last executing test programs: 4m1.938726215s ago: executing program 3 (id=7965): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) timerfd_create(0x1, 0x0) 4m1.865141916s ago: executing program 3 (id=7966): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 4m0.613790645s ago: executing program 3 (id=7970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 4m0.581346955s ago: executing program 3 (id=7972): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) lseek(r0, 0x10001, 0x0) 4m0.566425576s ago: executing program 3 (id=7973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) userfaultfd(0x80001) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m0.437089397s ago: executing program 3 (id=7974): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bind$netlink(r0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 4m0.052281773s ago: executing program 32 (id=7974): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bind$netlink(r0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 3m46.114287767s ago: executing program 0 (id=8030): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000040)={0xa, {0x8, 0x3, 0x1}}, 0xa) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x80}}, 0x4000850) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = inotify_init() r8 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x400008bf) close(r8) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m43.692836975s ago: executing program 0 (id=8036): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) 3m43.309052641s ago: executing program 0 (id=8040): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 3m42.470358693s ago: executing program 0 (id=8042): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) lseek(r0, 0x10001, 0x0) 3m42.357733295s ago: executing program 0 (id=8044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) openat$random(0xffffffffffffff9c, 0x0, 0x80081, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) 3m41.761078524s ago: executing program 0 (id=8049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) membarrier(0x4, 0x0) chdir(0x0) r4 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) fadvise64(r4, 0x3, 0x5, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_connect$uac1(0x5, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8e, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 3m41.290827292s ago: executing program 33 (id=8049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) membarrier(0x4, 0x0) chdir(0x0) r4 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) fadvise64(r4, 0x3, 0x5, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_connect$uac1(0x5, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8e, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2m6.066894623s ago: executing program 4 (id=8508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = timerfd_create(0x1, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m5.785119218s ago: executing program 4 (id=8509): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 1m54.956462915s ago: executing program 4 (id=8539): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @multicast}) 1m54.818533077s ago: executing program 4 (id=8540): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(0xffffffffffffffff, 0x6000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32], 0xb4}}, 0x0) 1m53.93715301s ago: executing program 4 (id=8549): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 1m52.464004262s ago: executing program 4 (id=8553): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, 0x0, 0x40000) 1m36.716077794s ago: executing program 34 (id=8553): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, 0x0, 0x40000) 12.447651261s ago: executing program 5 (id=9397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) 12.311713053s ago: executing program 5 (id=9401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) 12.226354755s ago: executing program 5 (id=9403): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 12.169070365s ago: executing program 5 (id=9404): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 11.261422849s ago: executing program 5 (id=9409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x7, &(0x7f0000000280)={0x0, 0x21}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) pipe2$watch_queue(0x0, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 9.16913276s ago: executing program 5 (id=9421): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 3.452959107s ago: executing program 7 (id=9498): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1.566186516s ago: executing program 7 (id=9504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 1.548708436s ago: executing program 7 (id=9505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x66) 1.536877766s ago: executing program 1 (id=9507): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.511560086s ago: executing program 1 (id=9508): mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1.485906917s ago: executing program 2 (id=9510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.474557027s ago: executing program 2 (id=9511): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) 1.462304517s ago: executing program 6 (id=9512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) 1.453459667s ago: executing program 2 (id=9513): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ftruncate(0xffffffffffffffff, 0x6000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0) 1.440949918s ago: executing program 7 (id=9514): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 1.421436908s ago: executing program 1 (id=9515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d61736369692c646973636172642c74696d655f6f66667365743d3078303030303030303030303030383030312c666d61736b3d30303030303030303030303031313331323030303030302c646d6173168a1e55b8a625396b3d30303030303030303030303030303030303030303135322c696f636861727365743d69736f383835", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000003775,allow_utime=00000000000000000007141,\x00'], 0x0, 0x14f5, &(0x7f0000001580)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004880) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 1.374438148s ago: executing program 6 (id=9516): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.352076669s ago: executing program 6 (id=9517): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 1.351376659s ago: executing program 6 (id=9518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 832.270027ms ago: executing program 6 (id=9519): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000001e40)=""/194, 0x0, 0xc2, 0x1}, 0x28) 822.926637ms ago: executing program 6 (id=9520): r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000280)=0x21b0, 0xff0c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000080)=0xa4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r2 = openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000440)=""/203, &(0x7f0000000540)=0xcb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000340)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r5 = open(0x0, 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x7d, 0x4, 0x0, 0x0, 0x2401}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000580)=""/155, 0x9b}], 0x1, 0x284, 0xfffffffd) 403.749373ms ago: executing program 2 (id=9521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 402.597853ms ago: executing program 1 (id=9522): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0x15) 394.123063ms ago: executing program 7 (id=9523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x280) 244.662246ms ago: executing program 1 (id=9524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 205.566206ms ago: executing program 2 (id=9525): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) 171.155247ms ago: executing program 7 (id=9526): r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000280)=0x21b0, 0xff0c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000080)=0xa4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r2 = openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000440)=""/203, &(0x7f0000000540)=0xcb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000340)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r5 = open(0x0, 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x7d, 0x4, 0x0, 0x0, 0x2401}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000580)=""/155, 0x9b}], 0x1, 0x284, 0xfffffffd) 90.956368ms ago: executing program 1 (id=9527): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 0s ago: executing program 2 (id=9528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.2.7795'. [ 1918.926173][ T30] audit: type=1326 audit(1752064426.816:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25705 comm="syz.2.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1918.972631][T25712] fido_id[25712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1919.005397][ T30] audit: type=1326 audit(1752064426.816:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25705 comm="syz.2.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1919.088025][T25714] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1919.098996][T25714] kvm: pic: non byte read [ 1919.103570][T25714] kvm: pic: level sensitive irq not supported [ 1919.103611][T25714] kvm: pic: non byte read [ 1919.114574][T25714] kvm: pic: level sensitive irq not supported [ 1919.465163][T25728] syz.3.7799[25728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1919.472237][T25728] syz.3.7799[25728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1920.216356][T25744] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1920.578077][T25753] fuse: Invalid rootmode [ 1920.679832][T25754] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1922.132762][T21842] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 1922.140978][T21842] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1922.253900][T25763] fido_id[25763]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1922.332879][T25756] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1922.367965][T25756] kvm: pic: non byte read [ 1922.381072][T25773] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1922.407986][T25756] kvm: pic: non byte read [ 1922.412563][T25756] kvm: pic: non byte read [ 1922.598584][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7814'. [ 1922.655032][T25787] fuse: Bad value for 'rootmode' [ 1922.661617][ T30] audit: type=1326 audit(1752064432.056:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.685821][ T30] audit: type=1326 audit(1752064432.056:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.691656][T21842] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1922.716227][ T30] audit: type=1326 audit(1752064432.056:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.740603][ T30] audit: type=1326 audit(1752064432.056:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.764616][ T30] audit: type=1326 audit(1752064432.056:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.792577][ T30] audit: type=1326 audit(1752064432.056:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.817117][ T30] audit: type=1326 audit(1752064432.066:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.840927][ T30] audit: type=1326 audit(1752064432.066:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.2.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1922.928681][T25792] netlink: 'syz.4.7818': attribute type 3 has an invalid length. [ 1922.936825][T25792] netlink: 'syz.4.7818': attribute type 3 has an invalid length. [ 1922.944718][T25792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1923.516461][T25791] usb usb1: check_ctrlrecip: process 25791 (syz.4.7818) requesting ep 01 but needs 81 [ 1923.558931][T25795] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1923.627327][T25801] kvm: pic: non byte read [ 1923.632699][T25801] kvm: pic: non byte read [ 1923.683995][T25801] kvm: pic: non byte read [ 1923.797597][T21842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1923.905566][T21842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.968060][T21842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1924.034496][T25804] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1924.148411][T25811] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1924.175456][T21842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1924.189370][T21842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.203968][T21842] usb 4-1: Product: syz [ 1924.215392][T21842] usb 4-1: Manufacturer: syz [ 1924.220018][T21842] usb 4-1: SerialNumber: syz [ 1924.293749][T25825] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1924.311889][T25825] kvm: pic: non byte read [ 1924.317411][T25825] kvm: pic: non byte read [ 1924.321998][T25825] kvm: pic: non byte read [ 1925.645443][T21842] usb 4-1: 0:2 : does not exist [ 1925.664879][T21842] usb 4-1: USB disconnect, device number 68 [ 1925.727959][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7830'. [ 1925.737419][ T30] audit: type=1326 audit(1752064435.186:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25833 comm="syz.3.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f1f5d929 code=0x7ffc0000 [ 1925.801372][ T30] audit: type=1326 audit(1752064435.186:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25833 comm="syz.3.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f1f5d929 code=0x7ffc0000 [ 1926.817765][T25851] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1926.964305][T25862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7838'. [ 1926.973438][T25862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7838'. [ 1927.224673][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 1928.203531][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1928.212487][T25880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1929.277151][T18342] Bluetooth: hci0: command 0x1003 tx timeout [ 1929.452130][T23827] Bluetooth: hci0: sending frame failed (-49) [ 1930.236705][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7848'. [ 1930.315594][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1930.315638][ T30] audit: type=1326 audit(1752064439.696:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.418674][ T30] audit: type=1326 audit(1752064439.696:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.535857][ T30] audit: type=1326 audit(1752064439.696:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.668833][ T30] audit: type=1326 audit(1752064439.696:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.718212][ T30] audit: type=1326 audit(1752064439.696:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.750002][ T30] audit: type=1326 audit(1752064439.696:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.778633][ T30] audit: type=1326 audit(1752064439.706:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1930.811457][ T30] audit: type=1326 audit(1752064439.706:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25897 comm="syz.1.