last executing test programs: 18.993082634s ago: executing program 1 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff0000e100bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006a09000006000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\''], 0x0, 0x0, 0x0, 0x0}, 0x0) 18.612644956s ago: executing program 0 (id=195): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file3\x00', 0x80, &(0x7f0000005700)=ANY=[@ANYRES64], 0x1, 0x550f, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000005880)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000005900)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x7ffd}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) 17.684276265s ago: executing program 0 (id=197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x20, 0x0, &(0x7f0000000b00)="5cdd3086ddffff6633c9bbac88a8862608dffd20139fb7a884bdfc14f4870800332d9151197d44135a7f6e5a62e23f5166db0b44903fc3170d589916e89c004a72121f5c42bee1eb831f4cc68c2609c6ac964b2c8dd728aace8c9f509867b6bc356b49043f4aa5fc3a4cf280e35e1c3df7033c5a934e77fb63f6a6b97fffa520a1ef4ccd", 0x0, 0xd58f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x560e, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, 0x0, 0x0) getrusage(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = open(0x0, 0x1459c2, 0x0) ftruncate(r3, 0x2007ffd) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0xf0, &(0x7f0000000040)="b9425b446512d23236973599b76cdce8348eed9d1288726eb0ef01e208e7f49ad068c4ffce4c6b81fdb1090000000000000046f7fd23f2e107b224e7ea1deb33c65c8846a139fddbf01a2a2feb972aca42b89de9a8219cf9000000003da8dd3898c315943f48ff06761880b65a7bfd7dea10c0dce889c610bdafcc160d7c453163670206007f5e91d20e282d7cc68ebcd3a55ba06daabdb5b6168158aea2d2280800000000000000fe2761a374c700000000000000000000000009c0f393537fdc7fdfdc26b33e925059a0c084ff092fe7017af050f232bcd9da79478f2f388ea268252850e31cfbea0ac9e0b0884f6a") syz_usb_control_io(r4, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x40, 0x7, 0xbf, {0xcf, 0x23, "23a89ae19bca0438e4799e0d6a4596eebd7de0c78b739ad88449aaf6b0ecbc36e3675963f1336f303c1e691b07447ee0985b08fb01ebda5734ab2943e95f53c4de14a7e4b0989dc810b9cdc423c253f318437f644409b17f0881bdb99d6c2d06e6db70e7fa705589b2553ec66f6075cfd1b72ba92f0bf241d746956f23a5ab1349f087c028ae6032cc8116691e3e4046b1878cc412812c8435789e6707f41bf7feb58a7f6878e287de9402332cc91070460d5722eb029a38b439b21043"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x4, 0xc, "2c7a8237", "73e123af"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x6, 0xd, 0x6, 0x1d, 0x5}}}, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x20, 0xa, 0xd9, "dfe0532ea6348bf8aa95d6c661a87b064fdf0f778b36693abd81436496bb7b0a6695b8cd4ba1fc9d54b12d2693b3390d6ab299a1eb12b9cbeb74bd8e162b57534cda1c2be9cc1ee5024af96b35bad5603cff5d116a23695b6d323a2113f90836bf1d6b1288b813002b7c3a9f92f07d46ecf2f6798d468f45a654a5b3fc1a687dea09d367729d8dbc8309976d5400a355ff8497b5769bc69303fd5441e1161a615134a2ab03a127a0c15d4e8625e4f8ea52ab267e2401657c853cc5033af90541796aa8182dd62bf2e87eba5a50901d034e8655f91f8ad724e8"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf00]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000380)={0x40, 0xb, 0x2, "1243"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @local}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'l#'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x3e}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x1}}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 17.025713601s ago: executing program 1 (id=199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="740000001500000227bd7000ffdbdf250a08a0fe", @ANYRES32, @ANYBLOB], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 16.160305044s ago: executing program 1 (id=203): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000004c0)={[{@journal_async_commit}, {@dax}, {@nodelalloc}, {@block_validity}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@sysvgroups}, {@nogrpid}], [{@obj_user={'obj_user', 0x3d, 'memory\xfa2\xe8\x0f\x1c\xd9\x94\xef\xf9&\xd3mHF\xe4\xd4\x8a5\xbbL\xb4\xaf\x1bK\xbf?*\xa9\x18\xd47J\x15\xff\xa9zC]8\x97u\x03\xf7a\xf1T\xdf\f\xa2\xe00\xb3(\xd1jT\xefT\x8erl\x01\xf6(\xb2\xd5X\xac\xcb+\xec\xf5\x9c\xc8ygG\xbad\x8c\xa2>\xd9\xdd\x9d~q\x06\f&-\xa2\xfb\xc5G\r\x023\x9ag\xd8\xdf\'\xd3V<\xfc\x9fUY!n\xa0\xcbl\x1b\r\xe4\x15\xb8\x99\x97[A\x9e\x03\xc0f\x83I\xe8\xae\xe2\xac\xa0\\\xd6\x10\xdb\xf2Y\x12\x9db\x99x#N>\xa0\xfd\xd7hb\xaaz\fRP\xc9\xa44\x91iY\xfbg\x9d\xc5\xec\x95-EN.A1\xd4W=\xafGY\xd4InP#\x9c\x13N\xffQ\xde\x1b\x8az\xdcS\x8a\xe5\xf1\x8a=F\xb8\x93if\xe4\xd3\xfb\\\x85)\x1b\x9av\\\v\xf4\xc1\x8b4\xc0HBVF\x9b\xbe\xb38,\x7f\x94+\xdd\xe9\xbc\xbc4\x17\r#$\aN\xe0.nI\xbbpR\xe8(5\xf17\xa3\xd1L<\xc9l\x88\xfe\xff\xd3O\xf8\xd3ia\x17\x84\'tGg\x84G`\xb4\xb5\xbf\xaa\b\xbbI\x1c\x06'}}]}, 0xff, 0x4ab, &(0x7f0000000c80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() syz_open_dev$usbfs(0x0, 0x76, 0x101b01) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 15.204403465s ago: executing program 1 (id=208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x274, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x3, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 14.235139877s ago: executing program 0 (id=211): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 13.26087565s ago: executing program 1 (id=214): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10021, 0x9, 0x1, 0xffffffffffffffff, 0x7}, 0x48) sched_getattr(r1, &(0x7f0000002340)={0x38}, 0xfffffffffffffd4c, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00') read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x2000, 0xdb, 0xe00}, 0x48) 13.143701039s ago: executing program 2 (id=216): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xe5582fc50819e84b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x100000a9}}}]}}]}, 0x64}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010004000000000002000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040005000000000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000200000000002000060000000000"], 0x7c, 0x3) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12.943018396s ago: executing program 2 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5acd8471f999e618e1ae67906"}}}}}}, 0x0) 12.930622407s ago: executing program 2 (id=218): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000228bd7000fefbdf251200000005002f0000000000010039006304000008003a"], 0x3c}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 12.736313994s ago: executing program 2 (id=219): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) creat(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x6, 0x645c, 0x20, @private1, @local, 0x40, 0x0, 0x1, 0x80}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="001d000000000000b7080000000000007b8af8f9d401d800bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = dup2(r7, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getrusage(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex=r5, 0xffffffffffffffff, 0x8, 0x20}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 11.798951893s ago: executing program 2 (id=221): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x40000}, 0x48) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) syz_emit_ethernet(0x17a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='xprtrdma_mrs_zap\x00'}, 0xffffffffffffff12) (rerun: 32) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000380)=0xdf21) (async) r2 = socket(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000340), 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0_virt_wifi\x00'}) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) (async, rerun: 64) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008084) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x1, 0x0, 0x2}}, 0xe8) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 11.516316327s ago: executing program 2 (id=222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce822"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace(0x10, 0x1) write$selinux_load(0xffffffffffffffff, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a37f200140600068000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078000068db4fb4fff0256fd5c367f1e374f171df42003c655c56ee98e7ba8d942fee5402f4ae85615f"], 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) creat(&(0x7f0000000280)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c73686f72646e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c6e6f636173652c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e695f789afd74653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") sched_setscheduler(r1, 0x5, &(0x7f0000000380)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f04020095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = inotify_init() readv(r5, 0x0, 0x0) 9.925516031s ago: executing program 3 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000440)=@raw=[@generic, @call, @map_idx, @call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000001740)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000025) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) renameat2(r4, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r4, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setfsuid(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 9.080109943s ago: executing program 3 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 9.003609469s ago: executing program 3 (id=226): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="696f636861727365743d63703935302c6e6f6e756d7461696c3d302c636f6465706167653d3836302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d183a69743d757466382c726f6469722c757466383d302c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c726f6469722c000000000000000079ce77f4f14f5874ad1574eebb05be4a6414c8d71cee5c55493e7150c794925414ab390b4c602dc43e23db481b6c45abaa4a"], 0x2, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061126c00000000009500004000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaf680ff01000008004c00003c000000000011907800000000ffffffff441d09017f00000100000000ac1414bb000000007f0000010000000000004e20000c907801000000"], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fe80000000000000000000000000000e00"/126], 0x154}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x118, 0x200, 0xffffffff, 0x2c8, 0x2c8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000240), {[{{@ip={@loopback, @broadcast, 0x0, 0xff000000, 'tunl0\x00', 'ip6gretap0\x00', {}, {}, 0x62, 0x3, 0x8}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x1}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @local, @private=0xa010101, @icmp_id=0x66, @port=0x4e22}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0xfffffffb, @icmp_id=0x67, @gre_key=0x1000}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x1d}, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'hsr0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x29, 0x2, 0x11}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, '7[', 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, @gre_key=0x4, @port=0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x3, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000000, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.104782235s ago: executing program 3 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5acd8471f999e618e1ae67906"}}}}}}, 0x0) 8.036294511s ago: executing program 3 (id=229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000004d254abe2"], 0x0}, 0x0) 6.73988632s ago: executing program 4 (id=230): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10021, 0x9, 0x1, 0xffffffffffffffff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000002300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_getattr(r1, &(0x7f0000002340)={0x38}, 0xfffffffffffffd4c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r5 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00') read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x2000, 0xdb, 0xe00}, 0x48) 6.107621094s ago: executing program 3 (id=231): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (fail_nth: 16) 6.029672771s ago: executing program 4 (id=232): syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e9488820a629fbf61482e779fe677d802f4fdfb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f2409000000005e9299d7a3ffff531126f8c5b59b3e9a83964da1c7aeb1e1", @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7f9e33730333759efdf030756e8bf8962e6fcf3b8c519c233fff4bda5ca", @ANYRESOCT], 0x2, 0x1eb, &(0x7f0000000900)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000600000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) r9 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYRESDEC=0xee01, @ANYBLOB=','], 0x0, 0x0, &(0x7f0000000740)="420e10e6fe7b9609966a391b1241541f7bb1228cfd550b0ca0218390d13c487309a7a0f5a5ed89b97b12b47cc2b3936e22582438ebf78cdc92db787407904d92f36bce3a87bc3038dd2f89b1101433bcfe402ad363704b96dc5212b1c616486bfb5cf8a045373cd46d81a559488c5908ee47eeb48137e925e7ef0e1d72c738ac3e8dfad634712fa6e8acb99a9d2e88f3bed55afa013fbb0a5362c80fa35318665725f02a4e7aa30bcf762fe51950d8f3fc03d62f52f50358c7ab55736ec28475c21e4779b695f1") pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) close_range(r10, 0xffffffffffffffff, 0x0) renameat2(r9, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100000014000000140000000300"], 0x0, 0x2f, 0x0, 0x1}, 0x20) 4.904268236s ago: executing program 4 (id=233): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000740)={@link_local, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "3a1f6d2530e09857cf9e84a14ad5479aa517cbc53594922fcd9aa1b24b97e55f", "fdd69b1622ca21a1f00bb32ec85960056ce62e1788782e35358994f3607f4d28bef7d595f3865b9a1f8e90907ded661d", "a3c54cf20f0e0e961d98afdc2877ce464044b07bfc8af7e55e83d724", {"6d82c972c2763ced98ac5cfb62d3005e", "6ba7151a7a938741847ea5686f1b787e"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00221a0000001a6ca2a6"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$usbmon(r6, &(0x7f0000000f80)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.389728384s ago: executing program 0 (id=234): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000027000000f2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.943372131s ago: executing program 4 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000180)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305839, &(0x7f0000000240)) 2.427897455s ago: executing program 1 (id=235): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088a8ffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (fail_nth: 9) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r8, 0x80089203, 0x100000000000000) 2.003266851s ago: executing program 4 (id=237): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000240)={[{@noauto_da_alloc}, {@user_xattr}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x1, 0x450, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 16.146249ms ago: executing program 0 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5acd8471f999e618e1ae67906"}}}}}}, 0x0) 371.81µs ago: executing program 4 (id=240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x0, 0x101, 0x6, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x22}, {[@ssrr={0x89, 0xf, 0x8d, [@multicast2, @private=0xa010100, @empty]}, @generic={0x83, 0x9, "bebf755e1f951f"}, @end, @ssrr={0x89, 0x23, 0xee, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @broadcast, @local, @multicast1, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x35}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x3, 0x6, 0x20, @private1, @mcast1, 0x0, 0x10, 0x0, 0x2}}) r3 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@delpolicy={0x13c, 0x14, 0x0, 0x70bd29, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e20, 0x9, 0x4e20, 0x40, 0x2, 0x80, 0xc0, 0x5e, r1, 0xffffffffffffffff}, 0x6e6bb5, 0x1}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e20, 0x9, 0x4e21, 0x3, 0xa, 0x20, 0xa0, 0x2b, r2, r3}, {@in=@loopback, 0x4d2, 0x3c}, @in6=@mcast1, {0xaef, 0xfffffffffffffffd, 0xc3, 0x5, 0x9, 0x1ff, 0x2, 0x4}, {0x9, 0x19, 0x52c2, 0x100000000}, {0x9, 0x40, 0x8}, 0x70bd2d, 0x3507, 0x2, 0x4, 0x6, 0xa}}, @proto={0x5, 0x19, 0x6c}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4844}, 0x28004115) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}, @ldst={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x7c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000208d0495850000000000010902240001000000000904000005030000000921000000012205000905810300000000002d26ea1c32101c57a62b042bb3948e07808a5f93066f751159104ac7ee9515f84fcdd378ef6643463b05a1dc3a3fcd12c06a7709b98a7294368d44c4d5a3a8bc2350ceef77aba24414b19a6aec1db9e3514fc87e110918d06855119debce9932fc493cec9922c2df4dcf806be5978015500a4e07"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2dc}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fddbdf2508000000", @ANYRES32=r10, @ANYBLOB="0c0099000900000063000010"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) syz_usb_control_io(r5, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r11, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"}) epoll_create1(0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r12, &(0x7f0000000080), 0x8) syz_usb_control_io$hid(r5, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) 0s ago: executing program 0 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): .095601][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.106367][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.136570][ T506] device veth1_macvtap entered promiscuous mode [ 39.145877][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.160595][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.174712][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.188485][ T517] device bridge_slave_0 entered promiscuous mode [ 39.265215][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.272686][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.279963][ T517] device bridge_slave_1 entered promiscuous mode [ 39.286237][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.294833][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.388450][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.416180][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.469521][ T323] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 39.513449][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.530798][ T323] usb 1-1: config 0 descriptor?? [ 39.595804][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.604519][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.620788][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.629109][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.637051][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.643906][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.651243][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.659783][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.667827][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.674709][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.682320][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.694060][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.702157][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.717177][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.730262][ T517] device veth0_vlan entered promiscuous mode [ 39.736478][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.745485][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.753129][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.766711][ T517] device veth1_macvtap entered promiscuous mode [ 39.775050][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.783769][ T9] device bridge_slave_1 left promiscuous mode [ 39.790038][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.797352][ T9] device bridge_slave_0 left promiscuous mode [ 39.804438][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.812336][ T9] device veth1_macvtap left promiscuous mode [ 39.818285][ T9] device veth0_vlan left promiscuous mode [ 39.828267][ T317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.915032][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.933395][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.999098][ T323] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 40.005768][ T323] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 40.013807][ T323] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 40.074873][ T531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 40.088109][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 40.443453][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 40.454463][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 40.454588][ T25] usb 1-1: USB disconnect, device number 5 [ 40.465394][ T317] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 40.465414][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.497684][ T317] usb 3-1: config 0 descriptor?? [ 40.518215][ T529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 40.728794][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.735681][ T541] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.743122][ T541] device bridge_slave_0 entered promiscuous mode [ 40.751694][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.758668][ T541] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.765727][ T541] device bridge_slave_1 entered promiscuous mode [ 40.800715][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.807551][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.814677][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.821456][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.837516][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.845097][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.852824][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.861910][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.869955][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.876804][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.887478][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.895761][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.902632][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.918401][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.928113][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.957080][ T541] device veth0_vlan entered promiscuous mode [ 40.963617][ T529] syz.2.39[529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.963668][ T529] syz.2.39[529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.975346][ T9] device bridge_slave_1 left promiscuous mode [ 40.992355][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.011072][ T9] device bridge_slave_0 left promiscuous mode [ 41.018254][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.026061][ T9] device veth1_macvtap left promiscuous mode [ 41.032937][ T9] device veth0_vlan left promiscuous mode [ 41.109119][ T317] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 41.115912][ T317] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 41.124337][ T317] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x4 [ 41.141386][ T317] cp2112 0003:10C4:EA90.0007: item fetching failed at offset 3/5 [ 41.150407][ T317] cp2112 0003:10C4:EA90.0007: parse failed [ 41.156621][ T317] cp2112: probe of 0003:10C4:EA90.0007 failed with error -22 [ 41.172253][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.180097][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.187559][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.195651][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.203784][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.212972][ T541] device veth1_macvtap entered promiscuous mode [ 41.232831][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.242320][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.275970][ T556] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.52: bad orphan inode 8192 [ 41.283378][ T563] erofs: (device loop3): mounted with root inode @ nid 36. [ 41.286556][ T556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 41.338486][ T293] usb 3-1: USB disconnect, device number 3 [ 41.418176][ T289] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.497563][ T566] erofs: (device loop3): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 41.507132][ T566] erofs: (device loop3): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 41.758138][ T289] usb 1-1: Using ep0 maxpacket: 16 [ 41.768225][ T317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.888277][ T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 41.943030][ T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 41.955908][ T289] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 41.964852][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.965295][ T9] device bridge_slave_1 left promiscuous mode [ 41.978837][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.986537][ T289] usb 1-1: config 0 descriptor?? [ 41.992238][ T9] device bridge_slave_0 left promiscuous mode [ 41.998225][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.005963][ T9] device veth1_macvtap left promiscuous mode [ 42.008108][ T317] usb 2-1: Using ep0 maxpacket: 16 [ 42.011866][ T9] device veth0_vlan left promiscuous mode [ 42.016967][ T553] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.148264][ T317] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 42.168511][ T317] usb 2-1: config 0 has no interface number 0 [ 42.178477][ T317] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 41398, setting to 1024 [ 42.213565][ T317] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 42.272087][ T293] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 42.388299][ T317] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 42.407504][ T317] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 42.418972][ T317] usb 2-1: Product: syz [ 42.422945][ T317] usb 2-1: SerialNumber: syz [ 42.438944][ T317] usb 2-1: config 0 descriptor?? [ 42.528978][ T556] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 42.536154][ T289] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 42.545929][ T289] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 42.567444][ T289] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x4 [ 42.581458][ T289] cp2112 0003:10C4:EA90.0008: item fetching failed at offset 3/5 [ 42.597429][ T289] cp2112 0003:10C4:EA90.0008: parse failed [ 42.599489][ T15] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.617358][ T289] cp2112: probe of 0003:10C4:EA90.0008 failed with error -22 [ 42.798921][ T317] usb 2-1: invalid MIDI in EP 0 [ 42.804707][ T317] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 42.811571][ T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.838244][ T293] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.860359][ T317] usb 2-1: USB disconnect, device number 5 [ 42.885205][ T15] usb 5-1: Using ep0 maxpacket: 32 [ 42.897476][ T25] usb 1-1: USB disconnect, device number 6 [ 42.904729][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.933663][ T293] usb 3-1: config 0 descriptor?? [ 42.938871][ T586] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 42.946401][ T586] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.974826][ T586] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.006676][ T586] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 43.008215][ T15] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.028581][ T586] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 43.035436][ T586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.085325][ T15] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.097789][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 43.097799][ T24] audit: type=1400 audit(1724707932.269:279): avc: denied { name_bind } for pid=585 comm="syz.3.59" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.135617][ T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 43.158164][ T24] audit: type=1400 audit(1724707932.269:280): avc: denied { node_bind } for pid=585 comm="syz.3.59" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.196539][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.208269][ T24] audit: type=1326 audit(1724707932.359:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 43.258703][ T15] hub 5-1:4.0: USB hub found [ 43.288147][ T24] audit: type=1326 audit(1724707932.359:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6789438a7b code=0x7ffc0000 [ 43.358137][ T24] audit: type=1326 audit(1724707932.359:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6789438a7b code=0x7ffc0000 [ 43.428389][ T24] audit: type=1326 audit(1724707932.369:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f678946af65 code=0x7ffc0000 [ 43.468168][ T15] hub 5-1:4.0: 2 ports detected [ 43.481122][ T24] audit: type=1326 audit(1724707932.569:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 43.567260][ T24] audit: type=1326 audit(1724707932.569:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6789438a7b code=0x7ffc0000 [ 43.667375][ T599] netlink: 60 bytes leftover after parsing attributes in process `syz.0.61'. [ 43.685689][ T289] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.768823][ T293] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 43.786766][ T293] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input7 [ 43.813713][ T601] FAT-fs (loop3): Directory bread(block 64) failed [ 43.833485][ T601] FAT-fs (loop3): Directory bread(block 65) failed [ 43.861571][ T601] FAT-fs (loop3): Directory bread(block 66) failed [ 43.896693][ T601] FAT-fs (loop3): Directory bread(block 67) failed [ 43.923572][ T601] FAT-fs (loop3): Directory bread(block 68) failed [ 43.940583][ T293] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 43.968128][ T601] FAT-fs (loop3): Directory bread(block 69) failed [ 43.974492][ T601] FAT-fs (loop3): Directory bread(block 70) failed [ 44.000801][ T601] FAT-fs (loop3): Directory bread(block 71) failed [ 44.007306][ T601] FAT-fs (loop3): Directory bread(block 72) failed [ 44.028118][ T24] audit: type=1326 audit(1724707933.189:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 44.058502][ T578] FAT-fs (loop4): Unrecognized mount option "shordname=mixed" or missing value [ 44.068601][ T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.086915][ T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.108174][ T601] FAT-fs (loop3): Directory bread(block 73) failed [ 44.128747][ T24] audit: type=1326 audit(1724707933.189:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=573 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 44.152198][ T289] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 44.161406][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.169721][ T323] usb 3-1: USB disconnect, device number 4 [ 44.176754][ T289] usb 2-1: config 0 descriptor?? [ 44.508136][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.555684][ T610] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 44.648186][ T15] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 44.654410][ T15] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 44.668686][ T289] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 44.675394][ T289] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 44.682582][ T289] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 44.748128][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 45.159956][ T579] usb 2-1: USB disconnect, device number 6 [ 45.168262][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.179270][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.308555][ T5] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 45.317704][ T5] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 45.325985][ T5] usb 4-1: Product: syz [ 45.330506][ T5] usb 4-1: Manufacturer: syz [ 45.596935][ T5] usb 4-1: config 0 descriptor?? [ 45.646229][ T621] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 45.653854][ T621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.662503][ T621] F2FS-fs (loop0): invalid crc value [ 45.667745][ T621] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 45.674172][ T621] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 45.826440][ T629] kernel profiling enabled (shift: 0) [ 45.928134][ T520] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.080782][ T5] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0xd [ 46.093673][ T5] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 46.288146][ T520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.298921][ T520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.308764][ T520] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 46.317650][ T520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.326268][ T520] usb 3-1: config 0 descriptor?? [ 46.498333][ T601] device syzkaller0 entered promiscuous mode [ 46.510578][ T5] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 46.518607][ T5] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 46.525867][ T5] kovaplus: probe of 0003:1E7D:2D50.000B failed with error -71 [ 46.537681][ T5] usb 4-1: USB disconnect, device number 3 [ 47.085571][ T649] netlink: 120 bytes leftover after parsing attributes in process `syz.0.72'. [ 47.248779][ T520] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 47.312151][ T520] hid-led 0003:27B8:01ED.000C: ThingM blink(1) initialized [ 47.523414][ T293] usb 5-1: USB disconnect, device number 4 [ 47.690797][ T520] usb 3-1: USB disconnect, device number 5 [ 47.798585][ T651] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 47.806314][ T651] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.815107][ T651] F2FS-fs (loop3): invalid crc value [ 47.821689][ T651] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 47.842541][ T651] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.849500][ T651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.187384][ T666] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.77: casefold flag without casefold feature [ 48.200979][ T666] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.77: missing EA_INODE flag [ 48.212680][ T666] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.77: error while reading EA inode 12 err=-117 [ 48.225174][ T666] EXT4-fs (loop1): 1 orphan inode deleted [ 48.230897][ T666] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 48.245228][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 48.245238][ T24] audit: type=1400 audit(1724707937.409:318): avc: denied { write } for pid=665 comm="syz.1.77" path="/24/file0/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.307563][ T666] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.335726][ T24] audit: type=1400 audit(1724707937.459:319): avc: denied { map } for pid=665 comm="syz.1.77" path="/24/file0/file0/bus" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.660546][ T285] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.676091][ T285] EXT4-fs error (device loop1): ext4_readdir:220: inode #2: comm syz-executor: path /24/file0: directory fails checksum at offset 0 [ 48.860682][ T677] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 48.868295][ T677] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.876951][ T677] F2FS-fs (loop2): invalid crc value [ 48.882231][ T677] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 48.888340][ T677] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 48.918193][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.941446][ T686] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.948346][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.955559][ T686] device bridge_slave_0 entered promiscuous mode [ 48.962792][ T686] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.971273][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.978737][ T686] device bridge_slave_1 entered promiscuous mode [ 48.998153][ T520] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.014710][ T686] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.021568][ T686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.028665][ T686] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.035441][ T686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.053353][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.060708][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.067723][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.080078][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.087997][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.094755][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.102112][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.110097][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.116916][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.133373][ T686] device veth0_vlan entered promiscuous mode [ 49.146114][ T686] device veth1_macvtap entered promiscuous mode [ 49.158869][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.167073][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.175671][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.183528][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.191418][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.200354][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.208325][ T24] audit: type=1326 audit(1724707938.369:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.232850][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.243003][ T24] audit: type=1326 audit(1724707938.379:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.267043][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.267244][ T24] audit: type=1326 audit(1724707938.379:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.275551][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.298634][ T24] audit: type=1326 audit(1724707938.399:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.306520][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.340356][ T24] audit: type=1326 audit(1724707938.409:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.340700][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.373027][ T24] audit: type=1326 audit(1724707938.409:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.381805][ T25] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 49.396269][ T24] audit: type=1326 audit(1724707938.409:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.405220][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.428549][ T24] audit: type=1326 audit(1724707938.409:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6789438e79 code=0x7ffc0000 [ 49.436270][ T520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.470086][ T25] usb 4-1: config 0 descriptor?? [ 49.474919][ T520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.484513][ T520] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.497120][ T520] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 49.505936][ T520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.514650][ T520] usb 1-1: config 0 descriptor?? [ 49.723608][ T9] device bridge_slave_1 left promiscuous mode [ 49.729794][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.737204][ T9] device bridge_slave_0 left promiscuous mode [ 49.743390][ T293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 49.750969][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.760035][ T9] device veth1_macvtap left promiscuous mode [ 49.765949][ T9] device veth0_vlan left promiscuous mode [ 49.998903][ T520] prodikeys 0003:041E:2801.000E: unexpected long global item [ 50.006245][ T520] prodikeys 0003:041E:2801.000E: hid parse failed [ 50.012608][ T520] prodikeys: probe of 0003:041E:2801.000E failed with error -22 [ 50.178271][ T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.189061][ T293] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.197778][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.218833][ T293] usb 3-1: config 0 descriptor?? [ 50.278341][ T681] erofs: Unknown parameter 'ÿÿÿÿ' [ 50.388909][ T25] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 50.401433][ T25] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 50.416190][ T579] usb 1-1: USB disconnect, device number 7 [ 50.595747][ T520] usb 4-1: USB disconnect, device number 4 [ 50.959412][ T708] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.966844][ T708] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.88: inline data xattr refers to an external xattr inode [ 50.981504][ T708] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.88: couldn't read orphan inode 12 (err -117) [ 50.993756][ T708] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 51.048736][ T293] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 51.069930][ T293] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input8 [ 51.151128][ T293] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 51.975377][ T721] netlink: 120 bytes leftover after parsing attributes in process `syz.0.90'. [ 52.114336][ T469] Bluetooth: hci0: command 0x1003 tx timeout [ 52.120236][ T703] Bluetooth: hci0: sending frame failed (-49) [ 52.134733][ T579] usb 3-1: USB disconnect, device number 6 [ 52.516277][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.523494][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.531012][ T729] device bridge_slave_0 entered promiscuous mode [ 52.540548][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.547416][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.554816][ T729] device bridge_slave_1 entered promiscuous mode [ 52.585887][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.592772][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.599869][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.606613][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.623412][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.631155][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.638613][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.648533][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.658346][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.665190][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.676054][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.684098][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.690949][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.704679][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.712433][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.725309][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.742310][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.750160][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.757360][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.765597][ T729] device veth0_vlan entered promiscuous mode [ 52.776426][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.785337][ T729] device veth1_macvtap entered promiscuous mode [ 52.794544][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.805795][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.977746][ T9] device bridge_slave_1 left promiscuous mode [ 53.056614][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.065770][ T9] device bridge_slave_0 left promiscuous mode [ 53.072489][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.083917][ T9] device veth1_macvtap left promiscuous mode [ 53.117536][ T9] device veth0_vlan left promiscuous mode [ 53.899301][ T744] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.907365][ T744] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.916414][ T744] F2FS-fs (loop3): invalid crc value [ 53.922219][ T744] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 53.929014][ T744] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 53.936914][ T579] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 54.013510][ T748] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 54.148172][ T289] Bluetooth: hci0: command 0x1001 tx timeout [ 54.155482][ T703] Bluetooth: hci0: sending frame failed (-49) [ 54.163412][ T754] Zero length message leads to an empty skb [ 54.191216][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 54.191235][ T24] audit: type=1326 