last executing test programs: 6.250199795s ago: executing program 0 (id=182): socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$getenv(0x4201, 0x0, 0xf, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, 0x0, 0x0) 5.083966617s ago: executing program 2 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) 5.076058348s ago: executing program 0 (id=205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x801) r5 = dup3(r4, r3, 0x0) write$char_usb(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r8 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r8, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) 4.971675557s ago: executing program 0 (id=206): socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x0, 0x0) getpid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x4}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) 4.922646291s ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) creat(&(0x7f0000000080)='./file0\x00', 0x100) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) 4.803791951s ago: executing program 2 (id=208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r5, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000010018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x4, 0x4, 0x4, 0xfffffffffffffff4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @alu={0x7, 0x1, 0x2, 0x5, 0xb, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0xe, 0xce, &(0x7f0000000680)=""/206, 0x41000, 0x2, '\x00', r11, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=[{0x3, 0x4, 0x8}, {0x1, 0x5, 0x3, 0x4}], 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6874a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.005755441s ago: executing program 0 (id=212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x27) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0xfffffffc}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000980)=0x3, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x6, 0x0, 0x1e, 0x101, 0x10, @private2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8030, 0x10, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000880)={'sit0\x00', r6, 0x80, 0x20, 0x9, 0x8, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x65, 0x0, 0xf8, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, {[@rr={0x7, 0x1b, 0x98, [@multicast2, @loopback, @broadcast, @private=0xa010101, @loopback, @multicast1]}, @timestamp={0x44, 0xc, 0xe8, 0x0, 0x0, [0x8, 0x5]}, @noop]}}}}}) (async) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x41) 3.951939095s ago: executing program 0 (id=213): socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$getenv(0x4201, 0x0, 0xf, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, 0x0, 0x0) 2.818906525s ago: executing program 0 (id=223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000080)='.log\x00', 0x0, 0x0) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x10000000}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002000290200000000000000000a"], 0x1c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000020040efd0720000000000010902240001000000bd1e51565c86eb658e1f092101000001220500090581030000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.7567314s ago: executing program 4 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x801) r5 = dup3(r4, r3, 0x0) write$char_usb(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r7, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 2.663474188s ago: executing program 2 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "9628be0181116e062c8751ae144f6314c493fd7960a582602407f67f89af5ae79fbccaa6a03e0993960544a30013623ee5567c780c46cfde7ee8bb0245413dd1"}, 0x48, 0xffffffffffffffff) keyctl$reject(0x8, r2, 0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500005c000000000011907800000000ffffffff00004e2000489078030000000000000049b589f633690f88282a8010c1be9b14c850c5814eb973de0a6bf3fe4b141b80ebf3e613085215d4f60d1f6a6914613c5743bf01bf8fe856"], 0x0) r6 = dup2(r0, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x7, 0x80000000, 0x4, @private2, @remote, 0x8, 0x808f, 0xf98, 0xd8}}) statx(r6, &(0x7f00000007c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000900)={&(0x7f0000000a40)=ANY=[@ANYBLOB="740300001900000227bd7000fbdbdf25ac1e0101000000000000000000000000fc0100000000000000000000000000014e2000004e2300060a00008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000006000000000000000500000000000000551300000000000035000000000000000600000000000000fdfffffffffffffffe8c00000000000004000000000000000e000000000000000300000000000000090000000000000003000000b56b6e0003000203000000002c00130000000000000000000000000000000001e000000100000000000000000000000000000000020000002400090000000000000000000600000000000000f0050000000000000300000000000000ac00070000000000000000000000000000000000fe8000000000000000000000000000bb4e2000024e2200010a00808001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0dcd20420000000007000000000000000000008000000000790800000000000013010000000000000100ffffffffffffb4a7000000000000060000000000000001000000000000001900000000000000ffffff7f00000000376000000000000008000000b46b6e0001000303000000000a001000000000000000000008001f0001000000ac000700fc000000000000000000000000000001640101010000000000000000000000004e2400084e22ffff0200a0202b000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x374}}, 0x40) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0xfc, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) renameat(r6, &(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00') r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.662292358s ago: executing program 4 (id=231): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYBLOB='0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[{@fat=@uid}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0xa00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc_fail\x00'}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x1, &(0x7f0000000080)={0x0}) socket(0x840000000002, 0x0, 0x100) 2.543202418s ago: executing program 2 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) getrandom(0xfffffffffffffffc, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf9ffdf, 0x0, 0x0, 0x142139}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000000)="3ef20f58230f01c90f320f78060200d9ea360f01cb0f35dae9660f3810de0fd5f6", 0x21}], 0x1, 0x58, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000100)={0x4, 0x3, 0x0, 0x0, 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x32, 0x17, 0xa6, 0x40, 0x499, 0x1058, 0x3195, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3d, 0x78, 0xbf, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) 2.173618621s ago: executing program 3 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.806695603s ago: executing program 4 (id=234): socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$getenv(0x4201, 0x0, 0xf, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, 0x0, 0x0) 1.731892719s ago: executing program 1 (id=235): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x8300000000000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r2, 0x2a, 0x1, 0x4e2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) 1.730333529s ago: executing program 4 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0xd3464, 0x0, 0x20, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.314365366s ago: executing program 3 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) creat(&(0x7f0000000080)='./file0\x00', 0x100) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) 1.26129553s ago: executing program 3 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x700}, 0x3}}, 0x10, 0x0}, 0x0) 1.187916377s ago: executing program 3 (id=240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x801) r5 = dup3(r4, r3, 0x0) write$char_usb(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r7, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 1.164701079s ago: executing program 4 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1.159787229s ago: executing program 3 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r5 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r5, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 1.15025177s ago: executing program 4 (id=242): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r5, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000010018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x4, 0x4, 0x4, 0xfffffffffffffff4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @alu={0x7, 0x1, 0x2, 0x5, 0xb, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0xe, 0xce, &(0x7f0000000680)=""/206, 0x41000, 0x2, '\x00', r11, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=[{0x3, 0x4, 0x8}, {0x1, 0x5, 0x3, 0x4}], 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 925.30775ms ago: executing program 1 (id=243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 924.84302ms ago: executing program 1 (id=244): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x50080003) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x20, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @local}, @RTA_IIF={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0xff, 0x1, 0x9, 0x7fffffff}, {0x2461, 0x6, 0xc, 0x2}, {0xeb, 0x81, 0x78, 0x3}, {0x1, 0x9, 0xa, 0x5}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0x912, 0x80000}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x47}], 0x1, 0x0, 0x0) 912.586701ms ago: executing program 1 (id=245): socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x0, 0x0) getpid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x4}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) 615.899396ms ago: executing program 2 (id=246): socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$getenv(0x4201, 0x0, 0xf, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, 0x0, 0x0) 311.641263ms ago: executing program 3 (id=247): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect$hid(0x0, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0xd, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, 'Q'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x10, 0x6, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf6}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x20, 0x9, 0x6, 0x3, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x3, 0x400}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xe5, 0x4, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x5, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x4e, 0x1e}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x520, 0x2, 0x3, 0x7e, 0x20, 0x9}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0xa, [{0xd6, &(0x7f0000000180)=@string={0xd6, 0x3, "8d12bb8b84e9da7d1ce8deeeeb79d8ebf405b616dade4f5a1f32d48eb5557f9e9999f604ae975f5f9e619204d8d294902e50efc9e5efee591bdf2b1c4e8295f6715079189e7ce94c6c69e2945805bb22119d120371d7ff6ba581397f3e19f898ad747fd15e4c5fc27d95db6d96d968772f7224f056b83b21b1154de08861cd5fd4bb84e7f25bbf5a75f83347dab18f4528157f9145d9771262da28e1b1047ed1e014f5d062ba4873715672cb87c37c82f084fb804317eb5e512323202379654bfbaa5f0dd895260292297446b9e659db88d95216"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x816}}, {0x91, &(0x7f0000000300)=@string={0x91, 0x3, "0cd21f2ccce15a6fc101734761c90741b51e81828ec669fb672906645e93a046e0c23050197a8b8e99388ac7b98b89b0b21359c3a9b106c157ed4f5abc6fd1dbd6c3edf51688210b4174e72b34e9fac3d073d4396c36a93d813fdd9ba41f55c9edea8c6a5f652ab3affa818e72347ca6f1c58b043a0b388c15e422bbb1cadaf4a2d66b98c8ac4fd80fd9cd4e097b89"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}, {0x7e, &(0x7f00000004c0)=@string={0x7e, 0x3, "5ebb5317d37006011043c7e2714e01dc2693973f71df6c3a35a7a1a709d78ec461450229951aadcdfada929de7a2d3b693bce423ffe32a105629d6fc9fd7dcdbfb1445728d83973400b745821ef5c39bea4fc1383b27e2954ff2f535a8c9ff3720d36dd82bbd751c4f0c0136930a45430cd4a1d5a2ed6ecf67745b22"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1407}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c00009d000040"]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 51.758056ms ago: executing program 1 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) creat(&(0x7f0000000080)='./file0\x00', 0x100) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) 0s ago: executing program 1 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r5 = gettid() fcntl$setown(r4, 0x8, r5) (async) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') write$P9_RATTACH(r7, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x1, 0x3, 0x5}}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40286608, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) kernel console output (not intermixed with test programs): ] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.906363][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.913263][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.920344][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.927092][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.942464][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.949345][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.956404][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.963357][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.035801][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.042998][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.050511][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.058313][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.065582][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.072688][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.079896][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.112187][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.120883][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.127754][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.135027][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.142591][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.150053][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.158279][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.165291][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.172571][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.180536][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.187375][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.194589][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.202529][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.209367][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.227881][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.235691][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.251249][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.259623][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.274618][ T287] device veth0_vlan entered promiscuous mode [ 21.286791][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.295411][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.303546][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.311182][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.327788][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.335763][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.344210][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.351059][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.358202][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.366194][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.373038][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.380290][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.388988][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.396549][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.410076][ T287] device veth1_macvtap entered promiscuous mode [ 21.418598][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.425902][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.433579][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.441754][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.450139][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.457095][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.464647][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.472726][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.481222][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.488716][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.496519][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.518867][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.526599][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.535063][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.543091][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.549973][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.557434][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.565797][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.573615][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.581518][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.590163][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.598250][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.606390][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.614814][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.623084][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.632245][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.640584][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.649517][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.657989][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.666236][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.677600][ T289] device veth0_vlan entered promiscuous mode [ 21.689337][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.697077][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.705035][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.713173][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.721483][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.728799][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.737333][ T289] device veth1_macvtap entered promiscuous mode [ 21.755818][ T290] device veth0_vlan entered promiscuous mode [ 21.766394][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.774305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.783428][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.791718][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.798675][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.806311][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.815939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.824449][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.832427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.845448][ T291] device veth0_vlan entered promiscuous mode [ 21.857976][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.865376][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.872811][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.881381][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.889728][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.897972][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.905805][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.914593][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.922934][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.930996][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.939151][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.947893][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.956375][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.965165][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.990447][ T291] device veth1_macvtap entered promiscuous mode [ 22.012625][ T290] device veth1_macvtap entered promiscuous mode [ 22.014156][ T315] loop1: detected capacity change from 0 to 128 [ 22.021167][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.034305][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.042535][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.050815][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.058911][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.066719][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.075266][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.077679][ T315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 22.083501][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.100953][ T315] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 22.106473][ T288] device veth0_vlan entered promiscuous mode [ 22.157652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.166408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.175545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.183562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.191948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.200086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.208296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.216748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.225819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.234232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.243032][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.252181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.263103][ T322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 22.272131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.279447][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.301165][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.309418][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.324268][ T288] device veth1_macvtap entered promiscuous mode [ 22.340247][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.348863][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.357036][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.426302][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.434979][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.684606][ T333] loop2: detected capacity change from 0 to 128 [ 22.804903][ T342] loop1: detected capacity change from 0 to 1024 [ 22.868506][ T342] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 22.884847][ T342] EXT4-fs (loop1): write access will be enabled during recovery [ 22.900623][ T342] EXT4-fs (loop1): barriers disabled [ 22.913325][ T342] JBD2: no valid journal superblock found [ 22.925264][ T342] EXT4-fs (loop1): error loading journal [ 23.037593][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.375691][ T357] loop1: detected capacity change from 0 to 128 [ 23.408876][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 23.427752][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.448571][ T357] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 23.457347][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.467546][ T357] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 23.577630][ T20] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 23.586748][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 23.594912][ T20] usb 1-1: SerialNumber: syz [ 23.749630][ T372] loop2: detected capacity change from 0 to 1024 [ 23.767475][ T323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.799474][ T372] ======================================================= [ 23.799474][ T372] WARNING: The mand mount option has been deprecated and [ 23.799474][ T372] and is ignored by this kernel. Remove the mand [ 23.799474][ T372] option from the mount to silence this warning. [ 23.799474][ T372] ======================================================= [ 23.858279][ T20] usb 1-1: 0:2 : does not exist [ 24.047497][ T323] usb 4-1: Using ep0 maxpacket: 8 [ 24.129431][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 24.129445][ T30] audit: type=1400 audit(1720429211.505:180): avc: denied { read write } for pid=374 comm="syz.4.20" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.158781][ T30] audit: type=1400 audit(1720429211.505:181): avc: denied { open } for pid=374 comm="syz.4.20" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.217536][ T323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.299395][ T20] usb 1-1: USB disconnect, device number 2 [ 24.328759][ T377] loop4: detected capacity change from 0 to 256 [ 24.360461][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.397815][ T323] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 24.406683][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.417893][ T323] usb 4-1: Product: syz [ 24.422058][ T323] usb 4-1: Manufacturer: syz [ 24.427081][ T323] usb 4-1: SerialNumber: syz [ 24.435904][ T323] usb 4-1: config 0 descriptor?? [ 24.527882][ T30] audit: type=1400 audit(1720429211.905:182): avc: denied { setopt } for pid=384 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.548558][ T30] audit: type=1400 audit(1720429211.905:183): avc: denied { create } for pid=384 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.782402][ T365] UDC core: couldn't find an available UDC or it's busy: -16 [ 24.788833][ T30] audit: type=1400 audit(1720429211.905:184): avc: denied { ioctl } for pid=384 comm="syz.2.22" path="socket:[14014]" dev="sockfs" ino=14014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.801948][ T365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 24.828545][ T323] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 24.833194][ T30] audit: type=1400 audit(1720429212.195:185): avc: denied { append } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 24.841008][ T323] usb 4-1: No valid video chain found. [ 24.867123][ T30] audit: type=1400 audit(1720429212.195:186): avc: denied { open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 24.929624][ T30] audit: type=1400 audit(1720429212.195:187): avc: denied { getattr } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 24.997561][ T30] audit: type=1400 audit(1720429212.205:188): avc: denied { create } for pid=363 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.021934][ T30] audit: type=1400 audit(1720429212.205:189): avc: denied { bind } for pid=363 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.129859][ T291] syz-executor (291) used greatest stack depth: 20912 bytes left [ 25.224868][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.232138][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.239643][ T399] device bridge_slave_0 entered promiscuous mode [ 25.248717][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.255792][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.263275][ T399] device bridge_slave_1 entered promiscuous mode [ 25.311891][ T404] loop1: detected capacity change from 0 to 128 [ 25.331994][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.339063][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.346160][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.353209][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.364490][ T404] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.376426][ T404] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 25.416578][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.425208][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.433311][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.443390][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.451430][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.458682][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.467624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.475807][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.483119][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.502072][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.503029][ T408] loop1: detected capacity change from 0 to 128 [ 25.510116][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.533821][ T399] device veth0_vlan entered promiscuous mode [ 25.540745][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.550196][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.556125][ T334] usb 4-1: USB disconnect, device number 2 [ 25.570700][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.587215][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.603967][ T399] device veth1_macvtap entered promiscuous mode [ 25.613846][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.631054][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.639607][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.665977][ T415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 25.689193][ T417] loop4: detected