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1931.525390][T25894] Bluetooth: hci0: command 0x1001 tx timeout [ 1931.531781][T23827] Bluetooth: hci0: sending frame failed (-49) [ 1932.137905][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7854'. [ 1932.546425][T25926] netlink: 'syz.3.7856': attribute type 3 has an invalid length. [ 1932.554861][T25926] netlink: 'syz.3.7856': attribute type 3 has an invalid length. [ 1932.563011][T25926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1933.165544][T25925] usb usb1: check_ctrlrecip: process 25925 (syz.3.7856) requesting ep 01 but needs 81 [ 1934.298932][T18342] Bluetooth: hci0: command 0x1009 tx timeout [ 1935.473877][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7861'. [ 1935.547863][ T30] audit: type=1326 audit(1752064444.926:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1935.622000][ T30] audit: type=1326 audit(1752064444.926:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1935.689308][ T30] audit: type=1326 audit(1752064444.926:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1935.741592][ T30] audit: type=1326 audit(1752064444.926:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1935.773581][ T30] audit: type=1326 audit(1752064444.926:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1935.797649][ T30] audit: type=1326 audit(1752064444.926:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1935.821632][ T30] audit: type=1326 audit(1752064444.936:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1937.792678][ T30] audit: type=1326 audit(1752064444.936:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25942 comm="syz.1.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1937.981588][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7871'. [ 1937.991098][T25974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7871'. [ 1938.214963][ T60] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1938.645448][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1938.683122][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7873'. [ 1938.685761][ T30] audit: type=1326 audit(1752064448.136:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25985 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1938.761163][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1938.781702][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1938.865382][ T30] audit: type=1326 audit(1752064448.136:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25985 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1938.948552][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'. [ 1939.205446][ T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1939.218693][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.232947][ T60] usb 4-1: Product: syz [ 1939.239262][ T60] usb 4-1: Manufacturer: syz [ 1939.245951][ T60] usb 4-1: SerialNumber: syz [ 1939.309252][T25998] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1939.675539][ T60] usb 4-1: 0:2 : does not exist [ 1939.705033][ T60] usb 4-1: USB disconnect, device number 69 [ 1940.433149][T26015] fuse: Bad value for 'group_id' [ 1940.922199][T26020] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1941.929732][T26026] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1942.582786][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1942.582803][ T30] audit: type=1326 audit(1752064452.036:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26029 comm="syz.3.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f1f5d929 code=0x7ffc0000 [ 1942.715979][ T30] audit: type=1326 audit(1752064452.066:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26029 comm="syz.3.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f1f5d929 code=0x7ffc0000 [ 1942.740192][ T30] audit: type=1326 audit(1752064452.066:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26029 comm="syz.3.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa8f1f5d929 code=0x7ffc0000 [ 1942.765198][ T30] audit: type=1326 audit(1752064452.066:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26029 comm="syz.3.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f1f5d929 code=0x7ffc0000 [ 1943.789721][T26052] fuse: Bad value for 'group_id' [ 1945.597448][T26070] usb usb1: check_ctrlrecip: process 26070 (syz.4.7896) requesting ep 01 but needs 81 [ 1946.423422][ T30] audit: type=1326 audit(1752064455.876:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26072 comm="syz.4.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1946.456024][ T30] audit: type=1326 audit(1752064455.876:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26072 comm="syz.4.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1946.504956][ T30] audit: type=1326 audit(1752064455.876:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26072 comm="syz.4.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1946.602689][T26083] netlink: 'syz.4.7900': attribute type 3 has an invalid length. [ 1946.610931][T26083] netlink: 'syz.4.7900': attribute type 3 has an invalid length. [ 1946.618817][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7900'. [ 1947.155429][ T30] audit: type=1326 audit(1752064455.876:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26072 comm="syz.4.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1947.180226][T26080] usb usb1: check_ctrlrecip: process 26080 (syz.4.7900) requesting ep 01 but needs 81 [ 1947.254306][ T30] audit: type=1326 audit(1752064455.876:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26072 comm="syz.4.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1947.377918][T26093] tipc: Started in network mode [ 1947.382818][T26093] tipc: Node identity , cluster identity 4711 [ 1947.389334][T26093] tipc: Failed to obtain node identity [ 1947.394808][T26093] tipc: Enabling of bearer rejected, failed to enable media [ 1947.475402][ T60] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1947.562643][T21017] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1948.729770][T26108] netlink: 'syz.4.7908': attribute type 3 has an invalid length. [ 1948.738299][T26108] netlink: 'syz.4.7908': attribute type 3 has an invalid length. [ 1948.746389][T26108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1949.340536][T26107] usb usb1: check_ctrlrecip: process 26107 (syz.4.7908) requesting ep 01 but needs 81 [ 1950.170398][ T30] audit: type=1326 audit(1752064459.616:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.2.7911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1950.548918][T26123] usb usb1: check_ctrlrecip: process 26123 (syz.0.7909) requesting ep 01 but needs 81 [ 1950.779147][ T60] usb 3-1: device descriptor read/all, error -71 [ 1950.986997][ T30] audit: type=1326 audit(1752064459.616:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.2.7911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1951.074654][T26127] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1951.088086][T26129] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1951.122414][ T30] audit: type=1326 audit(1752064459.616:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.2.7911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 1951.158117][T26127] kvm: pic: level sensitive irq not supported [ 1951.158218][T26127] kvm: pic: non byte read [ 1951.169329][T21017] usb 4-1: device descriptor read/all, error -71 [ 1951.176330][T26132] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1951.177048][T26127] kvm: pic: level sensitive irq not supported [ 1951.186706][T26129] kvm: pic: non byte read [ 1951.198241][T26127] kvm: pic: non byte read [ 1951.202993][T26127] kvm: pic: level sensitive irq not supported [ 1951.203046][T26127] kvm: pic: non byte read [ 1951.215053][T26129] kvm: pic: level sensitive irq not supported [ 1951.215125][T26129] kvm: pic: non byte read [ 1951.226995][T26129] kvm: pic: level sensitive irq not supported [ 1951.227053][T26129] kvm: pic: non byte read [ 1951.315235][T26129] kvm: pic: level sensitive irq not supported [ 1951.318441][T26129] kvm: pic: non byte read [ 1954.399061][T26159] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1954.549922][T26175] usb usb1: check_ctrlrecip: process 26175 (syz.1.7926) requesting ep 01 but needs 81 [ 1954.999457][T26178] tipc: Started in network mode [ 1955.004431][T26178] tipc: Node identity , cluster identity 4711 [ 1955.010667][T26178] tipc: Failed to obtain node identity [ 1955.016393][T26178] tipc: Enabling of bearer rejected, failed to enable media [ 1955.038862][T26185] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1955.057595][T26185] kvm: pic: non byte read [ 1955.062287][T26185] kvm: pic: level sensitive irq not supported [ 1955.062400][T26185] kvm: pic: non byte read [ 1955.073625][T26185] kvm: pic: level sensitive irq not supported [ 1955.073679][T26185] kvm: pic: non byte read [ 1955.084894][T26185] kvm: pic: level sensitive irq not supported [ 1956.896408][T18342] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 1956.959902][T18342] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1957.108257][T26212] fido_id[26212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1957.154488][ T30] audit: type=1326 audit(1752064466.606:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26218 comm="syz.0.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1957.324241][T26222] netlink: 'syz.3.7943': attribute type 3 has an invalid length. [ 1957.332741][T26222] netlink: 'syz.3.7943': attribute type 3 has an invalid length. [ 1957.340801][T26222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7943'. [ 1957.898241][T26221] usb usb1: check_ctrlrecip: process 26221 (syz.3.7943) requesting ep 01 but needs 81 [ 1957.979511][T18342] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1958.001124][ T30] audit: type=1326 audit(1752064466.636:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26218 comm="syz.0.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.065625][ T30] audit: type=1326 audit(1752064466.636:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26218 comm="syz.0.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.146756][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7944'. [ 1958.194346][ T30] audit: type=1326 audit(1752064467.586:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.284527][T26233] usb usb1: check_ctrlrecip: process 26233 (syz.4.7946) requesting ep 01 but needs 81 [ 1958.455730][T18342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1958.535935][ T30] audit: type=1326 audit(1752064467.586:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.555489][T18342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.565405][ T30] audit: type=1326 audit(1752064467.586:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.591654][T18342] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1958.642433][ T30] audit: type=1326 audit(1752064467.596:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.708804][ T30] audit: type=1326 audit(1752064467.596:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.785468][T18342] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1958.794712][ T30] audit: type=1326 audit(1752064467.596:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1958.825528][T18342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.833589][T18342] usb 3-1: Product: syz [ 1958.862059][T18342] usb 3-1: Manufacturer: syz [ 1958.866755][T18342] usb 3-1: SerialNumber: syz [ 1958.871978][ T30] audit: type=1326 audit(1752064467.646:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.0.