnect, device number 23 [ 437.180835][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.190829][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.241774][ T1126] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 437.250819][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.259244][ T1126] usb 1-1: Product: syz [ 437.263733][ T1126] usb 1-1: Manufacturer: syz [ 437.268204][ T1126] usb 1-1: SerialNumber: syz [ 437.275630][ T1126] r8152-cfgselector 1-1: config 0 descriptor?? [ 437.306455][ T60] usb 5-1: USB disconnect, device number 25 [ 437.542233][ T1126] r8152-cfgselector 1-1: Unknown version 0x0000 [ 437.562461][ T1126] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 437.780570][ T3271] mmap: syz.0.613 (3271): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 439.105573][ T30] audit: type=1400 audit(1728921949.489:1035): avc: denied { append } for pid=3266 comm="syz.2.612" name="vsock" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.523874][ T424] device bridge_slave_1 left promiscuous mode [ 441.529987][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.539349][ T424] device bridge_slave_0 left promiscuous mode [ 441.545661][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.556741][ T424] device veth1_macvtap left promiscuous mode [ 441.562862][ T424] device veth0_vlan left promiscuous mode [ 443.881889][ T60] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 443.889468][ T1120] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 444.092247][ T3302] loop1: detected capacity change from 0 to 256 [ 444.151669][ T1120] usb 5-1: Using ep0 maxpacket: 32 [ 444.271785][ T1120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.303075][ T1120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.341740][ T1120] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 444.361743][ T1538] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 444.389548][ T1120] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 444.415996][ T1120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.459635][ T1120] usb 5-1: config 0 descriptor?? [ 444.547423][ T3297] loop3: detected capacity change from 0 to 40427 [ 444.683101][ T60] usb 2-1: device not accepting address 26, error -71 [ 444.711651][ T1538] usb 3-1: Using ep0 maxpacket: 16 [ 446.037400][ T3312] loop1: detected capacity change from 0 to 128 [ 446.051420][ T3297] F2FS-fs (loop3): invalid crc value [ 446.070223][ T3297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 446.122437][ T1538] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 446.141899][ T1120] usbhid 5-1:0.0: can't add hid device: -71 [ 446.147880][ T1120] usbhid: probe of 5-1:0.0 failed with error -71 [ 446.180339][ T1120] usb 5-1: USB disconnect, device number 26 [ 446.312199][ T1538] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 446.423629][ T1538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.453692][ T3297] F2FS-fs (loop3): recover fsync data on readonly fs [ 446.460412][ T1538] usb 3-1: Product: syz [ 446.478504][ T1538] usb 3-1: Manufacturer: syz [ 446.495082][ T3297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 446.508675][ T3320] loop1: detected capacity change from 0 to 128 [ 446.514819][ T1538] usb 3-1: SerialNumber: syz [ 446.550028][ T1538] usb 3-1: config 0 descriptor?? [ 446.593141][ T1538] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 446.621531][ T1538] usb 3-1: Detected FT232RL [ 446.649622][ T3320] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,inode_readahead_blks=0x0000000000000004,errors=continue,,errors=continue. Quota mode: none. [ 446.691291][ T3320] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 446.981844][ T1538] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 447.011946][ T1538] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 447.019639][ T1120] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 447.171214][ T327] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 447.178890][ T1538] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 448.340658][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.347906][ T3333] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.356466][ T3333] device bridge_slave_0 entered promiscuous mode [ 448.372216][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.379208][ T3333] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.387916][ T3333] device bridge_slave_1 entered promiscuous mode [ 448.576821][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.583842][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.591486][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.598443][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.673153][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.682467][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.690005][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.719201][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.728453][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.735378][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.744304][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.753947][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.760834][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.780008][ T424] device bridge_slave_1 left promiscuous mode [ 448.786655][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.795562][ T424] device bridge_slave_0 left promiscuous mode [ 448.803088][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.813932][ T424] device veth1_macvtap left promiscuous mode [ 448.819826][ T424] device veth0_vlan left promiscuous mode [ 449.059581][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.079198][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.108235][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.129965][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.140597][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.149233][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.160111][ T3333] device veth0_vlan entered promiscuous mode [ 449.182301][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.195658][ T3333] device veth1_macvtap entered promiscuous mode [ 449.213403][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.223620][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.243838][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.253473][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.573488][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.580490][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.588970][ T3350] device bridge_slave_0 entered promiscuous mode [ 454.597179][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.604451][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.612876][ T3350] device bridge_slave_1 entered promiscuous mode [ 454.770154][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.777181][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.784412][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.791390][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.845784][ T221] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.854274][ T221] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.864751][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.872574][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.890171][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.898916][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.905933][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.915071][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.924054][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.931147][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.955059][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.970300][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.998724][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.022961][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.033175][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.040848][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.052922][ T3350] device veth0_vlan entered promiscuous mode [ 455.075938][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.088356][ T3350] device veth1_macvtap entered promiscuous mode [ 455.092402][ T1538] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 455.109508][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.466517][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.511671][ T327] usb 5-1: device descriptor read/64, error -110 [ 455.522385][ T1538] usb 3-1: USB disconnect, device number 18 [ 455.574320][ T1538] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 455.636852][ T1538] ftdi_sio 3-1:0.0: device disconnected [ 456.383113][ T424] device bridge_slave_1 left promiscuous mode [ 456.389431][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.398045][ T424] device bridge_slave_0 left promiscuous mode [ 456.404273][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.414199][ T424] device veth1_macvtap left promiscuous mode [ 456.420110][ T424] device veth0_vlan left promiscuous mode [ 457.065587][ T1120] usb 4-1: device descriptor read/all, error -71 [ 457.414177][ T430] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 457.470354][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.477652][ T3368] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.486206][ T3368] device bridge_slave_0 entered promiscuous mode [ 457.494180][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.501069][ T3368] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.509411][ T3368] device bridge_slave_1 entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.730838][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.742564][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.760245][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.769526][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.796090][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.803033][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.902390][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.911765][ T430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.913808][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.941654][ T430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.943218][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.951298][ T430] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 457.958264][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.065850][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.101674][ T430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.142641][ T430] usb 2-1: config 0 descriptor?? [ 458.261747][ T430] usb 2-1: can't set config #0, error -71 [ 458.401815][ T430] usb 2-1: USB disconnect, device number 28 [ 458.783376][ T424] device bridge_slave_1 left promiscuous mode [ 458.789458][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.798304][ T424] device bridge_slave_0 left promiscuous mode [ 458.805007][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.815088][ T424] device veth1_macvtap left promiscuous mode [ 458.820973][ T424] device veth0_vlan left promiscuous mode [ 460.603920][ T424] device bridge_slave_1 left promiscuous mode [ 460.609945][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.618112][ T424] device bridge_slave_0 left promiscuous mode [ 460.624302][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.634502][ T424] device bridge_slave_1 left promiscuous mode [ 460.640520][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.648826][ T424] device bridge_slave_0 left promiscuous mode [ 460.655048][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.664453][ T424] device bridge_slave_1 left promiscuous mode [ 460.670469][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.678640][ T424] device bridge_slave_0 left promiscuous mode [ 460.684860][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.694201][ T424] device bridge_slave_1 left promiscuous mode [ 460.700239][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.708337][ T424] device bridge_slave_0 left promiscuous mode [ 460.714505][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.723751][ T424] device bridge_slave_1 left promiscuous mode [ 460.729745][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.737829][ T424] device bridge_slave_0 left promiscuous mode [ 460.744209][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.755273][ T424] device veth1_macvtap left promiscuous mode [ 460.761142][ T424] device veth0_vlan left promiscuous mode [ 460.767530][ T424] device veth1_macvtap left promiscuous mode [ 460.773503][ T424] device veth0_vlan left promiscuous mode [ 460.779422][ T424] device veth1_macvtap left promiscuous mode [ 460.785358][ T424] device veth0_vlan left promiscuous mode [ 460.791309][ T424] device veth1_macvtap left promiscuous mode [ 460.797299][ T424] device veth0_vlan left promiscuous mode