capacity change from 0 to 512 [ 25.718160][ T8] device bridge_slave_1 left promiscuous mode [ 25.724255][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.724814][ T417] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.755135][ T8] device bridge_slave_0 left promiscuous mode [ 25.774875][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.807554][ T8] device veth1_macvtap left promiscuous mode [ 25.827213][ T417] EXT4-fs (loop4): 1 orphan inode deleted [ 25.827749][ T8] device veth0_vlan left promiscuous mode [ 25.838613][ T417] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.888437][ T417] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 26.038381][ T430] loop0: detected capacity change from 0 to 256 [ 26.127539][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.217483][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.487565][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.502376][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.607601][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.618382][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 26.627137][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.635286][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.645750][ T63] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 26.940637][ T20] usb 3-1: SerialNumber: syz [ 27.076132][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.187785][ T63] usb 5-1: config 0 descriptor?? [ 27.219829][ T287] syz-executor (287) used greatest stack depth: 20464 bytes left [ 27.267356][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.275102][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.282535][ T447] device bridge_slave_0 entered promiscuous mode [ 27.290654][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.298247][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.309191][ T447] device bridge_slave_1 entered promiscuous mode [ 27.388150][ T20] usb 3-1: 0:2 : does not exist [ 27.397293][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.404200][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.411552][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.416120][ T452] loop3: detected capacity change from 0 to 256 [ 27.418339][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.449719][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.457814][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.465105][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.473572][ T452] exfat: Deprecated parameter 'namecase' [ 27.480088][ T452] exfat: Deprecated parameter 'namecase' [ 27.491043][ T452] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 27.510058][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.518377][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.525459][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.529613][ T452] exFAT-fs (loop3): hint_cluster is invalid (4278190089) [ 27.535236][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.540607][ T452] exFAT-fs (loop3): error, failed to bmap (inode : ffff888123749660 iblock : 8, err : -5) [ 27.559363][ T452] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 27.569206][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.569245][ T452] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 27.576217][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.576372][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.584986][ T457] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 27.603195][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.633238][ T447] device veth0_vlan entered promiscuous mode [ 27.639620][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.648742][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.649131][ T63] wacom 0003:056A:00C6.0001: unknown main item tag 0x0 [ 27.656588][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.669389][ T63] wacom 0003:056A:00C6.0001: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0 [ 27.671239][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.683096][ T457] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 27.707401][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.719050][ T447] device veth1_macvtap entered promiscuous mode [ 27.727653][ T290] exFAT-fs (loop3): invalid start cluster (4278190088) [ 27.732444][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.751125][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.853542][ T378] device bridge_slave_1 left promiscuous mode [ 27.868059][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.869524][ T20] usb 3-1: USB disconnect, device number 2 [ 27.883120][ T63] usb 5-1: USB disconnect, device number 2 [ 27.889137][ T378] device bridge_slave_0 left promiscuous mode [ 27.895609][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.946605][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.116223][ T378] device veth1_macvtap left promiscuous mode [ 28.122164][ T378] device veth0_vlan left promiscuous mode [ 28.239951][ T465] loop0: detected capacity change from 0 to 40427 [ 28.251156][ T465] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 28.259150][ T465] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 28.269818][ T465] F2FS-fs (loop0): invalid crc value [ 28.277320][ T465] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.313940][ T473] loop1: detected capacity change from 0 to 128 [ 28.317351][ T465] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 28.329838][ T465] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.751944][ T482] loop2: detected capacity change from 0 to 128 [ 28.862406][ T482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.873833][ T482] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 28.953066][ T491] loop0: detected capacity change from 0 to 256 [ 29.573063][ T334] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.815460][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 29.815474][ T30] audit: type=1400 audit(1720429217.185:309): avc: denied { write } for pid=497 comm="syz.4.54" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.077601][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 30.225180][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.232392][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.239761][ T511] device bridge_slave_0 entered promiscuous mode [ 30.248947][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.256072][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.263333][ T511] device bridge_slave_1 entered promiscuous mode [ 30.277614][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 30.305808][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 30.462274][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 30.497328][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.524421][ T334] usb 4-1: config 0 descriptor?? [ 30.557540][ T480] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 30.558124][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.571188][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.578511][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.585345][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.593162][ T334] hub 4-1:0.0: USB hub found [ 30.625007][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.634094][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.642762][ T30] audit: type=1400 audit(1720429218.015:310): avc: denied { bind } for pid=509 comm="syz.1.59" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.666582][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.707807][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.719209][ T30] audit: type=1400 audit(1720429218.095:311): avc: denied { write } for pid=520 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.745522][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.752474][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.780700][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.789248][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.796139][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.807907][ T30] audit: type=1400 audit(1720429218.185:312): avc: denied { execute } for pid=478 comm="syz.3.49" path="/11/file0/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.810812][ T480] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.841958][ T480] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.850542][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.858843][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.870800][ T378] device bridge_slave_1 left promiscuous mode [ 30.876770][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.884968][ T378] device bridge_slave_0 left promiscuous mode [ 30.891371][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.899683][ T378] device veth1_macvtap left promiscuous mode [ 30.905519][ T378] device veth0_vlan left promiscuous mode [ 30.911177][ T334] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 30.995323][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.014187][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.027028][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.035385][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.043058][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.050265][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 31.056789][ T334] usbhid: probe of 4-1:0.0 failed with error -71 [ 31.058652][ T511] device veth0_vlan entered promiscuous mode [ 31.081537][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.089181][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.102603][ T511] device veth1_macvtap entered promiscuous mode [ 31.110155][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.118777][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.130154][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.147996][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.161519][ T334] usb 4-1: USB disconnect, device number 3 [ 31.162453][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.175768][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.266554][ T530] loop2: detected capacity change from 0 to 256 [ 31.283736][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.579663][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.712199][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.060211][ T30] audit: type=1400 audit(1720429219.435:313): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.142379][ T30] audit: type=1400 audit(1720429219.495:314): avc: denied { mounton } for pid=537 comm="syz.3.66" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.164945][ T30] audit: type=1400 audit(1720429219.495:315): avc: denied { mount } for pid=537 comm="syz.3.66" name="/" dev="ramfs" ino=15532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.187498][ T63] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.196963][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.210665][ T63] usb 5-1: SerialNumber: syz [ 32.216460][ T30] audit: type=1326 audit(1720429219.555:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 32.243022][ T542] loop1: detected capacity change from 0 to 128 [ 32.244022][ T30] audit: type=1326 audit(1720429219.585:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 32.274171][ T547] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.290227][ T30] audit: type=1326 audit(1720429219.585:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 32.323941][ T547] fuse: Unknown parameter 'GPL' [ 32.421654][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.428909][ T552] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.436386][ T552] device bridge_slave_0 entered promiscuous mode [ 32.446222][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.453825][ T552] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.461448][ T552] device bridge_slave_1 entered promiscuous mode [ 32.488246][ T63] usb 5-1: 0:2 : does not exist [ 32.539292][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.546438][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.553591][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.560458][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.587916][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.595671][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.604078][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.622573][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.634468][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.641362][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.648788][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.656868][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.663749][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.681811][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.697253][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.742335][ T566] loop0: detected capacity change from 0 to 256 [ 32.787738][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.850998][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.863304][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.872413][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.892723][ T552] device veth0_vlan entered promiscuous mode [ 32.939113][ T456] device bridge_slave_1 left promiscuous mode [ 32.946507][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.961462][ T63] usb 5-1: USB disconnect, device number 3 [ 33.006636][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.041428][ T456] device bridge_slave_0 left promiscuous mode [ 33.068221][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.096827][ T456] device veth1_macvtap left promiscuous mode [ 33.113819][ T456] device veth0_vlan left promiscuous mode [ 33.490294][ T552] device veth1_macvtap entered promiscuous mode [ 33.498167][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.506231][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.519606][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.549545][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.567232][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.596800][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.605394][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.149426][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.156509][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.164082][ T576] device bridge_slave_0 entered promiscuous mode [ 34.171066][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.177971][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.185151][ T576] device bridge_slave_1 entered promiscuous mode [ 34.224137][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.231017][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.238226][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.245184][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.267919][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.275819][ T565] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.283460][ T565] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.290419][ T6] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 34.302119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.310513][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.317362][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.326240][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.334269][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.341137][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.355515][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.367753][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.384875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.395743][ T576] device veth0_vlan entered promiscuous mode [ 34.406948][ T588] loop4: detected capacity change from 0 to 256 [ 34.410162][ T576] device veth1_macvtap entered promiscuous mode [ 34.421852][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.488111][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.498262][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.505550][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.517981][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.526384][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.772121][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.781206][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.858333][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 34.858352][ T30] audit: type=1326 audit(1720429222.215:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 34.889339][ T30] audit: type=1326 audit(1720429222.215:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 34.913421][ T30] audit: type=1326 audit(1720429222.265:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 34.913669][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.939047][ T30] audit: type=1326 audit(1720429222.265:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 34.947500][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 34.970730][ T30] audit: type=1326 audit(1720429222.265:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 34.981020][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.471874][ T603] loop0: detected capacity change from 0 to 256 [ 35.532913][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.559159][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.569248][ T30] audit: type=1326 audit(1720429222.295:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 35.728101][ T6] usb 4-1: config 0 descriptor?? [ 35.748285][ T575] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 35.785008][ T30] audit: type=1326 audit(1720429222.295:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 35.811196][ T456] device bridge_slave_1 left promiscuous mode [ 35.817146][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.832012][ T30] audit: type=1326 audit(1720429222.295:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 35.855172][ T30] audit: type=1326 audit(1720429222.295:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 35.855667][ T456] device bridge_slave_0 left promiscuous mode [ 35.878883][ T30] audit: type=1326 audit(1720429223.015:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=593 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752e6cbd9 code=0x7ffc0000 [ 35.884112][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.914595][ T456] device veth1_macvtap left promiscuous mode [ 35.920549][ T456] device veth0_vlan left promiscuous mode [ 36.237485][ T63] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.276349][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.283489][ T618] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.290854][ T618] device bridge_slave_0 entered promiscuous mode [ 36.297828][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.304673][ T618] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.312183][ T618] device bridge_slave_1 entered promiscuous mode [ 36.348246][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.356540][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.358346][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.367591][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.370722][ T618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.378171][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.384979][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.392516][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.399084][ T618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.413386][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.420766][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.428130][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.435277][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.442596][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.449838][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.457012][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.464404][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.472069][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.472808][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.479403][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 36.479617][ T6] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 36.480779][ T6] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 36.507457][ T334] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.522681][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.530191][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.548522][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.556457][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.563340][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.570524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.578533][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.585357][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.592895][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.600781][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.627652][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.645386][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.646618][ T499] usb 4-1: USB disconnect, device number 4 [ 36.656343][ T63] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 36.671010][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.684262][ T618] device veth0_vlan entered promiscuous mode [ 36.693008][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.701336][ T63] usb 3-1: config 0 descriptor?? [ 36.706389][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.714572][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.721877][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.734649][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.744940][ T618] device veth1_macvtap entered promiscuous mode [ 36.754301][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.767491][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.917535][ T334] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 36.926480][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.935128][ T334] usb 5-1: config 0 descriptor?? [ 36.978632][ T456] device bridge_slave_1 left promiscuous mode [ 36.984645][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.992012][ T456] device bridge_slave_0 left promiscuous mode [ 36.998167][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.005925][ T456] device veth1_macvtap left promiscuous mode [ 37.012159][ T456] device veth0_vlan left promiscuous mode [ 37.057519][ T565] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.178714][ T63] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 37.188036][ T63] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 37.194925][ T63] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 37.337496][ T565] usb 1-1: device descriptor read/64, error -71 [ 37.412449][ T612] tmpfs: Cannot retroactively limit size [ 37.418224][ T612] process 'syz.2.87' launched './file1' with NULL argv: empty string added [ 37.513548][ T634] loop1: detected capacity change from 0 to 512 [ 37.541070][ T634] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.96: invalid block [ 37.552591][ T634] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.96: invalid indirect mapped block 10 (level 1) [ 37.565984][ T634] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.96: invalid indirect mapped block 8 (level 1) [ 37.579315][ T634] EXT4-fs (loop1): 1 truncate cleaned up [ 37.584761][ T634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.598187][ T634] capability: warning: `syz.1.96' uses deprecated v2 capabilities in a way that may be insecure [ 37.627693][ T617] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.635110][ T617] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.643265][ T617] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.650765][ T617] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.727460][ T565] usb 1-1: device descriptor read/64, error -71 [ 37.754649][ T639] EXT4-fs error (device loop1): ext4_lookup:1855: inode #12: comm syz.1.96: unexpected EA_INODE flag [ 37.849311][ T640] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.96: inline data xattr refers to an external xattr inode [ 37.878685][ T320] usb 3-1: USB disconnect, device number 3 [ 37.879144][ T639] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.96: inline data xattr refers to an external xattr inode [ 37.993228][ T617] loop4: detected capacity change from 0 to 40427 [ 37.997491][ T565] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.007818][ T617] F2FS-fs (loop4): Unrecognized mount option "alloc_" or missing value [ 38.250156][ T645] netlink: 128 bytes leftover after parsing attributes in process `syz.4.92'. [ 38.259272][ T645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.92'. [ 38.268130][ T645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.92'. [ 38.417513][ T565] usb 1-1: device descriptor read/64, error -71 [ 38.564604][ T652] loop1: detected capacity change from 0 to 256 [ 38.710805][ T655] loop2: detected capacity change from 0 to 128 [ 38.789653][ T655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.800281][ T655] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 38.977459][ T565] usb 1-1: device descriptor read/64, error -71 [ 39.030532][ T660] loop2: detected capacity change from 0 to 40427 [ 39.097536][ T565] usb usb1-port1: attempt power cycle [ 39.117820][ T660] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 39.125474][ T660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.135650][ T660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.156650][ T660] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 39.167551][ T660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.174424][ T660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.207490][ T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.339034][ T289] syz-executor (289) used greatest stack depth: 19488 bytes left [ 39.367497][ T334] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 39.388105][ T334] asix: probe of 5-1:0.0 failed with error -71 [ 39.404538][ T674] loop4: detected capacity change from 0 to 128 [ 39.404649][ T334] usb 5-1: USB disconnect, device number 4 [ 39.469868][ T673] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.476800][ T673] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.484381][ T673] device bridge_slave_0 entered promiscuous mode [ 39.491743][ T673] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.498842][ T673] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.506111][ T673] device bridge_slave_1 entered promiscuous mode [ 39.512892][ T565] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.567506][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.577556][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.595483][ T673] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.602393][ T673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.609459][ T673] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.616226][ T673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.641068][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.648975][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.656429][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.663810][ T20] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.699503][ T565] usb 1-1: device descriptor read/8, error -71 [ 39.705594][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.713815][ T20] usb 4-1: SerialNumber: syz [ 39.728615][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.736591][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.743446][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.660384][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.668456][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.675333][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.684308][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.692350][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.718253][ T20] usb 4-1: 0:2 : does not exist [ 40.733509][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.747502][ T565] usb 1-1: device descriptor read/8, error -71 [ 40.770125][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.779979][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.790904][ T673] device veth0_vlan entered promiscuous mode [ 40.799611][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.806974][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.820850][ T673] device veth1_macvtap entered promiscuous mode [ 40.831039][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.839355][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.847334][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 40.847346][ T30] audit: type=1326 audit(1720429228.215:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=679 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a3d7cbd9 code=0x7ffc0000 [ 40.912167][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.981331][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.990811][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.000002][ T30] audit: type=1326 audit(1720429228.215:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=679 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a3d7cbd9 code=0x7ffc0000 [ 41.024864][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.051073][ T689] FAULT_INJECTION: forcing a failure. [ 41.051073][ T689] name failslab, interval 1, probability 0, space 0, times 1 [ 41.063673][ T689] CPU: 0 PID: 689 Comm: syz.4.111 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 41.063877][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.073199][ T689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 41.073222][ T689] Call Trace: [ 41.073227][ T689] [ 41.073232][ T689] dump_stack_lvl+0x151/0x1b7 [ 41.073259][ T689] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.073275][ T689] ? pointer+0xc40/0xc40 [ 41.073290][ T689] dump_stack+0x15/0x17 [ 41.073303][ T689] should_fail+0x3c6/0x510 [ 41.119382][ T689] __should_failslab+0xa4/0xe0 [ 41.123985][ T689] should_failslab+0x9/0x20 [ 41.128590][ T689] slab_pre_alloc_hook+0x37/0xd0 [ 41.134067][ T689] ? sidtab_sid2str_get+0x12b/0x2a0 [ 41.139094][ T689] __kmalloc_track_caller+0x6c/0x260 [ 41.144216][ T689] ? ptr_to_hashval+0x60/0x60 [ 41.148724][ T689] ? sidtab_sid2str_get+0x12b/0x2a0 [ 41.153762][ T689] kmemdup+0x24/0x50 [ 41.157493][ T689] sidtab_sid2str_get+0x12b/0x2a0 [ 41.162447][ T689] security_sid_to_context_core+0x2b5/0x490 [ 41.168172][ T689] security_sid_to_context+0x33/0x40 [ 41.173476][ T689] avc_audit_post_callback+0x1af/0xb20 [ 41.178864][ T689] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 41.184238][ T689] ? audit_log_start+0xa80/0xa80 [ 41.189014][ T689] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 41.194394][ T689] common_lsm_audit+0xbc6/0x18b0 [ 41.199165][ T689] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 41.204558][ T689] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 41.209842][ T689] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 41.215485][ T689] ? avc_update_node+0x2f9/0xd50 [ 41.220347][ T689] slow_avc_audit+0x26c/0x3c0 [ 41.224856][ T689] ? avc_get_hash_stats+0x180/0x180 [ 41.229891][ T689] ? avc_has_perm_noaudit+0x2dd/0x430 [ 41.235102][ T689] avc_has_perm+0x1f5/0x260 [ 41.239441][ T689] ? avc_has_perm_noaudit+0x430/0x430 [ 41.244647][ T689] ? 0xffffffffa0028c44 [ 41.248638][ T689] ? is_bpf_text_address+0x172/0x190 [ 41.253761][ T689] selinux_inode_setxattr+0x655/0xd50 [ 41.258970][ T689] ? selinux_inode_getattr+0x3f0/0x3f0 [ 41.264261][ T689] ? _raw_spin_lock+0xa4/0x1b0 [ 41.268871][ T689] ? security_inode_permission+0xb0/0xf0 [ 41.274330][ T689] ? inode_permission+0xf8/0x460 [ 41.279200][ T689] security_inode_setxattr+0xca/0x180 [ 41.284486][ T689] __vfs_setxattr_locked+0x9d/0x230 [ 41.289546][ T689] ? path_setxattr+0xae/0x2a0 [ 41.294049][ T689] vfs_setxattr+0x21d/0x420 [ 41.298407][ T689] ? xattr_permission+0x540/0x540 [ 41.303235][ T689] setxattr+0x27e/0x2e0 [ 41.307234][ T689] ? path_setxattr+0x2a0/0x2a0 [ 41.311855][ T689] ? debug_smp_processor_id+0x17/0x20 [ 41.317047][ T689] ? mnt_want_write+0x1ff/0x2d0 [ 41.321822][ T689] path_setxattr+0x1bc/0x2a0 [ 41.326235][ T689] ? simple_xattr_list_add+0x120/0x120 [ 41.331529][ T689] ? debug_smp_processor_id+0x17/0x20 [ 41.336734][ T689] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.342635][ T689] __x64_sys_setxattr+0xc5/0xe0 [ 41.347324][ T689] do_syscall_64+0x3d/0xb0 [ 41.351661][ T689] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.357399][ T689] RIP: 0033:0x7f61a3d7cbd9 [ 41.361732][ T689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.381258][ T689] RSP: 002b:00007f61a2ffe048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 41.389591][ T689] RAX: ffffffffffffffda RBX: 00007f61a3f0af60 RCX: 00007f61a3d7cbd9 [ 41.397404][ T689] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 00000000200001c0 [ 41.405211][ T689] RBP: 00007f61a2ffe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.413037][ T689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.421035][ T689] R13: 000000000000000b R14: 00007f61a3f0af60 R15: 00007fffbebcdb78 [ 41.428965][ T689] [ 41.434671][ T30] audit: type=1400 audit(1720429228.425:468): avc: denied { setattr } for pid=688 comm="syz.4.111" name="/" dev="9p" ino=2 ssid=131 tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.471526][ T20] usb 4-1: USB disconnect, device number 5 [ 41.501629][ T10] device bridge_slave_1 left promiscuous mode [ 41.516090][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.525063][ T10] device bridge_slave_0 left promiscuous mode [ 41.526666][ T696] loop4: detected capacity change from 0 to 128 [ 41.537356][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.546243][ T10] device veth1_macvtap left promiscuous mode [ 41.552408][ T10] device veth0_vlan left promiscuous mode [ 41.615848][ T696] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.651927][ T696] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 41.797098][ T707] loop0: detected capacity change from 0 to 256 [ 42.018109][ T710] loop0: detected capacity change from 256 to 255 [ 42.042478][ T715] loop4: detected capacity change from 0 to 128 [ 42.108199][ T717] 9pnet: Insufficient options for proto=fd [ 42.134739][ T30] audit: type=1400 audit(1720429229.505:469): avc: denied { setopt } for pid=712 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.645050][ T729] FAULT_INJECTION: forcing a failure. [ 42.645050][ T729] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.697500][ T729] CPU: 0 PID: 729 Comm: syz.1.125 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 42.707051][ T729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.716948][ T729] Call Trace: [ 42.720068][ T729] [ 42.722846][ T729] dump_stack_lvl+0x151/0x1b7 [ 42.727362][ T729] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.732826][ T729] ? unwind_get_return_address+0x4d/0x90 [ 42.738294][ T729] ? arch_stack_walk+0xf3/0x140 [ 42.743079][ T729] dump_stack+0x15/0x17 [ 42.747061][ T729] should_fail+0x3c6/0x510 [ 42.751410][ T729] should_fail_alloc_page+0x5a/0x80 [ 42.756441][ T729] prepare_alloc_pages+0x15c/0x700 [ 42.761388][ T729] ? stack_trace_snprint+0xf0/0xf0 [ 42.766345][ T729] ? __alloc_pages_bulk+0xe40/0xe40 [ 42.771379][ T729] __alloc_pages+0x18c/0x8f0 [ 42.775798][ T729] ? vfs_open+0x73/0x80 [ 42.779798][ T729] ? prep_new_page+0x110/0x110 [ 42.784419][ T729] new_slab+0x9a/0x4e0 [ 42.788294][ T729] ___slab_alloc+0x39e/0x830 [ 42.792719][ T729] ? p9_client_prepare_req+0x161/0xb20 [ 42.798063][ T729] ? p9_client_prepare_req+0x161/0xb20 [ 42.803310][ T729] __slab_alloc+0x4a/0x90 [ 42.807477][ T729] ? p9_client_prepare_req+0x161/0xb20 [ 42.812780][ T729] kmem_cache_alloc+0x134/0x200 [ 42.817460][ T729] p9_client_prepare_req+0x161/0xb20 [ 42.822595][ T729] ? ____kasan_kmalloc+0xdb/0x110 [ 42.827446][ T729] ? __kasan_kmalloc+0x9/0x10 [ 42.832042][ T729] ? kmem_cache_alloc_trace+0x115/0x210 [ 42.837420][ T729] ? p9_fid_create+0x53/0x280 [ 42.841937][ T729] ? v9fs_file_open+0x408/0x6c0 [ 42.846623][ T729] p9_client_rpc+0x159/0x13a0 [ 42.851137][ T729] ? __kasan_check_write+0x14/0x20 [ 42.856085][ T729] ? node_tag_clear+0x203/0x330 [ 42.860774][ T729] ? p9_fid_create+0x280/0x280 [ 42.865371][ T729] ? idr_alloc_u32+0x20b/0x320 [ 42.869972][ T729] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 42.874917][ T729] ? debug_smp_processor_id+0x17/0x20 [ 42.880122][ T729] ? __radix_tree_preload+0x351/0x3d0 [ 42.885337][ T729] p9_client_walk+0x1fe/0x7b0 [ 42.889846][ T729] ? p9_client_rpc+0x13a0/0x13a0 [ 42.894618][ T729] ? v9fs_fid_lookup+0x118/0x160 [ 42.899392][ T729] v9fs_file_open+0x408/0x6c0 [ 42.903905][ T729] ? v9fs_fid_readpage+0x680/0x680 [ 42.908940][ T729] do_dentry_open+0x81c/0xfd0 [ 42.913514][ T729] vfs_open+0x73/0x80 [ 42.917268][ T729] path_openat+0x26f0/0x2f40 [ 42.921702][ T729] ? __kasan_slab_alloc+0xb1/0xe0 [ 42.926644][ T729] ? kmem_cache_alloc+0xf5/0x200 [ 42.931431][ T729] ? getname_flags+0xba/0x520 [ 42.935934][ T729] ? __x64_sys_openat+0x243/0x290 [ 42.940808][ T729] ? do_filp_open+0x460/0x460 [ 42.945311][ T729] do_filp_open+0x21c/0x460 [ 42.949646][ T729] ? vfs_tmpfile+0x2c0/0x2c0 [ 42.954077][ T729] do_sys_openat2+0x13f/0x830 [ 42.958583][ T729] ? __kasan_check_write+0x14/0x20 [ 42.963534][ T729] ? mutex_unlock+0xb2/0x260 [ 42.967962][ T729] ? wait_for_completion_killable_timeout+0x10/0x10 [ 42.974383][ T729] ? do_sys_open+0x220/0x220 [ 42.978808][ T729] ? __kasan_check_write+0x14/0x20 [ 42.983751][ T729] ? fput_many+0x160/0x1b0 [ 42.988006][ T729] ? fput+0x1a/0x20 [ 42.991649][ T729] __x64_sys_openat+0x243/0x290 [ 42.996338][ T729] ? __ia32_sys_open+0x270/0x270 [ 43.001110][ T729] ? debug_smp_processor_id+0x17/0x20 [ 43.006318][ T729] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.012222][ T729] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.017701][ T729] do_syscall_64+0x3d/0xb0 [ 43.021946][ T729] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.027674][ T729] RIP: 0033:0x7f5bd330abd9 [ 43.031924][ T729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.051368][ T729] RSP: 002b:00007f5bd258c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.059612][ T729] RAX: ffffffffffffffda RBX: 00007f5bd3498f60 RCX: 00007f5bd330abd9 [ 43.067422][ T729] RDX: 000000000010c400 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 43.075230][ T729] RBP: 00007f5bd258c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.083046][ T729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.090864][ T729] R13: 000000000000000b R14: 00007f5bd3498f60 R15: 00007ffe8fd00d98 [ 43.098675][ T729] [ 43.154457][ T30] audit: type=1400 audit(1720429230.515:470): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.198285][ T30] audit: type=1400 audit(1720429230.515:471): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.224440][ T30] audit: type=1400 audit(1720429230.515:472): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.475503][ T30] audit: type=1326 audit(1720429230.565:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498715fbd9 code=0x7ffc0000 [ 43.498666][ T30] audit: type=1326 audit(1720429230.565:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f498715fbd9 code=0x7ffc0000 [ 43.522090][ T30] audit: type=1326 audit(1720429230.565:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498715fbd9 code=0x7ffc0000 [ 43.552041][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.558931][ T730] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.566009][ T730] device bridge_slave_0 entered promiscuous mode [ 43.572894][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.579871][ T730] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.587326][ T730] device bridge_slave_1 entered promiscuous mode [ 43.632430][ T756] loop1: detected capacity change from 0 to 128 [ 43.672858][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.679763][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.710348][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.719675][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.726882][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.737572][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.750618][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.750725][ T765] loop1: detected capacity change from 0 to 256 [ 43.759263][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.771366][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.789353][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.797558][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.805514][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.812381][ T738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.837356][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.851237][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.866181][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.874718][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.882221][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.890583][ T730] device veth0_vlan entered promiscuous mode [ 43.902857][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.914502][ T730] device veth1_macvtap entered promiscuous mode [ 43.925796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.934204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.978152][ T10] device bridge_slave_1 left promiscuous mode [ 43.986654][ T770] loop0: detected capacity change from 0 to 256 [ 43.993475][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.039521][ T10] device bridge_slave_0 left promiscuous mode [ 44.052281][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.053094][ T295] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.068141][ T10] device veth1_macvtap left promiscuous mode [ 44.074200][ T10] device veth0_vlan left promiscuous mode [ 44.175382][ T773] FAULT_INJECTION: forcing a failure. [ 44.175382][ T773] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.188347][ T773] CPU: 1 PID: 773 Comm: syz.0.134 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 44.197787][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 44.207683][ T773] Call Trace: [ 44.210808][ T773] [ 44.213581][ T773] dump_stack_lvl+0x151/0x1b7 [ 44.218109][ T773] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.223563][ T773] dump_stack+0x15/0x17 [ 44.227650][ T773] should_fail+0x3c6/0x510 [ 44.231905][ T773] should_fail_usercopy+0x1a/0x20 [ 44.236765][ T773] strncpy_from_user+0x24/0x2d0 [ 44.241451][ T773] ? kmem_cache_alloc+0xf5/0x200 [ 44.246228][ T773] getname_flags+0xf2/0x520 [ 44.248169][ T379] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.250565][ T773] __x64_sys_mkdir+0x5f/0x80 [ 44.262283][ T773] do_syscall_64+0x3d/0xb0 [ 44.266532][ T773] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.272354][ T773] RIP: 0033:0x7fe85136ebd9 [ 44.276603][ T773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.296048][ T773] RSP: 002b:00007fe8505ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 44.304401][ T773] RAX: ffffffffffffffda RBX: 00007fe8514fd110 RCX: 00007fe85136ebd9 [ 44.312293][ T773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 44.320107][ T773] RBP: 00007fe8505ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.327921][ T773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.335819][ T773] R13: 000000000000006e R14: 00007fe8514fd110 R15: 00007ffd95b3e998 [ 44.343632][ T773] [ 44.617536][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.617559][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 44.637474][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.648972][ T379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.661614][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.661648][ T295] usb 5-1: New USB device found, idVendor=0766, idProduct=0204, bcdDevice= 0.00 [ 44.680020][ T379] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 44.689311][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.699336][ T779] loop1: detected capacity change from 0 to 256 [ 44.704300][ T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.718183][ T295] usb 5-1: config 0 descriptor?? [ 44.730323][ T379] usb 3-1: config 0 descriptor?? [ 44.835871][ T730] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 44.843480][ T730] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 45.104165][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.111259][ T784] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.118778][ T784] device bridge_slave_0 entered promiscuous mode [ 45.127094][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.134079][ T784] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.141444][ T784] device bridge_slave_1 entered promiscuous mode [ 45.181739][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.188698][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.195846][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.202780][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.221283][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.228978][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.236107][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.246762][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.254785][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.261718][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.270714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.278718][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.285557][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.288268][ T379] betop 0003:11C2:2208.0004: item fetching failed at offset 4/5 [ 45.301031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.302276][ T379] betop 0003:11C2:2208.0004: parse failed [ 45.309180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.314428][ T379] betop: probe of 0003:11C2:2208.0004 failed with error -22 [ 45.334531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.346523][ T784] device veth0_vlan entered promiscuous mode [ 45.353557][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.361845][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.369605][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.383071][ T784] device veth1_macvtap entered promiscuous mode [ 45.393529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.409612][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.418061][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.433585][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.442040][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.470647][ T795] loop0: detected capacity change from 0 to 256 [ 45.515419][ T379] usb 3-1: USB disconnect, device number 4 [ 45.561110][ T673] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 45.570125][ T673] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 46.476331][ T10] device bridge_slave_1 left promiscuous mode [ 46.482975][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.493051][ T10] device bridge_slave_0 left promiscuous mode [ 46.499132][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.507121][ T10] device veth1_macvtap left promiscuous mode [ 46.513220][ T10] device veth0_vlan left promiscuous mode [ 46.589113][ T295] usbhid 5-1:0.0: can't add hid device: -71 [ 46.595030][ T295] usbhid: probe of 5-1:0.0 failed with error -71 [ 46.602213][ T295] usb 5-1: USB disconnect, device number 5 [ 46.722733][ T818] loop0: detected capacity change from 0 to 256 [ 46.930640][ T816] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.937670][ T816] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.944952][ T816] device bridge_slave_0 entered promiscuous mode [ 46.952115][ T816] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.959035][ T816] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.966185][ T816] device bridge_slave_1 entered promiscuous mode [ 47.031100][ T816] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.037992][ T816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.045081][ T816] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.051886][ T816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.088030][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.107902][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.137614][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.165773][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.187335][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.194263][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.268507][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.302654][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.309563][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.352377][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.423042][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.453388][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.495490][ T816] device veth0_vlan entered promiscuous mode [ 47.516485][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.536969][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.559241][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.580684][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.606121][ T816] device veth1_macvtap entered promiscuous mode [ 47.635993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.655762][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.773956][ T832] loop4: detected capacity change from 0 to 40427 [ 47.806091][ T836] loop1: detected capacity change from 0 to 8192 [ 47.815060][ T832] F2FS-fs (loop4): invalid crc value [ 47.831772][ T832] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.868246][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.875105][ T837] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.885208][ T836] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.916244][ T837] device bridge_slave_0 entered promiscuous mode [ 47.923345][ T832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.943493][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 47.943505][ T30] audit: type=1400 audit(1720429235.315:491): avc: denied { setattr } for pid=831 comm="syz.4.153" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.975152][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.985348][ T837] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.993539][ T837] device bridge_slave_1 entered promiscuous mode [ 48.040959][ T848] FAULT_INJECTION: forcing a failure. [ 48.040959][ T848] name failslab, interval 1, probability 0, space 0, times 0 [ 48.052557][ T850] loop1: detected capacity change from 0 to 128 [ 48.053839][ T848] CPU: 0 PID: 848 Comm: syz.3.159 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 48.068994][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 48.070308][ T850] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.078981][ T848] Call Trace: [ 48.078992][ T848] [ 48.078999][ T848] dump_stack_lvl+0x151/0x1b7 [ 48.079020][ T848] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.079036][ T848] dump_stack+0x15/0x17 [ 48.089496][ T850] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 48.092537][ T848] should_fail+0x3c6/0x510 [ 48.144513][ T848] __should_failslab+0xa4/0xe0 [ 48.149116][ T848] ? p9_client_prepare_req+0x2eb/0xb20 [ 48.154409][ T848] should_failslab+0x9/0x20 [ 48.158746][ T848] slab_pre_alloc_hook+0x37/0xd0 [ 48.163515][ T848] ? p9_client_prepare_req+0x2eb/0xb20 [ 48.168815][ T848] kmem_cache_alloc+0x44/0x200 [ 48.173496][ T848] p9_client_prepare_req+0x2eb/0xb20 [ 48.178623][ T848] ? ____kasan_kmalloc+0xed/0x110 [ 48.183481][ T848] p9_client_rpc+0x159/0x13a0 [ 48.187992][ T848] ? __kasan_check_write+0x14/0x20 [ 48.192938][ T848] ? node_tag_clear+0x203/0x330 [ 48.197626][ T848] ? p9_fid_create+0x280/0x280 [ 48.202233][ T848] ? radix_tree_iter_tag_clear+0x69/0x80 [ 48.207710][ T848] ? idr_alloc_u32+0x20b/0x320 [ 48.212404][ T848] ? __fprop_inc_percpu_max+0x290/0x290 [ 48.217774][ T848] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 48.222724][ T848] ? debug_smp_processor_id+0x17/0x20 [ 48.228037][ T848] ? __radix_tree_preload+0x351/0x3d0 [ 48.233244][ T848] p9_client_attach+0x167/0x570 [ 48.237927][ T848] ? p9_client_begin_disconnect+0x50/0x50 [ 48.243486][ T848] ? v9fs_fid_find+0x31d/0x370 [ 48.248078][ T848] v9fs_fid_lookup_with_uid+0x482/0x9e0 [ 48.253461][ T848] ? selinux_inode_setxattr+0x602/0xd50 [ 48.258842][ T848] v9fs_fid_lookup+0x118/0x160 [ 48.263442][ T848] v9fs_xattr_handler_set+0x34/0x90 [ 48.268477][ T848] ? v9fs_xattr_handler_get+0x80/0x80 [ 48.273945][ T848] __vfs_setxattr+0x3ed/0x440 [ 48.278546][ T848] __vfs_setxattr_noperm+0x126/0x5e0 [ 48.283666][ T848] __vfs_setxattr_locked+0x215/0x230 [ 48.288792][ T848] ? path_setxattr+0xae/0x2a0 [ 48.293300][ T848] vfs_setxattr+0x21d/0x420 [ 48.297647][ T848] ? xattr_permission+0x540/0x540 [ 48.302504][ T848] setxattr+0x27e/0x2e0 [ 48.306491][ T848] ? path_setxattr+0x2a0/0x2a0 [ 48.311267][ T848] ? debug_smp_processor_id+0x17/0x20 [ 48.316477][ T848] ? mnt_want_write+0x1ff/0x2d0 [ 48.321160][ T848] path_setxattr+0x1bc/0x2a0 [ 48.325586][ T848] ? simple_xattr_list_add+0x120/0x120 [ 48.331356][ T848] ? debug_smp_processor_id+0x17/0x20 [ 48.336589][ T848] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.342480][ T848] __x64_sys_setxattr+0xc5/0xe0 [ 48.347239][ T848] do_syscall_64+0x3d/0xb0 [ 48.351492][ T848] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.357222][ T848] RIP: 0033:0x7f498715fbd9 [ 48.361562][ T848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.381093][ T848] RSP: 002b:00007f49863e1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 48.389333][ T848] RAX: ffffffffffffffda RBX: 00007f49872edf60 RCX: 00007f498715fbd9 [ 48.397144][ T848] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 00000000200001c0 [ 48.404956][ T848] RBP: 00007f49863e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.412769][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.420579][ T848] R13: 000000000000000b R14: 00007f49872edf60 R15: 00007fffda7a0548 [ 48.428420][ T848] [ 48.443933][ T10] device bridge_slave_1 left promiscuous mode [ 48.461869][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.495495][ T10] device bridge_slave_0 left promiscuous mode [ 48.507559][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.522083][ T10] device veth1_macvtap left promiscuous mode [ 48.536291][ T10] device veth0_vlan left promiscuous mode [ 48.671807][ T30] audit: type=1400 audit(1720429236.045:492): avc: denied { create } for pid=864 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 48.837294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.846776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.864563][ T872] loop1: detected capacity change from 0 to 256 [ 48.926881][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.004869][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.013485][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.021929][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.028809][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.036691][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.045492][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.053831][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.060726][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.075074][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.082905][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.090844][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.098792][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.106717][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.122424][ T837] device veth0_vlan entered promiscuous mode [ 49.129564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.138072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.146355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.154131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.169442][ T837] device veth1_macvtap entered promiscuous mode [ 49.176628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.184233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.191794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.200226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.208443][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.230161][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.238421][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.246688][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.254928][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.278024][ T854] loop4: detected capacity change from 0 to 131072 [ 49.367602][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.379120][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.388883][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.445216][ T878] loop0: detected capacity change from 0 to 256 [ 49.453304][ T26] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 