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4135d8929 code=0x7ffc0000 [ 1959.026534][T26241] tipc: Started in network mode [ 1959.031445][T26241] tipc: Node identity , cluster identity 4711 [ 1959.037692][T26241] tipc: Failed to obtain node identity [ 1959.043186][T26241] tipc: Enabling of bearer rejected, failed to enable media [ 1960.060442][T20089] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 1960.068132][T18342] usb 3-1: 0:2 : does not exist [ 1960.075254][T20089] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1960.106108][T18342] usb 3-1: USB disconnect, device number 76 [ 1960.161250][T26261] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1960.289249][T26271] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1961.124401][T26288] netlink: 'syz.1.7962': attribute type 3 has an invalid length. [ 1961.132402][T26288] netlink: 'syz.1.7962': attribute type 3 has an invalid length. [ 1961.140241][T26288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1961.155945][T26285] usb usb1: check_ctrlrecip: process 26285 (syz.4.7961) requesting ep 01 but needs 81 [ 1961.222217][T26288] usb usb1: check_ctrlrecip: process 26288 (syz.1.7962) requesting ep 01 but needs 81 [ 1961.655876][T26293] tipc: Started in network mode [ 1961.660791][T26293] tipc: Node identity , cluster identity 4711 [ 1961.666914][T26293] tipc: Failed to obtain node identity [ 1961.672382][T26293] tipc: Enabling of bearer rejected, failed to enable media [ 1962.069823][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7964'. [ 1963.094603][T26313] fuse: Unknown parameter 'grou00000000000000000000' [ 1963.637475][T20089] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 1963.654939][T20089] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1963.816006][T26331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.823172][T26331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.831014][T26331] device bridge_slave_0 entered promiscuous mode [ 1963.841280][T26331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.848893][T26331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.859189][T26331] device bridge_slave_1 entered promiscuous mode [ 1963.908382][T26338] netlink: 'syz.1.7978': attribute type 3 has an invalid length. [ 1963.916665][T26338] netlink: 'syz.1.7978': attribute type 3 has an invalid length. [ 1963.924595][T26338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1964.426185][T26337] usb usb1: check_ctrlrecip: process 26337 (syz.1.7978) requesting ep 01 but needs 81 [ 1964.439547][T23879] device bridge_slave_1 left promiscuous mode [ 1964.451507][T23879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.464276][T23879] device bridge_slave_0 left promiscuous mode [ 1964.471109][T23879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.479911][T23879] device veth1_macvtap left promiscuous mode [ 1964.486080][T23879] device veth0_vlan left promiscuous mode [ 1964.608249][T26341] tipc: Started in network mode [ 1964.613187][T26341] tipc: Node identity , cluster identity 4711 [ 1964.619335][T26341] tipc: Failed to obtain node identity [ 1964.624819][T26341] tipc: Enabling of bearer rejected, failed to enable media [ 1964.744888][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1964.753416][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1964.762790][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1964.770833][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1964.778832][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1964.787273][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1964.795905][T16632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.802960][T16632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1964.820779][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1964.835073][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1964.886767][T16632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.894016][T16632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1964.935500][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7981'. [ 1964.947825][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1964.978083][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1965.011186][T26331] device veth0_vlan entered promiscuous mode [ 1965.022894][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1965.042846][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1965.053153][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1965.062700][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1965.074194][T26331] device veth1_macvtap entered promiscuous mode [ 1965.112449][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1965.146821][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1965.518052][T26365] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1965.736868][T23437] Bluetooth: hci0: Frame reassembly failed (-84) [ 1965.842616][T23437] Bluetooth: hci0: Frame reassembly failed (-84) [ 1966.752898][T26371] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1967.677072][T26379] netlink: 'syz.2.7987': attribute type 3 has an invalid length. [ 1967.685080][T26379] netlink: 'syz.2.7987': attribute type 3 has an invalid length. [ 1967.692907][T26379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1968.032824][T26379] usb usb1: check_ctrlrecip: process 26379 (syz.2.7987) requesting ep 01 but needs 81 [ 1968.055655][T21842] Bluetooth: hci0: command 0x1003 tx timeout [ 1968.062033][T23827] Bluetooth: hci0: sending frame failed (-49) [ 1969.132318][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1969.177860][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1969.177906][ T30] audit: type=1326 audit(1752064478.586:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.213896][ T30] audit: type=1326 audit(1752064478.586:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.238778][ T30] audit: type=1326 audit(1752064478.586:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.395545][ T30] audit: type=1326 audit(1752064478.586:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.423853][ T30] audit: type=1326 audit(1752064478.586:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.454409][ T30] audit: type=1326 audit(1752064478.586:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.487280][ T30] audit: type=1326 audit(1752064478.596:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1969.566989][ T30] audit: type=1326 audit(1752064478.596:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26387 comm="syz.4.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1970.321349][ T1084] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 1970.337268][ T1084] hid-generic 0000:0000:0000.0078: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1970.400772][ T344] Bluetooth: hci0: command 0x1001 tx timeout [ 1970.407062][T23827] Bluetooth: hci0: sending frame failed (-49) [ 1970.583692][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1970.593668][ T30] audit: type=1326 audit(1752064480.036:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.4.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1970.625465][ T30] audit: type=1326 audit(1752064480.036:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.4.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 1971.434227][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8010'. [ 1971.453656][T26452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8010'. [ 1972.314903][T26457] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1972.521942][T21842] Bluetooth: hci0: command 0x1009 tx timeout [ 1972.809848][T26462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1973.810159][T26471] tipc: Started in network mode [ 1973.815075][T26471] tipc: Node identity , cluster identity 4711 [ 1973.821203][T26471] tipc: Failed to obtain node identity [ 1973.826690][T26471] tipc: Enabling of bearer rejected, failed to enable media [ 1975.010099][T21842] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 1975.062978][T21842] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1975.443082][T26489] usb usb1: check_ctrlrecip: process 26489 (syz.2.8018) requesting ep 01 but needs 81 [ 1975.737677][T26491] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1975.807719][T26497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8021'. [ 1976.052219][T26509] netlink: 'syz.5.8024': attribute type 3 has an invalid length. [ 1976.064094][T26509] netlink: 'syz.5.8024': attribute type 3 has an invalid length. [ 1976.072253][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8024'. [ 1976.646194][T26507] usb usb1: check_ctrlrecip: process 26507 (syz.5.8024) requesting ep 01 but needs 81 [ 1978.672124][T25251] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1978.681921][T26533] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1978.695968][T25251] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1979.508737][T26541] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1980.033349][T26542] fido_id[26542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1980.127874][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8034'. [ 1980.418073][T26560] fuse: Unknown parameter 'group_id00000000000000000000' [ 1980.593131][T26566] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1981.235264][T26554] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1981.341021][T26572] fuse: Bad value for 'user_id' [ 1981.390682][T26574] fuse: Unknown parameter '0x0000000000000003' [ 1982.052463][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1982.052488][ T30] audit: type=1326 audit(1752064491.506:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.1.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1982.110108][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8047'. [ 1982.351938][ T30] audit: type=1326 audit(1752064491.556:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.1.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1982.435112][ T30] audit: type=1326 audit(1752064491.556:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.1.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1982.510108][ T30] audit: type=1326 audit(1752064491.566:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.1.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1982.670135][ T30] audit: type=1326 audit(1752064491.796:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.1.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1982.706482][ T30] audit: type=1326 audit(1752064491.796:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.1.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 1982.707202][T26595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1982.739505][T26595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1982.981252][T26592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1982.995744][T26592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.008908][T26592] device bridge_slave_0 entered promiscuous mode [ 1983.019255][T26592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.027510][T26592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.197428][T26592] device bridge_slave_1 entered promiscuous mode [ 1983.236277][T22058] Bluetooth: hci0: Frame reassembly failed (-84) [ 1983.382440][T16632] device bridge_slave_1 left promiscuous mode [ 1983.422849][T16632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.497263][T26607] fuse: Unknown parameter '0x0000000000000003' [ 1983.528892][T16632] device bridge_slave_0 left promiscuous mode [ 1984.046457][T16632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.150227][T16632] device veth1_macvtap left promiscuous mode [ 1984.207364][T16632] device veth0_vlan left promiscuous mode [ 1984.380973][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1984.388684][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1984.403409][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1984.411863][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1984.420114][T23437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.427176][T23437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.434823][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1984.443510][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1984.451877][T23437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.458958][T23437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.467069][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1984.483281][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1984.491523][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1984.508757][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1984.524427][T26592] device veth0_vlan entered promiscuous mode [ 1984.532026][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1984.547171][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1984.557936][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1984.571981][T26592] device veth1_macvtap entered promiscuous mode [ 1984.579240][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1984.592700][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1984.608053][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1984.693601][T26637] fuse: Bad value for 'fd' [ 1985.335428][T25894] Bluetooth: hci0: command 0x1003 tx timeout [ 1985.341654][T23827] Bluetooth: hci0: sending frame failed (-49) [ 1985.509555][T26659] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1985.737264][T16632] Bluetooth: hci1: Frame reassembly failed (-84) [ 1985.747750][T16632] Bluetooth: hci1: Frame reassembly failed (-84) [ 1987.205359][T21842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1987.355357][T25894] Bluetooth: hci0: command 0x1001 tx timeout [ 1987.361509][T26660] Bluetooth: hci0: sending frame failed (-49) [ 1987.605509][T21842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1987.685419][T21842] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1987.755401][T18342] Bluetooth: hci1: command 0x1003 tx timeout [ 1987.761459][T26660] Bluetooth: hci1: sending frame failed (-49) [ 1987.845444][T21842] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1987.854489][T21842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.862490][T21842] usb 7-1: Product: syz [ 1987.866666][T21842] usb 7-1: Manufacturer: syz [ 1987.871249][T21842] usb 7-1: SerialNumber: syz [ 1988.235536][T21842] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 1988.243396][T21842] usb 7-1: 2:1: All rates were zero [ 1988.282036][T21842] usb 7-1: USB disconnect, device number 2 [ 1988.496546][T26266] udevd[26266]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1988.975345][T21017] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1989.375391][T21017] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1989.435372][T25894] Bluetooth: hci0: command 0x1009 tx timeout [ 1989.455440][T21017] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1989.615461][T21017] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1989.624542][T21017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.632594][T21017] usb 7-1: Product: syz [ 1989.636839][T21017] usb 7-1: Manufacturer: syz [ 1989.641451][T21017] usb 7-1: SerialNumber: syz [ 1989.867805][T25894] Bluetooth: hci1: command 0x1001 tx timeout [ 1989.878013][T26660] Bluetooth: hci1: sending frame failed (-49) [ 1990.015714][T21017] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 1990.023761][T21017] usb 7-1: 2:1: All rates were zero [ 1990.073290][T26685] fuse: Unknown parameter 'group_id00000000000000000000' [ 1990.119754][T21017] usb 7-1: USB disconnect, device number 3 [ 1990.397844][T26266] udevd[26266]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1990.849158][T26698] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1990.921638][T26702] fuse: Bad value for 'fd' [ 1991.195342][T26705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8089'. [ 1991.461828][T26711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1992.584442][ T1084] Bluetooth: hci1: command 0x1009 tx timeout [ 1993.222841][T26723] usb usb1: check_ctrlrecip: process 26723 (syz.6.8093) requesting ep 01 but needs 81 [ 1993.808850][T26730] syz.4.8095[26730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1993.809270][T26730] syz.4.8095[26730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1995.963524][T26766] fuse: Bad value for 'user_id' [ 1996.357808][T26776] usb usb1: check_ctrlrecip: process 26776 (syz.6.8108) requesting ep 01 but needs 81 [ 