audit(1724707943.359:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.98" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee4c655e79 code=0x0 [ 54.228297][ T469] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 54.237799][ T24] audit: type=1400 audit(1724707943.399:357): avc: denied { read } for pid=747 comm="syz.0.96" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.260383][ T24] audit: type=1400 audit(1724707943.399:358): avc: denied { open } for pid=747 comm="syz.0.96" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.284130][ T24] audit: type=1400 audit(1724707943.399:359): avc: denied { ioctl } for pid=747 comm="syz.0.96" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.368188][ T579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.378930][ T579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.389202][ T579] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 54.398157][ T579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.406648][ T579] usb 3-1: config 0 descriptor?? [ 54.478162][ T469] usb 5-1: Using ep0 maxpacket: 32 [ 54.598183][ T469] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 54.608181][ T469] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.620836][ T469] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 54.629718][ T469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.678890][ T469] hub 5-1:4.0: bad descriptor, ignoring hub [ 54.684668][ T469] hub: probe of 5-1:4.0 failed with error -5 [ 54.690808][ T469] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 54.795205][ T24] audit: type=1400 audit(1724707943.959:360): avc: denied { write } for pid=756 comm="syz.0.99" name="event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.864372][ T24] audit: type=1400 audit(1724707944.029:361): avc: denied { name_bind } for pid=762 comm="syz.0.100" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 54.917700][ T765] FAT-fs (loop0): Directory bread(block 64) failed [ 54.924280][ T765] FAT-fs (loop0): Directory bread(block 65) failed [ 54.930912][ T765] FAT-fs (loop0): Directory bread(block 66) failed [ 54.937231][ T765] FAT-fs (loop0): Directory bread(block 67) failed [ 54.943651][ T765] FAT-fs (loop0): Directory bread(block 68) failed [ 54.950893][ T765] FAT-fs (loop0): Directory bread(block 69) failed [ 54.957390][ T765] FAT-fs (loop0): Directory bread(block 70) failed [ 54.964039][ T765] FAT-fs (loop0): Directory bread(block 71) failed [ 54.970565][ T765] FAT-fs (loop0): Directory bread(block 72) failed [ 54.976938][ T765] FAT-fs (loop0): Directory bread(block 73) failed [ 55.089433][ T771] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.103: bad orphan inode 8192 [ 55.099820][ T771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 55.168197][ T579] usbhid 3-1:0.0: can't add hid device: -71 [ 55.173960][ T579] usbhid: probe of 3-1:0.0 failed with error -71 [ 55.181336][ T579] usb 3-1: USB disconnect, device number 7 [ 55.426031][ T293] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.498577][ T776] FAT-fs (loop4): Unrecognized mount option "shordname=mixed" or missing value [ 55.668346][ T293] usb 1-1: Using ep0 maxpacket: 16 [ 55.788201][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.802904][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.928301][ T293] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 55.937268][ T293] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 55.945459][ T293] usb 1-1: Product: syz [ 55.967002][ T293] usb 1-1: Manufacturer: syz [ 55.972296][ T293] usb 1-1: config 0 descriptor?? [ 56.118193][ T469] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 56.167079][ T24] audit: type=1400 audit(1724707945.329:362): avc: denied { create } for pid=785 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.187049][ T24] audit: type=1400 audit(1724707945.329:363): avc: denied { write } for pid=785 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.238141][ T289] Bluetooth: hci0: command 0x1009 tx timeout [ 56.438925][ T293] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0xd [ 56.446584][ T293] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 56.538187][ T469] usb 3-1: config 2 has an invalid descriptor of length 233, skipping remainder of the config [ 56.548570][ T469] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 56.557277][ T469] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 56.566187][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.815887][ T24] audit: type=1400 audit(1724707945.979:364): avc: denied { create } for pid=782 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.883861][ T765] device syzkaller0 entered promiscuous mode [ 56.899969][ T293] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device [ 56.907859][ T293] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse [ 56.921364][ T293] kovaplus: probe of 0003:1E7D:2D50.0010 failed with error -71 [ 56.930133][ T293] usb 1-1: USB disconnect, device number 8 [ 56.988232][ T469] usb 3-1: string descriptor 0 read error: -71 [ 56.994676][ T469] usb 3-1: USB disconnect, device number 8 [ 57.078901][ T794] netlink: 120 bytes leftover after parsing attributes in process `syz.3.106'. [ 57.929359][ T801] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 57.936937][ T801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.945517][ T801] F2FS-fs (loop2): invalid crc value [ 57.950851][ T801] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 57.956980][ T801] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 58.818497][ T24] audit: type=1400 audit(1724707947.699:365): avc: denied { listen } for pid=807 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.358216][ T579] usb 5-1: USB disconnect, device number 5 [ 59.588139][ T15] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 59.618157][ T603] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 59.828187][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 59.860400][ T603] usb 4-1: Using ep0 maxpacket: 32 [ 59.948218][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 59.959286][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 59.970248][ T15] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 59.979216][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.989831][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.997816][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.007581][ T15] usb 1-1: config 0 descriptor?? [ 60.012417][ T603] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 60.024976][ T603] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 60.033804][ T603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.033847][ T828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.042320][ T603] usb 4-1: config 0 descriptor?? [ 60.128200][ T469] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 60.201289][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.208246][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.215380][ T835] device bridge_slave_0 entered promiscuous mode [ 60.222468][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.229479][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.237053][ T835] device bridge_slave_1 entered promiscuous mode [ 60.266973][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.273845][ T835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.280939][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.287697][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.307100][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.314782][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.321939][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.332268][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.340351][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.347166][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.365158][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.373664][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.382549][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.390576][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.397732][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.405695][ T793] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.412529][ T793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.419826][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.427510][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.437739][ T835] device veth0_vlan entered promiscuous mode [ 60.447067][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.455871][ T835] device veth1_macvtap entered promiscuous mode [ 60.466220][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.475522][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.508722][ T15] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 60.516195][ T15] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 60.523055][ T15] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x4 [ 60.528182][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.531317][ T603] itetech 0003:048D:8595.0012: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.3-1/input0 [ 60.540565][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.551542][ T15] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 3/5 [ 60.551694][ T15] cp2112 0003:10C4:EA90.0011: parse failed [ 60.565783][ T469] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 60.570531][ T15] cp2112: probe of 0003:10C4:EA90.0011 failed with error -22 [ 60.576567][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.588726][ T840] FAT-fs (loop1): Directory bread(block 64) failed [ 60.604760][ T840] FAT-fs (loop1): Directory bread(block 65) failed [ 60.611388][ T840] FAT-fs (loop1): Directory bread(block 66) failed [ 60.612792][ T469] usb 3-1: config 0 descriptor?? [ 60.617853][ T840] FAT-fs (loop1): Directory bread(block 67) failed [ 60.628988][ T840] FAT-fs (loop1): Directory bread(block 68) failed [ 60.635263][ T840] FAT-fs (loop1): Directory bread(block 69) failed [ 60.641796][ T840] FAT-fs (loop1): Directory bread(block 70) failed [ 60.648258][ T840] FAT-fs (loop1): Directory bread(block 71) failed [ 60.654606][ T840] FAT-fs (loop1): Directory bread(block 72) failed [ 60.660979][ T840] FAT-fs (loop1): Directory bread(block 73) failed [ 60.721449][ T520] usb 1-1: USB disconnect, device number 9 [ 60.788728][ T746] device bridge_slave_1 left promiscuous mode [ 60.794910][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.802114][ T746] device bridge_slave_0 left promiscuous mode [ 60.808390][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.815868][ T746] device veth1_macvtap left promiscuous mode [ 60.821906][ T746] device veth0_vlan left promiscuous mode [ 60.892451][ T842] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.116: casefold flag without casefold feature [ 60.905008][ T842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.116: missing EA_INODE flag [ 60.916597][ T842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.116: error while reading EA inode 2 err=-117 [ 60.928979][ T842] EXT4-fs (loop3): 1 orphan inode deleted [ 60.934544][ T842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 60.946688][ T603] usb 4-1: USB disconnect, device number 5 [ 60.952389][ T15] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 61.288251][ T24] audit: type=1400 audit(1724707950.419:366): avc: denied { create } for pid=831 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.367816][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 61.539366][ T851] netlink: 120 bytes leftover after parsing attributes in process `syz.0.119'. [ 61.592749][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.604516][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.738215][ T15] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 61.747148][ T15] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 61.755353][ T15] usb 2-1: Product: syz [ 61.759516][ T15] usb 2-1: Manufacturer: syz [ 61.786315][ T15] usb 2-1: config 0 descriptor?? [ 62.140010][ T855] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 62.147633][ T855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.156360][ T855] F2FS-fs (loop3): invalid crc value [ 62.162429][ T855] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 62.168533][ T855] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 62.448902][ T15] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0xd [ 62.456353][ T15] kovaplus 0003:1E7D:2D50.0013: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 62.882810][ T840] device syzkaller0 entered promiscuous mode [ 62.918211][ T15] kovaplus 0003:1E7D:2D50.0013: couldn't init struct kovaplus_device [ 62.919653][ T865] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 62.926184][ T15] kovaplus 0003:1E7D:2D50.0013: couldn't install mouse [ 62.935036][ T865] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 62.942549][ T15] kovaplus: probe of 0003:1E7D:2D50.0013 failed with error -71 [ 62.951937][ T469] usbhid 3-1:0.0: can't add hid device: -71 [ 62.963964][ T15] usb 2-1: USB disconnect, device number 7 [ 62.965832][ T469] usbhid: probe of 3-1:0.0 failed with error -71 [ 62.982917][ T469] usb 3-1: USB disconnect, device number 9 [ 62.983822][ T865] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 62.997003][ T865] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.124: mark_inode_dirty error [ 63.008379][ T865] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 63.016836][ T865] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.124: mark_inode_dirty error [ 63.028215][ T5] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 63.288129][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 63.398150][ T469] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.438249][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 63.449338][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 63.449834][ T871] EXT4-fs (loop3): bad s_want_extra_isize: 11962 [ 63.466928][ T5] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 63.475822][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.484237][ T5] usb 1-1: config 0 descriptor?? [ 63.508545][ T863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 63.768154][ T469] usb 3-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 63.778708][ T469] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 63.787681][ T469] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 63.796697][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.805670][ T469] usb 3-1: config 0 descriptor?? [ 63.808715][ T878] netlink: 165 bytes leftover after parsing attributes in process `syz.3.125'. [ 63.949108][ T863] syz.0.123[863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.949146][ T863] syz.0.123[863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.978817][ T5] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 63.996672][ T5] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 64.003466][ T5] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x4 [ 64.010196][ T5] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 3/5 [ 64.017822][ T5] cp2112 0003:10C4:EA90.0014: parse failed [ 64.023448][ T5] cp2112: probe of 0003:10C4:EA90.0014 failed with error -22 [ 64.186780][ T881] xt_hashlimit: overflow, try lower: 0/0 [ 64.308026][ T469] usb 1-1: USB disconnect, device number 10 [ 64.420000][ T884] syz.3.127[884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.423231][ T884] syz.3.127[884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.449884][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.467993][ T886] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.476439][ T886] device bridge_slave_0 entered promiscuous mode [ 64.483822][ T886] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.490831][ T886] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.497955][ T886] device bridge_slave_1 entered promiscuous mode [ 64.546979][ T886] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.553882][ T886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.560953][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.567713][ T886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.590603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.610698][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.617882][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.635592][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.643886][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.650755][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.657877][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.666441][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.673320][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.682534][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.691365][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.814493][ T24] audit: type=1400 audit(1724707953.979:367): avc: denied { bind } for pid=893 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.833484][ T469] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 64.840961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.843537][ T24] audit: type=1400 audit(1724707953.979:368): avc: denied { read } for pid=893 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.883151][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.890980][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.898243][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.906064][ T886] device veth0_vlan entered promiscuous mode [ 64.916657][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.925604][ T886] device veth1_macvtap entered promiscuous mode [ 64.934341][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.944477][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.325208][ T900] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.128: casefold flag without casefold feature [ 65.337976][ T900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.128: missing EA_INODE flag [ 65.349615][ T469] usb 4-1: Using ep0 maxpacket: 32 [ 65.354906][ T900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.128: error while reading EA inode 12 err=-117 [ 65.367734][ T900] EXT4-fs (loop4): 1 orphan inode deleted [ 65.465403][ T900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 65.518620][ T746] device bridge_slave_1 left promiscuous mode [ 65.521719][ T904] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 65.524950][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.532235][ T904] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 65.539515][ T469] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 65.547900][ T904] F2FS-fs (loop0): invalid crc value [ 65.623253][ T904] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 65.629451][ T904] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 65.640804][ T469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.651792][ T469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.661547][ T469] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 65.751517][ T24] audit: type=1400 audit(1724707954.899:369): avc: denied { setattr } for pid=899 comm="syz.4.128" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.786258][ T746] device bridge_slave_0 left promiscuous mode [ 65.793053][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.801310][ T746] device veth1_macvtap left promiscuous mode [ 65.807194][ T746] device veth0_vlan left promiscuous mode [ 65.812804][ T469] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 65.821798][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.830650][ T469] usb 4-1: config 0 descriptor?? [ 65.855852][ T24] audit: type=1400 audit(1724707955.019:370): avc: denied { rename } for pid=899 comm="syz.4.128" name="file1" dev="overlay" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 65.911575][ T24] audit: type=1400 audit(1724707955.019:371): avc: denied { reparent } for pid=899 comm="syz.4.128" name="#7" dev="loop4" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 65.933010][ T323] usb 3-1: USB disconnect, device number 10 [ 65.975511][ T24] audit: type=1326 audit(1724707955.069:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 65.999390][ T24] audit: type=1326 audit(1724707955.069:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.151585][ T24] audit: type=1326 audit(1724707955.069:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.179292][ T910] netlink: 120 bytes leftover after parsing attributes in process `syz.1.132'. [ 66.198461][ T24] audit: type=1326 audit(1724707955.069:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.372436][ T892] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 66.376222][ T603] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 66.390998][ T892] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 66.425326][ T24] audit: type=1326 audit(1724707955.069:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.468534][ T24] audit: type=1326 audit(1724707955.099:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.498633][ T24] audit: type=1326 audit(1724707955.099:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.528225][ T469] usb 4-1: string descriptor 0 read error: -71 [ 66.595725][ T24] audit: type=1326 audit(1724707955.099:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.648138][ T469] usbhid 4-1:0.0: can't add hid device: -71 [ 66.653934][ T469] usbhid: probe of 4-1:0.0 failed with error -71 [ 66.661658][ T24] audit: type=1326 audit(1724707955.109:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.697320][ T469] usb 4-1: USB disconnect, device number 6 [ 66.718129][ T24] audit: type=1326 audit(1724707955.109:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.778336][ T24] audit: type=1326 audit(1724707955.109:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.808238][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.839343][ T603] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.892268][ T24] audit: type=1326 audit(1724707955.109:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 66.928107][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.023968][ T603] usb 1-1: config 0 descriptor?? [ 67.222454][ T541] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /22/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.245453][ T24] audit: type=1326 audit(1724707955.109:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 67.268806][ T24] audit: type=1326 audit(1724707955.109:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 67.314595][ T936] erofs: (device loop4): mounted with root inode @ nid 36. [ 67.368127][ T579] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 67.536717][ T936] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 67.545918][ T936] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 67.728102][ T579] usb 2-1: Using ep0 maxpacket: 32 [ 67.848187][ T579] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 67.868121][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.918105][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.927751][ T579] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 67.941064][ T603] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 67.949354][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.979385][ T603] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0015/input/input9 [ 68.008119][ T579] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 68.016967][ T579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.049530][ T941] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 68.060461][ T579] usb 2-1: config 0 descriptor?? [ 68.068293][ T941] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.110444][ T941] F2FS-fs (loop2): invalid crc value [ 68.115796][ T603] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 68.179276][ T941] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 68.248377][ T941] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.265568][ T941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.308336][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.328238][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.337943][ T5] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 68.440169][ T934] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 68.459918][ T934] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 68.478679][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.497310][ T5] usb 5-1: config 0 descriptor?? [ 68.842439][ T603] usb 1-1: USB disconnect, device number 11 [ 68.858131][ C0] keytouch 0003:0926:3333.0015: usb_submit_urb(ctrl) failed: -19 [ 68.878171][ T579] usb 2-1: string descriptor 0 read error: -71 [ 68.919884][ T959] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 68.930104][ T959] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 68.978158][ T579] usbhid 2-1:0.0: can't add hid device: -71 [ 68.984377][ T579] usbhid: probe of 2-1:0.0 failed with error -71 [ 68.998991][ T5] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 69.014828][ T579] usb 2-1: USB disconnect, device number 8 [ 69.020689][ T5] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 69.027265][ T5] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 69.035338][ T5] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 69.045091][ T5] sony 0003:054C:0268.0016: unknown main item tag 0x0 [ 69.064587][ T5] sony 0003:054C:0268.0016: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 69.076679][ T5] sony 0003:054C:0268.0016: failed to claim input [ 69.200802][ T53] usb 5-1: USB disconnect, device number 6 [ 69.349807][ T835] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /5/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 69.661983][ T968] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.695150][ T968] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.741160][ T968] EXT4-fs (loop0): 1 orphan inode deleted [ 69.746763][ T968] EXT4-fs (loop0): 1 truncate cleaned up [ 69.764603][ T968] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota, [ 69.835208][ T968] kvm: emulating exchange as write [ 69.842213][ T975] FAT-fs (loop2): Directory bread(block 64) failed [ 69.868759][ T975] FAT-fs (loop2): Directory bread(block 65) failed [ 69.876712][ T972] EXT4-fs (loop4): 1 orphan inode deleted [ 69.882428][ T972] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 69.914671][ T975] FAT-fs (loop2): Directory bread(block 66) failed [ 69.933614][ T975] FAT-fs (loop2): Directory bread(block 67) failed [ 69.953898][ T975] FAT-fs (loop2): Directory bread(block 68) failed [ 69.973209][ T975] FAT-fs (loop2): Directory bread(block 69) failed [ 69.984020][ T972] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 70.003362][ T975] FAT-fs (loop2): Directory bread(block 70) failed [ 70.041409][ T975] FAT-fs (loop2): Directory bread(block 71) failed [ 70.060692][ T975] FAT-fs (loop2): Directory bread(block 72) failed [ 70.081142][ T975] FAT-fs (loop2): Directory bread(block 73) failed [ 70.165361][ T980] syz.4.149[980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.165420][ T980] syz.4.149[980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.454718][ T469] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 70.738114][ T469] usb 3-1: Using ep0 maxpacket: 16 [ 70.888279][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.915769][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.138182][ T469] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 71.150123][ T469] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 71.167450][ T469] usb 3-1: Product: syz [ 71.175539][ T469] usb 3-1: Manufacturer: syz [ 71.185263][ T469] usb 3-1: config 0 descriptor?? [ 71.392494][ T994] FAT-fs (loop0): Directory bread(block 64) failed [ 71.408196][ T994] FAT-fs (loop0): Directory bread(block 65) failed [ 71.414540][ T994] FAT-fs (loop0): Directory bread(block 66) failed [ 71.438158][ T994] FAT-fs (loop0): Directory bread(block 67) failed [ 71.445586][ T994] FAT-fs (loop0): Directory bread(block 68) failed [ 71.458144][ T994] FAT-fs (loop0): Directory bread(block 69) failed [ 71.468143][ T994] FAT-fs (loop0): Directory bread(block 70) failed [ 71.474466][ T994] FAT-fs (loop0): Directory bread(block 71) failed [ 71.498328][ T994] FAT-fs (loop0): Directory bread(block 72) failed [ 71.504655][ T994] FAT-fs (loop0): Directory bread(block 73) failed [ 71.669424][ T469] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0xd [ 71.677753][ T469] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 71.858128][ T579] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 72.099349][ T975] device syzkaller0 entered promiscuous mode [ 72.108111][ T579] usb 1-1: Using ep0 maxpacket: 16 [ 72.118130][ T469] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 72.137990][ T469] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 72.151066][ T469] kovaplus: probe of 0003:1E7D:2D50.0017 failed with error -71 [ 72.174284][ T469] usb 3-1: USB disconnect, device number 11 [ 72.228166][ T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.248448][ T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.398210][ T579] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 72.427417][ T579] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 72.437487][ T579] usb 1-1: Product: syz [ 72.441481][ T579] usb 1-1: Manufacturer: syz [ 72.470744][ T579] usb 1-1: config 0 descriptor?? [ 72.949018][ T579] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0xd [ 72.966807][ T579] kovaplus 0003:1E7D:2D50.0018: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 