49.602259][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.622680][ T26] usb 4-1: config 0 descriptor?? [ 49.762296][ T30] audit: type=1400 audit(1720429237.135:493): avc: denied { connect } for pid=853 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.792140][ T30] audit: type=1400 audit(1720429237.155:494): avc: denied { write } for pid=853 comm="syz.4.157" path="socket:[18201]" dev="sockfs" ino=18201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.825528][ T30] audit: type=1400 audit(1720429237.195:495): avc: denied { read write } for pid=890 comm="syz.2.173" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.848676][ T30] audit: type=1400 audit(1720429237.195:496): avc: denied { open } for pid=890 comm="syz.2.173" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.872696][ T30] audit: type=1400 audit(1720429237.195:497): avc: denied { ioctl } for pid=890 comm="syz.2.173" path="/dev/ppp" dev="devtmpfs" ino=134 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.929666][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.936509][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.944076][ T892] device bridge_slave_0 entered promiscuous mode [ 49.951290][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.958379][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.965778][ T892] device bridge_slave_1 entered promiscuous mode [ 50.021891][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.028765][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.032804][ T902] FAULT_INJECTION: forcing a failure. [ 50.032804][ T902] name failslab, interval 1, probability 0, space 0, times 0 [ 50.035834][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.049426][ T902] CPU: 1 PID: 902 Comm: syz.2.175 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 50.055035][ T892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.064573][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 50.064584][ T902] Call Trace: [ 50.064588][ T902] [ 50.064594][ T902] dump_stack_lvl+0x151/0x1b7 [ 50.064616][ T902] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.097393][ T902] ? file_end_write+0x1c0/0x1c0 [ 50.097419][ T902] dump_stack+0x15/0x17 [ 50.097434][ T902] should_fail+0x3c6/0x510 [ 50.097451][ T902] __should_failslab+0xa4/0xe0 [ 50.097467][ T902] ? getname_flags+0xba/0x520 [ 50.097481][ T902] should_failslab+0x9/0x20 [ 50.097496][ T902] slab_pre_alloc_hook+0x37/0xd0 [ 50.097511][ T902] ? getname_flags+0xba/0x520 [ 50.097525][ T902] kmem_cache_alloc+0x44/0x200 [ 50.097542][ T902] getname_flags+0xba/0x520 [ 50.097557][ T902] ? debug_smp_processor_id+0x17/0x20 [ 50.097574][ T902] getname+0x19/0x20 [ 50.097587][ T902] __x64_sys_execve+0x78/0xb0 [ 50.097600][ T902] do_syscall_64+0x3d/0xb0 [ 50.097614][ T902] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.097629][ T902] RIP: 0033:0x7ff7e4270bd9 [ 50.097644][ T902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.097656][ T902] RSP: 002b:00007ff7e34d1048 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 50.097675][ T902] RAX: ffffffffffffffda RBX: 00007ff7e43ff038 RCX: 00007ff7e4270bd9 [ 50.097687][ T902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 50.097698][ T902] RBP: 00007ff7e34d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.097709][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.097720][ T902] R13: 000000000000006e R14: 00007ff7e43ff038 R15: 00007ffed06f3238 [ 50.097735][ T902] [ 50.111392][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.111889][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.112235][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.122880][ T26] betop 0003:11C2:2208.0005: item fetching failed at offset 4/5 [ 50.123032][ T26] betop 0003:11C2:2208.0005: parse failed [ 50.123056][ T26] betop: probe of 0003:11C2:2208.0005 failed with error -22 [ 50.142713][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.142914][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.143050][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.143071][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.144438][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.144646][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.144787][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.144800][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.151163][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.151501][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.168671][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.168943][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.179135][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.179360][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.180861][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.273276][ T909] loop4: detected capacity change from 0 to 128 [ 50.287699][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.373632][ T39] usb 4-1: USB disconnect, device number 6 [ 50.381823][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.454288][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.463181][ T909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.463527][ T892] device veth0_vlan entered promiscuous mode [ 50.473657][ T909] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 50.540557][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.549018][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.558584][ T892] device veth1_macvtap entered promiscuous mode [ 50.581755][ T10] device bridge_slave_1 left promiscuous mode [ 50.588904][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.605248][ T10] device bridge_slave_0 left promiscuous mode [ 50.611416][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.620121][ T10] device veth1_macvtap left promiscuous mode [ 50.626043][ T10] device veth0_vlan left promiscuous mode [ 50.924575][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.932236][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.941331][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.949597][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.958098][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.997306][ T920] loop1: detected capacity change from 0 to 128 [ 50.997805][ T30] audit: type=1400 audit(1720429238.375:498): avc: denied { relabelfrom } for pid=917 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.034570][ T30] audit: type=1400 audit(1720429238.405:499): avc: denied { relabelto } for pid=917 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.056506][ T920] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.073607][ T914] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.080986][ T914] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.083146][ T920] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 51.090205][ T914] device bridge_slave_0 entered promiscuous mode [ 51.130166][ T914] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.138255][ T914] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.145584][ T914] device bridge_slave_1 entered promiscuous mode [ 51.155560][ T929] loop2: detected capacity change from 0 to 128 [ 51.166554][ T927] fuse: Bad value for 'group_id' [ 51.332909][ T942] loop3: detected capacity change from 0 to 128 [ 51.379707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.399932][ T943] loop1: detected capacity change from 0 to 256 [ 51.562240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.602656][ T942] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.634570][ T942] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 51.639826][ T914] device veth0_vlan entered promiscuous mode [ 51.689188][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.697701][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.706667][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.715279][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.724116][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.733900][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.743345][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.750206][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.759696][ T950] loop3: detected capacity change from 0 to 128 [ 51.766551][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.785254][ T951] loop4: detected capacity change from 0 to 256 [ 51.819861][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.894151][ T950] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.905133][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.912019][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.917733][ T950] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 51.919429][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.958202][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.966201][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.996337][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.005803][ T914] device veth1_macvtap entered promiscuous mode [ 52.017163][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.034069][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.297512][ T30] audit: type=1400 audit(1720429239.665:500): avc: denied { ioctl } for pid=963 comm="syz.3.193" path="socket:[19533]" dev="sockfs" ino=19533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.344502][ T966] fuse: Bad value for 'group_id' [ 52.407076][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.414039][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.421603][ T968] device bridge_slave_0 entered promiscuous mode [ 52.428654][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.439232][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.442531][ T975] loop3: detected capacity change from 0 to 1024 [ 52.447089][ T968] device bridge_slave_1 entered promiscuous mode [ 52.591653][ T10] device bridge_slave_1 left promiscuous mode [ 52.599887][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.614683][ T975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.644170][ T10] device bridge_slave_0 left promiscuous mode [ 52.662575][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.703155][ T10] device bridge_slave_1 left promiscuous mode [ 52.711341][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.779844][ T10] device bridge_slave_0 left promiscuous mode [ 52.786251][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.873141][ T10] device veth1_macvtap left promiscuous mode [ 52.879266][ T10] device veth0_vlan left promiscuous mode [ 52.885157][ T10] device veth1_macvtap left promiscuous mode [ 52.891196][ T10] device veth0_vlan left promiscuous mode [ 52.925420][ T985] FAULT_INJECTION: forcing a failure. [ 52.925420][ T985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.938364][ T985] CPU: 1 PID: 985 Comm: syz.2.203 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 52.947818][ T985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.957716][ T985] Call Trace: [ 52.960836][ T985] [ 52.963616][ T985] dump_stack_lvl+0x151/0x1b7 [ 52.968127][ T985] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.973596][ T985] dump_stack+0x15/0x17 [ 52.977589][ T985] should_fail+0x3c6/0x510 [ 52.981840][ T985] should_fail_usercopy+0x1a/0x20 [ 52.986699][ T985] _copy_to_user+0x20/0x90 [ 52.990955][ T985] simple_read_from_buffer+0xc7/0x150 [ 52.996163][ T985] proc_fail_nth_read+0x1a3/0x210 [ 53.001029][ T985] ? proc_fault_inject_write+0x390/0x390 [ 53.006488][ T985] ? fsnotify_perm+0x470/0x5d0 [ 53.011094][ T985] ? security_file_permission+0x86/0xb0 [ 53.016470][ T985] ? proc_fault_inject_write+0x390/0x390 [ 53.021942][ T985] vfs_read+0x27d/0xd40 [ 53.025933][ T985] ? rcu_gp_kthread_wake+0x90/0x90 [ 53.030885][ T985] ? kernel_read+0x1f0/0x1f0 [ 53.035304][ T985] ? __kasan_check_write+0x14/0x20 [ 53.040252][ T985] ? mutex_lock+0xb6/0x1e0 [ 53.044513][ T985] ? wait_for_completion_killable_timeout+0x10/0x10 [ 53.050931][ T985] ? __fdget_pos+0x2e7/0x3a0 [ 53.055449][ T985] ? ksys_read+0x77/0x2c0 [ 53.059617][ T985] ksys_read+0x199/0x2c0 [ 53.063699][ T985] ? vfs_write+0x1110/0x1110 [ 53.068121][ T985] ? __kasan_check_read+0x11/0x20 [ 53.072985][ T985] __x64_sys_read+0x7b/0x90 [ 53.077322][ T985] do_syscall_64+0x3d/0xb0 [ 53.081575][ T985] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.087311][ T985] RIP: 0033:0x7ff7e426f6bc [ 53.091574][ T985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 53.111000][ T985] RSP: 002b:00007ff7e34d1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.119245][ T985] RAX: ffffffffffffffda RBX: 00007ff7e43ff038 RCX: 00007ff7e426f6bc [ 53.127056][ T985] RDX: 000000000000000f RSI: 00007ff7e34d10b0 RDI: 000000000000000a [ 53.134865][ T985] RBP: 00007ff7e34d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.142675][ T985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.150486][ T985] R13: 000000000000006e R14: 00007ff7e43ff038 R15: 00007ffed06f3238 [ 53.158392][ T985] [ 53.201596][ T988] loop2: detected capacity change from 0 to 128 [ 53.286996][ T988] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.298160][ T988] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 53.458985][ T996] fuse: Bad value for 'group_id' [ 53.491726][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.498595][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.505679][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.512498][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.551760][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.567687][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.636934][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.645172][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.664044][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.672232][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.680350][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.687185][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.694404][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.702565][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.707429][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 