1996.773281][T26785] syz.2.8114[26785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1996.773378][T26785] syz.2.8114[26785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1996.819889][T26786] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1997.020317][T26789] fuse: Bad value for 'rootmode' [ 1997.606625][T26800] fuse: Bad value for 'user_id' [ 1998.558796][T26818] usb usb1: check_ctrlrecip: process 26818 (syz.5.8126) requesting ep 01 but needs 81 [ 1998.785381][T21017] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1999.185388][T21017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1999.275404][T21017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1999.285557][T21017] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1999.358836][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8129'. [ 1999.375376][T26825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8129'. [ 1999.445515][T21017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1999.465255][T21017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.473581][T21017] usb 3-1: Product: syz [ 1999.487487][T21017] usb 3-1: Manufacturer: syz [ 1999.495579][T21017] usb 3-1: SerialNumber: syz [ 2000.007500][T26840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8132'. [ 2000.016963][ T30] audit: type=1326 audit(1752064509.466:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.042295][ T30] audit: type=1326 audit(1752064509.466:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.045466][T21017] usb 3-1: 0:2 : does not exist [ 2000.070962][ T30] audit: type=1326 audit(1752064509.466:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.094967][ T30] audit: type=1326 audit(1752064509.466:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.112368][T21017] usb 3-1: USB disconnect, device number 77 [ 2000.126958][T26848] tipc: Started in network mode [ 2000.131859][T26848] tipc: Node identity , cluster identity 4711 [ 2000.138150][T26848] tipc: Failed to obtain node identity [ 2000.143636][T26848] tipc: Enabling of bearer rejected, failed to enable media [ 2000.217261][ T30] audit: type=1326 audit(1752064509.466:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.241221][ T30] audit: type=1326 audit(1752064509.466:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.265115][ T30] audit: type=1326 audit(1752064509.476:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2000.288933][ T30] audit: type=1326 audit(1752064509.476:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.5.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a9374929 code=0x7ffc0000 [ 2001.464547][T26863] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2002.075408][T26862] usb usb1: check_ctrlrecip: process 26862 (syz.5.8141) requesting ep 01 but needs 81 [ 2003.459757][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8142'. [ 2003.469102][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8142'. [ 2006.498288][T26893] tipc: Started in network mode [ 2006.503234][T26893] tipc: Node identity , cluster identity 4711 [ 2006.509999][T26893] tipc: Failed to obtain node identity [ 2006.515954][T26893] tipc: Enabling of bearer rejected, failed to enable media [ 2006.687565][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8155'. [ 2006.737020][T26902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8155'. [ 2007.319917][T26913] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2008.360850][T26926] syz.1.8161[26926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2008.360945][T26926] syz.1.8161[26926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2008.411416][ T30] audit: type=1326 audit(1752064517.866:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.446863][ T30] audit: type=1326 audit(1752064517.906:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.471481][T26931] syz.6.8162[26931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2008.471599][T26931] syz.6.8162[26931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2008.485544][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8160'. [ 2008.490482][ T30] audit: type=1326 audit(1752064517.926:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.539585][ T30] audit: type=1326 audit(1752064517.926:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.563386][ T30] audit: type=1326 audit(1752064517.926:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.591197][ T30] audit: type=1326 audit(1752064517.936:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.623397][ T30] audit: type=1326 audit(1752064517.936:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.647178][ T30] audit: type=1326 audit(1752064517.936:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.670967][ T30] audit: type=1326 audit(1752064517.936:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.700083][ T30] audit: type=1326 audit(1752064517.936:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2008.752979][T26933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8163'. [ 2008.944718][T26935] fuse: Bad value for 'fd' [ 2009.099050][T26938] usb usb1: check_ctrlrecip: process 26938 (syz.2.8165) requesting ep 01 but needs 81 [ 2009.258619][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8168'. [ 2009.277778][T26944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8168'. [ 2009.386681][T26953] netlink: 'syz.4.8169': attribute type 3 has an invalid length. [ 2009.394653][T26953] netlink: 'syz.4.8169': attribute type 3 has an invalid length. [ 2009.433851][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8169'. [ 2009.680093][T26960] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2010.575881][T26970] fuse: Bad value for 'fd' [ 2010.764930][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8174'. [ 2010.853825][T26981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8181'. [ 2010.873065][T26981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8181'. [ 2011.057481][T26987] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2011.412079][T26985] fuse: Unknown parameter '0x0000000000000004' [ 2012.141884][T26991] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2012.931384][T26998] netlink: 'syz.6.8185': attribute type 3 has an invalid length. [ 2013.032285][T26998] netlink: 'syz.6.8185': attribute type 3 has an invalid length. [ 2013.096715][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8185'. [ 2013.114182][T27006] usb usb1: check_ctrlrecip: process 27006 (syz.6.8185) requesting ep 01 but needs 81 [ 2013.161437][T27007] usb usb1: check_ctrlrecip: process 27007 (syz.2.8188) requesting ep 01 but needs 81 [ 2013.233019][T27009] fuse: Bad value for 'fd' [ 2013.780064][T27016] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2014.736500][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8193'. [ 2014.767605][T27020] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8193'. [ 2014.852009][T27025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8195'. [ 2014.861350][T27025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8195'. [ 2016.207437][T21842] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2016.635542][T21842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2016.735431][T21842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.751134][T21842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2016.925455][T21842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2016.946246][T21842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.964578][T21842] usb 3-1: Product: syz [ 2016.968982][T21842] usb 3-1: Manufacturer: syz [ 2016.973591][T21842] usb 3-1: SerialNumber: syz [ 2017.076463][T27048] fuse: Invalid rootmode [ 2017.565435][T21842] usb 3-1: 0:2 : does not exist [ 2017.576267][T21842] usb 3-1: USB disconnect, device number 78 [ 2018.813664][T27052] udevd[27052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2020.706966][T27101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8218'. [ 2020.765358][T21017] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2021.165385][T21017] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2021.245429][T21017] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2021.255688][T21017] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2021.415503][T21017] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2021.424780][T21017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.433098][T21017] usb 7-1: Product: syz [ 2021.437526][T21017] usb 7-1: Manufacturer: syz [ 2021.442171][T21017] usb 7-1: SerialNumber: syz [ 2021.662078][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8221'. [ 2021.671083][T27112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8221'. [ 2023.958209][T27133] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2024.755488][T21017] usb 7-1: 0:2 : does not exist [ 2024.775007][T21017] usb 7-1: USB disconnect, device number 4 [ 2025.009184][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8235'. [ 2027.791454][T27201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8251'. [ 2027.800415][T27201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8251'. [ 2029.452585][T27211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2030.666577][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2030.708406][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2031.910959][T27240] usb usb1: check_ctrlrecip: process 27240 (syz.4.8262) requesting ep 01 but needs 81 [ 2031.982410][T27242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8265'. [ 2031.991467][T27242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8265'. [ 2032.786919][T25894] Bluetooth: hci0: command 0x1003 tx timeout [ 2032.920757][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2034.877449][T27288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8281'. [ 2034.886679][T27288] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8281'. [ 2034.955368][T25894] Bluetooth: hci0: command 0x1001 tx timeout [ 2034.961505][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2035.401199][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8285'. [ 2037.397691][T27322] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2041.983072][T25894] Bluetooth: hci1: command 0x1003 tx timeout [ 2042.001642][T26660] Bluetooth: hci1: sending frame failed (-49) [ 2042.075160][T27340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 2042.084737][T27340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8299'. [ 2042.398583][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2042.467371][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2043.333966][T27352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8297'. [ 2043.720121][T27358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8305'. [ 2043.729343][T27358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8305'. [ 2043.739893][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8306'. [ 2047.938441][T25894] Bluetooth: hci1: command 0x1001 tx timeout [ 2047.950765][T25894] Bluetooth: hci0: command 0x1003 tx timeout [ 2047.957471][T19529] Bluetooth: hci1: sending frame failed (-49) [ 2047.970220][T27380] Bluetooth: hci0: sending frame failed (-49) [ 2048.369022][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 2048.408011][T27397] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2048.429414][T27397] picdev_read: 1 callbacks suppressed [ 2048.429435][T27397] kvm: pic: non byte read [ 2048.443046][T27397] kvm: pic: level sensitive irq not supported [ 2048.443221][T27397] kvm: pic: non byte read [ 2048.457596][T27397] kvm: pic: level sensitive irq not supported [ 2048.457772][T27397] kvm: pic: non byte read [ 2048.471851][T27397] kvm: pic: level sensitive irq not supported [ 2048.472176][T27397] kvm: pic: non byte read [ 2048.849755][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8321'. [ 2049.335339][T25894] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2049.775380][T25894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2049.855396][T25894] usb 5-1: config 1 interface 1 has no altsetting 0 [ 2049.995697][ T344] Bluetooth: hci0: command 0x1001 tx timeout [ 2050.001786][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2050.015438][T25894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2050.024609][T25894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.032888][T25894] usb 5-1: Product: syz [ 2050.037248][T25894] usb 5-1: Manufacturer: syz [ 2050.041832][T25894] usb 5-1: SerialNumber: syz [ 2050.865408][ T364] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2050.998454][T27433] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2051.225432][T25894] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 2051.233219][T25894] usb 5-1: 2:1: All rates were zero [ 2051.258480][T25894] usb 5-1: USB disconnect, device number 66 [ 2051.345398][ T364] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2051.445714][ T364] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2051.475964][T27443] udevd[27443]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2051.500193][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8333'. [ 2051.645465][ T364] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2051.654891][ T364] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.664090][ T364] usb 7-1: Product: syz [ 2051.669223][ T364] usb 7-1: Manufacturer: syz [ 2051.673947][ T364] usb 7-1: SerialNumber: syz [ 2051.952489][T23879] Bluetooth: hci1: Frame reassembly failed (-84) [ 2051.963358][T23879] Bluetooth: hci1: Frame reassembly failed (-84) [ 2053.385190][T27462] device veth0_vlan left promiscuous mode [ 2053.391378][T27462] device veth0_vlan entered promiscuous mode [ 2053.436134][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8342'. [ 2053.515437][ T364] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 2053.523290][ T364] usb 7-1: 2:1: All rates were zero [ 2053.550114][ T364] usb 7-1: USB disconnect, device number 5 [ 2053.797139][T27443] udevd[27443]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2053.996356][T25894] Bluetooth: hci1: command 0x1003 tx timeout [ 2054.004851][T26660] Bluetooth: hci1: sending frame failed (-49) [ 2054.800831][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8346'. [ 2054.809798][T27479] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8346'. [ 2056.394111][T21842] Bluetooth: hci1: command 0x1001 tx timeout [ 2056.400709][T23827] Bluetooth: hci1: sending frame failed (-49) [ 2056.555538][T27487] device veth0_vlan left promiscuous mode [ 2056.569058][T27487] device veth0_vlan entered promiscuous mode [ 2057.980597][T27513] device veth0_vlan left promiscuous mode [ 2057.986897][T27513] device veth0_vlan entered promiscuous mode [ 2058.018696][T27517] device veth0_vlan left promiscuous mode [ 2058.020230][T27519] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2058.024472][T27517] device veth0_vlan entered promiscuous mode [ 2058.039444][ T364] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2058.485475][T25894] Bluetooth: hci1: command 0x1009 tx timeout [ 2059.143195][T27532] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2059.325391][ T364] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2059.405487][ T364] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2059.488717][T27552] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2059.497188][T25251] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2059.520965][T27552] kvm: pic: non byte read [ 2059.526381][T27552] kvm: pic: level sensitive irq not supported [ 2059.526424][T27552] kvm: pic: non byte read [ 2059.537405][T27552] kvm: pic: level sensitive irq not supported [ 2059.537456][T27552] kvm: pic: non byte read [ 2059.548543][T27552] kvm: pic: level sensitive irq not supported [ 2059.548596][T27552] kvm: pic: non byte read [ 2059.575398][ T364] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2059.584880][ T364] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.593914][ T364] usb 7-1: Product: syz [ 2059.599614][ T364] usb 7-1: Manufacturer: syz [ 2059.604269][ T364] usb 7-1: SerialNumber: syz [ 2059.835734][ T364] usb 7-1: can't set config #1, error -71 [ 2059.877311][ T364] usb 7-1: USB disconnect, device number 6 [ 2059.985437][T25251] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2060.958401][T25251] usb 5-1: config 1 interface 1 has no altsetting 0 [ 2061.735779][T25251] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2061.747094][T25251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.755745][T25251] usb 5-1: Product: syz [ 2061.759996][T25251] usb 5-1: Manufacturer: syz [ 2061.764652][T25251] usb 5-1: SerialNumber: syz [ 2062.125712][T25251] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 2062.133820][T25251] usb 5-1: 2:1: All rates were zero [ 2062.594561][T25251] usb 5-1: USB disconnect, device number 67 [ 2062.807854][T27597] device veth0_vlan left promiscuous mode [ 2062.815149][T27597] device veth0_vlan entered promiscuous mode [ 2062.825234][T27599] device veth0_vlan left promiscuous mode [ 2062.831600][T27599] device veth0_vlan entered promiscuous mode [ 2062.839318][T18128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2063.073116][T18128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2063.150195][T18128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2063.339166][T27616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8397'. [ 2064.031762][ T364] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2064.495575][ T364] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2064.585738][ T364] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2065.067412][ T364] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2065.076572][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.084713][ T364] usb 3-1: Product: syz [ 2065.089184][ T364] usb 3-1: Manufacturer: syz [ 2065.093808][ T364] usb 3-1: SerialNumber: syz [ 2065.525780][ T364] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 2065.534140][ T364] usb 3-1: 2:1: All rates were zero [ 2065.568886][ T364] usb 3-1: USB disconnect, device number 79 [ 2065.807512][T27443] udevd[27443]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2066.543818][T27655] device veth0_vlan left promiscuous mode [ 2066.558619][T27655] device veth0_vlan entered promiscuous mode [ 2066.644707][T27672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8421'. [ 2066.654373][T27672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8421'. [ 2066.915370][T25894] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2067.355432][T25894] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2067.451130][T25894] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2067.700328][T25894] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2067.715847][T25894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.740524][T25894] usb 7-1: Product: syz [ 2067.757191][T25894] usb 7-1: Manufacturer: syz [ 2067.767015][T25894] usb 7-1: SerialNumber: syz [ 2068.915940][T25894] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 2068.935364][T25894] usb 7-1: 2:1: All rates were zero [ 2069.014527][T25894] usb 7-1: USB disconnect, device number 7 [ 2069.249287][T27443] udevd[27443]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2069.311014][T27718] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2069.327741][T27718] kvm: pic: non byte read [ 2069.332314][T27718] kvm: pic: level sensitive irq not supported [ 2069.332371][T27718] kvm: pic: non byte read [ 2069.343102][T27718] kvm: pic: level sensitive irq not supported [ 2069.343144][T27718] kvm: pic: non byte read [ 2069.353867][T27718] kvm: pic: level sensitive irq not supported [ 2069.353918][T27718] kvm: pic: non byte read [ 2071.692771][T27771] device veth0_vlan left promiscuous mode [ 2071.720671][T27771] device veth0_vlan entered promiscuous mode [ 2071.812491][T27776] device veth0_vlan left promiscuous mode [ 2071.825120][T27776] device veth0_vlan entered promiscuous mode [ 2072.021115][T27801] tipc: Started in network mode [ 2072.026074][T27801] tipc: Node identity , cluster identity 4711 [ 2072.032175][T27801] tipc: Failed to obtain node identity [ 2072.038136][T27801] tipc: Enabling of bearer rejected, failed to enable media [ 2073.225488][T25251] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2073.695568][T25251] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2074.145425][T25251] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2074.210731][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8487'. [ 2074.219958][T27837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8487'. [ 2074.237046][T27839] tipc: Started in network mode [ 2074.241953][T27839] tipc: Node identity , cluster identity 4711 [ 2074.248288][T27839] tipc: Failed to obtain node identity [ 2074.253740][T27839] tipc: Enabling of bearer rejected, failed to enable media [ 2074.305376][T25251] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2074.322500][T25251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.330874][T25251] usb 7-1: Product: syz [ 2074.335207][T25251] usb 7-1: Manufacturer: syz [ 2074.340052][T25251] usb 7-1: SerialNumber: syz [ 2074.795423][T25251] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 2074.803296][T25251] usb 7-1: 2:1: All rates were zero [ 2074.833532][T25251] usb 7-1: USB disconnect, device number 8 [ 2076.733377][T27881] tipc: Started in network mode [ 2076.738339][T27881] tipc: Node identity , cluster identity 4711 [ 2076.744449][T27881] tipc: Failed to obtain node identity [ 2076.749995][T27881] tipc: Enabling of bearer rejected, failed to enable media [ 2079.354097][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2079.354406][ T30] audit: type=1326 audit(1752064588.806:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2079.354541][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8510'. [ 2079.461294][ T30] audit: type=1326 audit(1752064588.806:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2079.659257][ T30] audit: type=1326 audit(1752064588.806:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2079.848737][ T30] audit: type=1326 audit(1752064588.806:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2079.884683][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8518'. [ 2079.895134][T27925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8518'. [ 2079.906631][ T30] audit: type=1326 audit(1752064588.806:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2079.932587][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8518'. [ 2079.972125][ T30] audit: type=1326 audit(1752064588.806:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2080.049072][ T30] audit: type=1326 audit(1752064588.846:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2080.853079][ T30] audit: type=1326 audit(1752064588.846:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.1.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2081.477602][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8525'. [ 2081.603479][ T30] audit: type=1326 audit(1752064590.936:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27943 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2081.680287][ T30] audit: type=1326 audit(1752064590.936:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27943 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2082.309343][T27961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8531'. [ 2082.318392][T27961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8531'. [ 2082.328095][T27961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8531'. [ 2088.616795][T27974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8535'. [ 2088.625776][T27974] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8535'. [ 2088.812111][T27983] device veth0_vlan left promiscuous mode [ 2088.817983][T27983] device veth0_vlan entered promiscuous mode [ 2088.830975][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2088.868673][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2089.003974][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2089.014369][T27984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 2089.221288][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2089.221425][ T30] audit: type=1326 audit(1752064598.676:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.252582][ T30] audit: type=1326 audit(1752064598.676:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.282234][ T30] audit: type=1326 audit(1752064598.676:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.307590][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8540'. [ 2089.317528][T25894] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2089.346184][ T30] audit: type=1326 audit(1752064598.676:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.371824][ T30] audit: type=1326 audit(1752064598.676:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.412663][ T30] audit: type=1326 audit(1752064598.676:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.517776][ T30] audit: type=1326 audit(1752064598.776:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.583671][ T30] audit: type=1326 audit(1752064598.776:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27986 comm="syz.4.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9526929 code=0x7ffc0000 [ 2089.820410][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8551'. [ 2089.829392][T28012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8551'. [ 2089.899724][T25894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2090.130403][T25894] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2090.434961][T25894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2090.445329][T25894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.454794][T25894] usb 3-1: Product: syz [ 2090.460835][T25894] usb 3-1: Manufacturer: syz [ 2090.465625][T25894] usb 3-1: SerialNumber: syz [ 2096.526175][T26660] Bluetooth: hci0: sending frame failed (-49) [ 2096.615461][T25894] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 2096.626944][T25894] usb 3-1: 2:1: All rates were zero [ 2096.829834][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8555'. [ 2096.923796][T25894] usb 3-1: USB disconnect, device number 80 [ 2097.058193][T27970] udevd[27970]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2097.808718][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8560'. [ 2097.922356][ T30] audit: type=1326 audit(1752064607.266:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2101.828696][T25894] Bluetooth: hci0: command 0x1003 tx timeout [ 2101.845358][T23827] Bluetooth: hci1: sending frame failed (-49) [ 2101.855282][T23827] Bluetooth: hci0: sending frame failed (-49) [ 2101.885328][ T30] audit: type=1326 audit(1752064607.266:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2101.969734][ T30] audit: type=1326 audit(1752064607.266:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2102.054146][ T30] audit: type=1326 audit(1752064607.266:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2102.115338][ T30] audit: type=1326 audit(1752064607.266:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2102.169707][ T30] audit: type=1326 audit(1752064607.266:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2102.213636][ T30] audit: type=1326 audit(1752064607.276:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2102.262145][ T30] audit: type=1326 audit(1752064607.276:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28044 comm="syz.2.