73.048118][ T469] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 73.298087][ T469] usb 3-1: Using ep0 maxpacket: 32 [ 73.391332][ T994] device syzkaller0 entered promiscuous mode [ 73.428223][ T469] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 73.438962][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.448173][ T579] kovaplus 0003:1E7D:2D50.0018: couldn't init struct kovaplus_device [ 73.449899][ T469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.467262][ T469] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 73.471983][ T579] kovaplus 0003:1E7D:2D50.0018: couldn't install mouse [ 73.479994][ T469] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 73.495508][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.504050][ T469] usb 3-1: config 0 descriptor?? [ 73.512822][ T579] kovaplus: probe of 0003:1E7D:2D50.0018 failed with error -71 [ 73.565226][ T579] usb 1-1: USB disconnect, device number 12 [ 73.812695][ T1017] FAULT_INJECTION: forcing a failure. [ 73.812695][ T1017] name failslab, interval 1, probability 0, space 0, times 0 [ 73.825216][ T1017] CPU: 1 PID: 1017 Comm: syz.4.158 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 73.834732][ T1017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.844635][ T1017] Call Trace: [ 73.847766][ T1017] dump_stack_lvl+0x1e2/0x24b [ 73.852266][ T1017] ? bfq_pos_tree_add_move+0x43b/0x43b [ 73.857562][ T1017] ? wake_up_klogd+0xb8/0xf0 [ 73.861985][ T1017] dump_stack+0x15/0x17 [ 73.865979][ T1017] should_fail+0x3c6/0x510 [ 73.870234][ T1017] ? ethnl_default_start+0x142/0x5a0 [ 73.875355][ T1017] __should_failslab+0xa4/0xe0 [ 73.879957][ T1017] should_failslab+0x9/0x20 [ 73.884291][ T1017] __kmalloc+0x60/0x330 [ 73.888292][ T1017] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 73.893755][ T1017] ? ethnl_default_start+0x109/0x5a0 [ 73.898877][ T1017] ethnl_default_start+0x142/0x5a0 [ 73.903819][ T1017] genl_start+0x3ee/0x6c0 [ 73.907987][ T1017] __netlink_dump_start+0x4af/0x830 [ 73.913024][ T1017] genl_rcv_msg+0xe6b/0x16e0 [ 73.917448][ T1017] ? __switch_to_asm+0x34/0x60 [ 73.922046][ T1017] ? genl_rcv+0x40/0x40 [ 73.926039][ T1017] ? release_firmware_map_entry+0x18d/0x18d [ 73.931770][ T1017] ? __kasan_check_read+0x11/0x20 [ 73.936627][ T1017] ? preempt_schedule_irq+0xe7/0x140 [ 73.941749][ T1017] ? preempt_schedule_notrace+0x140/0x140 [ 73.947304][ T1017] ? preempt_schedule_irq+0xe7/0x140 [ 73.952422][ T1017] ? preempt_schedule_notrace+0x140/0x140 [ 73.958064][ T1017] ? irqentry_exit+0x4f/0x60 [ 73.962492][ T1017] ? genl_rcv_msg+0x16e0/0x16e0 [ 73.967179][ T1017] ? ethnl_default_start+0x5a0/0x5a0 [ 73.972296][ T1017] ? genl_lock_done+0xd0/0xd0 [ 73.976811][ T1017] ? sysvec_reschedule_ipi+0x83/0x160 [ 73.982020][ T1017] ? ethnl_default_notify+0x600/0x600 [ 73.987233][ T1017] ? ethnl_default_doit+0xae0/0xae0 [ 73.992267][ T1017] ? ethnl_default_start+0x5a0/0x5a0 [ 73.997381][ T1017] ? ethnl_default_dumpit+0xdd0/0xdd0 [ 74.002598][ T1017] netlink_rcv_skb+0x1cf/0x410 [ 74.007191][ T1017] ? genl_rcv+0x40/0x40 [ 74.011183][ T1017] ? netlink_ack+0xb30/0xb30 [ 74.015611][ T1017] ? down_read+0xf0/0x210 [ 74.019779][ T1017] ? __down_common+0x530/0x530 [ 74.024374][ T1017] ? __netlink_lookup+0x37b/0x3a0 [ 74.029244][ T1017] genl_rcv+0x28/0x40 [ 74.033057][ T1017] netlink_unicast+0x8df/0xac0 [ 74.037670][ T1017] ? netlink_detachskb+0x90/0x90 [ 74.042469][ T1017] ? security_netlink_send+0x7b/0xa0 [ 74.047549][ T1017] netlink_sendmsg+0xa46/0xd00 [ 74.052153][ T1017] ? netlink_getsockopt+0x5c0/0x5c0 [ 74.057181][ T1017] ? irqentry_exit+0x4f/0x60 [ 74.061611][ T1017] ? security_socket_sendmsg+0x82/0xb0 [ 74.066902][ T1017] ? netlink_getsockopt+0x5c0/0x5c0 [ 74.072113][ T1017] ____sys_sendmsg+0x59e/0x8f0 [ 74.076721][ T1017] ? __sys_sendmsg_sock+0x40/0x40 [ 74.081576][ T1017] ? import_iovec+0xe5/0x120 [ 74.085999][ T1017] ___sys_sendmsg+0x252/0x2e0 [ 74.090513][ T1017] ? __sys_sendmsg+0x280/0x280 [ 74.095121][ T1017] __se_sys_sendmsg+0x1b1/0x280 [ 74.099802][ T1017] ? __x64_sys_sendmsg+0x90/0x90 [ 74.104576][ T1017] ? fpu__clear_all+0x20/0x20 [ 74.109086][ T1017] ? __kasan_check_read+0x11/0x20 [ 74.113946][ T1017] __x64_sys_sendmsg+0x7b/0x90 [ 74.118546][ T1017] do_syscall_64+0x34/0x70 [ 74.122800][ T1017] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 74.128528][ T1017] RIP: 0033:0x7f7137410e79 [ 74.132779][ T1017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.152223][ T1017] RSP: 002b:00007f713604c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.160468][ T1017] RAX: ffffffffffffffda RBX: 00007f71375ad130 RCX: 00007f7137410e79 [ 74.168363][ T1017] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000007 [ 74.176175][ T1017] RBP: 00007f713604c090 R08: 0000000000000000 R09: 0000000000000000 [ 74.183991][ T1017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.191799][ T1017] R13: 0000000000000000 R14: 00007f71375ad130 R15: 00007ffd35baac38 [ 74.379159][ T1009] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 74.397345][ T1009] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 74.628104][ T5] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 74.828463][ T469] usb 3-1: string descriptor 0 read error: -71 [ 74.978112][ T469] usbhid 3-1:0.0: can't add hid device: -71 [ 74.983975][ T469] usbhid: probe of 3-1:0.0 failed with error -71 [ 75.005227][ T469] usb 3-1: USB disconnect, device number 12 [ 75.198132][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.218092][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.227633][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 75.258091][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.268344][ T5] usb 1-1: config 0 descriptor?? [ 75.315638][ T506] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /22/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 75.734680][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 75.734693][ T24] audit: type=1400 audit(1724707964.899:448): avc: denied { ioctl } for pid=1020 comm="syz.0.159" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.103961][ T24] audit: type=1400 audit(1724707966.269:449): avc: denied { watch } for pid=1038 comm="syz.4.165" path="/14/file1" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.693965][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.718082][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.725297][ T1044] device bridge_slave_0 entered promiscuous mode [ 77.741993][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.758083][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.765610][ T1044] device bridge_slave_1 entered promiscuous mode [ 77.865106][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.871988][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.879078][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.885835][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.155080][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.181242][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.208683][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.240541][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.258478][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.265343][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.268254][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 78.282729][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.283297][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 78.300930][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.307783][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.308204][ T5] usb 1-1: USB disconnect, device number 13 [ 78.337140][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.348471][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.369836][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.379205][ T24] audit: type=1400 audit(1724707967.549:450): avc: denied { read } for pid=1052 comm="syz.0.168" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.409271][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.426711][ T24] audit: type=1400 audit(1724707967.549:451): avc: denied { open } for pid=1052 comm="syz.0.168" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.427223][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.468707][ T1054] binder: 1052:1054 ioctl 4018620d 0 returned -22 [ 78.482445][ T24] audit: type=1400 audit(1724707967.629:452): avc: denied { read } for pid=1052 comm="syz.0.168" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.487821][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.537554][ T24] audit: type=1400 audit(1724707967.629:453): avc: denied { open } for pid=1052 comm="syz.0.168" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.564081][ T1044] device veth0_vlan entered promiscuous mode [ 78.586790][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.601297][ T1044] device veth1_macvtap entered promiscuous mode [ 78.636436][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.639063][ T24] audit: type=1400 audit(1724707967.639:454): avc: denied { ioctl } for pid=1052 comm="syz.0.168" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.646735][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.736976][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.745793][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.869056][ T746] device bridge_slave_1 left promiscuous mode [ 78.875249][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.918507][ T746] device bridge_slave_0 left promiscuous mode [ 78.944959][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.966606][ T746] device veth1_macvtap left promiscuous mode [ 78.985161][ T746] device veth0_vlan left promiscuous mode [ 79.281346][ T1070] erofs: (device loop0): mounted with root inode @ nid 36. [ 79.503837][ T1073] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 79.513452][ T1073] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 79.896596][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.913621][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.934174][ T1077] device bridge_slave_0 entered promiscuous mode [ 79.941224][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.958284][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.965584][ T1077] device bridge_slave_1 entered promiscuous mode [ 80.078105][ T20] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 80.091116][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.097971][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.105079][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.111880][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.142334][ T24] audit: type=1326 audit(1724707969.309:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 80.144715][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.188102][ T24] audit: type=1326 audit(1724707969.309:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 80.211249][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.238111][ T24] audit: type=1326 audit(1724707969.339:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70859b4e79 code=0x7ffc0000 [ 80.248324][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.300923][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.309209][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.316128][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.353772][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.378302][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.385164][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.408527][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.419070][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.436902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.446511][ T1082] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 80.454187][ T1082] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 80.480631][ T1077] device veth0_vlan entered promiscuous mode [ 80.487769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.498211][ T793] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 80.518351][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.522649][ T1077] device veth1_macvtap entered promiscuous mode [ 80.535241][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.546162][ T1082] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 80.555173][ T20] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 80.586475][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.589846][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.595232][ T20] usb 4-1: config 0 descriptor?? [ 80.619144][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.638001][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.659093][ T1082] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 80.665948][ T1082] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.683578][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.691835][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.811913][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 80.811925][ T24] audit: type=1326 audit(1724707969.969:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70859b4a7b code=0x7ffc0000 [ 80.890393][ T24] audit: type=1326 audit(1724707970.009:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70859b4a7b code=0x7ffc0000 [ 81.059489][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.078098][ T793] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.098106][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.106388][ T746] device bridge_slave_1 left promiscuous mode [ 81.115719][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.156701][ T24] audit: type=1326 audit(1724707970.029:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70859b4a7b code=0x7ffc0000 [ 81.180037][ T793] usb 1-1: config 0 descriptor?? [ 81.219140][ T20] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 81.225953][ T20] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 81.249320][ T20] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 81.280987][ T24] audit: type=1326 audit(1724707970.049:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70859b4a7b code=0x7ffc0000 [ 81.338299][ T24] audit: type=1326 audit(1724707970.149:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70859b4a7b code=0x7ffc0000 [ 81.338489][ T746] device bridge_slave_0 left promiscuous mode [ 81.367675][ T24] audit: type=1326 audit(1724707970.239:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70859b4a7b code=0x7ffc0000 [ 81.394572][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.402459][ T24] audit: type=1400 audit(1724707970.249:512): avc: denied { write } for pid=1081 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.426654][ T746] device veth1_macvtap left promiscuous mode [ 81.452449][ T746] device veth0_vlan left promiscuous mode [ 81.480589][ T24] audit: type=1400 audit(1724707970.249:513): avc: denied { read } for pid=1081 comm="syz.4.173" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.686721][ T24] audit: type=1400 audit(1724707970.259:514): avc: denied { open } for pid=1081 comm="syz.4.173" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.762876][ T603] usb 4-1: USB disconnect, device number 7 [ 81.860587][ T24] audit: type=1400 audit(1724707970.259:515): avc: denied { ioctl } for pid=1081 comm="syz.4.173" path="/dev/usbmon0" dev="devtmpfs" ino=134 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.017800][ T1106] netlink: 120 bytes leftover after parsing attributes in process `syz.1.178'. [ 82.149061][ T793] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 82.170105][ T793] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001A/input/input11 [ 82.265413][ T793] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 82.485870][ T746] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.749459][ T1133] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.185: casefold flag without casefold feature [ 82.819118][ T793] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.838295][ T1133] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.185: missing EA_INODE flag [ 82.858143][ T1133] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.185: error while reading EA inode 12 err=-117 [ 82.899557][ T1133] EXT4-fs (loop1): 1 orphan inode deleted [ 82.919139][ T1133] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 83.052521][ T317] usb 1-1: USB disconnect, device number 14 [ 83.094489][ T1137] erofs: (device loop1): mounted with root inode @ nid 36. [ 83.291602][ T1140] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 83.301037][ T1140] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 83.328404][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.357338][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.405897][ T793] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 83.439082][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.454205][ T793] usb 5-1: config 0 descriptor?? [ 83.637327][ T1143] 9pnet: Insufficient options for proto=fd [ 83.958972][ T793] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 83.965579][ T793] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 83.988540][ T793] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 84.248132][ T317] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 84.380383][ T20] usb 5-1: USB disconnect, device number 7 [ 84.498131][ T317] usb 2-1: Using ep0 maxpacket: 16 [ 84.521458][ T1167] F2FS-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 84.548398][ T603] Bluetooth: hci0: command 0x1003 tx timeout [ 84.554287][ T703] Bluetooth: hci0: sending frame failed (-49) [ 84.618176][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 84.629358][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 84.640640][ T317] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 84.649679][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.658660][ T317] usb 2-1: config 0 descriptor?? [ 84.678227][ T1147] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.104051][ T1173] FAT-fs (loop4): Directory bread(block 64) failed [ 85.110589][ T1173] FAT-fs (loop4): Directory bread(block 65) failed [ 85.117011][ T1173] FAT-fs (loop4): Directory bread(block 66) failed [ 85.123720][ T1173] FAT-fs (loop4): Directory bread(block 67) failed [ 85.130226][ T1173] FAT-fs (loop4): Directory bread(block 68) failed [ 85.136537][ T1173] FAT-fs (loop4): Directory bread(block 69) failed [ 85.143106][ T1173] FAT-fs (loop4): Directory bread(block 70) failed [ 85.149578][ T1173] FAT-fs (loop4): Directory bread(block 71) failed [ 85.155912][ T1173] FAT-fs (loop4): Directory bread(block 72) failed [ 85.162570][ T1173] FAT-fs (loop4): Directory bread(block 73) failed [ 85.458145][ T317] usbhid 2-1:0.0: can't add hid device: -71 [ 85.463940][ T317] usbhid: probe of 2-1:0.0 failed with error -71 [ 85.473075][ T317] usb 2-1: USB disconnect, device number 9 [ 85.478844][ T603] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.558118][ T793] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 85.606363][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.613411][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.620676][ T1180] device bridge_slave_0 entered promiscuous mode [ 85.627350][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.634487][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.641968][ T1180] device bridge_slave_1 entered promiscuous mode [ 85.673126][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.680113][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.687173][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.694010][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.710723][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.718269][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.725394][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.728102][ T603] usb 5-1: Using ep0 maxpacket: 16 [ 85.740303][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.748593][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.755415][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.769024][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.776918][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.783701][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.791480][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.799285][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.814434][ T1180] device veth0_vlan entered promiscuous mode [ 85.820712][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.829296][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.836949][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.844518][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.857512][ T1180] device veth1_macvtap entered promiscuous mode [ 85.864460][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.872247][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.883409][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.886589][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.904258][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.952034][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.963199][ T793] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.972102][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.980914][ T793] usb 1-1: config 0 descriptor?? [ 86.008245][ T603] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 86.017405][ T603] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 86.198701][ T603] usb 5-1: Product: syz [ 86.202835][ T603] usb 5-1: Manufacturer: syz [ 86.209918][ T603] usb 5-1: config 0 descriptor?? [ 86.508702][ T554] device bridge_slave_1 left promiscuous mode [ 86.514816][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.522657][ T554] device bridge_slave_0 left promiscuous mode [ 86.528775][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.536667][ T554] device veth1_macvtap left promiscuous mode [ 86.542613][ T554] device veth0_vlan left promiscuous mode [ 86.558526][ T1207] netlink: 100 bytes leftover after parsing attributes in process `syz.2.202'. [ 86.567590][ T1207] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57226 sclass=netlink_xfrm_socket pid=1207 comm=syz.2.202 [ 86.679086][ T603] kovaplus 0003:1E7D:2D50.001C: unknown main item tag 0xd [ 86.687256][ T603] kovaplus 0003:1E7D:2D50.001C: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 86.712266][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 86.719530][ T703] Bluetooth: hci0: sending frame failed (-49) [ 86.739504][ T1207] F2FS-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 86.818558][ T793] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 86.827710][ T793] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001D/input/input12 [ 86.901880][ T1210] EXT4-fs (loop1): bad s_want_extra_isize: 11962 [ 86.914433][ T793] keytouch 0003:0926:3333.001D: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 87.093712][ T1214] netlink: 165 bytes leftover after parsing attributes in process `syz.1.203'. [ 87.230955][ T1173] device syzkaller0 entered promiscuous mode [ 87.248177][ T603] kovaplus 0003:1E7D:2D50.001C: couldn't init struct kovaplus_device [ 87.276208][ T603] kovaplus 0003:1E7D:2D50.001C: couldn't install mouse [ 87.288964][ T603] kovaplus: probe of 0003:1E7D:2D50.001C failed with error -71 [ 87.304902][ T603] usb 5-1: USB disconnect, device number 8 [ 87.328078][ T24] kauditd_printk_skb: 95 callbacks suppressed [ 87.328089][ T24] audit: type=1400 audit(1724707976.489:611): avc: denied { mounton } for pid=1223 comm="syz.2.206" path="/6/file0" dev="incremental-fs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.358421][ T24] audit: type=1400 audit(1724707976.499:612): avc: denied { read } for pid=1223 comm="syz.2.206" name="file0" dev="incremental-fs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.385410][ T24] audit: type=1400 audit(1724707976.499:613): avc: denied { open } for pid=1223 comm="syz.2.206" path="/6/file0/file0" dev="incremental-fs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.409240][ T24] audit: type=1400 audit(1724707976.499:614): avc: denied { write } for pid=1223 comm="syz.2.206" path="/6/file0/file0" dev="incremental-fs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.958244][ T579] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 88.208118][ T579] usb 2-1: Using ep0 maxpacket: 32 [ 88.517989][ T579] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 88.528535][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.539182][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.548743][ T579] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 88.561551][ T579] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 88.570388][ T579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.578982][ T579] usb 2-1: config 0 descriptor?? [ 88.685182][ T20] usb 1-1: USB disconnect, device number 15 [ 88.690939][ C1] keytouch 0003:0926:3333.001D: usb_submit_urb(ctrl) failed: -19 [ 88.709661][ T110] Bluetooth: hci1: Frame reassembly failed (-84) [ 88.788125][ T323] Bluetooth: hci0: command 0x1009 tx timeout [ 88.879489][ T1229] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 88.890489][ T1229] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 89.208180][ T579] usb 2-1: string descriptor 0 read error: -71 [ 89.328159][ T579] usbhid 2-1:0.0: can't add hid device: -71 [ 89.333957][ T579] usbhid: probe of 2-1:0.0 failed with error -71 [ 89.340844][ T579] usb 2-1: USB disconnect, device number 10 [ 89.613975][ T24] audit: type=1400 audit(1724707978.779:615): avc: denied { setopt } for pid=1248 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.633334][ T24] audit: type=1400 audit(1724707978.779:616): avc: denied { bind } for pid=1248 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.676519][ T1077] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /10/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 89.713969][ T1252] syz.2.215[1252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.714023][ T1252] syz.2.215[1252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.859591][ T1254] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.259473][ T1262] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.278788][ T1262] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.219: casefold flag without casefold feature [ 90.291588][ T1262] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.219: missing EA_INODE flag [ 90.303369][ T1262] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.219: error while reading EA inode 12 err=-117 [ 90.315742][ T1262] EXT4-fs (loop2): 1 orphan inode deleted [ 90.321587][ T1262] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001, [ 90.599825][ T24] audit: type=1400 audit(1724707979.719:617): avc: denied { ioctl } for pid=1261 comm="syz.2.219" path="socket:[20704]" dev="sockfs" ino=20704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.788107][ T20] Bluetooth: hci1: command 0x1003 tx timeout [ 90.794025][ T1241] Bluetooth: hci1: sending frame failed (-49) [ 91.648145][ T793] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 91.888090][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 92.008156][ T793] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 92.018260][ T793] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.030958][ T793] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 92.040055][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.088112][ T579] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 92.098664][ T793] hub 3-1:4.0: bad descriptor, ignoring hub [ 92.104400][ T793] hub: probe of 3-1:4.0 failed with error -5 [ 92.110617][ T793] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 92.488221][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.499160][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.508725][ T579] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 92.517696][ T579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.526506][ T579] usb 5-1: config 0 descriptor?? [ 92.626764][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.633657][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.640869][ T1285] device bridge_slave_0 entered promiscuous mode [ 92.647635][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.654626][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.661874][ T1285] device bridge_slave_1 entered promiscuous mode [ 92.705988][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.712870][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.719957][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.726729][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.757595][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.766440][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.774030][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.781281][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.819074][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.822000][ T1289] FAT-fs (loop2): Unrecognized mount option "shordname=mixed" or missing value [ 92.827195][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.850279][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.857117][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.864511][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.872523][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.878116][ T15] Bluetooth: hci1: command 0x1001 tx timeout [ 92.879363][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.892545][ T662] Bluetooth: hci1: sending frame failed (-49) [ 92.898700][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.906435][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.917810][ T1285] device veth0_vlan entered promiscuous mode [ 92.926585][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.934629][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.942225][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.955798][ T1285] device veth1_macvtap entered promiscuous mode [ 92.963618][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.978408][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.986580][ T793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.999763][ T579] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 93.448187][ T579] hid-led: probe of 0003:0FC5:B080.001E failed with error -71 [ 93.463555][ T579] usb 5-1: USB disconnect, device number 9 [ 93.479022][ T110] device bridge_slave_1 left promiscuous mode [ 93.485051][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.492495][ T110] device bridge_slave_0 left promiscuous mode [ 93.498592][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.506494][ T110] device veth1_macvtap left promiscuous mode [ 93.512631][ T110] device veth0_vlan left promiscuous mode [ 93.990501][ T1301] FAT-fs (loop3): Unrecognized mount option "nonumtail=:it=utf8" or missing value [ 94.288163][ T520] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 94.381961][ T1308] x_tables: duplicate underflow at hook 1 [ 94.668258][ T520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.679140][ T520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.689181][ T520] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 94.698529][ T520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.720928][ T520] usb 5-1: config 0 descriptor?? [ 94.948225][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 95.188249][ T579] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.258961][ T520] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 95.265877][ T520] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 95.288410][ T520] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 95.548134][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.558856][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.568902][ T579] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 95.577730][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.589331][ T579] usb 4-1: config 0 descriptor?? [ 95.682533][ T603] usb 5-1: USB disconnect, device number 10 [ 96.069393][ T579] sony 0003:054C:0268.0020: unknown main item tag 0xd [ 96.076004][ T579] sony 0003:054C:0268.0020: item fetching failed at offset 4/5 [ 96.083988][ T579] sony 0003:054C:0268.0020: parse failed [ 96.089716][ T579] sony: probe of 0003:054C:0268.0020 failed with error -22 [ 96.269543][ T323] usb 4-1: USB disconnect, device number 8 [ 96.479231][ T1315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 96.498195][ T1315] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 96.519257][ T1315] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 96.527449][ T1315] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.230: mark_inode_dirty error [ 96.539152][ T1315] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 96.547249][ T1315] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.230: mark_inode_dirty error [ 96.578217][ T579] usb 3-1: USB disconnect, device number 13 [ 96.732399][ T1321] xt_hashlimit: overflow, try lower: 0/0 [ 96.911742][ T1324] FAULT_INJECTION: forcing a failure. [ 96.911742][ T1324] name failslab, interval 1, probability 0, space 0, times 0 [ 96.924602][ T1324] CPU: 1 PID: 1324 Comm: syz.3.231 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 96.934309][ T1324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.944199][ T1324] Call Trace: [ 96.947338][ T1324] dump_stack_lvl+0x1e2/0x24b [ 96.951846][ T1324] ? bfq_pos_tree_add_move+0x43b/0x43b [ 96.957141][ T1324] ? __lookup_slow+0x2fe/0x400 [ 96.961741][ T1324] dump_stack+0x15/0x17 [ 96.965729][ T1324] should_fail+0x3c6/0x510 [ 96.969984][ T1324] ? new_inode_pseudo+0x7c/0x220 [ 96.974768][ T1324] __should_failslab+0xa4/0xe0 [ 96.979361][ T1324] should_failslab+0x9/0x20 [ 96.983695][ T1324] kmem_cache_alloc+0x3d/0x2e0 [ 96.988296][ T1324] ? lookup_one_len_common+0x450/0x450 [ 96.993591][ T1324] new_inode_pseudo+0x7c/0x220 [ 96.998191][ T1324] new_inode+0x28/0x1c0 [ 97.002183][ T1324] ? start_creating+0x1d4/0x2f0 [ 97.006876][ T1324] debugfs_create_dir+0xf4/0x450 [ 97.011645][ T1324] hci_register_dev+0x27c/0x900 [ 97.016331][ T1324] hci_uart_tty_ioctl+0x8a5/0xa10 [ 97.021192][ T1324] ? hci_uart_tty_write+0x10/0x10 [ 97.026052][ T1324] tty_ioctl+0x93b/0xc90 [ 97.030133][ T1324] ? tty_do_resize+0x180/0x180 [ 97.034731][ T1324] __se_sys_ioctl+0x114/0x190 [ 97.039246][ T1324] __x64_sys_ioctl+0x7b/0x90 [ 97.043671][ T1324] do_syscall_64+0x34/0x70 [ 97.047925][ T1324] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 97.053650][ T1324] RIP: 0033:0x7fa7229fce79 [ 97.057906][ T1324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.077345][ T1324] RSP: 002b:00007fa72167a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.085590][ T1324] RAX: ffffffffffffffda RBX: 00007fa722b98f80 RCX: 00007fa7229fce79 [ 97.093488][ T1324] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 97.101301][ T1324] RBP: 00007fa72167a090 R08: 0000000000000000 R09: 0000000000000000 [ 97.109110][ T1324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.116924][ T1324] R13: 0000000000000000 R14: 00007fa722b98f80 R15: 00007ffc9227cc88 [ 97.125998][ T1324] debugfs: out of free dentries, can not create directory 'hci0' [ 97.135628][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.209949][ T1326] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.401528][ T1329] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 97.411205][ T1329] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 98.338110][ T579] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.708187][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.718971][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.728659][ T579] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.741520][ T579] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 98.750490][ T579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.761551][ T579] usb 5-1: config 0 descriptor?? [ 99.139303][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.146230][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.153711][ T1335] device bridge_slave_0 entered promiscuous mode [ 99.160732][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.167555][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.175065][ T1335] device bridge_slave_1 entered promiscuous mode [ 99.188302][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 99.194146][ T703] Bluetooth: hci0: sending frame failed (-49) [ 99.228901][ T579] acrux 0003:1A34:0802.0021: item fetching failed at offset 3/5 [ 99.238591][ T579] acrux 0003:1A34:0802.0021: parse failed [ 99.244174][ T579] acrux: probe of 0003:1A34:0802.0021 failed with error -22 [ 99.273388][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.280254][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.287329][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.294144][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.315644][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.322951][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.331182][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.338619][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.359095][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.367136][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.373991][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.381663][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.390732][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.397554][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.405031][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.412823][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.430646][ T5] usb 5-1: USB disconnect, device number 11 [ 99.442876][ T1335] device veth0_vlan entered promiscuous mode [ 99.453258][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.462445][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.470706][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.477955][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.490667][ T1335] device veth1_macvtap entered promiscuous mode [ 99.501213][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.519517][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.527638][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.818145][ T520] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 99.957648][ T110] device bridge_slave_1 left promiscuous mode [ 99.963888][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.973398][ T110] device bridge_slave_0 left promiscuous mode [ 99.979534][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.987358][ T110] device veth1_macvtap left promiscuous mode [ 99.993514][ T110] device veth0_vlan left promiscuous mode [ 100.084659][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.088224][ T520] usb 1-1: Using ep0 maxpacket: 16 [ 100.091716][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.103829][ T1344] device bridge_slave_0 entered promiscuous mode [ 100.111087][ T24] audit: type=1400 audit(1724707989.279:618): avc: denied { mounton } for pid=1343 comm="syz.4.236" path="/proc/105/task" dev="proc" ino=21240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 100.111416][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.140386][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.157366][ T1344] device bridge_slave_1 entered promiscuous mode [ 100.205964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.213667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.223411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.228194][ T520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.232076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.242066][ T520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.250404][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.259649][ T520] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 100.266345][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.275239][ T520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.282948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.298638][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.300943][ T520] usb 1-1: config 0 descriptor?? [ 100.307437][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.318846][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.326111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.340816][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.351591][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.363472][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.374391][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.382863][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.390269][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.399139][ T1344] device veth0_vlan entered promiscuous mode [ 100.409048][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.418213][ T1344] device veth1_macvtap entered promiscuous mode [ 100.427423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.438965][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.788774][ T520] cp2112 0003:10C4:EA90.0022: unexpected long global item [ 100.795849][ T520] cp2112 0003:10C4:EA90.0022: parse failed [ 100.801575][ T520] cp2112: probe of 0003:10C4:EA90.0022 failed with error -22 [ 100.908941][ T110] device bridge_slave_1 left promiscuous mode [ 100.914938][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.922199][ T110] device bridge_slave_0 left promiscuous mode [ 100.928200][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.936074][ T110] device veth1_macvtap left promiscuous mode [ 100.942215][ T110] device veth0_vlan left promiscuous mode [ 100.991820][ T1355] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 101.001492][ T520] usb 1-1: USB disconnect, device number 16 [ 101.004809][ T1355] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 101.083024][ T24] audit: type=1400 audit(1724707990.249:619): avc: denied { getattr } for pid=1354 comm="syz.4.237" name="/" dev="incremental-fs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.268444][ T520] Bluetooth: hci0: command 0x1001 tx timeout [ 101.274290][ T703] Bluetooth: hci0: sending frame failed (-49) [ 101.668927][ T110] device bridge_slave_1 left promiscuous mode [ 101.674858][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.682132][ T110] device bridge_slave_0 left promiscuous mode [ 101.688089][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.695433][ T110] device veth1_macvtap left promiscuous mode [ 101.701286][ T110] device veth0_vlan left promiscuous mode [ 102.881063][ T110] device bridge_slave_1 left promiscuous mode [ 102.886976][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.894266][ T110] device bridge_slave_0 left promiscuous mode [ 102.900240][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.907507][ T110] device veth1_macvtap left promiscuous mode [ 102.913377][ T110] device veth0_vlan left promiscuous mode SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=235 state=1 status=67 (errno 9: Bad file descriptor) [ 103.348256][ T469] Bluetooth: hci0: command 0x1009 tx timeout [ 104.258900][ T110] device bridge_slave_1 left promiscuous mode [ 104.264844][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.272164][ T110] device bridge_slave_0 left promiscuous mode [ 104.278214][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.286088][ T110] device bridge_slave_1 left promiscuous mode [ 104.292144][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.299294][ T110] device bridge_slave_0 left promiscuous mode [ 104.305185][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.313070][ T110] device veth1_macvtap left promiscuous mode [ 104.318949][ T110] device veth0_vlan left promiscuous mode [ 104.324601][ T110] device veth1_macvtap left promiscuous mode [ 104.330452][ T110] device veth0_vlan left promiscuous mode [ 108.509038][ T110] device bridge_slave_1 left promiscuous mode [ 108.514956][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.522277][ T110] device bridge_slave_0 left promiscuous mode [ 108.528249][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.535528][ T110] device veth1_macvtap left promiscuous mode [ 108.541401][ T110] device veth0_vlan left promiscuous mode