53.710543][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.724582][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.741202][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.749922][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.757586][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.766149][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.775625][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.794757][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.802076][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.809834][ T980] device bridge_slave_0 entered promiscuous mode [ 53.820977][ T968] device veth0_vlan entered promiscuous mode [ 53.827473][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.835636][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.844003][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.851766][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.859957][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.869090][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.876436][ T980] device bridge_slave_1 entered promiscuous mode [ 53.884409][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.891959][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.903339][ T968] device veth1_macvtap entered promiscuous mode [ 53.916588][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.925285][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.933389][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.957623][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.965936][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.985354][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.993608][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.092748][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.112213][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.122084][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.128971][ T738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.138836][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.149549][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.156396][ T738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.176159][ T1008] loop3: detected capacity change from 0 to 256 [ 54.231162][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.281761][ T980] device veth0_vlan entered promiscuous mode [ 54.287645][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.301687][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.316900][ T39] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 54.326449][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.334995][ T39] usb 3-1: config 0 descriptor?? [ 54.354453][ T980] device veth1_macvtap entered promiscuous mode [ 54.354468][ T1025] loop1: detected capacity change from 0 to 512 [ 54.362152][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.388834][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.391902][ T1025] EXT4-fs (loop1): 1 orphan inode deleted [ 54.397093][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.402703][ T1025] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 54.427821][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.430823][ T1025] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 54.448522][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.456289][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.471699][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.479653][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.496805][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.505006][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.583219][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 54.583233][ T30] audit: type=1400 audit(1720429241.955:506): avc: denied { write } for pid=1035 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.610704][ T30] audit: type=1400 audit(1720429241.955:507): avc: denied { nlmsg_write } for pid=1035 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.662399][ T1046] fuse: Unknown parameter '0x0000000000000006' [ 54.889062][ T10] device bridge_slave_1 left promiscuous mode [ 54.896205][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.908282][ T39] betop 0003:11C2:2208.0006: item fetching failed at offset 4/5 [ 54.916034][ T10] device bridge_slave_0 left promiscuous mode [ 54.924047][ T39] betop 0003:11C2:2208.0006: parse failed [ 54.924268][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.940978][ T39] betop: probe of 0003:11C2:2208.0006 failed with error -22 [ 54.952841][ T10] device bridge_slave_1 left promiscuous mode [ 54.965521][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.981606][ T10] device bridge_slave_0 left promiscuous mode [ 54.993135][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.009942][ T10] device veth1_macvtap left promiscuous mode [ 55.022388][ T10] device veth0_vlan left promiscuous mode [ 55.037114][ T10] device veth1_macvtap left promiscuous mode [ 55.047658][ T10] device veth0_vlan left promiscuous mode [ 55.111955][ T295] usb 3-1: USB disconnect, device number 5 [ 55.577255][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.584608][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.592218][ T1060] device bridge_slave_0 entered promiscuous mode [ 55.600820][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.608130][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.615279][ T1060] device bridge_slave_1 entered promiscuous mode [ 55.726667][ T30] audit: type=1400 audit(1720429243.095:508): avc: denied { write } for pid=1072 comm="syz.2.230" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.755081][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.762662][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.784663][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.792659][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 55.801246][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.809946][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.816936][ T738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.824863][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.833840][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.862112][ T1082] loop4: detected capacity change from 0 to 256 [ 55.882652][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.889548][ T738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.926005][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.006149][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.014342][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.033053][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.046546][ T1060] device veth0_vlan entered promiscuous mode [ 56.053627][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.062250][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.069854][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.083332][ T1060] device veth1_macvtap entered promiscuous mode [ 56.090899][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.104238][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.107566][ T39] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 56.136856][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.297489][ T39] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 56.305420][ T39] usb 1-1: can't read configurations, error -61 [ 56.335732][ T565] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.457703][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 56.639309][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.646210][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.653644][ T1097] device bridge_slave_0 entered promiscuous mode [ 56.660946][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.667984][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.675333][ T1097] device bridge_slave_1 entered promiscuous mode [ 56.716946][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.723819][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.731446][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.738253][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.758920][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.766301][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.773738][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.784154][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.792152][ T39] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 56.800003][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.806855][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.814754][ T10] device bridge_slave_1 left promiscuous mode [ 56.820730][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.827803][ T565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 56.837353][ T565] usb 3-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95 [ 56.837521][ T10] device bridge_slave_0 left promiscuous mode [ 56.846193][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.853028][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.860619][ T565] usb 3-1: config 0 descriptor?? [ 56.872208][ T10] device veth1_macvtap left promiscuous mode [ 56.878214][ T10] device veth0_vlan left promiscuous mode [ 56.908078][ T565] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 56.947565][ T39] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 56.955525][ T39] usb 1-1: can't read configurations, error -61 [ 56.961733][ T39] usb usb1-port1: attempt power cycle [ 56.979237][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.006122][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.016860][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.023838][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.031153][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.038999][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.052641][ T1097] device veth0_vlan entered promiscuous mode [ 57.059770][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.070542][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.078176][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.092433][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.104341][ T1097] device veth1_macvtap entered promiscuous mode [ 57.114856][ T565] usb 3-1: USB disconnect, device number 6 [ 57.121596][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.136273][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.407483][ T39] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 57.447822][ T334] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.557513][ T39] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 57.687531][ T39] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 57.694927][ T39] usb 1-1: can't read configurations, error -61 [ 57.788167][ T10] device bridge_slave_1 left promiscuous mode [ 57.794283][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.801942][ T10] device bridge_slave_0 left promiscuous mode [ 57.808127][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.816077][ T10] device veth1_macvtap left promiscuous mode [ 57.823296][ T10] device veth0_vlan left promiscuous mode [ 57.837966][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.848744][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.858388][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.865895][ T334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.878872][ T334] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 57.887933][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.896905][ T334] usb 5-1: config 0 descriptor?? [ 57.998422][ T39] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 58.127599][ T39] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 58.135103][ T39] usb 1-1: can't read configurations, error -61 [ 58.141726][ T39] usb usb1-port1: unable to enumerate USB device [ 58.281850][ T30] audit: type=1400 audit(1720429245.655:509): avc: denied { mounton } for pid=1133 comm="syz.1.249" path="/proc/40/task" dev="proc" ino=21249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 58.304212][ T39] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.313262][ T1134] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1 (only 8 groups) SYZFAIL: bad allocate request allocated=0 size=18446744073709551108/18446744073709551112 (errno 9: Bad file descriptor) [ 58.457684][ T334] usbhid 5-1:0.0: can't add hid device: -71 [ 58.463516][ T334] usbhid: probe of 5-1:0.0 failed with error -71 [ 58.470676][ T334] usb 5-1: USB disconnect, device number 6 [ 58.687563][ T39] usb 4-1: device descriptor read/all, error -71 [ 59.428808][ T10] device bridge_slave_1 left promiscuous mode [ 59.434742][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.442123][ T10] device bridge_slave_0 left promiscuous mode [ 59.448086][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.455648][ T10] device veth1_macvtap left promiscuous mode [ 59.461497][ T10] device veth0_vlan left promiscuous mode [ 60.718468][ T10] device bridge_slave_1 left promiscuous mode [ 60.724412][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.731799][ T10] device bridge_slave_0 left promiscuous mode [ 60.737853][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.745466][ T10] device bridge_slave_1 left promiscuous mode [ 60.751469][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.758967][ T10] device bridge_slave_0 left promiscuous mode [ 60.764912][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.772638][ T10] device bridge_slave_1 left promiscuous mode [ 60.778854][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.786233][ T10] device bridge_slave_0 left promiscuous mode [ 60.792191][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.799773][ T10] device bridge_slave_1 left promiscuous mode [ 60.805682][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.812929][ T10] device bridge_slave_0 left promiscuous mode [ 60.818984][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.826898][ T10] device veth1_macvtap left promiscuous mode [ 60.832747][ T10] device veth0_vlan left promiscuous mode [ 60.838425][ T10] device veth1_macvtap left promiscuous mode [ 60.844217][ T10] device veth0_vlan left promiscuous mode [ 60.849986][ T10] device veth1_macvtap left promiscuous mode [ 60.855783][ T10] device veth0_vlan left promiscuous mode [ 60.861559][ T10] device veth1_macvtap left promiscuous mode [ 60.867350][ T10] device veth0_vlan left promiscuous mode