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2102.475575][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8565'. [ 2102.484487][T28062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8565'. [ 2103.925377][T27716] Bluetooth: hci0: command 0x1001 tx timeout [ 2103.931614][T23827] Bluetooth: hci0: sending frame failed (-49) [ 2103.937965][T27716] Bluetooth: hci1: command 0x1003 tx timeout [ 2103.944088][T23827] Bluetooth: hci1: sending frame failed (-49) [ 2104.319974][T28082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8571'. [ 2104.328898][T28082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8571'. [ 2105.340439][T28087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8573'. [ 2106.944345][T25894] Bluetooth: hci1: command 0x1001 tx timeout [ 2106.953621][T23827] Bluetooth: hci1: sending frame failed (-49) [ 2106.981719][T25894] Bluetooth: hci0: command 0x1009 tx timeout [ 2107.082322][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8579'. [ 2107.091287][T28104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8579'. [ 2107.242292][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8581'. [ 2107.251224][T28110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8581'. [ 2107.269041][T28107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.277216][T28107] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.284799][T28107] device bridge_slave_0 entered promiscuous mode [ 2107.302905][T28107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.345693][T28107] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.355517][T28107] device bridge_slave_1 entered promiscuous mode [ 2108.710264][T23437] device bridge_slave_1 left promiscuous mode [ 2108.725384][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.733052][T23437] device bridge_slave_0 left promiscuous mode [ 2108.749734][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.781544][T23437] device veth1_macvtap left promiscuous mode [ 2108.793878][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8586'. [ 2108.802977][T28135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8586'. [ 2109.035442][T25894] Bluetooth: hci1: command 0x1009 tx timeout [ 2109.142616][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2109.153403][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2109.176663][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2109.193712][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2109.211317][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.218420][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.243426][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2109.260910][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2109.277722][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.284809][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2109.303523][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2109.364551][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2109.376641][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2109.397722][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2109.405948][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2109.413936][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2109.422750][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2109.433895][T28107] device veth0_vlan entered promiscuous mode [ 2109.442176][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2109.450468][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2109.465878][T28107] device veth1_macvtap entered promiscuous mode [ 2109.473124][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2109.480777][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2109.488635][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2109.497799][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2109.520731][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2109.536805][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2109.545431][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2109.553779][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2109.606785][T28143] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8588'. [ 2111.432679][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8594'. [ 2111.441683][T28159] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8594'. [ 2112.917572][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8612'. [ 2112.926798][T28200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8612'. [ 2113.039433][T28207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8611'. [ 2113.408927][ T30] audit: type=1326 audit(1752064622.866:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.432830][ T30] audit: type=1326 audit(1752064622.866:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.432870][T28242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8625'. [ 2113.457408][ T30] audit: type=1326 audit(1752064622.866:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.457444][ T30] audit: type=1326 audit(1752064622.866:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.457474][ T30] audit: type=1326 audit(1752064622.866:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.457503][ T30] audit: type=1326 audit(1752064622.886:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.566345][ T30] audit: type=1326 audit(1752064623.016:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2113.590160][ T30] audit: type=1326 audit(1752064623.016:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28232 comm="syz.1.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2115.576544][T28289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8646'. [ 2117.609984][ T30] audit: type=1326 audit(1752064627.066:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28296 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2117.634255][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8652'. [ 2117.652581][ T30] audit: type=1326 audit(1752064627.066:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28296 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6147d11929 code=0x7ffc0000 [ 2117.708986][T28318] device pim6reg1 entered promiscuous mode [ 2119.191851][T28373] usb usb1: check_ctrlrecip: process 28373 (syz.2.8681) requesting ep 01 but needs 81 [ 2119.485833][T28379] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8687'. [ 2122.871326][T28419] device pim6reg1 entered promiscuous mode [ 2124.561990][T28482] tipc: Started in network mode [ 2124.567074][T28482] tipc: Node identity , cluster identity 4711 [ 2124.573260][T28482] tipc: Failed to obtain node identity [ 2124.578854][T28482] tipc: Enabling of bearer rejected, failed to enable media [ 2126.744448][T28510] device pim6reg1 entered promiscuous mode [ 2127.622621][T28523] tipc: Started in network mode [ 2127.627574][T28523] tipc: Node identity , cluster identity 4711 [ 2127.633664][T28523] tipc: Failed to obtain node identity [ 2127.639166][T28523] tipc: Enabling of bearer rejected, failed to enable media [ 2129.132174][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8761'. [ 2129.145722][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2129.146478][ T30] audit: type=1326 audit(1752064638.586:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.157967][ T30] audit: type=1326 audit(1752064638.586:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.206689][ T30] audit: type=1326 audit(1752064638.586:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.254079][ T30] audit: type=1326 audit(1752064638.586:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.314875][ T30] audit: type=1326 audit(1752064638.586:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.363523][ T30] audit: type=1326 audit(1752064638.586:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.412046][ T30] audit: type=1326 audit(1752064638.596:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2130.459732][ T30] audit: type=1326 audit(1752064638.596:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28566 comm="syz.1.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2c20929 code=0x7ffc0000 [ 2132.215359][T21017] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2132.218010][T28607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8774'. [ 2132.231956][T28607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8774'. [ 2132.715351][T21017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2132.835417][T21017] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2133.025384][T21017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2133.034717][T21017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.043021][T21017] usb 3-1: Product: syz [ 2133.047465][T21017] usb 3-1: Manufacturer: syz [ 2133.052110][T21017] usb 3-1: SerialNumber: syz [ 2134.155902][T21017] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 2134.164026][T21017] usb 3-1: 2:1: All rates were zero [ 2134.272887][T21017] usb 3-1: USB disconnect, device number 81 [ 2135.042308][T28668] device pim6reg1 entered promiscuous mode [ 2138.686990][T28757] device pim6reg1 entered promiscuous mode [ 2138.925391][T28033] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2139.345517][T28033] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2139.445587][T28033] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2139.696533][T28033] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2139.709963][T28033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.720525][T28033] usb 3-1: Product: syz [ 2139.731847][T28033] usb 3-1: Manufacturer: syz [ 2139.737754][T28033] usb 3-1: SerialNumber: syz [ 2140.600073][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8849'. [ 2141.237824][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8856'. [ 2141.247189][T28033] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 2141.255009][T28810] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8856'. [ 2141.275795][T28033] usb 3-1: 2:1: All rates were zero [ 2141.286369][T28814] tipc: Started in network mode [ 2141.291458][T28814] tipc: Node identity , cluster identity 4711 [ 2141.297823][T28814] tipc: Failed to obtain node identity [ 2141.303569][T28814] tipc: Enabling of bearer rejected, failed to enable media [ 2141.324489][T28033] usb 3-1: USB disconnect, device number 82 [ 2142.037624][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8868'. [ 2142.046605][T28839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8868'. [ 2142.108812][T28842] usb usb1: check_ctrlrecip: process 28842 (syz.5.8864) requesting ep 01 but needs 81 [ 2142.692912][T28888] usb usb1: check_ctrlrecip: process 28888 (syz.7.8885) requesting ep 01 but needs 81 [ 2143.827626][T28918] device pim6reg1 entered promiscuous mode [ 2144.016817][ T357] Bluetooth: hci0: Frame reassembly failed (-84) [ 2144.037030][ T357] Bluetooth: hci0: Frame reassembly failed (-84) [ 2144.316757][T28595] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2145.202537][T28595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2145.218736][T28949] usb usb1: check_ctrlrecip: process 28949 (syz.7.8910) requesting ep 01 but needs 81 [ 2145.295827][T28595] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2145.328475][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8911'. [ 2145.495813][T28595] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2145.505511][T28595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.513674][T28595] usb 7-1: Product: syz [ 2145.519966][T28595] usb 7-1: Manufacturer: syz [ 2145.524723][T28595] usb 7-1: SerialNumber: syz [ 2145.905354][T28595] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 2145.913163][T28595] usb 7-1: 2:1: All rates were zero [ 2145.966488][T28954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8913'. [ 2145.981814][T28954] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8913'. [ 2146.047195][T28595] usb 7-1: USB disconnect, device number 9 [ 2146.075281][T21842] Bluetooth: hci0: command 0x1003 tx timeout [ 2146.081413][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2146.255691][T28639] udevd[28639]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2147.457672][T28994] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.464760][T28994] bridge0: port 1(bridge_slave_0) entered disabled state [ 2147.472489][T28994] device bridge_slave_0 entered promiscuous mode [ 2147.479629][T28994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.487094][T28994] bridge0: port 2(bridge_slave_1) entered disabled state [ 2147.495570][T28994] device bridge_slave_1 entered promiscuous mode [ 2147.816968][T29002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8926'. [ 2148.071074][T28994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.078238][T28994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.085547][T28994] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.092583][T28994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.115918][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2148.123675][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.131020][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.142244][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2148.150613][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.157671][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.165323][T28595] Bluetooth: hci0: command 0x1001 tx timeout [ 2148.171661][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2148.216993][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2148.225777][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.232855][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.259390][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2148.271318][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2148.318763][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2148.331197][T28994] device veth0_vlan entered promiscuous mode [ 2148.337952][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2148.346514][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2148.354062][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2148.412565][T28994] device veth1_macvtap entered promiscuous mode [ 2148.419766][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2148.428109][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2148.436466][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2148.446378][ T199] device bridge_slave_1 left promiscuous mode [ 2148.452537][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.460094][ T199] device bridge_slave_0 left promiscuous mode [ 2148.466391][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.716001][ T199] device veth1_macvtap left promiscuous mode [ 2150.233245][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2150.235653][ T364] Bluetooth: hci0: command 0x1009 tx timeout [ 2150.249005][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2150.260740][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2150.271122][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2150.692081][T29069] usb usb1: check_ctrlrecip: process 29069 (syz.7.8948) requesting ep 01 but needs 81 [ 2151.428041][T29081] tipc: Started in network mode [ 2151.432936][T29081] tipc: Node identity , cluster identity 4711 [ 2151.439434][T29081] tipc: Failed to obtain node identity [ 2151.444896][T29081] tipc: Enabling of bearer rejected, failed to enable media [ 2151.911945][T29105] usb usb1: check_ctrlrecip: process 29105 (syz.1.8967) requesting ep 01 but needs 81 [ 2152.221248][T29134] usb usb1: check_ctrlrecip: process 29134 (syz.1.8981) requesting ep 01 but needs 81 [ 2153.134985][T29162] usb usb1: check_ctrlrecip: process 29162 (syz.7.8993) requesting ep 01 but needs 81 [ 2153.251244][T29167] tipc: Started in network mode [ 2153.256376][T29167] tipc: Node identity , cluster identity 4711 [ 2153.262583][T29167] tipc: Failed to obtain node identity [ 2153.268096][T29167] tipc: Enabling of bearer rejected, failed to enable media [ 2154.472568][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9017'. [ 2154.879786][T29229] tipc: Started in network mode [ 2154.884705][T29229] tipc: Node identity , cluster identity 4711 [ 2154.891179][T29229] tipc: Failed to obtain node identity [ 2154.896922][T29229] tipc: Enabling of bearer rejected, failed to enable media [ 2155.624868][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9028'. [ 2155.637951][ T30] audit: type=1326 audit(1752064665.076:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.662158][ T30] audit: type=1326 audit(1752064665.076:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.686815][ T30] audit: type=1326 audit(1752064665.076:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.777282][ T30] audit: type=1326 audit(1752064665.076:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.810245][ T30] audit: type=1326 audit(1752064665.076:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.834057][ T30] audit: type=1326 audit(1752064665.076:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.858238][ T30] audit: type=1326 audit(1752064665.096:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2155.882059][ T30] audit: type=1326 audit(1752064665.096:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.6.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2156.151751][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9040'. [ 2156.392778][T29286] tipc: Started in network mode [ 2156.397958][T29286] tipc: Node identity , cluster identity 4711 [ 2156.404180][T29286] tipc: Failed to obtain node identity [ 2156.409790][T29286] tipc: Enabling of bearer rejected, failed to enable media [ 2156.902946][T29308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9053'. [ 2156.912390][T29308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9053'. [ 2157.370512][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2157.609935][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9054'. [ 2157.634413][ T30] audit: type=1326 audit(1752064667.066:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29313 comm="syz.7.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7efe34929 code=0x7ffc0000 [ 2157.699548][ T30] audit: type=1326 audit(1752064667.066:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29313 comm="syz.7.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7efe34929 code=0x7ffc0000 [ 2157.823470][T29335] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9062'. [ 2158.017776][T29345] tipc: Started in network mode [ 2158.022688][T29345] tipc: Node identity , cluster identity 4711 [ 2158.029349][T29345] tipc: Failed to obtain node identity [ 2158.034836][T29345] tipc: Enabling of bearer rejected, failed to enable media [ 2158.545275][T25251] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2158.945392][T25251] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2158.954608][T29366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9068'. [ 2159.135374][T25251] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2159.210844][T29372] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9075'. [ 2160.298383][T27716] Bluetooth: hci0: command 0x1003 tx timeout [ 2160.355863][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2160.716874][T29391] tipc: Started in network mode [ 2160.721806][T29391] tipc: Node identity , cluster identity 4711 [ 2160.728353][T29391] tipc: Failed to obtain node identity [ 2160.733825][T29391] tipc: Enabling of bearer rejected, failed to enable media [ 2160.769768][T25251] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2160.778884][T25251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.786947][T25251] usb 7-1: Product: syz [ 2160.791200][T25251] usb 7-1: Manufacturer: syz [ 2160.795880][T25251] usb 7-1: SerialNumber: syz [ 2161.285400][T25251] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 2161.293184][T25251] usb 7-1: 2:1: All rates were zero [ 2161.337915][T25251] usb 7-1: USB disconnect, device number 10 [ 2161.940300][T29314] udevd[29314]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2162.088967][T29446] device pim6reg1 entered promiscuous mode [ 2162.172364][T29452] tipc: Started in network mode [ 2162.177438][T29452] tipc: Node identity , cluster identity 4711 [ 2162.183535][T29452] tipc: Failed to obtain node identity [ 2162.189013][T29452] tipc: Enabling of bearer rejected, failed to enable media [ 2162.427945][T28595] Bluetooth: hci0: command 0x1001 tx timeout [ 2162.434312][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2163.579561][T29502] tipc: Started in network mode [ 2163.584458][T29502] tipc: Node identity , cluster identity 4711 [ 2163.590574][T29502] tipc: Failed to obtain node identity [ 2163.596065][T29502] tipc: Enabling of bearer rejected, failed to enable media [ 2164.480350][T21842] Bluetooth: hci0: command 0x1009 tx timeout [ 2164.873880][T29535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9143'. [ 2165.522217][T23879] Bluetooth: hci1: Frame reassembly failed (-84) [ 2165.635288][T25251] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2165.704588][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9165'. [ 2166.205314][T25251] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2166.285355][T25251] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2166.445332][T25251] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2166.454448][T25251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.463001][T25251] usb 7-1: Product: syz [ 2166.467401][T25251] usb 7-1: Manufacturer: syz [ 2166.472860][T25251] usb 7-1: SerialNumber: syz [ 2166.765625][T29615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9179'. [ 2167.035402][T25251] usb 7-1: found format II with max.bitrate = 2418, frame size=7 [ 2167.043154][T25251] usb 7-1: 2:1: All rates were zero [ 2167.072848][T25251] usb 7-1: USB disconnect, device number 11 [ 2167.136748][T29634] fuse: Bad value for 'group_id' [ 2167.763324][ T333] Bluetooth: hci1: command 0x1003 tx timeout [ 2167.781605][T26660] Bluetooth: hci1: sending frame failed (-49) [ 2167.828390][T29653] tipc: Started in network mode [ 2167.833321][T29653] tipc: Node identity , cluster identity 4711 [ 2167.839962][T29653] tipc: Failed to obtain node identity [ 2167.845975][T29653] tipc: Enabling of bearer rejected, failed to enable media [ 2167.886815][T29659] device pim6reg1 entered promiscuous mode [ 2167.950810][T29664] fuse: Bad value for 'group_id' [ 2168.491930][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9207'. [ 2168.707424][T29684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9210'. [ 2168.716388][T29684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9210'. [ 2168.818638][T29695] fuse: Bad value for 'group_id' [ 2168.887857][T29697] device pim6reg1 entered promiscuous mode [ 2168.932167][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2169.017144][T23879] Bluetooth: hci0: Frame reassembly failed (-84) [ 2169.835289][T27716] Bluetooth: hci1: command 0x1001 tx timeout [ 2169.841806][T23827] Bluetooth: hci1: sending frame failed (-49) [ 2169.954773][T29711] tipc: Started in network mode [ 2169.959730][T29711] tipc: Node identity , cluster identity 4711 [ 2169.965840][T29711] tipc: Failed to obtain node identity [ 2169.971310][T29711] tipc: Enabling of bearer rejected, failed to enable media [ 2170.991392][T21842] Bluetooth: hci0: command 0x1003 tx timeout [ 2170.998315][T23827] Bluetooth: hci0: sending frame failed (-49) [ 2171.172978][T29736] usb usb1: check_ctrlrecip: process 29736 (syz.1.9231) requesting ep 01 but needs 81 [ 2171.240066][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9229'. [ 2171.499239][T29744] device pim6reg1 entered promiscuous mode [ 2171.574202][T29749] tipc: Started in network mode [ 2171.579242][T29749] tipc: Node identity , cluster identity 4711 [ 2171.585375][T29749] tipc: Failed to obtain node identity [ 2171.590938][T29749] tipc: Enabling of bearer rejected, failed to enable media [ 2171.957818][T28595] Bluetooth: hci1: command 0x1009 tx timeout [ 2173.742860][T28595] Bluetooth: hci0: command 0x1001 tx timeout [ 2173.763223][T23827] Bluetooth: hci0: sending frame failed (-49) [ 2174.518584][T29788] usb usb1: check_ctrlrecip: process 29788 (syz.1.9248) requesting ep 01 but needs 81 [ 2176.230063][T28595] Bluetooth: hci0: command 0x1009 tx timeout [ 2177.674443][T29870] device pim6reg1 entered promiscuous mode [ 2178.104940][T29879] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.112012][T29879] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.119469][T29879] device bridge_slave_0 entered promiscuous mode [ 2178.127806][T29879] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.134883][T29879] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.142554][T29879] device bridge_slave_1 entered promiscuous mode [ 2178.207411][T29879] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.214590][T29879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2178.221936][T29879] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.229010][T29879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2178.262309][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2178.270187][T23879] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.277736][T23879] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.287359][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2178.295639][T23879] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.302706][T23879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2178.311365][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2178.319930][T23879] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.326985][T23879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2178.348851][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2178.361809][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2178.375164][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2178.389251][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2178.397398][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2178.405704][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2178.418246][T29879] device veth0_vlan entered promiscuous mode [ 2178.497124][T29879] device veth1_macvtap entered promiscuous mode [ 2178.731018][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2178.757262][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2178.766142][T23879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2179.008738][T29911] usb usb1: check_ctrlrecip: process 29911 (syz.2.9294) requesting ep 01 but needs 81 [ 2179.409416][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9286'. [ 2179.729462][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9305'. [ 2179.738474][T29935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9305'. [ 2179.792178][T29945] fuse: Unknown parameter 'grou00000000000000000000' [ 2182.719711][T29949] usb usb1: check_ctrlrecip: process 29949 (syz.2.9308) requesting ep 01 but needs 81 [ 2182.832600][ T199] device bridge_slave_1 left promiscuous mode [ 2182.971586][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.992470][ T199] device bridge_slave_0 left promiscuous mode [ 2183.006779][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.022932][ T199] device veth1_macvtap left promiscuous mode [ 2183.029813][ T199] device veth0_vlan left promiscuous mode [ 2183.043795][T29977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9322'. [ 2183.052756][T29977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9322'. [ 2183.182514][ T357] Bluetooth: hci0: Frame reassembly failed (-84) [ 2183.204538][T29986] fuse: Unknown parameter 'grou00000000000000000000' [ 2183.322258][T29989] usb usb1: check_ctrlrecip: process 29989 (syz.2.9323) requesting ep 01 but needs 81 [ 2183.683122][T29998] device pim6reg1 entered promiscuous mode [ 2185.195315][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 2185.235311][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2185.750926][T30066] fuse: Unknown parameter 'group_i00000000000000000000' [ 2187.407398][T21017] Bluetooth: hci0: command 0x1001 tx timeout [ 2187.413494][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2187.474531][T30095] device pim6reg1 entered promiscuous mode [ 2189.435321][T28033] Bluetooth: hci0: command 0x1009 tx timeout [ 2191.577291][T30176] device pim6reg1 entered promiscuous mode [ 2194.169561][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9417'. [ 2194.524070][T30216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9421'. [ 2194.533114][T30216] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9421'. [ 2194.649858][T23437] Bluetooth: hci0: Frame reassembly failed (-84) [ 2195.579118][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9435'. [ 2196.005564][T30264] fuse: Bad value for 'user_id' [ 2197.610809][T30293] fuse: Bad value for 'user_id' [ 2197.654384][T21017] Bluetooth: hci0: command 0x1003 tx timeout [ 2197.660508][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2198.223104][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2198.223131][ T30] audit: type=1326 audit(1752064707.676:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.284913][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9463'. [ 2198.406929][ T30] audit: type=1326 audit(1752064707.676:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.431308][ T30] audit: type=1326 audit(1752064707.676:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.465366][ T30] audit: type=1326 audit(1752064707.676:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.489423][ T30] audit: type=1326 audit(1752064707.676:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.524379][ T30] audit: type=1326 audit(1752064707.676:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.548318][ T30] audit: type=1326 audit(1752064707.746:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.572054][ T30] audit: type=1326 audit(1752064707.756:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.6.9463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f746929 code=0x7ffc0000 [ 2198.781875][T30351] usb usb1: check_ctrlrecip: process 30351 (syz.7.9477) requesting ep 01 but needs 81 [ 2198.889508][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9478'. [ 2200.139852][T25894] Bluetooth: hci0: command 0x1001 tx timeout [ 2200.146193][ T47] Bluetooth: hci0: sending frame failed (-49) [ 2200.545159][T30402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9501'. [ 2201.319601][T30403] usb usb1: check_ctrlrecip: process 30403 (syz.2.9499) requesting ep 01 but needs 81 [ 2202.155294][T27716] Bluetooth: hci0: command 0x1009 tx timeout [ 2202.417451][T30442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9513'. [ 2202.595295][T30443] usb usb1: check_ctrlrecip: process 30443 (syz.7.9514) requesting ep 01 but needs 81 [ 2303.775184][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2303.782188][ C1] (detected by 1, t=10002 jiffies, g=148281, q=296) [ 2303.788898][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295167586-4295157584), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 2303.802279][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g148281 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2303.813575][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2303.823544][ C1] rcu: RCU grace-period kthread stack dump: [ 2303.829439][ C1] task:rcu_preempt state:R running task stack:28488 pid: 14 ppid: 2 flags:0x00004000 [ 2303.840305][ C1] Call Trace: [ 2303.843598][ C1] [ 2303.846540][ C1] __schedule+0xb6e/0x14c0 [ 2303.851007][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2303.856914][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2303.862743][ C1] ? __mod_timer+0x7ae/0xb30 [ 2303.867359][ C1] schedule+0x11e/0x1e0 [ 2303.871533][ C1] schedule_timeout+0x12c/0x2e0 [ 2303.876404][ C1] ? console_conditional_schedule+0x30/0x30 [ 2303.882327][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 2303.887849][ C1] ? update_process_times+0x200/0x200 [ 2303.893249][ C1] ? prepare_to_swait_event+0x308/0x320 [ 2303.898814][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 2303.903604][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2303.909262][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 2303.914653][ C1] ? rcu_gp_init+0xc00/0xc00 [ 2303.919275][ C1] ? _raw_spin_unlock_irq+0x61/0x70 [ 2303.924495][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 2303.929105][ C1] rcu_gp_kthread+0x98/0x330 [ 2303.933717][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 2303.938411][ C1] ? __kasan_check_read+0x11/0x20 [ 2303.943454][ C1] ? __kthread_parkme+0xac/0x200 [ 2303.948548][ C1] ? preempt_count_add+0x90/0x1b0 [ 2303.953598][ C1] kthread+0x411/0x500 [ 2303.957684][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 2303.962383][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2303.967000][ C1] ret_from_fork+0x1f/0x30 [ 2303.971435][ C1] [ 2303.974489][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2303.980832][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2303.986053][ C0] NMI backtrace for cpu 0 [ 2303.986064][ C0] CPU: 0 PID: 30447 Comm: syz.6.9520 Not tainted 5.15.185-syzkaller-00207-g32c443bd6d40 #0 [ 2303.986082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2303.986125][ C0] RIP: 0010:clear_user+0x5f/0xc0 [ 2303.986147][ C0] Code: ff ff 7f 00 00 4c 89 e7 4c 89 fe e8 2b 61 f8 fe 4d 39 e7 0f 96 c0 41 84 c5 75 07 e8 db 5c f8 fe eb 4f e8 d4 5c f8 fe 0f 01 cb <89> d8 83 e0 07 48 c1 eb 03 4c 89 f7 48 89 d9 48 85 c9 74 1c 66 2e [ 2303.986162][ C0] RSP: 0018:ffffc90000a87c40 EFLAGS: 00040246 [ 2303.986178][ C0] RAX: ffffffff82704b5c RBX: 0000000000000050 RCX: 0000000000080000 [ 2303.986190][ C0] RDX: ffffc90001f4a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2303.986202][ C0] RBP: ffffc90000a87c68 R08: 0000000000000000 R09: fffff52000150fc6 [ 2303.986214][ C0] R10: fffff52000150fc6 R11: 1ffff92000150fc0 R12: 00007ffffffff000 [ 2303.986233][ C0] R13: dffffc00000000ff R14: 00007f6e9ddaebe0 R15: 00007f6e9ddaec30 [ 2303.986246][ C0] FS: 00007f6e9ddaf6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2303.986261][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2303.986273][ C0] CR2: 000020000006b000 CR3: 0000000126ccb000 CR4: 00000000003506b0 [ 2303.986288][ C0] Call Trace: [ 2303.986294][ C0] [ 2303.986302][ C0] copy_siginfo_to_user+0x5b/0x80 [ 2303.986322][ C0] arch_do_signal_or_restart+0xb5e/0x10f0 [ 2303.986344][ C0] ? get_sigframe_size+0x10/0x10 [ 2303.986363][ C0] ? sched_clock+0x9/0x10 [ 2303.986378][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2303.986396][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 2303.986412][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 2303.986428][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 2303.986446][ C0] do_syscall_64+0x58/0xa0 [ 2303.986460][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2303.986477][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2303.986492][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2303.986509][ C0] RIP: 0033:0x7f6e9f746927 [ 2303.986524][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2303.986538][ C0] RSP: 002b:00007f6e9ddaf038 EFLAGS: 00000246 [ 2303.986550][ C0] RAX: 0000000000000113 RBX: 00007f6e9f96dfa0 RCX: 00007f6e9f746929 [ 2303.986562][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 2303.986572][ C0] RBP: 00007f6e9f7c8b39 R08: 0000000000000007 R09: 0000000000000000 [ 2303.986583][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.986593][ C0] R13: 0000000000000000 R14: 00007f6e9f96dfa0 R15: 00007ffffb63f178 [ 2303.986609][ C0] [ 2435.915393][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 231s! [ 2435.923919][ C0] Showing busy workqueues and worker pools: [ 2435.929831][ C0] workqueue events: flags=0x0 [ 2435.934531][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2435.934581][ C0] pending: kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 2435.934667][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2435.934706][ C0] pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker [ 2435.934780][ C0] workqueue events_long: flags=0x0 [ 2435.975143][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 2435.975197][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work [ 2435.975282][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2435.975323][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 2435.975356][ C0] workqueue events_unbound: flags=0x2 [ 2436.014415][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 2436.014457][ C0] in-flight: 199:toggle_allocation_gate [ 2436.014493][ C0] pending: linkwatch_event, flush_memcg_stats_dwork [ 2436.014537][ C0] workqueue events_power_efficient: flags=0x80 [ 2436.040736][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 2436.040779][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, check_lifetime [ 2436.040843][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2436.040880][ C0] pending: neigh_periodic_work, gc_worker [ 2436.040921][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2436.076347][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.076390][ C0] pending: vmstat_update [ 2436.076419][ C0] workqueue writeback: flags=0x4a [ 2436.093667][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.093708][ C0] pending: wb_workfn [ 2436.093811][ C0] workqueue kblockd: flags=0x18 [ 2436.110122][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 2436.110169][ C0] pending: blk_mq_timeout_work [ 2436.110217][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2436.128514][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.128558][ C0] pending: work_fn [ 2436.128584][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2436.145925][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 2436.145972][ C0] pending: addrconf_verify_work [ 2436.146013][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2436.163952][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.164008][ C0] pending: wg_packet_encrypt_worker [ 2436.164054][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.164095][ C0] pending: wg_packet_encrypt_worker [ 2436.164123][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2436.195798][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.195845][ C0] pending: wg_packet_encrypt_worker [ 2436.195873][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.195914][ C0] pending: wg_packet_encrypt_worker [ 2436.195941][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2436.227575][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.227635][ C0] pending: wg_packet_encrypt_worker [ 2436.227662][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.227700][ C0] pending: wg_packet_encrypt_worker [ 2436.227739][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2436.259369][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.259416][ C0] pending: wg_packet_encrypt_worker [ 2436.259446][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.259486][ C0] pending: wg_packet_encrypt_worker [ 2436.259514][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2436.291174][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.291222][ C0] pending: wg_packet_encrypt_worker [ 2436.291253][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.291293][ C0] pending: wg_packet_encrypt_worker [ 2436.291320][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2436.322963][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.323023][ C0] pending: wg_packet_encrypt_worker [ 2436.323052][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.323092][ C0] pending: wg_packet_encrypt_worker [ 2436.323121][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2436.354609][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.354653][ C0] pending: wg_packet_handshake_send_worker [ 2436.354684][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2436.373332][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.373376][ C0] pending: wg_packet_encrypt_worker [ 2436.373406][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.373445][ C0] pending: wg_packet_encrypt_worker [ 2436.373482][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2436.404857][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.404918][ C0] pending: wg_packet_handshake_send_worker [ 2436.404960][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2436.423636][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.423685][ C0] pending: wg_packet_encrypt_worker [ 2436.423718][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.423760][ C0] pending: wg_packet_encrypt_worker [ 2436.423790][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2436.455202][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.455250][ C0] pending: wg_packet_handshake_send_worker [ 2436.455283][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2436.473941][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.473995][ C0] pending: wg_packet_encrypt_worker [ 2436.474028][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.474073][ C0] pending: wg_packet_encrypt_worker [ 2436.474103][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2436.505549][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.505595][ C0] pending: wg_packet_handshake_send_worker [ 2436.505628][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2436.524264][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.524310][ C0] pending: wg_packet_encrypt_worker [ 2436.524340][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.524380][ C0] pending: wg_packet_encrypt_worker [ 2436.524407][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2436.555805][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.555852][ C0] pending: wg_packet_handshake_send_worker [ 2436.555883][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2436.574521][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.574567][ C0] pending: wg_packet_encrypt_worker [ 2436.574598][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.574639][ C0] pending: wg_packet_encrypt_worker [ 2436.574669][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2436.606065][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.606108][ C0] pending: wg_packet_handshake_send_worker [ 2436.606146][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2436.624768][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.624809][ C0] pending: wg_packet_encrypt_worker [ 2436.624837][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.624874][ C0] pending: wg_packet_encrypt_worker [ 2436.624928][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2436.656337][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.656383][ C0] pending: wg_packet_handshake_send_worker [ 2436.656413][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2436.675060][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.675121][ C0] pending: wg_packet_encrypt_worker [ 2436.688361][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.688410][ C0] pending: wg_packet_encrypt_worker [ 2436.688444][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2436.706685][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.706733][ C0] pending: wg_packet_handshake_send_worker [ 2436.706763][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2436.725424][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.725475][ C0] pending: wg_packet_encrypt_worker [ 2436.725505][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.725546][ C0] pending: wg_packet_encrypt_worker [ 2436.725575][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2436.756971][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2436.757015][ C0] pending: wg_packet_handshake_send_worker [ 2436.757044][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2436.775708][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.775755][ C0] pending: wg_packet_encrypt_worker [ 2436.775787][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2436.775829][ C0] pending: wg_packet_encrypt_worker [ 2436.775856][ C0] workqueue hci0: flags=0xa0012 [ 2436.807072][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=4 [ 2436.807135][ C0] in-flight: 26660:hci_power_on BAR(30215) [ 2436.807187][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=232s workers=6 idle: 23437 357 23879 18128 8 [ 2436.807258][ C0] pool 5: cpus=0-1 flags=0x4 nice=-20 hung=0s workers=3 idle: 47 23827